asterisk/apps
Pengpeng Hou 7048a3841d app_sms: Bound protocol 1 SMS unpacking to fixed-size buffers
The protocol 1 unpack helpers trusted externally controlled lengths and wrote
 them directly into fixed-size buffers in sms_t. Clamp the address, header,
 and body copies to the destination array sizes so malformed messages cannot
 overwrite adjacent state.

Resolves: #GHSA-q9fr-m7g8-6ph5
2026-06-25 09:35:20 -06:00
..
confbridge docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_adsiprog.c app_adsiprog: Fix possible NULL dereference. 2025-10-30 16:09:10 +00:00
app_agent_pool.c app_agent_pool: Remove documentation for removed option. 2025-09-17 11:40:37 -06:00
app_alarmreceiver.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_amd.c app_amd: Remove errant space in documentation for totalAnalysisTime. 2026-03-26 19:31:56 +00:00
app_attended_transfer.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_audiosocket.c docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_authenticate.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_blind_transfer.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_bridgeaddchan.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_bridgewait.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_broadcast.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_cdr.c docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_celgenuserevent.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_chanisavail.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_channelredirect.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_chanspy.c app_chanspy: Add option to not automatically answer channel. 2025-09-17 11:40:38 -06:00
app_confbridge.c docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_controlplayback.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_db.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_dial.c app_dial: Properly handle callee hangup while sending digits. 2026-06-04 13:55:16 +00:00
app_dictate.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_directed_pickup.c app_directed_pickup.c: Change some log messages from NOTICE to VERBOSE. 2026-01-15 16:59:16 +00:00
app_directory.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_disa.c app_disa: Avoid use of removed ResetCDR() option. 2026-01-15 16:59:16 +00:00
app_dtmfstore.c app_dtmfstore: Avoid a potential buffer overflow. 2026-01-15 16:59:15 +00:00
app_dumpchan.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_echo.c docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_exec.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_externalivr.c build: Fix unused-but-set-variable warnings with gcc 16. 2026-03-26 19:31:56 +00:00
app_festival.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_flash.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_followme.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_forkcdr.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_getcpeid.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_if.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_ivrdemo.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_jack.c docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_meetme.c app_meetme: Remove inaccurate removal version from xmldocs. 2025-05-01 12:44:59 +00:00
app_mf.c docs: Add version information to application and function XML elements 2025-01-23 18:42:29 +00:00
app_milliwatt.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_minivm.c build: Fix unused-but-set-variable warnings with gcc 16. 2026-03-26 19:31:56 +00:00
app_mixmonitor.c app_mixmonitor.c: Fix crash in mixmonitor_ds_remove_and_free when datastore is NULL 2026-01-15 16:59:17 +00:00
app_morsecode.c docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_mp3.c docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_originate.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_page.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_playback.c build: Fix GCC discarded-qualifiers const errors. 2026-03-26 19:31:56 +00:00
app_playtones.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_privacy.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_queue.c app_queue: fix double increment of member->calls with shared_lastcall 2026-06-04 13:55:17 +00:00
app_read.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_readexten.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_record.c app_record: Fix hangup handling during beep playback 2026-06-04 13:55:17 +00:00
app_reload.c app_reload: Fix Reload() without arguments. 2026-01-15 16:59:16 +00:00
app_saycounted.c docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_sayunixtime.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_senddtmf.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_sendtext.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_sf.c app_sf: Add post-digit timer option to ReceiveSF. 2025-10-30 16:09:10 +00:00
app_signal.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_skel.c docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_sla.c docs: Fix typos in apps/ 2025-05-01 12:44:59 +00:00
app_sms.c app_sms: Bound protocol 1 SMS unpacking to fixed-size buffers 2026-06-25 09:35:20 -06:00
app_softhangup.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_speech_utils.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_stack.c documentation: Update Gosub, Goto, and add new documentationtype. 2025-03-20 18:34:08 +00:00
app_stasis.c ARI Outbound Websockets 2025-09-17 11:40:15 -06:00
app_stasis_broadcast.c stasis_broadcast: Add optional ARI broadcast with first-claim-wins 2026-06-04 13:55:16 +00:00
app_statsd.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_stream_echo.c app_stream_echo.c: Check that stream is non-NULL before dereferencing. 2026-01-15 16:59:16 +00:00
app_system.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_talkdetect.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_test.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_transfer.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_userevent.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_verbose.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_voicemail.c app_voicemail_odbc: fix msgnum race and crash on failed STORE 2026-06-04 13:55:16 +00:00
app_voicemail.exports.in Remove some symbol exports that got missed in the removal of global symbols. 2012-06-15 15:33:41 +00:00
app_voicemail_imap.c app_voicemail.c: Build all three variants for app_voicemail at the same time 2019-06-28 07:32:03 -06:00
app_voicemail_imap.exports.in app_voicemail.c: Build all three variants for app_voicemail at the same time 2019-06-28 07:32:03 -06:00
app_voicemail_odbc.c app_voicemail.c: Build all three variants for app_voicemail at the same time 2019-06-28 07:32:03 -06:00
app_voicemail_odbc.exports.in app_voicemail.c: Build all three variants for app_voicemail at the same time 2019-06-28 07:32:03 -06:00
app_waitforcond.c docs: Add version information to application and function XML elements 2025-01-23 18:42:29 +00:00
app_waitforring.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_waitforsilence.c app_waitforsilence.c: Use milliseconds to calculate timeout time 2025-09-17 11:40:38 -06:00
app_waituntil.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_while.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
app_zapateller.c docs: Indent <since> tags. 2025-03-20 18:34:07 +00:00
enter.h Remove as much trailing whitespace as possible. 2017-12-22 09:23:22 -05:00
leave.h Remove as much trailing whitespace as possible. 2017-12-22 09:23:22 -05:00
Makefile app_sms: Ignore false positive vectorization warning. 2025-09-17 11:40:14 -06:00