TT#130901 pike_check_req() does not work as expected

It's noticed that pike_check_req() does not work as expected,
as a consequence denial of service attacks are not being prevented.

This patch fixes that.

Change-Id: Ic909f2b689cda69e3cc589fd0d3180a0c8e3b92c
mr9.4
donat zenichev 4 years ago
parent 2fe071f72f
commit 416a52ad1c

@ -38,6 +38,7 @@ upstream/permissions-basic-safety-for-concurent-rpc-reload.patch
upstream/permissions-add-reload_delta-parameter.patch
upstream/ndb_redis-set-message-level-to-debug-on-reconnect.patch
upstream/nathelper-don-t-fail-if-a-rtcp-has-no-IP.patch
upstream/pike-fixed-regression.patch
### relevant for upstream
sipwise/pua_dialoginfo-refresh_pubruri_avps_flag.patch
sipwise/pua_dialoginfo-local_identity_dlg_var.patch

@ -0,0 +1,29 @@
From b62a773c8f0c1daf1aa3d1cd57845d414eea5bac Mon Sep 17 00:00:00 2001
From: Boris Korzun <korzun@miatel.ru>
Date: Tue, 25 May 2021 17:14:18 +0300
Subject: [PATCH] pike: fixed regression - removed unnecessary NULL-return from
mark_node() after previous commit
(cherry picked from commit 79fbb7c6df5d4c742b1283b752c2df0f51e77f09)
---
src/modules/pike/ip_tree.c | 4 ----
1 file changed, 4 deletions(-)
diff --git a/src/modules/pike/ip_tree.c b/src/modules/pike/ip_tree.c
index c0324c0476..1fe9227a5f 100644
--- a/src/modules/pike/ip_tree.c
+++ b/src/modules/pike/ip_tree.c
@@ -301,10 +301,6 @@ pike_ip_node_t* mark_node(unsigned char *ip,int ip_len,
}
}
- if(node==NULL) {
- return NULL;
- }
-
LM_DBG("only first %d were matched!\n",byte_pos);
*flag = 0;
*father = 0;
--
2.25.1
Loading…
Cancel
Save