Skip to content

fix(sbi/processor): bounds-check decodeEapAkaPrime before slice/index access#57

Closed
SAY-5 wants to merge 1 commit into
free5gc:mainfrom
SAY-5:fix/eap-aka-prime-bounds-1030
Closed

fix(sbi/processor): bounds-check decodeEapAkaPrime before slice/index access#57
SAY-5 wants to merge 1 commit into
free5gc:mainfrom
SAY-5:fix/eap-aka-prime-bounds-1030

Conversation

@SAY-5

@SAY-5 SAY-5 commented May 2, 2026

Copy link
Copy Markdown
Contributor

Closes free5gc/free5gc#1030. eapPkt[5:] and data[i+1] panicked on short EAP-AKA' payloads via /eap-session.

@SAY-5 SAY-5 changed the title decodeEapAkaPrime: bounds-check before slice/index access fix(sbi/processor): bounds-check decodeEapAkaPrime before slice/index access May 5, 2026
@SAY-5 SAY-5 closed this May 5, 2026
@SAY-5 SAY-5 reopened this May 5, 2026
@SAY-5

SAY-5 commented May 5, 2026

Copy link
Copy Markdown
Contributor Author

Updated PR title to match Conventional Commits format.

… access

Closes free5gc/free5gc#1030. Short eapPayload bytes panicked the AUSF /eap-session callback.

Signed-off-by: SAY-5 <say.apm35@gmail.com>
@SAY-5 SAY-5 force-pushed the fix/eap-aka-prime-bounds-1030 branch from 0b1d47f to e4c7db8 Compare May 5, 2026 21:30
@SAY-5

SAY-5 commented May 5, 2026

Copy link
Copy Markdown
Contributor Author

Amended commit message to match Conventional Commits format.

@d11nn

d11nn commented May 6, 2026

Copy link
Copy Markdown

@chchen7 @wiwi878 PTAL

@SAY-5

SAY-5 commented May 11, 2026

Copy link
Copy Markdown
Contributor Author

Thanks @d11nn, looking forward to feedback from the team.

@chchen7

chchen7 commented May 12, 2026

Copy link
Copy Markdown
Contributor

Hi @SAY-5 ,

Thanks for the fix! It looks like this PR is a duplicate of your other one #55, which was already merged.

Thanks again for your contribution.

@SAY-5

SAY-5 commented May 12, 2026

Copy link
Copy Markdown
Contributor Author

Ah, you're right, this duplicates #55. Closing. Thanks!

@SAY-5 SAY-5 closed this May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bugs] AUSF decodeEapAkaPrime index out-of-bounds panic

3 participants