mirror of
https://github.com/open5gs/open5gs.git
synced 2026-07-31 10:44:11 +00:00
mirror of https://github.com/open5gs/open5gs link from https://open5gs.org/
https://open5gs.org
ad3939296d
Some checks failed
Meson Continuous Integration / Build and Test on Ubuntu Latest (push) Has been cancelled
TS 23.003 limits an IMSI to 15 decimal digits, but several identity conversion paths accepted overlong or non-decimal values. Validate null-scheme SUCI MSINs before constructing SUCI and SUPI strings. Centralize SUCI validation in the NAS conversion helper and propagate failures through AMF Registration Request and Identity Response handling with 5GMM cause 95. Keep detailed error logging at each failure stage. Validate MCC, MNC and MSIN components when reconstructing an IMSI SUPI in the SBI layer, and improve UDM logging when SUCI conversion fails. Validate EPS IMSIs before modifying MME context or hash state. Reject non-decimal BCD values and invalid IMSI lengths in Attach Request and Identity Response handling. Also validate the peer-controlled IMSI IE in Gn SGSN Context Request and Response messages. An 8-octet TBCD value without a filler nibble decodes to 16 digits plus a trailing NUL, which overflowed the previous 16-byte stack buffer before validation. Use a 17-byte temporary decode buffer, reject IMSI IEs longer than 8 octets, and continue enforcing the 15-digit IMSI limit after conversion. Update registration tests to normalize MSIN padding only for null-scheme SUCIs, preserve protected scheme output, assert successful test SUCI conversion, record returned GMM causes, and verify rejection of an overlong SUCI. |
||
|---|---|---|
| .github | ||
| configs | ||
| debian | ||
| docker | ||
| docs | ||
| lib | ||
| misc | ||
| src | ||
| subprojects | ||
| tests | ||
| vagrant | ||
| webui | ||
| .clang-tidy | ||
| .dockerignore | ||
| .editorconfig | ||
| .gitignore | ||
| LICENSE | ||
| meson.build | ||
| meson_options.txt | ||
| README.md | ||
Getting Started
Please follow the documentation at open5gs.org!
Sponsors
If you find Open5GS useful for work, please consider supporting this Open Source project by Becoming a sponsor. To manage the funding transactions transparently, you can donate through OpenCollective.
Community
- Problem with Open5GS can be filed as issues in this repository.
- Other topics related to this project are happening on the discussions.
- Voice and text chat are available in Open5GS's Discord workspace. Use this link to get started.
Contributing
If you're contributing through a pull request to Open5GS project on GitHub, please read the Contributor License Agreement in advance.
License
- Open5GS Open Source files are made available under the terms of the GNU Affero General Public License (GNU AGPL v3.0).
- Commercial licenses are also available from NewPlane at sales@newplane.io.
Support
Technical support and customized services for Open5GS are provided by NewPlane at support@newplane.io.