Skip to content
Snippets Groups Projects
  1. Jan 30, 2015
  2. Jan 29, 2015
  3. Jan 28, 2015
    • Mark Michelson's avatar
      Fix file descriptor leak in RTP code. · b3ff43a4
      Mark Michelson authored
      SIP requests that offered codecs incompatible with configured values
      could result in the allocation of RTP and RTCP ports that would not get
      reclaimed later.
      
      ASTERISK-24666 #close
      Reported by Y Ateya
      
      Review: https://reviewboard.asterisk.org/r/4323
      
      AST-2015-001
      ........
      
      Merged revisions 431300 from http://svn.asterisk.org/svn/asterisk/branches/12
      ........
      
      Merged revisions 431303 from http://svn.asterisk.org/svn/asterisk/branches/13
      
      
      git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@431304 65c4cc65-6c06-0410-ace0-fbb531ad65f3
      b3ff43a4
    • Mark Michelson's avatar
      Multiple revisions 431297-431298 · 3cccfac3
      Mark Michelson authored
      ........
        r431297 | mmichelson | 2015-01-28 11:05:26 -0600 (Wed, 28 Jan 2015) | 17 lines
        
        Mitigate possible HTTP injection attacks using CURL() function in Asterisk.
        
        CVE-2014-8150 disclosed a vulnerability in libcURL where HTTP request injection
        can be performed given properly-crafted URLs.
        
        Since Asterisk makes use of libcURL, and it is possible that users of Asterisk may
        get cURL URLs from user input or remote sources, we have made a patch to Asterisk
        to prevent such HTTP injection attacks from originating from Asterisk.
        
        ASTERISK-24676 #close
        Reported by Matt Jordan
        
        Review: https://reviewboard.asterisk.org/r/4364
        
        AST-2015-002
      ........
        r431298 | mmichelson | 2015-01-28 11:12:49 -0600 (Wed, 28 Jan 2015) | 3 lines
        
        Fix compilation error from previous patch.
      ........
      
      Merged revisions 431297-431298 from http://svn.asterisk.org/svn/asterisk/branches/11
      ........
      
      Merged revisions 431299 from http://svn.asterisk.org/svn/asterisk/branches/12
      ........
      
      Merged revisions 431301 from http://svn.asterisk.org/svn/asterisk/branches/13
      
      
      git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@431302 65c4cc65-6c06-0410-ace0-fbb531ad65f3
      3cccfac3
    • Sean Bright's avatar
      media formats: update res_format_attr_opus & silk · f080ca65
      Sean Bright authored
      In r419044, we changed how formats were handled, but the return value
      of the format_parse_sdp_fmtp functions in res_format_attr_opus and
      res_format_attr_silk were not updated, causing calls to fail.  Ran
      into this when getting codec_opus working with Asterisk 13.
      
      Once the return value was corrected, we were crashing in opus_getjoint
      because of NULL format attributes.  I've fixed this as well in this
      patch.
      
      Review: https://reviewboard.asterisk.org/r/4371/
      ........
      
      Merged revisions 431267 from http://svn.asterisk.org/svn/asterisk/branches/13
      
      
      git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@431268 65c4cc65-6c06-0410-ace0-fbb531ad65f3
      f080ca65
    • Richard Mudgett's avatar
      res_pjsip_outbound_registration: Fix reload race condition. · 69e107b2
      Richard Mudgett authored
      Performing a CLI "module reload" command when there are new pjsip.conf
      registration objects defined frequently failed to load them correctly.
      
      What happens is a race condition between res_pjsip pushing its reload into
      an asynchronous task processor task and the thread that does the rest of
      the reloads when it gets to reloading the res_pjsip_outbound_registration
      module.  A similar race condition happens between a reload and the CLI/AMI
      show registrations commands.  The reload updates the current_states
      container and the CLI/AMI commands call get_registrations() which builds a
      new current_states container.
      
      * Made res_pjsip.c reload_module() use ast_sip_push_task_synchronous()
      instead of ast_sip_push_task() to eliminate two threads processing config
      reloads at the same time.
      
