Dmitry Verenitsin fb9f37b9c7 Merge commit from fork ...

Bound the XOR unmasking loop to `wsh->rplen` (payload only) instead of
`wsh->datalen`, which also covers the header and caused up to a 14-byte
OOB write past the frame payload in `wsh->buffer` using the
client-supplied mask key.

Tighten the size guard from `>` to `>=` to reserve 1 byte for the
trailing NUL written after the payload; a frame filling `buflen` exactly
otherwise NUL-wrote 1 byte past `wsh->buffer`.

Only reachable when `enable-websocket` is set in `mod_xml_rpc.conf.xml`
(off by default).

2026-08-08 18:22:30 +03:00

..

include

Merge commit from fork

2026-08-08 18:14:08 +03:00

mod

Merge commit from fork

2026-08-08 18:22:30 +03:00

.gitignore

…

cJSON_Utils.c

…

cJSON.c

[core] Coverity fixes

2023-09-08 20:17:57 +03:00

CMakeLists.txt

…

fs_encode.c

[core,libyuv,modules] Fix function declarations without a prototype

2023-07-04 09:56:40 +01:00

fs_tts.c

[core,libyuv,modules] Fix function declarations without a prototype

2023-07-04 09:56:40 +01:00

g711.c

…

inet_pton.c

…

Makefile.am

…

switch_apr_queue.c

[Core] Fix Windows build after apr-util removal

2022-08-29 20:17:12 +03:00

switch_apr.c

[Core] switch_sockaddr_info_get() will not resolve if the hostname is an IP address. Add new switch_is_ip_address() API. Add a unit-test. (#3055)

2026-06-12 16:13:47 +03:00

switch_buffer.c

[Core] Allow switch_buffer_write() to fill in a buffer with zeros. Add switch_buffer_zero_fill()

2022-05-23 21:51:26 +03:00

switch_caller.c

…

switch_channel.c

[Core] Upgrade FreeSWITCH to use PCRE2 library. Be aware of breaking changes.

2025-07-15 18:26:17 +03:00

switch_config.c

…

switch_console.c

[Core] Fix switch_console.c for Galera Mariadb cluster

2023-08-11 23:13:00 +03:00

switch_core_asr.c

[core] fix memory leak in switch_core_asr_feed

2022-03-23 17:05:50 +08:00

switch_core_cert.c

Merge commit from fork

2026-08-08 18:14:08 +03:00

switch_core_codec.c

[core, mod_sofia] Fix codec set deadlock

2024-10-11 16:16:02 +03:00

switch_core_db.c

[Core] Avoid using insecure sqlite3_enable_load_extension when SQLITE_DBCONFIG_ENABLE_LOAD_EXTENSION is available.

2022-05-18 23:54:01 +03:00

switch_core_directory.c

…

switch_core_event_hook.c

…

switch_core_file.c

[Core] Fix dead nested assignments

2022-08-09 23:29:31 +03:00

switch_core_hash.c

[Core] Add new switch_core_hash_insert_dup_auto_free() API

2021-10-19 20:39:36 +03:00

switch_core_io.c

[Core] Fix use of private headers.

2021-11-10 21:46:29 +03:00

switch_core_media_bug.c

[Core] Fix dead nested assignments

2022-08-09 23:29:31 +03:00

switch_core_media.c

[Core, modules] Fix various dead assignments.

2026-05-25 23:56:13 +03:00

switch_core_memory.c

[core] Coverity fixes

2023-09-08 20:17:57 +03:00

switch_core_port_allocator.c

[Core] switch_core_port_allocator_request_port: Coverity 1227622 Calling risky function

2024-07-30 19:24:13 +03:00

switch_core_rwlock.c

[Core] Fix possible race condition between locking a session and reading it's flags in switch_core_session_read_lock() and switch_core_session_read_lock_hangup().

2022-07-26 01:49:31 +03:00

switch_core_session.c

[core] Fix use-after-free in session thread pool worker. (#3030)

2026-05-26 00:13:29 +03:00

switch_core_speech.c

…

switch_core_sqldb.c

[Core] Fix implicit conversion from enumeration type 'switch_odbc_status_t' to different enumeration type 'switch_status_t'.

2023-12-14 13:44:22 +03:00

switch_core_state_machine.c

[Core] Fix dead nested assignments

2022-08-09 23:29:31 +03:00

switch_core_timer.c

…

switch_core_video.c

[Core] Introduce switch_image.c

2026-07-10 19:38:46 +03:00

switch_core.c

[core] add uuidv7 support

2025-07-31 19:38:54 +03:00

switch_cpp.cpp

[core] Coverity fixes

2023-09-08 20:17:57 +03:00

switch_curl.c

[core] Coverity fixes

2023-09-08 20:17:57 +03:00

switch_dso.c

[Unit-tests] Add --enable-fake-dlclose configure flag so modules are not unloaded and ASAN could give more info and not just <unknown module>.

