mirror of
https://github.com/open5gs/open5gs.git
synced 2026-05-05 23:37:22 +00:00
The token parsing loop in ogs_ipfw_compile_rule() lacked a bound on the number of tokens stored in the 'av' array. This could overflow the stack buffer when parsing overly long flow descriptions. Add a check to ensure 'i' remains below MAX_NUM_OF_TOKEN-2 before assigning to 'av[i]'. |
||
|---|---|---|
| .. | ||
| objs/include_e | ||
| dummynet.c | ||
| expand_number.c | ||
| glue.c | ||
| glue.h | ||
| humanize_number.c | ||
| ipfw2.c | ||
| ipfw2.h | ||
| ipv6.c | ||
| meson.build | ||
| missing.h | ||
| ogs-ipfw.c | ||
| ogs-ipfw.h | ||
| tables.c | ||