From 085088f35e6dac01e321c79c51afd6704b06b24a Mon Sep 17 00:00:00 2001 From: Michael Jerris Date: Mon, 19 May 2008 21:33:52 +0000 Subject: [PATCH] add bounds checks. Found by Klockwork (www.klocwork.com) git-svn-id: http://svn.freeswitch.org/svn/freeswitch/trunk@8476 d0543943-73ff-0310-b7d9-9358b9ac24b2 --- src/switch_regex.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/switch_regex.c b/src/switch_regex.c index 4ca83dce2c..945ac1ff53 100644 --- a/src/switch_regex.c +++ b/src/switch_regex.c @@ -144,6 +144,10 @@ SWITCH_DECLARE(void) switch_perform_substitution(switch_regex_t *re, int match_c z = 0; num = atoi(index); + if (num < 0 || num > 256) { + num = -1; + } + if (pcre_copy_substring(field_data, ovector, match_count, num, replace, sizeof(replace)) > 0) { switch_size_t r; for (r = 0; r < strlen(replace); r++) {