BJ Weschke 4ac62c324b Using the GetVar handler in AMI is potentially dangerous (insta-crash [tm]) when you use a dialplan function that requires a channel and then you don't provide one or provide an invalid one in the Channel: parameter. We'll handle this situation exactly the same way it was handled in pbx.c back on r61766. ...

We'll create a bogus channel for the function call and destroy it when we're done. If we have trouble allocating the bogus channel then we're not going to try executing the function call at all and run the risk of crashing.
 (closes issue #13715)
 reported by: makoto
 patch by: bweschke


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.4@150816 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2008-10-18 01:42:23 +00:00

..

db1-ast

clean up (and ignore) assembler and preprocessor intermediate files if any are created during the build

2007-10-29 22:12:16 +00:00

editline

Look for the system installed awk instead of assuming it's at /usr/bin/awk.

2008-07-09 13:41:21 +00:00

stdtime

improve header inclusion process in a few small ways:

2008-09-27 15:00:48 +00:00

abstract_jb.c

Merging the issue11259 branch.

2008-08-06 00:25:10 +00:00

acl.c

Merged revisions 127466 via svnmerge from

2008-07-02 19:47:15 +00:00

aescrypt.c

…

aeskey.c

…

aesopt.h

…

aestab.c

…

alaw.c

This patch solves problem 1 in 8126; it should not slow down the alaw codec, but should prevent signal degradation via multiple trips thru the codec. Fossil estimates the twice thru this codec will prevent fax from working. 4-6 times thru would result hearable, noticeable, voice degradation.

2007-08-21 16:36:34 +00:00

app.c

Fix a spot where a function could return without bringing

2008-07-30 18:31:47 +00:00

ast_expr2.c

improve header inclusion process in a few small ways:

2008-09-27 15:00:48 +00:00

ast_expr2.fl

improve header inclusion process in a few small ways:

2008-09-27 15:00:48 +00:00

ast_expr2.h

Removing expr floating patch from 1.4; too much of a behavior change. If you want this fix, try trunk instead. bug 9508.

2007-07-03 20:17:31 +00:00

ast_expr2.y

improve header inclusion process in a few small ways:

2008-09-27 15:00:48 +00:00

ast_expr2f.c

improve header inclusion process in a few small ways:

2008-09-27 15:00:48 +00:00

asterisk.c

Correctly allow chan_dahdi to compile against older versions of Zaptel.

2008-10-17 15:31:35 +00:00

astmm.c

fix some minor issues with rev 144924

2008-09-27 15:13:30 +00:00

astobj2.c

Fix a memory leak in astobj2 that was pointed out by seanbright. When a container

2008-06-17 15:48:31 +00:00

audiohook.c

Add a tolerance period for sync-triggered audiohooks

2008-10-14 23:00:01 +00:00

autoservice.c

Ensure that when a hangup occurs in autoservice, that a hangup frame gets

2008-08-15 15:07:16 +00:00

buildinfo.c

…

callerid.c

channels/chan_misdn.c

2008-09-30 23:55:24 +00:00

cdr.c

I am turning the warnings generated in ast_cdr_free and post_cdr into verbose level 2 messages. Really, they matter little to end users. You either get the CDR's you wanted, or you don't, and it is a bug.

2008-09-02 23:36:56 +00:00

channel.c

Correctly allow chan_dahdi to compile against older versions of Zaptel.

2008-10-17 15:31:35 +00:00

chanvars.c

make platforms that use mutexes in stdio.h happy

2006-08-22 23:07:11 +00:00

cli.c

Use PATH_MAX for filenames

2008-08-05 13:25:00 +00:00

coef_in.h

…

coef_out.h

…

config.c

Fix the logic in config_text_file_save so that if an

2008-08-25 15:52:59 +00:00

cryptostub.c

…

db.c

Suppress a LOG_DEBUG message if debug is not enabled.

2007-10-15 13:16:23 +00:00

devicestate.c

Fix some errant device states by making the devicestate API more strict in

2008-07-25 17:19:39 +00:00

dial.c

add missing break to case AST_CONTROL_SRCUPDATE

2008-03-16 21:47:10 +00:00

dns.c

Initialize the __res_state structure used for dns purposes

2008-04-01 17:21:21 +00:00

dnsmgr.c

notify the user that dnsmgr refresh wont work when dnsmgr is not enabled.

