commit | 6adffb957349bc1ca75e49a20cbd05f06e62d668 | [log] [tgz] |
---|---|---|
author | Neels Hofmeyr <neels@hofmeyr.de> | Wed Dec 05 23:30:31 2018 +0100 |
committer | Harald Welte <laforge@gnumonks.org> | Mon Dec 10 17:06:30 2018 +0000 |
tree | 6a68c105f3fc4016992237950da2b6ce4a0f094c | |
parent | ea2a0ab041524bb651d488ea1eddda0cc3d9e895 [diff] [blame] |
gsm48_mi_to_string(): do not read from zero length input buffer Change-Id: I12cada7c2c5187146ca5a33d1ebfefb4cad65632
diff --git a/src/gsm/gsm48.c b/src/gsm/gsm48.c index af3e14c..190622f 100644 --- a/src/gsm/gsm48.c +++ b/src/gsm/gsm48.c
@@ -655,7 +655,7 @@ uint8_t mi_type; uint32_t tmsi; - mi_type = mi[0] & GSM_MI_TYPE_MASK; + mi_type = (mi && mi_len) ? (mi[0] & GSM_MI_TYPE_MASK) : GSM_MI_TYPE_NONE; switch (mi_type) { case GSM_MI_TYPE_TMSI: