Scott Griepentrog 43bd3580e2 pbx.c: prevent potential crash from recursive replace() ...

Recurisve usage of replace() resulted in corruption of the
temporary string storage and potential crash.  By changing
the string to be allocated separtely per instance, this is
eliminated.

ASTERISK-23650 #comment Reported by: Roel van Meer
ASTERISK-23650 #close

Review: https://reviewboard.asterisk.org/r/3539/
........

Merged revisions 414214 from http://svn.asterisk.org/svn/asterisk/branches/1.8
........

Merged revisions 414215 from http://svn.asterisk.org/svn/asterisk/branches/11
........

Merged revisions 414216 from http://svn.asterisk.org/svn/asterisk/branches/12


git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@414217 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2014-05-21 19:08:39 +00:00

..

func_aes.c

Fix many issues from the NULL_RETURNS Coverity report

2012-05-04 22:17:38 +00:00

func_audiohookinherit.c

func_audiohookinheritance: Check If A Channel Was Specified

2014-03-04 19:34:52 +00:00

func_base64.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

func_blacklist.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_callcompletion.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_callerid.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_cdr.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_channel.c

Allow Asterisk to compile under GCC 4.10

2014-05-09 22:49:26 +00:00

func_config.c

Fix func_config list entry allocation

2013-10-08 18:19:59 +00:00

func_curl.c

Have func_curl log a warning when a curl request fails.

2013-03-20 20:27:37 +00:00

func_cut.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

func_db.c

security: Inhibit execution of privilege escalating functions

2013-12-16 19:11:51 +00:00

func_devstate.c

Prevent exhaustion of system resources through exploitation of event cache

2013-01-02 18:11:59 +00:00

func_dialgroup.c

Fix incorrect usages of ast_realloc().

2013-09-10 18:05:47 +00:00

func_dialplan.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_enum.c

Allow ENUM query functions to report lookup errors

2011-08-09 17:08:33 +00:00

func_env.c

Fix 32bit build for func_env

2014-05-09 23:18:21 +00:00

func_extstate.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

func_frame_trace.c

Allow Asterisk to compile under GCC 4.10

2014-05-09 22:49:26 +00:00

func_global.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_groupcount.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_hangupcause.c

Allow Asterisk to compile under GCC 4.10

2014-05-09 22:49:26 +00:00

func_iconv.c

Allow Asterisk to compile under GCC 4.10

2014-05-09 22:49:26 +00:00

func_jitterbuffer.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_lock.c

security: Inhibit execution of privilege escalating functions

2013-12-16 19:11:51 +00:00

func_logic.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

func_math.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_md5.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

func_module.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

func_odbc.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_periodic_hook.c

Fix error loading res_monitor.

2014-04-23 15:02:39 +00:00

func_periodic_hook.exports.in

Fix error loading res_monitor.

2014-04-23 15:02:39 +00:00

func_pitchshift.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_pjsip_endpoint.c

func_pjsip_endpoint: Add PJSIP_ENDPOINT function for querying endpoint details

2013-12-11 12:31:57 +00:00

func_presencestate.c

Ensure that presence state is decoded properly on Asterisk startup.

2014-05-07 21:58:37 +00:00

func_rand.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

func_realtime.c

security: Inhibit execution of privilege escalating functions

2013-12-16 19:11:51 +00:00

func_sha1.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

func_shell.c

security: Inhibit execution of privilege escalating functions

2013-12-16 19:11:51 +00:00

func_sorcery.c

sorcery: Create AST_SORCERY dialplan function.

2014-03-06 22:39:54 +00:00

func_speex.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

func_sprintf.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

func_srv.c

Allow Asterisk to compile under GCC 4.10

2014-05-09 22:49:26 +00:00

func_strings.c

pbx.c: prevent potential crash from recursive replace()

2014-05-21 19:08:39 +00:00

func_sysinfo.c

Allow Asterisk to compile under GCC 4.10

2014-05-09 22:49:26 +00:00

func_timeout.c

verbosity: Fix performance of console verbose messages.

2014-01-14 18:14:02 +00:00

func_uri.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

func_version.c

Fix documentation for ${VERSION(ASTERISK_VERSION_NUM)}.

2012-04-19 22:01:20 +00:00

func_vmcount.c

Voicemail: Remove mailbox identifier format (box@context) assumptions in the system.

2013-12-19 16:52:43 +00:00

func_volume.c

Fix dialplan function NULL channel safety issues

2014-03-27 19:21:44 +00:00

Makefile

Title update

2012-10-14 21:56:13 +00:00