diff options
| author | Eric Caruso <ejcaruso@chromium.org> | 2023-08-30 11:24:37 -0400 |
|---|---|---|
| committer | Eric Caruso <ejcaruso@chromium.org> | 2023-08-30 12:42:15 -0400 |
| commit | 201c8533e0e51c2f3ec6c64240d8a5705c26c8d3 (patch) | |
| tree | 0b25a821ab2a912e158e9ae94986d5a4a9862123 /src/plugins | |
| parent | 8fc9b77750b35e7db40e995df37d920650c7068a (diff) | |
mm-sms-part-3gpp: avoid buffer overflow if packed data is too large
With GSM7 encoding, packedlen is the length of the unpacked string
after expanding septets to octets so it will be ~14% bigger than
the original string length. This means we have to be careful not
to copy too much data into the PDU buffer.
Similar issues exist in other branches of the same function.
Thanks rhezashan@gmail.com for the report.
Diffstat (limited to 'src/plugins')
0 files changed, 0 insertions, 0 deletions