2008-07-14 17:10:21 +00:00

dsp.c

It was possible for a reference to a frame which was part of a freed DSP to still be

2008-04-17 16:28:03 +00:00

ecdisa.h

…

enum.c

since these variables all have static duration, none of them need initializers (they default to zero anyway)

2006-12-27 22:06:56 +00:00

file.c

Don't return a free'd pointer, when a file cannot be opened.

2008-09-12 16:27:32 +00:00

fixedjitterbuf.c

…

fixedjitterbuf.h

Merging the issue11259 branch.

2008-08-06 00:25:10 +00:00

frame.c

Remove show_frame_stats_deprecated since it is not

2008-08-22 19:23:02 +00:00

fskmodem.c

Merged revisions 77942 via svnmerge from

2007-08-02 18:21:40 +00:00

global_datastores.c

Backport fix for 11520--for some reason I didn't do this back in February when I patched for trunk.

2008-06-11 23:47:23 +00:00

http.c

accomodate users who seem to lack a sense of humor :-)

2008-07-31 22:18:11 +00:00

image.c

Reverse change of "show" to "list" and make several other commands more consistent with "category verb arguments"

2006-11-02 23:00:20 +00:00

indications.c

Adds DAHDI support alongside Zaptel. DAHDI usage favored, but all Zap stuff should continue working. Release announcement to follow.

2008-06-12 19:08:20 +00:00

io.c

Fixing a typo in a comment.

2007-12-27 20:09:06 +00:00

jitterbuf.c

Clean up a few things in the last commit to the adaptive jitterbuffer code.

2007-01-29 16:54:27 +00:00

loader.c

remove the dlfcn compatibility stuff, because no platforms that Asterisk currently runs on it use it, and it doesn't build anyway

2008-07-18 16:15:41 +00:00

logger.c

Separate verbose output from CLI output, by using a preamble.

2008-05-05 22:50:31 +00:00

Makefile

remove the dlfcn compatibility stuff, because no platforms that Asterisk currently runs on it use it, and it doesn't build anyway

2008-07-18 16:15:41 +00:00

manager.c

Using the GetVar handler in AMI is potentially dangerous (insta-crash [tm]) when you use a dialplan function that requires a channel and then you don't provide one or provide an invalid one in the Channel: parameter. We'll handle this situation exactly the same way it was handled in pbx.c back on r61766.

2008-10-18 01:42:23 +00:00

md5.c

…

netsock.c

Merged revisions 59608 via svnmerge from

2007-04-02 15:39:07 +00:00

pbx.c

This patch was applied to 1.4 but it completely

2008-09-26 22:14:59 +00:00

plc.c

…

poll.c

Don't freak out if the poll emulation receives NULL for the pollfds array

2008-09-03 13:24:35 +00:00

privacy.c

…

rtp.c

Allow for "G.729" if offered in an SDP even though

2008-09-17 18:24:15 +00:00

say.c

Fix for Taiwanese number syntax

2008-07-18 19:06:10 +00:00

sched.c

It is a normal situation that a task gets put in the scheduler that should run

2008-09-10 16:39:53 +00:00

sha1.c

…

slinfactory.c

If audio suddenly gets fed into one side of a channel after a lapse of frames flush the other factory so that old audio does not remain in the factory causing the sync code to not execute.

2008-04-08 15:03:43 +00:00

srv.c

Return the proper value when the srv_callback function executes properly.

2007-11-14 01:15:12 +00:00

strcompat.c

Include stdarg.h for build issues on Solaris

2007-06-07 19:30:30 +00:00

tdd.c

Bug fixes to tdd support in zaptel.

2007-11-06 18:53:37 +00:00

term.c

since these variables all have static duration, none of them need initializers (they default to zero anyway)

2006-12-27 22:06:56 +00:00

threadstorage.c

Make the lock in the threadstorage debugging code untracked to avoid a deadlock

2007-12-05 17:31:42 +00:00

translate.c

it would be nice if this message printing code had actually been tested before it was committed...

2008-10-14 07:54:41 +00:00

udptl.c

Add ast_assert(), which can be used to handle fatal errors. It is only compiled

2008-05-14 21:32:00 +00:00

ulaw.c

…

utils.c

revert an optimization that broke ABI... thanks russell!

2008-07-23 21:05:22 +00:00