Matthew Jordan a706750d9a AST-2013-005: Fix crash caused by invalid SDP ...

If the SIP channel driver processes an invalid SDP that defines media
descriptions before connection information, it may attempt to reference
the socket address information even though that information has not yet
been set. This will cause a crash.

This patch adds checks when handling the various media descriptions that
ensures the media descriptions are handled only if we have connection
information suitable for that media.

Thanks to Walter Doekes, OSSO B.V., for reporting, testing, and providing
the solution to this problem.

(closes issue ASTERISK-22007)
Reported by: wdoekes
Tested by: wdoekes
patches:
  issueA22007_sdp_without_c_death.patch uploaded by wdoekes (License 5674)



git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.8@397756 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2013-08-27 17:55:59 +00:00

..

h323

Comment out a rule that likes to run implicitly unnecessarily, breaking builds

2010-06-03 14:48:09 +00:00

misdn

Allow mISDN to send PROGRESS messsage.

2013-05-10 22:09:32 +00:00

sip

Fix refcounting of sip_pvt in test_sip_rtpqos test and unlink it from the list of pvts.

2013-08-20 16:13:01 +00:00

chan_agent.c

chan_agent: Prevent multiple channels from logging in as the same agent.

2013-01-29 17:22:22 +00:00

chan_alsa.c

Don't attempt to create a voice frame on a read error

2013-04-14 02:21:30 +00:00

chan_bridge.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

chan_console.c

Updated SIP 484 handling; added Incomplete control frame

2011-09-09 16:09:09 +00:00

chan_dahdi.c

Fix a longstanding issue with MFC-R2 configuration that prevented users

2013-07-11 16:25:39 +00:00

chan_gtalk.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

chan_h323.c

Correct some 'set-but-not-used' variable warnings.

2012-01-14 15:23:32 +00:00

chan_iax2.c

IAX2: Transfer Reject: Lock bridgecallno before touching it, refactor

2013-06-11 08:03:38 +00:00

chan_jingle.c

Set the sin_family on the bind address socket during initialization

2013-02-24 22:59:11 +00:00

chan_local.c

Prevent exhaustion of system resources through exploitation of event cache

2013-01-02 16:54:20 +00:00

chan_mgcp.c

Add missing newlines to CLI logging

2012-04-06 18:09:19 +00:00

chan_misdn.c

chan_misdn: Fix compile error.

2013-01-16 17:40:37 +00:00

chan_multicast_rtp.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

chan_nbs.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

chan_oss.c

Fix misuses of asprintf throughout the code.

2012-08-21 20:35:12 +00:00

chan_phone.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

chan_phone.h

rename DialTone.h to chan_phone.h because chan_phone.c is the only file using it

2008-05-28 20:00:21 +00:00

chan_sip.c

AST-2013-005: Fix crash caused by invalid SDP

2013-08-27 17:55:59 +00:00

chan_skinny.c

Prevent exhaustion of system resources through exploitation of event cache

2013-01-02 16:54:20 +00:00

chan_unistim.c

Fix several unreleased mutex locks that cause problem with processing calls

2013-03-05 03:46:33 +00:00

chan_vpb.cc

chan_vpb: remove unused variables (gcc4.6)

2011-08-28 09:49:55 +00:00

console_board.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

console_gui.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

console_video.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

console_video.h

implement the 'freeze' function for incoming frames;

2008-06-30 15:45:15 +00:00

iax2-parser.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

iax2-parser.h

Remove built-in AES code and use optional_api instead

2010-07-21 19:11:32 +00:00

iax2-provision.c

iax2-provision: Fix improper return on failed cache retrieval

2012-09-21 19:00:48 +00:00

iax2-provision.h

…

iax2.h

Correct the number of available call numbers in IAX2.

2013-01-28 21:06:01 +00:00

Makefile

Extract sig_ss7 out of chan_dahdi.

2010-06-07 20:04:42 +00:00

misdn_config.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

sig_analog.c

Fix misuses of timeouts throughout the code.

2012-11-07 17:01:13 +00:00

sig_analog.h

Fix the analog dial *0 flash-hook of bridged peer feature.

2012-08-08 19:58:52 +00:00

sig_pri.c

Fix memory corruption when trying to get "core show locks".

2013-08-23 15:34:27 +00:00

sig_pri.h

chan_dahdi: Add inband_on_proceeding compatibility option.

2013-04-03 20:13:18 +00:00

sig_ss7.c

chan_dahdi/SS7: Made reject incoming call for an in-alarm or blocked channel.

2012-11-08 21:05:40 +00:00

sig_ss7.h

Setup DSP when SS7 call is connected or early media is available.

2012-03-05 21:33:26 +00:00

vcodecs.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

vgrabbers.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00