From d2e998cd689318667a2a42bf1a6e60e6c3a4793e Mon Sep 17 00:00:00 2001
From: Corey Edwards <tensai@zmonkey.org>
Date: Tue, 19 May 2015 12:01:36 -0600
Subject: [PATCH] main/sdp_srtp.c: allow SDP crypto tag to be up to 9 digits

ASTERISK-24887 #close
Reported by: Makoto Dei
Tested by: tensai

Change-Id: I6a96f572adb17f76b3acafe503a01c48eb5dd9bf
---
 main/sdp_srtp.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/main/sdp_srtp.c b/main/sdp_srtp.c
index 8c86f1407f..5d8047ca3d 100644
--- a/main/sdp_srtp.c
+++ b/main/sdp_srtp.c
@@ -238,7 +238,8 @@ int ast_sdp_crypto_process(struct ast_rtp_instance *rtp, struct ast_sdp_srtp *sr
 		return -1;
 	}
 
-	if (sscanf(tag, "%30d", &crypto->tag) != 1 || crypto->tag <= 0 || crypto->tag > 9) {
+	/* RFC4568 9.1 - tag is 1-9 digits, greater than zero */
+	if (sscanf(tag, "%30d", &crypto->tag) != 1 || crypto->tag <= 0 || crypto->tag > 999999999) {
 		ast_log(LOG_WARNING, "Unacceptable a=crypto tag: %s\n", tag);
 		return -1;
 	}
-- 
GitLab