2021-10-23 22:00:36 +03:00

switch_estimators.c

[core] change estimator CUSUM design params for loss to reduce oscillations. rename var.

2021-10-23 22:00:09 +03:00

switch_event.c

Merge commit from fork

2026-08-08 18:18:50 +03:00

switch_hashtable.c

…

switch_image.c

[Core] Introduce switch_image.c

2026-07-10 19:38:46 +03:00

switch_ivr_async.c

[Core] Upgrade FreeSWITCH to use PCRE2 library. Be aware of breaking changes.

2025-07-15 18:26:17 +03:00

switch_ivr_bridge.c

[Core] Coverity fixes

2023-04-05 18:54:11 +03:00

switch_ivr_menu.c

[Core] Upgrade FreeSWITCH to use PCRE2 library. Be aware of breaking changes.

2025-07-15 18:26:17 +03:00

switch_ivr_originate.c

[Core] Coverity: Dereference before null check

2023-10-05 00:26:26 +03:00

switch_ivr_play_say.c

[Core] Upgrade FreeSWITCH to use PCRE2 library. Be aware of breaking changes.

2025-07-15 18:26:17 +03:00

switch_ivr_say.c

…

switch_ivr.c

[Core] Upgrade FreeSWITCH to use PCRE2 library. Be aware of breaking changes.

2025-07-15 18:26:17 +03:00

switch_jitterbuffer.c

[core] Coverity 1325269 Dereference before null check

2023-09-08 17:54:33 +01:00

switch_json.c

…

switch_limit.c

…

switch_loadable_module.c

[Core, mod_commands] Interface allowlist (#3086)

2026-08-05 18:44:33 +03:00

switch_log.c

[core,libyuv,modules] Fix function declarations without a prototype

2023-07-04 09:56:40 +01:00

switch_mprintf.c

[Core] switch_mprintf: Increase the size of loop variables in the printf() implementation. Add unit-tests disabled by default.

2022-12-09 23:11:25 +03:00

switch_msrp.c

[Core, modules] Fix various dead assignments.

2026-05-25 23:56:13 +03:00

switch_nat.c

[Core] Coverity fixes

2023-04-05 18:54:11 +03:00

switch_odbc.c

[Core] Fix wrong switch_odbc_skip_autocommit_flip function declaration.

2022-08-26 21:47:45 +03:00

switch_packetizer.c

[core,mod_av,unit-tests] Make transition to core packetizer

2023-07-10 12:58:19 +00:00

switch_pcm.c

…

switch_profile.c

…

switch_regex.c

[Core] Upgrade FreeSWITCH to use PCRE2 library. Be aware of breaking changes.

2025-07-15 18:26:17 +03:00

switch_resample.c

[Core, mod_conference] Fixed oscillation in conference AGC processing. Especially during volume reduction processing (#1064)

2021-04-02 22:18:16 +03:00

switch_rtp.c

Merge commit from fork

2026-08-08 18:14:08 +03:00

switch_scheduler.c

[Core] Scheduler: Fix race between switch_scheduler_add_task() and task_thread_loop(). Add new switch_scheduler_add_task_ex() method.

2021-03-17 01:01:01 +03:00

switch_sdp.c

[Build-System] Remove Sofia-Sip library from the FreeSWITCH tree and use packages instead.

2020-08-03 23:46:45 +04:00

switch_spandsp.c

[Core] Fix use of private headers.

2021-11-10 21:46:29 +03:00

switch_speex.c

[core,libyuv,modules] Fix function declarations without a prototype

2023-07-04 09:56:40 +01:00

switch_stun.c

Merge commit from fork

2026-08-08 17:03:47 +03:00

switch_swig.c

…

switch_swig.i

…

switch_time.c

[core] Fix - should take the amount of time until the timer next expires

2025-09-14 15:23:29 +01:00

switch_utf8.c

…

switch_utils.c

[Core] switch_sockaddr_info_get() will not resolve if the hostname is an IP address. Add new switch_is_ip_address() API. Add a unit-test. (#3055)

2026-06-12 16:13:47 +03:00

switch_uuidv7.c

[core] add uuidv7 support

2025-07-31 19:38:54 +03:00

switch_vad.c

[Core] VAD: Add a math sanity check to the switch_vad_process

2024-05-19 21:22:31 +03:00

switch_version.c

…

switch_vpx.c

[Core] Introduce switch_image.c

2026-07-10 19:38:46 +03:00

switch_xml_config.c

[core, mod_cidlookup] Free memory allocated via strdup

2023-03-28 01:47:23 +03:00

switch_xml.c

Merge commit from fork

2026-08-08 17:07:32 +03:00

switch.c

[core,libyuv,modules] Fix function declarations without a prototype

2023-07-04 09:56:40 +01:00

tone2wav.c

…