mirror of
https://git.yoctoproject.org/poky
synced 2026-03-12 02:09:39 +01:00
88287ba521
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_submit_report(). (From OE-Core rev: 51cf006ac7b5b97e65864fb1cb6f5b47192c4ebf) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>