Skip to content

fix(mme): Enforce stricter input validation for S1AP/NGAP/NAS payloads [backport to v1.9]#15493

Merged
lucasgonze merged 1 commit intomagma:v1.9from
nathaniel-bennett:v1.9
Aug 19, 2024
Merged

fix(mme): Enforce stricter input validation for S1AP/NGAP/NAS payloads [backport to v1.9]#15493
lucasgonze merged 1 commit intomagma:v1.9from
nathaniel-bennett:v1.9

Conversation

@nathaniel-bennett
Copy link
Copy Markdown
Contributor

@nathaniel-bennett nathaniel-bennett commented Aug 17, 2024

(cherry picked from commit c33c6b5)

Ensures input validation is more strictly enforced for S1AP/NGAP/NAS protocols in the MME.

Since this is a security-sensitive fix, it may be best to include it in 1.9.

@nathaniel-bennett nathaniel-bennett requested a review from a team as a code owner August 17, 2024 23:28
@pull-request-size pull-request-size bot added the size/L Denotes a Pull Request that changes 100-499 lines. label Aug 17, 2024
@github-actions github-actions bot added the component: agw Access gateway-related issue label Aug 17, 2024
@github-actions
Copy link
Copy Markdown
Contributor

Thanks for opening a PR! 💯

A couple initial guidelines

Howto

  • Reviews. The "Reviewers" listed for this PR are the Magma maintainers who will shepherd it.
  • Checks. All required CI checks must pass before merge.
  • Merge. Once approved and passing CI checks, use the ready2merge label to indicate the maintainers can merge your PR.

More info

Please take a moment to read through the Magma project's

If this is your first Magma PR, also consider reading

@nathaniel-bennett nathaniel-bennett changed the title fix(mme): Enforce stricter input validation for S1AP/NGAP/NAS payloads fix(mme): Enforce stricter input validation for S1AP/NGAP/NAS payloads [backport to v1.9] Aug 17, 2024
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Aug 19, 2024

DP Lint & Test

0 tests   0 ✔️  0s ⏱️
0 suites  0 💤
0 files    0

Results for commit 917309f.

♻️ This comment has been updated with latest results.

@lucasgonze
Copy link
Copy Markdown
Contributor

lucasgonze commented Aug 19, 2024

We need to figure out whether build [magmalte] failed: the custom script didn't produce an image with tag [magmalte:latest] from “Domain proxy integration tests with orc8r” is caused by this change or whether it occurs across the board.

On investigation:

  • Other PRs are showing the same error
  • I can't think of a logical reason for this PR to create this particular error.

I will approve this.

Copy link
Copy Markdown
Contributor

@lucasgonze lucasgonze left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

On investigation the failing test is probably not related to this change.

@lucasgonze lucasgonze removed the request for review from pshelar August 19, 2024 16:12
@lucasgonze lucasgonze merged commit 08472ba into magma:v1.9 Aug 19, 2024
@lucasgonze
Copy link
Copy Markdown
Contributor

@nathaniel-bennett Thank you for making this happen. From start to finish it was a lot of work, but in the end it provided a really substantial safety improvement for all users.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

component: agw Access gateway-related issue size/L Denotes a Pull Request that changes 100-499 lines.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants