sysmocom
/
open5gs
forked from acouzens/open5gs
11
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
open5gs/tests/common
History
Sukchan Lee cd76dc641d [SEC] Crash and Protocol Violations 
The AMF will crash on the following locations when it receives a sequence
of NAS messages from a UE.

- ogs_nas_encrypt: Assertion `pkbuf->len' failed. (../lib/nas/common/security.c:86)
- gmm_state_authentication: Assertion `r != OGS_ERROR' failed. (../src/amf/gmm-sm.c:1561)

Besides the crashes found above, an incorrect protocol transition
is identified in Open5GS. Without any Registration/Attach Request message,
when the Identity Response message sent, the Core Network responds
with an Authentication Request message. According to the standard,
only the Registration/Attach Request message can start a state transition
from the 5GMM/EMM-DEREGISTERED state to the 5GMM/EMM-COMMON-PROCEDURE-INITIATED.

So I've modified the relevant code to address these issues.
 		2024-04-09 16:23:49 +09:00
..
application.c [SEPP] Initial Update for 5G Roaming (#2739) 2023-11-19 19:34:51 +09:00
application.h Release v2.0.0 2020-08-21 23:33:45 -04:00
context.c [MME] Incorrect behavior of SGsAP+Dedicated-Bearer (#3072) 2024-04-01 22:13:36 +09:00
context.h [MME] Incorrect behavior of SGsAP+Dedicated-Bearer (#3072) 2024-04-01 22:13:36 +09:00
emm-build.c [NAS/GTP/PFCP] Upgrade IE to Release-17 2023-03-11 18:42:30 +09:00
emm-build.h Fix the ciphered test program 2022-01-08 12:26:23 +09:00
emm-handler.c Try to fix the UE infinite attach (#568) 2021-03-09 14:28:07 +09:00
emm-handler.h Try to fix the UE infinite attach (#568) 2021-03-09 14:28:07 +09:00
esm-build.c [MME] Incorrect behavior of SGsAP+Dedicated-Bearer (#3072) 2024-04-01 22:13:36 +09:00
esm-build.h Fix the ciphered test program 2022-01-08 12:26:23 +09:00
esm-handler.c [MME] Incorrect behavior of SGsAP+Dedicated-Bearer (#3072) 2024-04-01 22:13:36 +09:00
esm-handler.h [MME] Incorrect behavior of SGsAP+Dedicated-Bearer (#3072) 2024-04-01 22:13:36 +09:00
gmm-build.c Introduced Subscription identifier de-concealing 2022-12-24 20:22:45 +09:00
gmm-build.h Fix the ciphered test program 2022-01-08 12:26:23 +09:00
gmm-handler.c [AMF] 5G-GUTI generation changed (#910) 2021-04-13 17:34:25 +09:00
gmm-handler.h [AMF] 5G-GUTI generation changed (#910) 2021-04-13 17:34:25 +09:00
gsm-build.c Use x1000 multiplier for Kbps, Mbps, ... etc. (#2515) 2023-08-13 18:19:45 +09:00
gsm-build.h VoNR added but not tested! 2021-11-14 21:07:56 +09:00
gsm-handler.c Fixes UE IPv6 BUG (#808) 2021-03-15 10:01:55 +09:00
gsm-handler.h feat: Add dedicated QoS flow 2020-12-31 21:07:08 -05:00
gtpu.c [GTPU] Fixed PDCP SN handling (#2584, #2477) 2023-09-10 22:37:42 +09:00
gtpu.h [GTPU] Fixed PDCP SN handling (#2584, #2477) 2023-09-10 22:37:42 +09:00
meson.build Prometheus metrics set to default 2022-11-21 22:06:29 +09:00
nas-encoder.c [NAS] modify library to include both directions of deregistration requests 2022-07-11 22:53:21 +09:00
nas-encoder.h Release v2.0.0 2020-08-21 23:33:45 -04:00
nas-path.c [MME] Incorrect behavior of SGsAP+Dedicated-Bearer (#3072) 2024-04-01 22:13:36 +09:00
nas-path.h Release v2.0.0 2020-08-21 23:33:45 -04:00
nas-security.c [NAS] modify library to include both directions of deregistration requests 2022-07-11 22:53:21 +09:00
nas-security.h Release v2.0.0 2020-08-21 23:33:45 -04:00
ngap-build.c [SEC] Crash and Protocol Violations 2024-04-09 16:23:49 +09:00
ngap-build.h [SEC] Vulnerabilities have been resolved (#2945) 2024-03-06 07:20:50 +09:00
ngap-handler.c [ASN1C] Fixed asn1c library on 32bit (#2934) 2024-02-12 14:00:06 +09:00
ngap-handler.h feat: Indirect Data Forwarding in N2-Handover 2021-01-31 23:01:15 -05:00
ngap-path.c Fix the ciphered test program 2022-01-08 12:26:23 +09:00
ngap-path.h Add AUSF, UDM, and UDR 2020-06-04 14:12:05 -04:00
s1ap-build.c [MME] Implement ENBConfigurationUpdate (#2589) 2023-09-16 20:58:58 +09:00
s1ap-build.h [MME] Implement ENBConfigurationUpdate (#2589) 2023-09-16 20:58:58 +09:00
s1ap-handler.c [MME] Race condition between S1AP and S6A 2024-03-16 23:08:07 +09:00
s1ap-handler.h X2 handover with SGW change (#1367, #1459) 2022-05-12 22:52:36 +09:00
s1ap-path.c [MME/AMF] Fixed crash following Handover Request (#3014) 2024-02-29 23:02:38 +09:00
s1ap-path.h Release v2.0.0 2020-08-21 23:33:45 -04:00
sctp.c [ASN1C] Fixed asn1c library on 32bit (#2934) 2024-02-12 14:00:06 +09:00
sctp.h Improve the socket option configuration (#1404) 2022-03-15 22:03:50 +09:00
sgsap-build.c [CORE] OGS_MAX_SDU_LEN->OGS_HUGE_LEN Stack (#2008) 2023-01-25 22:24:51 +09:00
sgsap-build.h Release v2.0.0 2020-08-21 23:33:45 -04:00
test-common.h [AMF/MME] UEContextReleaseCommand after Interity Protected (#2786) (#2794) 2023-12-13 17:54:37 +09:00