sr-dev September 2014

sr-dev@lists.kamailio.org

33 participants
375 discussions

[tracker] Task opened: tm module README lacks exported RPC commands section
by sip-router 25 Sep '14

25 Sep '14

THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY. A new Flyspray task has been opened. Details are below. User who did this - Juha Heinanen (jh) Attached to Project - sip-router Summary - tm module README lacks exported RPC commands section Task Type - Improvement Category - tm Status - New Assigned To - Operating System - All Severity - High Priority - Normal Reported Version - Development Due in Version - Undecided Due Date - Undecided Details - see summary More information can be found at the following URL: http://sip-router.org/tracker/index.php?do=details&task_id=469 You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.

1 0

git:master: sanity Update docs, add standard section IDs
by Olle E. Johansson 25 Sep '14

25 Sep '14

Module: sip-router Branch: master Commit: 3923dbdbca3d605b96290b1c087e41bd32a58fdd URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=3923dbd… Author: Olle E. Johansson <oej(a)edvina.net> Committer: Olle E. Johansson <oej(a)edvina.net> Date: Thu Sep 25 20:38:09 2014 +0200 sanity Update docs, add standard section IDs --- modules/sanity/README | 125 +++++++++++++++++------------------ modules/sanity/doc/sanity_admin.xml | 51 +++++++------- 2 files changed, 88 insertions(+), 88 deletions(-) Diff: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commitdiff;h=392…

1 0

git:master: permissions: Update docs about "mask" field. We do support IPv6 .
by Olle E. Johansson 25 Sep '14

25 Sep '14

Module: sip-router Branch: master Commit: 59fdd0a402ebac61d882ac2c579b87a0ec27eaef URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=59fdd0a… Author: Olle E. Johansson <oej(a)edvina.net> Committer: Olle E. Johansson <oej(a)edvina.net> Date: Thu Sep 25 20:22:16 2014 +0200 permissions: Update docs about "mask" field. We do support IPv6. --- modules/permissions/README | 5 +++-- modules/permissions/doc/permissions_admin.xml | 3 ++- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/modules/permissions/README b/modules/permissions/README index ab59421..6b872fc 100644 --- a/modules/permissions/README +++ b/modules/permissions/README @@ -520,8 +520,9 @@ modparam("permissions", "ip_addr_col", "ip_address") 3.10. mask_col (string) - Name of address table column containing the network mask of the IPv4 - address. Possible values are 0-32. + Name of address table column containing the network mask of the + address. Possible values are 0-32 for IPv4 and 0-128 for IPv6 + addresses. Default value is "mask". diff --git a/modules/permissions/doc/permissions_admin.xml b/modules/permissions/doc/permissions_admin.xml index d1c7972..82785d5 100644 --- a/modules/permissions/doc/permissions_admin.xml +++ b/modules/permissions/doc/permissions_admin.xml @@ -519,7 +519,8 @@ modparam("permissions", "ip_addr_col", "ip_address") <title><varname>mask_col</varname> (string)</title> <para> Name of address table column containing the network mask of - the IPv4 address. Possible values are 0-32. + the address. Possible values are 0-32 for IPv4 and 0-128 for + IPv6 addresses. </para> <para> <emphasis>

1 0

git:master: permissions: Update docs
by Olle E. Johansson 25 Sep '14

25 Sep '14

Module: sip-router Branch: master Commit: 4dab127de5370d6b0a295d7d373bbadef98449ff URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=4dab127… Author: Olle E. Johansson <oej(a)edvina.net> Committer: Olle E. Johansson <oej(a)edvina.net> Date: Thu Sep 25 20:18:12 2014 +0200 permissions: Update docs - Add overview - Add section ID's - Add missing WS and WSS transports --- modules/permissions/README | 227 ++++++++++--------- modules/permissions/doc/permissions_admin.xml | 303 +++++++++++++----------- 2 files changed, 285 insertions(+), 245 deletions(-) Diff: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commitdiff;h=4da…

1 0

[tracker] Comment added: zombie dialogs in state 5
by sip-router 25 Sep '14

25 Sep '14

THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY. The following task has a new comment added: FS#424 - zombie dialogs in state 5 User who did this - Ovidiu Sas (osas) ---------- Seems to be working fine now. You can backport to 4.1 and close the report. There was no dlg_manage() involved here, only loose_route(). Only during initial INVITE dlg_manage() is invoked. Thanks, Ovidiu ---------- More information can be found at the following URL: http://sip-router.org/tracker/index.php?do=details&task_id=424#comment1649 You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.

1 0

git:4.0: exec: add parameter to control the option for bash exec safety check of CVE-2014-6271
by Daniel-Constantin Mierla 25 Sep '14

25 Sep '14

Module: sip-router Branch: 4.0 Commit: bd2e2a7f25ceeddce801d27b8c2d9bf16c9d5643 URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=bd2e2a7… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: Thu Sep 25 16:59:34 2014 +0200 exec: add parameter to control the option for bash exec safety check of CVE-2014-6271 - parameter: bash_safety - default is 1 (enabled), set to 0 to disable - just in case someone needs that kind of header and knows what he/she does (cherry picked from commit 21eb073c25b66b110193f1607b93f256f7d9fdfa) (cherry picked from commit cc40de5865b1758681f97b7d92c1fed533ed7c7f) --- modules/exec/exec_hf.c | 6 ++++-- modules/exec/exec_mod.c | 2 ++ 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/modules/exec/exec_hf.c b/modules/exec/exec_hf.c index 1338cbc..ad7cb36 100644 --- a/modules/exec/exec_hf.c +++ b/modules/exec/exec_hf.c @@ -52,6 +52,8 @@ #include "../../char_msg_val.h" #include "exec_hf.h" +extern int exec_bash_safety; + /* should be environment variables set by header fields ? */ unsigned int setvars=1; @@ -256,7 +258,7 @@ static int print_hf_var(struct hf_wrapper *w, int offset) memcpy(envvar, w->prefix, w->prefix_len); c=envvar+w->prefix_len; memcpy(c, hname, hlen ); c+=hlen; *c=EV_ASSIGN;c++; - if (!strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { + if (exec_bash_safety && !strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { memcpy(c, w->u.hf->body.s+offset+2, w->u.hf->body.len-2 ); c+=(w->u.hf->body.len-2); } else { @@ -265,7 +267,7 @@ static int print_hf_var(struct hf_wrapper *w, int offset) } for (wi=w->next_same; wi; wi=wi->next_same) { *c=HF_SEPARATOR;c++; - if (!strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { + if (exec_bash_safety && !strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { memcpy(c, w->u.hf->body.s+offset+2, w->u.hf->body.len-2 ); c+=(w->u.hf->body.len-2); } else { diff --git a/modules/exec/exec_mod.c b/modules/exec/exec_mod.c index 86947c0..547fffb 100644 --- a/modules/exec/exec_mod.c +++ b/modules/exec/exec_mod.c @@ -44,6 +44,7 @@ MODULE_VERSION unsigned int time_to_kill=0; +int exec_bash_safety=1; static int mod_init( void ); @@ -77,6 +78,7 @@ static cmd_export_t cmds[] = { static param_export_t params[] = { {"time_to_kill", INT_PARAM, &time_to_kill}, {"setvars", INT_PARAM, &setvars }, + {"bash_safety", INT_PARAM, &exec_bash_safety }, {0, 0, 0} };

1 0

git:4.0: exec: safety check against bash vulnerability CVE-2014-6271
by Daniel-Constantin Mierla 25 Sep '14

