Travis Cross 8b496f976e Mitigate the CRIME TLS flaw ...

If an attacker can cause a device to make an authenticated request to
a service via TLS while including a payload of the attacker's choice
in that request, and if TLS compression is enabled, the attacker can
uncover the plaintext authentication information by making a series of
guesses and observing changes in the length of the ciphertext.

This is CVE-2012-4929.

FS-6360 --resolve

Thanks-to: Brian West <brian@freeswitch.org>

2014-03-16 16:07:02 +00:00

..

bnf

…

docs

…

features

…

http

fix warnings on windows x64 builds src and mods projects - only libsofia included on the libs side

2010-09-29 15:47:58 -05:00

ipt

…

iptsec

modify sofia debug code to print file, line numbers and function name

2012-10-26 14:15:14 -05:00

msg

FS-6168 --resolve

2014-02-28 23:30:51 +05:00

nea

modify sofia debug code to print file, line numbers and function name

2012-10-26 14:15:14 -05:00

nta

FS-6339 --resolve

2014-03-11 18:18:05 -05:00

nth

modify sofia debug code to print file, line numbers and function name

2012-10-26 14:15:14 -05:00

nua

FS-6287 --resolve When a broken registrar sends a 401 unauth then replies with a subsequent 401 unauth without the stale=true attribute, sofia tries to invalidate the auth handle and get stuck in a state where it cannot recover until the reg handle is destroyed. In this case, the provider in question has a bug on thier end when the nonce count rolls from nc=000000ff to nc=00000100 they start sending several consecitive 401 rather than a 401 with stale=true or a 403. This change will allow it to reset properly and try again with nc=00000001 on the next try.

2014-03-14 12:26:06 -05:00

sdp

FS-6010 VS2013 build changes

2013-12-21 16:50:09 -06:00

sip

FS-5819 fix typo

2013-09-27 22:24:21 -04:00

soa

FS-5047 --resolve This seems to be a problem in libsofia, this should fix it.

2013-01-30 17:20:19 -06:00

sresolv

modify sofia debug code to print file, line numbers and function name

2012-10-26 14:15:14 -05:00

stun

add some missing macros to typically disabled stun code

2012-12-07 08:42:54 -06:00

su

Fix missing/duplicate declaration

2014-03-02 10:35:57 +00:00

tport

Mitigate the CRIME TLS flaw

2014-03-16 16:07:02 +00:00

url

sofia-lib: More Fix for -Wunused-but-set-variable required compiler. (Might need to be ported back to sofia)

2011-04-23 20:33:19 -04:00

ChangeLog

…

Makefile.am

…

sofia.am

fix openbsd sofia build

2010-04-02 01:15:18 -04:00