[sr-dev] [ openser-Bugs-2818273 ] crash when Content-length too big

SourceForge.net noreply at sourceforge.net
Mon Oct 5 08:54:36 CEST 2009


Bugs item #2818273, was opened at 2009-07-08 02:28
Message generated for change (Comment added) made by miconda
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=743020&aid=2818273&group_id=139143

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: ver 1.5.x
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: crash when Content-length too big

Initial Comment:
Recently we encountered some crashes of kamailio 1.5.0 caused by messages with too big value of Content-length (more than 30000). When the parser in nathelper.c looks for old and new port it sometimes finds occurences after the real end of the message. Then the sanity check in del_lump() in data_lump.c finds that either offset or offset+len is greater than msg->len and calls abort().

----------------------------------------------------------------------

>Comment By: Daniel-Constantin Mierla (miconda)
Date: 2009-10-05 09:54

Message:
This should be fixed in 1.5.2 and latest svn, have you tried the latest 1.5
svn branch?

----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2009-07-08 18:17

Message:
'kamailio -V' says 'kamailio 1.5.0-notls (x86_64/linux)'

----------------------------------------------------------------------

Comment By: Klaus Darilion (klaus_darilion)
Date: 2009-07-08 11:38

Message:
Which excat version are you using? There were some bugfixes recently.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=743020&aid=2818273&group_id=139143



More information about the sr-dev mailing list