1 files changed, 58 insertions, 0 deletions
diff --git a/net-voip/sipp/files/sipp-3.1-fix-auth.c-sprintf.patch b/net-voip/sipp/files/sipp-3.1-fix-auth.c-sprintf.patch
new file mode 100644
index 0000000..d295f30
--- /dev/null
+++ b/net-voip/sipp/files/sipp-3.1-fix-auth.c-sprintf.patch
@@ -0,0 +1,58 @@
+Index: auth.c
+===================================================================
+--- auth.c	(revision 590)
++++ auth.c	(working copy)
+@@ -214,7 +214,7 @@
+ int createAuthHeaderMD5(char * user, char * password, int password_len, char * method,
+                      char * uri, char * msgbody, char * auth, 
+                      char * algo, char * result) {
+-                     	
++    int res_len = 0;                 	
+     unsigned char ha1[MD5_HASH_SIZE], ha2[MD5_HASH_SIZE];
+     unsigned char resp[MD5_HASH_SIZE], body[MD5_HASH_SIZE]; 
+     unsigned char ha1_hex[HASH_HEX_SIZE+1], ha2_hex[HASH_HEX_SIZE+1];
+@@ -252,9 +252,9 @@
+     MD5_Final(ha1, &Md5Ctx);
+     hashToHex(&ha1[0], &ha1_hex[0]);
+ 
+-    sprintf(result, "Digest username=\"%s\",realm=\"%s\"",user,tmp);
++    res_len += sprintf(result + res_len, "Digest username=\"%s\",realm=\"%s\"",user,tmp);
+     if (cnonce[0] != '\0') {
+-        sprintf(result, "%s,cnonce=\"%s\",nc=%s,qop=%s",result,cnonce,nc,authtype);
++        res_len += sprintf(result + res_len , ",cnonce=\"%s\",nc=%s,qop=%s",cnonce,nc,authtype);
+     }
+ 
+     // Construct the URI 
+@@ -284,7 +284,7 @@
+     MD5_Final(ha2, &Md5Ctx);
+     hashToHex(&ha2[0], &ha2_hex[0]);
+ 
+-    sprintf(result, "%s,uri=\"%s\"",result,tmp);
++    res_len += sprintf(result + res_len, ",uri=\"%s\"",tmp);
+ 
+     // Extract the Nonce 
+     if (!getAuthParameter("nonce", auth, tmp, sizeof(tmp))) {
+@@ -309,10 +309,10 @@
+     MD5_Final(resp, &Md5Ctx);
+     hashToHex(&resp[0], &resp_hex[0]);
+ 
+-    sprintf(result, "%s,nonce=\"%s\",response=\"%s\",algorithm=%s",result,tmp,resp_hex,algo);
++    res_len += sprintf(result + res_len, ",nonce=\"%s\",response=\"%s\",algorithm=%s",tmp,resp_hex,algo);
+ 
+     if (has_opaque) {
+-        sprintf(result, "%s,opaque=\"%s\"",result,opaque);
++        res_len += sprintf(result + res_len, ",opaque=\"%s\"",opaque);
+     }
+ 
+     return 1;
+@@ -677,7 +677,9 @@
+     }
+     auts_hex[AUTS64LEN-1]=0;
+ 
+-    sprintf(result, "%s,auts=\"%s\"",result,auts_hex);
++    int res_len = strlen(result);
++
++    sprintf(result + res_len, ",auts=\"%s\"",auts_hex);
+   }
+   free(nonce);
+   return 1;