[reSIProcate] expires Contact parameter can be parsed as negative if too large
Byron Campen
bcampen at estacado.net
Fri Aug 4 10:28:52 CDT 2006
Also, on closer examination of the code, the Expires and CSeq params
are being set to zero unintentionally; both of those parameters are
divisible by 2^32, meaning if they were slightly different, we'd be
getting negative values.
Best regards,
Byron Campen
> In the scalar02 torture-tests case, an over-large Contact expires
> param will be parsed as negative, and can be re-emitted.
>
> *snip*
> In case scalar02:
> Original text:
> REGISTER sip:example.com SIP/2.0
> Via: SIP/2.0/TCP host129.example.com;branch=z9hG4bK342sdfoi3
> To: <sip:user at example.com>
> From: <sip:user at example.com>;tag=239232jh3
> CSeq: 36893488147419103232 REGISTER
> Call-ID: scalar02.23o0pd9vanlq3wnrlnewofjas9ui32
> Max-Forwards: 300
> Expires:
> 1000000000000000000000000000000000000000000000000000000000000000000000
> 0000000000000000000000000000000
> Contact: <sip:user at host129.example.com>
> ;expires=280297596632815
> Content-Length: 0
>
>
> Encoded form:
> REGISTER sip:example.com SIP/2.0
> Via: SIP/2.0/TCP host129.example.com;branch=z9hG4bK342sdfoi3
> Max-Forwards: 300
> Contact: <sip:user at host129.example.com>;expires=-559038737
> To: <sip:user at example.com>
> From: <sip:user at example.com>;tag=239232jh3
> Call-ID: scalar02.23o0pd9vanlq3wnrlnewofjas9ui32
> CSeq: 0 REGISTER
> Expires: 0
> Content-Length: 0
>
> *snip*
>
> Best regards,
> Byron Campen
>
> _______________________________________________
> resiprocate-devel mailing list
> resiprocate-devel at list.sipfoundry.org
> https://list.sipfoundry.org/mailman/listinfo/resiprocate-devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://list.resiprocate.org/pipermail/resiprocate-devel/attachments/20060804/6c79aab3/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2369 bytes
Desc: not available
URL: <http://list.resiprocate.org/pipermail/resiprocate-devel/attachments/20060804/6c79aab3/attachment.bin>
More information about the resiprocate-devel
mailing list