PentHertz
/
srsLTE
mirror of https://github.com/PentHertz/srsLTE.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fixed possible out-of-bounds read in nas_attach_complete.

This commit is contained in:
Pedro Alvarez 2018-01-31 15:16:37 +00:00
parent f4c1a7a379
commit 04280a1cd7
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
srsepc/src/mme/s1ap_nas_transport.cc
View File

@ -544,7 +544,7 @@ s1ap_nas_transport::handle_nas_attach_complete(srslte::byte_buffer_t *nas_msg, u
m_s1ap_log->console("Unpacked Attached Complete Message\n");
m_s1ap_log->console("Unpacked Activavate Default EPS Bearer message. EPS Bearer id %d\n",act_bearer.eps_bearer_id);
//ue_ctx->erabs_ctx[act_bearer->eps_bearer_id].enb_fteid;
if(act_bearer.eps_bearer_id < 5 || act_bearer.eps_bearer_id > 16)
if(act_bearer.eps_bearer_id < 5 || act_bearer.eps_bearer_id > 15)
{
m_s1ap_log->error("EPS Bearer ID out of range\n");
return false;