There appears to be a possible buffer overflow here: https://github.com/asterisk/asterisk/blob/master/channels/sig_analog.c#L1635
Much like gets, there don't appear to be any bounds checks present using this API.
You must be logged in to leave a comment.