Dmitry Verenitsin
394b48b9f5
switch_b64_decode bounded its writes with `ol >= olen - 1`, where `olen` is unsigned. An `olen` of 0 made `olen - 1` wrap to `SIZE_MAX`, so the bound never fired and the loop wrote the entire decoded input plus a trailing NUL past the destination. Reject `olen == 0` and test `ol + 1 >= olen` before each write, so the comparison never subtracts from an unsigned and always leaves room for the terminator. The alphabet lookup table `l64` was a `char` indexed by a `char`, which is unsafe whichever way `char` is signed: - Where `char` is signed, an input byte >= 0x80 became a negative index and read before the table. - Where `char` is unsigned, the `-1` "not in alphabet" sentinel was stored as 255, so the skip test never matched and non-alphabet bytes were folded in as data. Make `l64` a `signed char` and index it with `(unsigned char)`, so the sentinel survives and the index stays in range on every platform. Change the bit accumulator `b` from `int` to `unsigned int` to avoid signed-overflow undefined behavior on long input; decoded output is unchanged. Add unit tests: an encode/decode round-trip across the padding cases, the output-bound edges (`olen` of 0, 1, and a truncating buffer), and a non-alphabet byte (including one >= 0x80) that must be skipped.
FreeSWITCH
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a versatile software implementation that runs on any commodity hardware. From a Raspberry PI to a multi-core server, FreeSWITCH can unlock the telecommunications potential of any device. Combined with our hosted cloud platform, SignalWire, FreeSWITCH can interconnect with the outside world and scale to any size.
Visit https://signalwire.com or https://github.com/signalwire for more info.
Getting Started
FreeSWITCH is available on Github in source code format. You can checkout the development branch and build for many popular platforms including Linux, Windows, MacOSX and BSD. There is an issue tracker and pull request system available as part of the repo online.
See https://developer.signalwire.com/freeswitch/FreeSWITCH-Explained/ for more detailed instructions.
Additional Help
If you need assistance or have an interest in using a commercially supported build, you can contact coreteam@freeswitch.com to learn about professional services to support your project.
Voice-over-IP services - SIP / SMS - App Integrations
SignalWire is the primary sponsor of the FreeSWITCH project and was founded by the original developers of FreeSWITCH. SignalWire provides scalable services to enhance and scale your project such as SMS, SIP, Serverless Application hosting as well as programmable telecom. mod_signalwire which is distributed in this code base allows you to instantly pair with SignalWire and extend your FreeSWITCH.
Documentation
The main index for documentation is available at:
Release notes:
Install from packages
Step by step tutorials to install FreeSWITCH from packages:
- Using FSGET [Recommended]
- Debian
- Raspberry Pi
- CentOS 7
Build from source
Example Dockerfiles to build FreeSWITCH and dependencies from source:
Step by step tutorials to build FreeSWITCH with provided dependency packages:
- Debian [Recommended]
- Raspberry Pi
- CentOS 7
How to build Debian packages
Downloads
Contributions
GitHub pull requests are the recommended way to contribute to the FreeSWITCH source code:
Community
Slack is our chat system where the developers, the FreeSWITCH team, and the most active users are present. This is the place to get answers faster and chat with other users in real time. All you need to do is enter your email and verify it on the Slack signup page and you are ready to join in the discussion!
Slack Community:
Mailing list (ARCHIVED):
Thank you for using FreeSWITCH!