tree e473e10074ef6e216730b19e3589fbfca6b52032
parent 87a04b6b95d827c5c82c3e7ffb99f60e86028f25
author Harald Welte <laforge@gnumonks.org> 1509908102 +0900
committer Neels Hofmeyr <nhofmeyr@sysmocom.de> 1510349213 +0000

hlr.c: Avoid overflow of lu_operation.subscr.imsi

It appears that hlr_subscriber.imsi is 16 buffers in size:
15 chars for IMSI + 1 byte NUL.  However,  osmo_gsup_message.imsi
is 17 bytes (for whatever reason), so we cannot simply do a strpy()
as this might overflow the hlr_subscriber.imsi field!

TODO: check if weactually ever receive a too-long IMSI in GSUP and
reject that at an earlier time in the code flow.

Fixes: Coverity CID#164746

Change-Id: I9ff94e6bb0ad2ad2a7c010d3ea7dad9af0f3c048