Files
asterisk/main
Milan Kyselica f92dad9bf9 callerid: fix signed char causing crash in MDMF parser
Change rawdata buffer from char to unsigned char to prevent
sign-extension of TLV length bytes >= 0x80. On signed-char
platforms (all Asterisk builds due to -fsigned-char in
configure.ac), these values become negative when assigned to
int, bypass the `if (res > 32)` bounds check, and reach
memcpy as size_t producing a ~18 EB read that immediately
crashes with SIGSEGV.

Affects DAHDI analog (FXO) channels only. Not reachable
via SIP, PRI/BRI, or DTMF-based Caller ID.

Fixes: #1839
2026-06-04 13:04:18 +00:00
..
2025-03-20 18:18:29 +00:00
2025-03-20 18:18:29 +00:00
2025-03-20 18:18:29 +00:00
2025-03-20 18:18:29 +00:00
2024-01-12 18:29:19 +00:00
2025-03-20 18:18:29 +00:00
2024-01-12 18:29:19 +00:00
2025-03-20 18:18:29 +00:00
2021-12-02 15:02:09 -06:00
2021-12-02 15:02:09 -06:00
2021-12-02 15:02:09 -06:00
2021-12-02 15:02:09 -06:00
2021-12-02 15:02:09 -06:00
2025-01-23 18:36:04 +00:00
2025-09-17 14:04:27 -06:00
2026-03-26 19:23:13 +00:00
2021-12-02 15:02:09 -06:00
2022-07-07 08:19:14 -05:00
2025-03-20 18:18:29 +00:00
2020-06-10 09:33:28 -05:00
2021-12-02 15:02:09 -06:00
2025-03-20 18:18:29 +00:00
2024-09-12 18:45:46 +00:00
2021-12-02 15:02:09 -06:00
2021-11-15 17:33:27 -06:00
2026-03-26 19:23:13 +00:00
2021-12-02 15:02:09 -06:00
2025-05-01 12:39:48 +00:00
2025-03-20 18:18:28 +00:00
2025-03-20 18:18:28 +00:00
2025-03-20 18:18:28 +00:00
2025-03-20 18:18:28 +00:00
2026-03-26 19:23:13 +00:00
2025-05-01 12:39:48 +00:00
2021-12-02 15:02:09 -06:00
2025-03-20 18:18:29 +00:00
2021-12-02 15:02:09 -06:00
2025-03-20 18:18:28 +00:00
2021-12-02 15:02:09 -06:00
2021-12-02 15:02:09 -06:00
2025-03-20 18:18:29 +00:00
2025-03-20 18:18:28 +00:00
2025-03-20 18:18:28 +00:00
2021-12-02 15:02:09 -06:00
2021-11-15 17:33:27 -06:00
2021-12-02 15:02:09 -06:00
2021-11-18 14:46:42 -06:00
2025-03-20 18:18:28 +00:00
2025-03-20 18:18:28 +00:00
2025-09-17 14:03:00 -06:00
2025-03-20 18:18:29 +00:00
2021-12-02 15:02:09 -06:00
2022-03-24 12:00:58 -05:00
2025-03-20 18:18:29 +00:00
2021-12-02 15:02:09 -06:00