asterisk/apps
Pengpeng Hou 59b74276f2 app_sms: Bound protocol 1 SMS unpacking to fixed-size buffers
The protocol 1 unpack helpers trusted externally controlled lengths and wrote
 them directly into fixed-size buffers in sms_t. Clamp the address, header,
 and body copies to the destination array sizes so malformed messages cannot
 overwrite adjacent state.

Resolves: #GHSA-q9fr-m7g8-6ph5
2026-06-25 08:21:09 -06:00
..
confbridge docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_adsiprog.c app_adsiprog: Fix possible NULL dereference. 2025-09-11 15:25:41 +00:00
app_agent_pool.c app_agent_pool: Remove documentation for removed option. 2025-07-30 14:21:45 +00:00
app_alarmreceiver.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_amd.c app_amd: Remove errant space in documentation for totalAnalysisTime. 2026-01-22 21:00:39 +00:00
app_attended_transfer.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_audiosocket.c docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_authenticate.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_blind_transfer.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_bridgeaddchan.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_bridgewait.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_broadcast.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_cdr.c docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_celgenuserevent.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_chanisavail.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_channelredirect.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_chanspy.c app_chanspy: Add option to not automatically answer channel. 2025-08-18 14:19:22 +00:00
app_confbridge.c docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_controlplayback.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_db.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_dial.c app_dial: Properly handle callee hangup while sending digits. 2026-05-12 16:31:20 +00:00
app_dictate.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_directed_pickup.c app_directed_pickup.c: Change some log messages from NOTICE to VERBOSE. 2025-12-01 14:01:03 +00:00
app_directory.c users.conf: Remove deprecated users.conf integration. 2025-07-10 14:47:38 +00:00
app_disa.c app_disa: Avoid use of removed ResetCDR() option. 2025-11-17 18:35:56 +00:00
app_dtmfstore.c app_dtmfstore: Avoid a potential buffer overflow. 2025-11-12 22:20:45 +00:00
app_dumpchan.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_echo.c docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_exec.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_externalivr.c build: Fix unused-but-set-variable warnings with gcc 16. 2026-02-25 13:25:21 +00:00
app_festival.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_flash.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_followme.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_forkcdr.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_getcpeid.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_if.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_ivrdemo.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_jack.c docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_meetme.c app_meetme: Remove inaccurate removal version from xmldocs. 2025-04-28 19:13:58 +00:00
app_mf.c docs: Add version information to application and function XML elements 2025-01-23 18:11:58 +00:00
app_milliwatt.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_minivm.c build: Fix unused-but-set-variable warnings with gcc 16. 2026-02-25 13:25:21 +00:00
app_mixmonitor.c app_mixmonitor: Fix duplex recording for non 8K codecs 2026-06-16 14:19:11 +00:00
app_morsecode.c docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_mp3.c docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_originate.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_page.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_playback.c build: Fix GCC discarded-qualifiers const errors. 2026-02-18 13:43:42 +00:00
app_playtones.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_privacy.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_queue.c app_queue: fix double increment of member->calls with shared_lastcall 2026-06-01 15:23:26 +00:00
app_read.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_readexten.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_record.c app_record: Fix hangup handling during beep playback 2026-06-01 16:40:33 +00:00
app_reload.c app_reload: Fix Reload() without arguments. 2025-11-19 17:19:56 +00:00
app_saycounted.c docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_sayunixtime.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_senddtmf.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_sendtext.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_sf.c app_sf: Add post-digit timer option to ReceiveSF. 2025-10-06 19:24:57 +00:00
app_signal.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_skel.c docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_sla.c docs: Fix typos in apps/ 2025-04-28 16:30:09 +00:00
app_sms.c app_sms: Bound protocol 1 SMS unpacking to fixed-size buffers 2026-06-25 08:21:09 -06:00
app_softhangup.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_speech_utils.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_stack.c documentation: Update Gosub, Goto, and add new documentationtype. 2025-03-18 15:12:08 +00:00
app_stasis.c ARI Outbound Websockets 2025-06-02 16:35:34 +00:00
app_stasis_broadcast.c stasis_broadcast: Add optional ARI broadcast with first-claim-wins 2026-04-22 18:05:08 +00:00
app_statsd.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_stream_echo.c app_stream_echo.c: Check that stream is non-NULL before dereferencing. 2025-12-03 13:58:50 +00:00
app_system.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_talkdetect.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_test.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_transfer.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_userevent.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_verbose.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_voicemail.c app_voicemail_odbc: fix msgnum race and crash on failed STORE 2026-04-28 16:26:33 +00:00
app_voicemail.exports.in Remove some symbol exports that got missed in the removal of global symbols. 2012-06-15 15:33:41 +00:00
app_voicemail_imap.c app_voicemail.c: Build all three variants for app_voicemail at the same time 2019-06-28 07:32:03 -06:00
app_voicemail_imap.exports.in app_voicemail.c: Build all three variants for app_voicemail at the same time 2019-06-28 07:32:03 -06:00
app_voicemail_odbc.c app_voicemail.c: Build all three variants for app_voicemail at the same time 2019-06-28 07:32:03 -06:00
app_voicemail_odbc.exports.in app_voicemail.c: Build all three variants for app_voicemail at the same time 2019-06-28 07:32:03 -06:00
app_waitforcond.c docs: Add version information to application and function XML elements 2025-01-23 18:11:58 +00:00
app_waitforring.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_waitforsilence.c app_waitforsilence.c: Use milliseconds to calculate timeout time 2025-09-08 14:27:32 +00:00
app_waituntil.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_while.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
app_zapateller.c docs: Indent <since> tags. 2025-01-29 14:18:25 +00:00
enter.h Remove as much trailing whitespace as possible. 2017-12-22 09:23:22 -05:00
leave.h Remove as much trailing whitespace as possible. 2017-12-22 09:23:22 -05:00
Makefile app_sms: Ignore false positive vectorization warning. 2025-05-05 13:44:22 +00:00