| commit | 4b2ed35b8f35b86ad19e9ff12485dba8adc26e50 | [log] [tgz] |
|---|---|---|
| author | Harald Welte <laforge@gnumonks.org> | Wed Jul 27 23:35:38 2011 +0200 |
| committer | Harald Welte <laforge@gnumonks.org> | Wed Jul 27 23:35:38 2011 +0200 |
| tree | 87f49f997ff1ee1668724be51195d8f7e5537f99 | |
| parent | 074b2b24e00fa4f6e39e2f5025ec628663ac95d8 [diff] |
GPRS: Fix buffer overflow in case of very long MS RA CAP IE The MS Radio Access Capability IE can be _very_ long in some recent high-end mobile phones, way beyond the old 14-byte limit. We increase our array to 52 bytes, and make sure not to overflow that buffer.