Started by upstream project "gerrit-osmo-bts" build number 1,1181118gerrit-osmo-btsjob/gerrit-osmo-bts/COMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImaster20787972078797002156292156291.0208470920847090230033859055905<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btshttps://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/1124/artifacthttps://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/changeshttps://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/1124/https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/1124/testReportfalse#1124215629224846gerrit-osmo-bts-build #11241124falsefalse112472032SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/1124/src/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyfixeriaCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/001185255852551.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11248525576078gerrit-osmo-bts-build » BTS_MODEL=lc15,FIRMWARE_VERSION=litecell15,0,default,osmocom-gerrit #11241124falsefalse112472268SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=lc15,FIRMWARE_VERSION=litecell15,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/00833398333971374713741.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11247137474960gerrit-osmo-bts-build » BTS_MODEL=lc15,FIRMWARE_VERSION=master,0,default,osmocom-gerrit #11241124falsefalse112472273SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=lc15,FIRMWARE_VERSION=master,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/00829838298371730717301.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11247173077186gerrit-osmo-bts-build » BTS_MODEL=lc15,FIRMWARE_VERSION=v2017.01,0,default,osmocom-gerrit #11241124falsefalse112472270SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=lc15,FIRMWARE_VERSION=v2017.01,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/00828718287170371703711.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11247037177639gerrit-osmo-bts-build » BTS_MODEL=oc2g,FIRMWARE_VERSION=master,0,default,osmocom-gerrit #11241124falsefalse112472269SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=oc2g,FIRMWARE_VERSION=master,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/00857848578468934689341.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11246893478510gerrit-osmo-bts-build » BTS_MODEL=oc2g,FIRMWARE_VERSION=oc2g,0,default,osmocom-gerrit #11241124falsefalse112472274SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=oc2g,FIRMWARE_VERSION=oc2g,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/00001008971008971.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#112410089772135gerrit-osmo-bts-build » BTS_MODEL=oc2g,FIRMWARE_VERSION=oc2g-next,0,default,osmocom-gerrit #11241124falsefalse112472261SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=oc2g,FIRMWARE_VERSION=oc2g-next,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build5-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/000098321983211.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11249832166548gerrit-osmo-bts-build » BTS_MODEL=oct,FIRMWARE_VERSION=master,0,default,osmocom-gerrit #11241124falsefalse112472264SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=oct,FIRMWARE_VERSION=master,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build5-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/000081891818911.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11248189168530gerrit-osmo-bts-build » BTS_MODEL=oct+trx,FIRMWARE_VERSION=master,0,default,osmocom-gerrit #11241124falsefalse112472262SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=oct+trx,FIRMWARE_VERSION=master,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/00001107871107871.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#112411078791022gerrit-osmo-bts-build » BTS_MODEL=sysmo,FIRMWARE_VERSION=femtobts_v2.7,1,default,osmocom-gerrit #11241124falsefalse112472266SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=sysmo,FIRMWARE_VERSION=femtobts_v2.7,WITH_MANUALS=1,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/000082589825891.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11248258966861gerrit-osmo-bts-build » BTS_MODEL=sysmo,FIRMWARE_VERSION=master,0,default,osmocom-gerrit #11241124falsefalse112472259SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=sysmo,FIRMWARE_VERSION=master,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/000098267982671.