mirror of
https://github.com/open5gs/open5gs.git
synced 2026-04-28 03:19:31 +00:00
mirror of https://github.com/open5gs/open5gs link from https://open5gs.org/
https://open5gs.org
The MME terminated with abort() when processing IDR or ULA messages containing a malformed Served-Party-IP-Address (AVP 848) or MIP-Home-Agent-Address (AVP 334). In mme_s6a_subscription_data_from_avp(), the return value of fd_msg_avp_value_interpret() was checked using ogs_assert(ret == 0). However, this function may legitimately return an error if the Address AVP contains an invalid encoding (e.g., invalid address family or length mismatch). Since freeDiameter treats Address AVPs as raw OctetString during decoding, malformed values can reach this code path. As a result, receiving such an AVP caused ogs_assert() → ogs_abort() → abort(), terminating the entire MME process. Fix this by replacing the assertion with proper error handling. If fd_msg_avp_value_interpret() fails, the malformed AVP is ignored with a warning log and processing continues. This prevents a malformed or malicious Diameter message from crashing the MME while preserving normal operation for valid data. Issues: #4334 |
||
|---|---|---|
| .github | ||
| configs | ||
| debian | ||
| docker | ||
| docs | ||
| lib | ||
| misc | ||
| src | ||
| subprojects | ||
| tests | ||
| vagrant | ||
| webui | ||
| .clang-tidy | ||
| .dockerignore | ||
| .editorconfig | ||
| .gitignore | ||
| LICENSE | ||
| meson.build | ||
| meson_options.txt | ||
| README.md | ||
Getting Started
Please follow the documentation at open5gs.org!
Sponsors
If you find Open5GS useful for work, please consider supporting this Open Source project by Becoming a sponsor. To manage the funding transactions transparently, you can donate through OpenCollective.
Community
- Problem with Open5GS can be filed as issues in this repository.
- Other topics related to this project are happening on the discussions.
- Voice and text chat are available in Open5GS's Discord workspace. Use this link to get started.
Contributing
If you're contributing through a pull request to Open5GS project on GitHub, please read the Contributor License Agreement in advance.
License
- Open5GS Open Source files are made available under the terms of the GNU Affero General Public License (GNU AGPL v3.0).
- Commercial licenses are also available from NewPlane at sales@newplane.io.
Support
Technical support and customized services for Open5GS are provided by NewPlane at support@newplane.io.
