open5gs/tests/registration
Sukchan Lee cd76dc641d [SEC] Crash and Protocol Violations
The AMF will crash on the following locations when it receives a sequence
of NAS messages from a UE.

- ogs_nas_encrypt: Assertion `pkbuf->len' failed. (../lib/nas/common/security.c:86)
- gmm_state_authentication: Assertion `r != OGS_ERROR' failed. (../src/amf/gmm-sm.c:1561)

Besides the crashes found above, an incorrect protocol transition
is identified in Open5GS. Without any Registration/Attach Request message,
when the Identity Response message sent, the Core Network responds
with an Authentication Request message. According to the standard,
only the Registration/Attach Request message can start a state transition
from the 5GMM/EMM-DEREGISTERED state to the 5GMM/EMM-COMMON-PROCEDURE-INITIATED.

So I've modified the relevant code to address these issues.
2024-04-09 16:23:49 +09:00
..
abts-main.c [AMF] Fixed crash in no context setup (#2999) 2024-03-04 21:03:07 +09:00
auth-test.c [AMF/MME] UEContextReleaseCommand after Interity Protected (#2786) (#2794) 2023-12-13 17:54:37 +09:00
crash-test.c [SEC] Vulnerabilities have been resolved (#2945) 2024-03-06 07:20:50 +09:00
dereg-test.c [AMF/SMF] Resolved the Issue of Session Release Based on the Order of N1/N2 Messages (#2917) 2024-02-03 09:42:09 +09:00
ecc-test.c Introduced Subscription identifier de-concealing 2022-12-24 20:22:45 +09:00
gmm-status-test.c [AMF/MME] No STATE Change for the EMM/GMM-STATUS 2024-02-03 10:16:16 +09:00
guti-test.c [MME/AMF] Fixed crash following Handover Request (#3014) 2024-02-29 23:02:38 +09:00
identity-test.c [SEC] Crash and Protocol Violations 2024-04-09 16:23:49 +09:00
idle-test.c [MME/AMF] Fixed crash following Handover Request (#3014) 2024-02-29 23:02:38 +09:00
meson.build [AMF] Fixed crash in no context setup (#2999) 2024-03-04 21:03:07 +09:00
multi-ue-test.c [AMF] Fixed MEMORY LEAK (#1925) 2023-01-21 09:02:44 +09:00
reset-test.c Introduced Subscription identifier de-concealing 2022-12-24 20:22:45 +09:00
simple-test.c Introduced Subscription identifier de-concealing 2022-12-24 20:22:45 +09:00
ue-context-test.c [AMF/MME] UEContextReleaseCommand after Interity Protected (#2786) (#2794) 2023-12-13 17:54:37 +09:00