mirror of
https://github.com/open5gs/open5gs.git
synced 2026-04-28 03:19:31 +00:00
mirror of https://github.com/open5gs/open5gs link from https://open5gs.org/
https://open5gs.org
2575c49803
and NRF NFProfile validation by adding defensive checks and safer memory handling. Key changes: 1) Prevent client creation without endpoint information - Added error logging when NF instance lacks FQDN/IP endpoint data. - Avoids creating invalid SBI clients with incomplete connectivity info. 2) Enforce query parameter limits - Added explicit bounds check against MAX_NUM_OF_PARAM_IN_QUERY. - Returns HTTP 400 instead of triggering fatal assertion. - Prevents potential DoS via excessive query parameters. 3) Safer HTTP body memory handling - Introduced temporary buffer for malloc/realloc results. - Prevents loss of original pointer on realloc failure. - Returns NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE on overflow. - Improves resilience against large/fragmented payload attacks. 4) Validate NFProfile endpoint presence during registration - Rejects NFProfile lacking FQDN, IPv4, and IPv6 addresses. - Returns HTTP 400 with explicit error message. - Prevents NRF from storing unreachable NF instances. Overall, this patch strengthens SBI stability and protects against resource exhaustion, malformed requests, and invalid NF registrations. Issues: #4243, #4244, #4245 |
||
|---|---|---|
| .github | ||
| configs | ||
| debian | ||
| docker | ||
| docs | ||
| lib | ||
| misc | ||
| src | ||
| subprojects | ||
| tests | ||
| vagrant | ||
| webui | ||
| .clang-tidy | ||
| .dockerignore | ||
| .editorconfig | ||
| .gitignore | ||
| LICENSE | ||
| meson.build | ||
| meson_options.txt | ||
| README.md | ||
Getting Started
Please follow the documentation at open5gs.org!
Sponsors
If you find Open5GS useful for work, please consider supporting this Open Source project by Becoming a sponsor. To manage the funding transactions transparently, you can donate through OpenCollective.
Community
- Problem with Open5GS can be filed as issues in this repository.
- Other topics related to this project are happening on the discussions.
- Voice and text chat are available in Open5GS's Discord workspace. Use this link to get started.
Contributing
If you're contributing through a pull request to Open5GS project on GitHub, please read the Contributor License Agreement in advance.
License
- Open5GS Open Source files are made available under the terms of the GNU Affero General Public License (GNU AGPL v3.0).
- Commercial licenses are also available from NewPlane at sales@newplane.io.
Support
Technical support and customized services for Open5GS are provided by NewPlane at support@newplane.io.