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11249826766870gerrit-osmo-bts-build » BTS_MODEL=sysmo,FIRMWARE_VERSION=superfemto_v2.4,0,default,osmocom-gerrit #11241124falsefalse112472267SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=sysmo,FIRMWARE_VERSION=superfemto_v2.4,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build5-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/004498312983121.007171<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11249831267593gerrit-osmo-bts-build » BTS_MODEL=sysmo,FIRMWARE_VERSION=superfemto_v3.0.1pre,0,default,osmocom-gerrit #11241124falsefalse112472260SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=sysmo,FIRMWARE_VERSION=superfemto_v3.0.1pre,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build5-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/000082575825751.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11248257565669gerrit-osmo-bts-build » BTS_MODEL=sysmo,FIRMWARE_VERSION=superfemto_v3.1,0,default,osmocom-gerrit #11241124falsefalse112472263SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=sysmo,FIRMWARE_VERSION=superfemto_v3.1,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/00832928329269410694101.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11246941068156gerrit-osmo-bts-build » BTS_MODEL=sysmo,FIRMWARE_VERSION=superfemto_v5.1,0,default,osmocom-gerrit #11241124falsefalse112472272SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=sysmo,FIRMWARE_VERSION=superfemto_v5.1,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/000081965819651.0000<_2023q1 _class='hudson.plugins.git.util.Build'>374bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1bfdc23b1c676d017da2c1dff26d937be9c9926e2bfdc23b1c676d017da2c1dff26d937be9c9926e22023q1794f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.1f79a23bab0e43959d25363d2a4903127e0a1cb3af79a23bab0e43959d25363d2a4903127e0a1cb3aosmith/1.7.187475a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.275a087d16ba2539b8bcf05102b41d820e818724175a087d16ba2539b8bcf05102b41d820e8187241osmith/1.7.21124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#11248196564908gerrit-osmo-bts-build » BTS_MODEL=trx,FIRMWARE_VERSION=master,0,default,osmocom-gerrit #11241124falsefalse112472265SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=trx,FIRMWARE_VERSION=master,WITH_MANUALS=0,a4=default,label=osmocom-gerrit/1124/build4-deb12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim YanitskiyCOMMENT_TYPEDISTROGERRIT_BRANCHmasterGERRIT_CHANGE_NUMBER42513GERRIT_HOSTgerrit.osmocom.orgGERRIT_PATCHSET_NUMBER1GERRIT_PATCHSET_REVISIONabff3e767f36c48739afe26fdede290682b64232GERRIT_PATCHSET_UPLOADER_NAMEfixeriaGERRIT_PORT29418GERRIT_PROJECTosmo-btsGERRIT_REFSPECrefs/changes/13/42513/1GERRIT_REPO_URLssh://jenkins@gerrit.osmocom.org:29418/osmo-btsPIPELINE_BUILD_URLhttps://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bts/1118/PROJECT_NAMEosmo-btsBRANCH_CImasterStarted by upstream project "gerrit-osmo-bts-build" build number 1,1241124gerrit-osmo-bts-buildjob/gerrit-osmo-bts-build/00112137662137661.00001124abff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterabff3e767f36c48739afe26fdede290682b64232abff3e767f36c48739afe26fdede290682b64232masterssh://jenkins@gerrit.osmocom.org:29418/osmo-btsfalse#1124213766220304gerrit-osmo-bts-build » BTS_MODEL=trx,FIRMWARE_VERSION=master,0,default,raspbian #11241124falsefalse112472271SUCCESS1774563449209https://jenkins.osmocom.org/jenkins/view/Jenkins-Gerrit/job/gerrit-osmo-bts-build/BTS_MODEL=trx,FIRMWARE_VERSION=master,WITH_MANUALS=0,a4=default,label=raspbian/1124/lx2-raspbian12build-ansiblesrc/common/l1sap.cabff3e767f36c48739afe26fdede290682b642321774558331000https://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiyvyanitskiy@sysmocom.del1sap: check_for_ciph_cmd(): add missing msgb length check The function accesses msg->data[0..4] without first verifying that the message is at least 5 bytes long, which would cause a buffer over-read on a malformed (too short) LAPDm frame. Change-Id: I47690f1a6357e42913bfa8100e36c05cb4f0607a 2026-03-27 03:52:11 +0700abff3e767f36c48739afe26fdede290682b64232l1sap: check_for_ciph_cmd(): add missing msgb length checkeditsrc/common/l1sap.cgithttps://jenkins.osmocom.org/jenkins/user/fixeriaVadim Yanitskiy