Matthew Jordan e6c986dd33 Prevent crash in 'sip show peers' when the number of peers on a system is large ...

When you have lots of SIP peers (according to the issue reporter, around 3500),
the 'sip show peers' CLI command or AMI action can crash due to a poorly placed
string duplication that occurs on the stack. This patch refactors the command
to not allocate the string on the stack, and handles the formatting of a single
peer in a separate function call.

(closes issue ASTERISK-21466)
Reported by: Guillaume Knispel
patches:
  fix_sip_show_peers_stack_overflow_asterisk_11.3.0-v2.patch uploaded by gknispel (License 6492)


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.8@387133 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2013-05-01 18:34:44 +00:00

..

h323

Comment out a rule that likes to run implicitly unnecessarily, breaking builds

2010-06-03 14:48:09 +00:00

misdn

chan_misdn: Fix sending RELEASE_COMPLETE in response to SETUP.

2012-11-30 21:30:48 +00:00

sip

AST-2013-003: Prevent username disclosure in SIP channel driver

2013-03-27 14:53:13 +00:00

chan_agent.c

chan_agent: Prevent multiple channels from logging in as the same agent.

2013-01-29 17:22:22 +00:00

chan_alsa.c

Don't attempt to create a voice frame on a read error

2013-04-14 02:21:30 +00:00

chan_bridge.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

chan_console.c

Updated SIP 484 handling; added Incomplete control frame

2011-09-09 16:09:09 +00:00

chan_dahdi.c

chan_dahdi: Add inband_on_proceeding compatibility option.

2013-04-03 20:13:18 +00:00

chan_gtalk.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

chan_h323.c

Correct some 'set-but-not-used' variable warnings.

2012-01-14 15:23:32 +00:00

chan_iax2.c

IAX2 defer_full_frames fail to get sent

2013-04-12 08:46:19 +00:00

chan_jingle.c

Set the sin_family on the bind address socket during initialization

2013-02-24 22:59:11 +00:00

chan_local.c

Prevent exhaustion of system resources through exploitation of event cache

2013-01-02 16:54:20 +00:00

chan_mgcp.c

Add missing newlines to CLI logging

2012-04-06 18:09:19 +00:00

chan_misdn.c

chan_misdn: Fix compile error.

2013-01-16 17:40:37 +00:00

chan_multicast_rtp.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

chan_nbs.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

chan_oss.c

Fix misuses of asprintf throughout the code.

2012-08-21 20:35:12 +00:00

chan_phone.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

chan_phone.h

rename DialTone.h to chan_phone.h because chan_phone.c is the only file using it

2008-05-28 20:00:21 +00:00

chan_sip.c

Prevent crash in 'sip show peers' when the number of peers on a system is large

2013-05-01 18:34:44 +00:00

chan_skinny.c

Prevent exhaustion of system resources through exploitation of event cache

2013-01-02 16:54:20 +00:00

chan_unistim.c

Fix several unreleased mutex locks that cause problem with processing calls

2013-03-05 03:46:33 +00:00

chan_vpb.cc

chan_vpb: remove unused variables (gcc4.6)

2011-08-28 09:49:55 +00:00

console_board.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

console_gui.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

console_video.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

console_video.h

implement the 'freeze' function for incoming frames;

2008-06-30 15:45:15 +00:00

iax2-parser.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

iax2-parser.h

Remove built-in AES code and use optional_api instead

2010-07-21 19:11:32 +00:00

iax2-provision.c

iax2-provision: Fix improper return on failed cache retrieval

2012-09-21 19:00:48 +00:00

iax2-provision.h

Don't reload a configuration file if nothing has changed.

2007-08-16 21:09:46 +00:00

iax2.h

Correct the number of available call numbers in IAX2.

2013-01-28 21:06:01 +00:00

Makefile

Extract sig_ss7 out of chan_dahdi.

2010-06-07 20:04:42 +00:00

misdn_config.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

sig_analog.c

Fix misuses of timeouts throughout the code.

2012-11-07 17:01:13 +00:00

sig_analog.h

Fix the analog dial *0 flash-hook of bridged peer feature.

2012-08-08 19:58:52 +00:00

sig_pri.c

chan_dahdi: Add inband_on_proceeding compatibility option.

2013-04-03 20:13:18 +00:00

sig_pri.h

chan_dahdi: Add inband_on_proceeding compatibility option.

2013-04-03 20:13:18 +00:00

sig_ss7.c

chan_dahdi/SS7: Made reject incoming call for an in-alarm or blocked channel.

2012-11-08 21:05:40 +00:00

sig_ss7.h

Setup DSP when SS7 call is connected or early media is available.

2012-03-05 21:33:26 +00:00

vcodecs.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

vgrabbers.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00