mirror of
https://github.com/signalwire/freeswitch.git
synced 2026-08-19 09:40:21 +00:00
Dmitry Verenitsin
a097e12421
`read_packet()` passed a peer-supplied `Content-Length` straight to `switch_zmalloc(body, clen + 1)`. Huge values drove `calloc` failure and `switch_zmalloc` `abort()`-ed the daemon. - Cap `Content-Length` at 16 MiB; reject negatives. - Destroy the partially-built `*event` at the new rejection site and at the existing body-recv failure path so callers don't leak it. - Add `test_mod_event_socket` covering `INT_MAX`, above-cap, negative, `atoi`-overflow, zero, and valid-non-zero-body cases.
36 lines
1.1 KiB
XML
36 lines
1.1 KiB
XML
<?xml version="1.0"?>
|
|
<document type="freeswitch/xml">
|
|
<X-PRE-PROCESS cmd="set" data="local_ip_v4=127.0.0.1"/>
|
|
<X-PRE-PROCESS cmd="set" data="domain=127.0.0.1"/>
|
|
|
|
<section name="configuration" description="Configuration">
|
|
|
|
<configuration name="modules.conf" description="Modules">
|
|
<modules>
|
|
<load module="mod_console"/>
|
|
<load module="mod_event_socket"/>
|
|
</modules>
|
|
</configuration>
|
|
|
|
<configuration name="switch.conf" description="Core Configuration">
|
|
<settings>
|
|
<param name="colorize-console" value="false"/>
|
|
<param name="loglevel" value="debug"/>
|
|
</settings>
|
|
</configuration>
|
|
|
|
<configuration name="console.conf" description="Console Logger">
|
|
<mappings>
|
|
<map name="all" value="console,debug,info,notice,warning,err,crit,alert"/>
|
|
</mappings>
|
|
<settings>
|
|
<param name="colorize" value="false"/>
|
|
<param name="loglevel" value="debug"/>
|
|
</settings>
|
|
</configuration>
|
|
|
|
<X-PRE-PROCESS cmd="include" data="event_socket.conf.xml"/>
|
|
|
|
</section>
|
|
</document>
|