tree 4d39160466f28b5ed1785f5934cc2e3abb31512f
parent 64b51eb68bd272b6b1f2cefa2b33e9dd74024d0c
author Philipp Maier <pmaier@sysmocom.de> 1546940418 +0100
committer dexter <pmaier@sysmocom.de> 1547799660 +0000

gsm29118: fix coverity issues

The function msgb_sgsap_name_put() assignes the return code of
osmo_apn_from_str() directly to len. Len is an uint8_t and the return
code an int. If osmo_apn_from_str() returns -1. Len would become 0xFF
causing a buffer overrun with msgb_tlv_put. Lets use the proper type to
catch the return code and check it before using it as length.

Change-Id: Ic0bc5114eee47bdcf2300a6e4b0df473d3d1903a
Fixes: CID#190405
Fixes: CID#190401
Related: OS#3615