| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
|
|
|
|
| |
The actual gsm_7bit_decode can still cause a buffer overrun
but at least we are safe until this point.
|
|
|
|
| |
Make sure that the mandatory and optional part fits.
|
|
|
|
|
|
| |
Use a while() {} to check offset +2 <= length on the first
iteration of the loop. Once we have the component length
check that it is going to fit into the given length.
|
|
|
|
| |
Work with uint16_t for the length all the way.
|
|
|
|
|
| |
This is fixing the current crashes. Next we will need to
manipulate the content...
|
|
|
|
|
|
| |
The current USSD code is not doing any size checks, add a test
case to find out how easily we access the data out of bounds.
Begin to use the length in some places.
|
|
|
|
|
|
|
| |
- Change u_int8 to uint8
- Change DEBUGP to LOGP
- Change fprintf(stderr, to LOGP(0, LOGL_DEBUG
- We should define log areas used inside libosmocore
|
|
These routines come from OpenBSC, the msgb_wrap_* functions
belong to Mike Haben, the rest is mine. The msgb allocation
is compatible to the GSM48 allocation in OpenBSC.
|