|
|
@ -392,17 +392,15 @@ route[CHECK_RETRANS] |
|
|
} |
|
|
} |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
modparam("htable", "htable", "insane=>size=32;autoexpire=120;initval=0;updateexpire=1;") |
|
|
|
|
|
|
|
|
|
|
|
route[SANITY_CHECK] |
|
|
route[SANITY_CHECK] |
|
|
{ |
|
|
{ |
|
|
if($sht(insane=>$si:$sp) > 3) { |
|
|
|
|
|
|
|
|
## CVE-2018-14767 |
|
|
|
|
|
if($(hdr(To)[1]) != $null) { |
|
|
|
|
|
xlog("second To header not null - dropping message"); |
|
|
drop; |
|
|
drop; |
|
|
}; |
|
|
|
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
if (!sanity_check()) { |
|
|
if (!sanity_check()) { |
|
|
$var(insane) = $shtinc(insane=>$si:$sp); |
|
|
|
|
|
xlog("L_WARN", "$ci|end|message from $si:$sp is insane ($var(insane))\n"); |
|
|
xlog("L_WARN", "$ci|end|message from $si:$sp is insane ($var(insane))\n"); |
|
|
drop; |
|
|
drop; |
|
|
} |
|
|
} |
|
|
|