Merge pull request from GHSA-79jq-hh82-cv9g

Fix Out-of-bound read in sip_method_d
freeswitch · May 25, 2022 · a99804b · a99804b
2 parents 51841eb + e96b4b8
commit a99804b
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/libsofia-sip-ua/sip/sip_parser.c b/libsofia-sip-ua/sip/sip_parser.c
@@ -454,6 +454,10 @@ sip_method_t sip_method_d(char **ss, char const **return_name)
 
 #undef MATCH
 
+  if (strlen(s) < n) {
+    return sip_method_invalid;
+  }
+
   if (IS_NON_WS(s[n]))
     /* Unknown method */
     code = sip_method_unknown;