sysmocom
/
asterisk
11
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

res_crypto.c: Gracefully handle potential key filename truncation. 

Partially resolves #143.
This commit is contained in:
Sean Bright 2023-06-05 10:49:11 -04:00 committed by asterisk-org-access-app[bot]
parent baa4a0669e
commit 7e1f0b8e1f
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
res/res_crypto.c
View File

@ -196,7 +196,14 @@ static struct ast_key *try_load_key(const char *dir, const char *fname, int ifd,
}
/* Get actual filename */
snprintf(ffname, sizeof(ffname), "%s/%s", dir, fname);
n = snprintf(ffname, sizeof(ffname), "%s/%s", dir, fname);
if (n >= sizeof(ffname)) {
ast_log(LOG_WARNING,
"Key filenames can be up to %zu bytes long, but the filename for the"
" key we are currently trying to load (%s/%s) is %d bytes long.",
sizeof(ffname) - 1, dir, fname, n);
return NULL;
}
/* Open file */
if (!(f = fopen(ffname, "r"))) {