      * Made get_registrations() not replace the global current_states container
      so the CLI/AMI show registrations command cannot interfere with reloading.
      You could never add/remove objects in the container without the
      possibility of the container being replaced out from under you by
      get_registrations().
      
      * Added a registration loaded sorcery instance observer to purge any dead
      registration objects since get_registrations() cannot do this job anymore.
      The struct ast_sorcery_instance_observer callbacks must be used because
      the callback happens inline with the load process.  The struct
      ast_sorcery_observer callbacks are pushed to a different thread.
      
      * Added some global current_states NULL pointer checks in case the
      container disappears because of unload_module().
      
      * Made sorcery's struct ast_sorcery_instance_observer.object_type_loaded
      callbacks guaranteed to be called before any struct
      ast_sorcery_observer.loaded callbacks will be called.
      
      * Moved the check for non-reloadable objects to before the sorcery
      instance loading callbacks happen to short circuit unnecessary work.
      Previously with non-reloadable objects, the sorcery instance
      loading/loaded callbacks would always happen, the individual wizard
      loading/loaded would be prevented, and the non-reloadable type logging
      message would be logged for each associated wizard.
      
      ASTERISK-24729 #close
      Review: https://reviewboard.asterisk.org/r/4381/
      ........
      
      Merged revisions 431243 from http://svn.asterisk.org/svn/asterisk/branches/13
      
      
      git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@431251 65c4cc65-6c06-0410-ace0-fbb531ad65f3
      69e107b2
  4. Jan 27, 2015
  5. Jan 26, 2015
    • David M. Lee's avatar
      Various fixes for OS X · 965777cc
      David M. Lee authored
      This patch addresses compilation errors on OS X. It's been a while, so
      there's quite a few things.
      
       * Fixed __attribute__ decls in route.h to be portable.
       * Fixed htonll and ntohll to work when they are defined as macros.
       * Replaced sem_t usage with our ast_sem wrapper.
       * Added ast_sem_timedwait to our ast_sem wrapper.
       * Fixed some GCC 4.9 warnings using sig*set() functions.
       * Fixed some format strings for portability.
       * Fixed compilation issues with res_timing_kqueue (although tests still fail
         on OS X).
       * Fixed menuconfig /sbin/launchd detection, which disables res_timing_kqueue
         on OS X).
      
      ASTERISK-24539 #close
      Reported by: George Joseph
      
      ASTERISK-24544 #close
      Reported by: George Joseph
      
      Review: https://reviewboard.asterisk.org/r/4327/
      ........
      
      Merged revisions 431092 from http://svn.asterisk.org/svn/asterisk/branches/13
      
      
      git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@431093 65c4cc65-6c06-0410-ace0-fbb531ad65f3
      965777cc
  6. Jan 25, 2015
    • Matthew Jordan's avatar
      dynamic realtime: Updates fail to work due to update fields being passed over · a8ae5a7b
      Matthew Jordan authored
      When a crash was fixed due to usage of the REALTIME function in r423003, a
      regression was introduced into ast_update2_realtime where the update fields
      passed to the function would be skipped and the lookup field processed twice.
      
      The use of this function is a bit interesting: A variable argument list is
      used with two sentinel values - the first marks the end of the lookup
      fields/values; the second marks the end of the update fields/values.
      Unfortunately, ast_update2_realtime parses over the lookup fields twice, as
      opposed to parsing over the update fields. This causes the lookups to succeed,
      but the updates itself to have no effect.
      
      Note that the most common instance of this problem occurred in app_voicemail
      during the updating of a mailbox password.
      
      Thanks to the issue reporter, Paddy Grice, for pointing out the problem.
      
      Review: https://reviewboard.asterisk.org/r/4356/
      
      ASTERISK-24231
      
      ASTERISK-24626 #close
      Reported by: Paddy Grice
      ........
      
      Merged revisions 431072 from http://svn.asterisk.org/svn/asterisk/branches/13
      
      
      git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@431073 65c4cc65-6c06-0410-ace0-fbb531ad65f3
      a8ae5a7b
  7. Jan 23, 2015
  8. Jan 22, 2015
  9. Jan 21, 2015
  10. Jan 20, 2015
Loading