open5gs/lib
Sukchan Lee 1abe8c31fc UPF: Validate URR-ID range to prevent PFCP crash
When receiving a PFCP Session Establishment Request containing a CreateURR
with an out-of-range URR-ID (e.g. 65535), UPF attempted to index
sess->urr_acc[] without bounds checking, leading to an assertion failure
and process abort.

This patch validates URR-ID before use and rejects the message gracefully
with an error cause if the value exceeds OGS_MAX_NUM_OF_URR. A clearer
log message is also added to indicate the valid range.

Fixes: assertion failure in upf_sess_urr_acc_timers_setup()

Issues: #4169
2025-12-04 21:19:14 +09:00
..
app [MME] Add Emergency Number List to "Attach Accept" NAS message 2025-10-27 21:28:53 +09:00
asn1c [MME] unify TAU procedure handling and BCS check across all S1AP cases(#4112, #4113, #4117) 2025-10-25 21:31:45 +09:00
core [SBI] fix compiler errors when using latest libcurl 2025-11-13 06:40:18 +09:00
crypt clang scan-build static analysis findings/resolutions (#3387) 2024-08-16 16:42:12 +09:00
dbi Merge branch 'main' into home-routed 2025-04-06 18:37:36 +09:00
diameter diameter: Prevent crash on malformed CER by removing fatal assert 2025-11-30 15:36:33 +09:00
gtp MME: handle EPS Bearer Context Status mismatch when active_flag=0 (#4112) 2025-10-16 21:46:38 +09:00
ipfw pfcp/ipfw: Improve error handling in PDR creation/update and ipfw rule parsing 2025-11-20 16:39:17 +09:00
metrics [metrics] fix memory leak 2025-11-13 20:02:25 +09:00
nas Follow up on #4102 2025-10-27 21:31:21 +09:00
ngap [MME/AMF] Fixed crash following Handover Request (#3014) 2024-02-29 23:02:38 +09:00
pfcp UPF: Validate URR-ID range to prevent PFCP crash 2025-12-04 21:19:14 +09:00
proto Merge branch 'main' into home-routed 2025-07-12 08:13:15 +09:00
s1ap [Release-17] Upgrade S1AP/NGAP to v17.3.9 2023-02-21 21:48:06 +09:00
sbi [AMF] API to add or remove PLMNs Dynamically (#4186) 2025-12-03 21:32:59 +09:00
sctp [PFCP] Refactor PFCP address handling (#3431) 2025-01-11 20:33:02 +09:00
tun [AMF] Follow-up on #3880 2025-06-17 17:34:18 +09:00
meson.build [SEPP] Initial Update for 5G Roaming (#2739) 2023-11-19 19:34:51 +09:00