mirror of
https://github.com/open5gs/open5gs.git
synced 2026-04-26 10:30:41 +00:00
mirror of https://github.com/open5gs/open5gs link from https://open5gs.org/
https://open5gs.org
5ab76f2bea
The HTTP upload handling in access_handler() used ogs_malloc() and ogs_realloc() results directly assigned to request->http.content and checked with ogs_assert(). On allocation failure this could abort the process, leading to a potential denial-of-service condition. The pattern was similar to the issue previously fixed in on_data_chunk_recv() (CVE-2022-3299). This change introduces a temporary pointer for memory allocation and updates request->http.content only after successful allocation. It also adds overflow-safe length checks before resizing the buffer and removes assert-based error handling in favor of graceful failure. This prevents process termination on allocation failure and aligns the memory handling logic with the hardened implementation used in nghttp2-based handlers. Issues: #4387 |
||
|---|---|---|
| .github | ||
| configs | ||
| debian | ||
| docker | ||
| docs | ||
| lib | ||
| misc | ||
| src | ||
| subprojects | ||
| tests | ||
| vagrant | ||
| webui | ||
| .clang-tidy | ||
| .dockerignore | ||
| .editorconfig | ||
| .gitignore | ||
| LICENSE | ||
| meson.build | ||
| meson_options.txt | ||
| README.md | ||
Getting Started
Please follow the documentation at open5gs.org!
Sponsors
If you find Open5GS useful for work, please consider supporting this Open Source project by Becoming a sponsor. To manage the funding transactions transparently, you can donate through OpenCollective.
Community
- Problem with Open5GS can be filed as issues in this repository.
- Other topics related to this project are happening on the discussions.
- Voice and text chat are available in Open5GS's Discord workspace. Use this link to get started.
Contributing
If you're contributing through a pull request to Open5GS project on GitHub, please read the Contributor License Agreement in advance.
License
- Open5GS Open Source files are made available under the terms of the GNU Affero General Public License (GNU AGPL v3.0).
- Commercial licenses are also available from NewPlane at sales@newplane.io.
Support
Technical support and customized services for Open5GS are provided by NewPlane at support@newplane.io.