From e301006124e29e33a98005ab52d2beae209e82ff Mon Sep 17 00:00:00 2001 From: Lasse Bang Mikkelsen Date: Thu, 19 Jan 2023 17:05:12 +0100 Subject: [PATCH] Limit randomized SDP session version to 32-bit integer Many of the SIP stacks use 32-bit integers internally and the Asterisk chan_sip SDP decoder will cap version to 9223372036854775807. (cherry picked from commit 2351d7f6ac3b6e016d2be0cf5fa4a9aa5f267e1b) --- daemon/sdp.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/daemon/sdp.c b/daemon/sdp.c index 5a82ab199..e5d22277a 100644 --- a/daemon/sdp.c +++ b/daemon/sdp.c @@ -2489,7 +2489,7 @@ int sdp_replace(struct sdp_chopper *chop, GQueue *sessions, struct call_monologu if (!monologue->sdp_version) { monologue->sdp_version = session->origin.version_num; if (monologue->sdp_version == 0 || monologue->sdp_version == ULLONG_MAX) - monologue->sdp_version = ssl_random(); + monologue->sdp_version = (unsigned int)ssl_random(); } if (session->origin.parsed && flags->replace_origin &&