summaryrefslogtreecommitdiff
path: root/third-party
diff options
context:
space:
mode:
authorJoshua Elson <joshelson@gmail.com>2017-03-13 14:21:23 -0600
committerJoshua Elson <joshelson@gmail.com>2017-03-21 08:27:15 -0600
commit65ad554c980ed0fa3560de57e6b268a55f7b9bc5 (patch)
tree515bfffe55df33d521adc1f9ce45367bb3910288 /third-party
parentf5603cb1ece5001d1288004c9bc6ed51448deb81 (diff)
pjsip: prevent memory corruption on creation of xml bodies
ASTERISK-26776 #close Change-Id: I884b6f4e8233a355d0be687ec78d41bc0e4d3fd2
Diffstat (limited to 'third-party')
-rw-r--r--third-party/pjproject/patches/0025-fix-print-xml-crash.patch24
1 files changed, 24 insertions, 0 deletions
diff --git a/third-party/pjproject/patches/0025-fix-print-xml-crash.patch b/third-party/pjproject/patches/0025-fix-print-xml-crash.patch
new file mode 100644
index 000000000..eafc38906
--- /dev/null
+++ b/third-party/pjproject/patches/0025-fix-print-xml-crash.patch
@@ -0,0 +1,24 @@
+From 1bc5ca699f523bd8e910203a3eb4dee58f366976 Mon Sep 17 00:00:00 2001
+From: Joshua Elson <joshelson@gmail.com>
+Date: Mon, 20 Mar 2017 19:28:47 -0600
+Subject: [PATCH] Prevent memory corruption on xml tag write
+
+---
+ pjlib-util/src/pjlib-util/xml.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/pjlib-util/src/pjlib-util/xml.c b/pjlib-util/src/pjlib-util/xml.c
+index 296b232..b0aad26 100644
+--- a/pjlib-util/src/pjlib-util/xml.c
++++ b/pjlib-util/src/pjlib-util/xml.c
+@@ -248,6 +248,7 @@ static int xml_print_node( const pj_xml_node *node, int indent,
+ if (node->content.slen==0 &&
+ node->node_head.next==(pj_xml_node*)&node->node_head)
+ {
++ if (SIZE_LEFT() < 3) return -1;
+ *p++ = ' ';
+ *p++ = '/';
+ *p++ = '>';
+--
+2.10.1 (Apple Git-78)
+