25 Sep '14

Module: sip-router Branch: 4.0 Commit: e97250982c3d9fdc1d7dcba59f7bc0a9256264b9 URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=e972509… Author: Seudin Kasumovic <seudin.kasumovic(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: Thu Sep 25 16:56:28 2014 +0200 exec: safety check against bash vulnerability CVE-2014-6271 (cherry picked from commit d5d57c0df931c9d60432def919c837cc76e4ce42) (cherry picked from commit aebd010ee1ebff8a70877164fb7b508c1ca5503d) --- modules/exec/exec_hf.c | 18 ++++++++++++++---- 1 files changed, 14 insertions(+), 4 deletions(-) diff --git a/modules/exec/exec_hf.c b/modules/exec/exec_hf.c index 37eaf27..1338cbc 100644 --- a/modules/exec/exec_hf.c +++ b/modules/exec/exec_hf.c @@ -256,12 +256,22 @@ static int print_hf_var(struct hf_wrapper *w, int offset) memcpy(envvar, w->prefix, w->prefix_len); c=envvar+w->prefix_len; memcpy(c, hname, hlen ); c+=hlen; *c=EV_ASSIGN;c++; - memcpy(c, w->u.hf->body.s+offset, w->u.hf->body.len ); - c+=w->u.hf->body.len; + if (!strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { + memcpy(c, w->u.hf->body.s+offset+2, w->u.hf->body.len-2 ); + c+=(w->u.hf->body.len-2); + } else { + memcpy(c, w->u.hf->body.s+offset, w->u.hf->body.len ); + c+=w->u.hf->body.len; + } for (wi=w->next_same; wi; wi=wi->next_same) { *c=HF_SEPARATOR;c++; - memcpy(c, wi->u.hf->body.s+offset, wi->u.hf->body.len ); - c+=wi->u.hf->body.len; + if (!strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { + memcpy(c, w->u.hf->body.s+offset+2, w->u.hf->body.len-2 ); + c+=(w->u.hf->body.len-2); + } else { + memcpy(c, w->u.hf->body.s+offset, w->u.hf->body.len ); + c+=w->u.hf->body.len; + } } *c=0; /* zero termination */ LM_DBG("%s\n", envvar );

1 0

git:4.1: exec: add parameter to control the option for bash exec safety check of CVE-2014-6271
by Daniel-Constantin Mierla 25 Sep '14

25 Sep '14

Module: sip-router Branch: 4.1 Commit: cc40de5865b1758681f97b7d92c1fed533ed7c7f URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=cc40de5… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: Thu Sep 25 16:59:34 2014 +0200 exec: add parameter to control the option for bash exec safety check of CVE-2014-6271 - parameter: bash_safety - default is 1 (enabled), set to 0 to disable - just in case someone needs that kind of header and knows what he/she does (cherry picked from commit 21eb073c25b66b110193f1607b93f256f7d9fdfa) --- modules/exec/exec_hf.c | 6 ++++-- modules/exec/exec_mod.c | 2 ++ 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/modules/exec/exec_hf.c b/modules/exec/exec_hf.c index d336070..4fc248d 100644 --- a/modules/exec/exec_hf.c +++ b/modules/exec/exec_hf.c @@ -52,6 +52,8 @@ #include "../../char_msg_val.h" #include "exec_hf.h" +extern int exec_bash_safety; + /* should be environment variables set by header fields ? */ unsigned int setvars=1; @@ -256,7 +258,7 @@ static int print_hf_var(struct hf_wrapper *w, int offset) memcpy(envvar, w->prefix, w->prefix_len); c=envvar+w->prefix_len; memcpy(c, hname, hlen ); c+=hlen; *c=EV_ASSIGN;c++; - if (!strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { + if (exec_bash_safety && !strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { memcpy(c, w->u.hf->body.s+offset+2, w->u.hf->body.len-2 ); c+=(w->u.hf->body.len-2); } else { @@ -265,7 +267,7 @@ static int print_hf_var(struct hf_wrapper *w, int offset) } for (wi=w->next_same; wi; wi=wi->next_same) { *c=HF_SEPARATOR;c++; - if (!strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { + if (exec_bash_safety && !strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { memcpy(c, w->u.hf->body.s+offset+2, w->u.hf->body.len-2 ); c+=(w->u.hf->body.len-2); } else { diff --git a/modules/exec/exec_mod.c b/modules/exec/exec_mod.c index 86947c0..547fffb 100644 --- a/modules/exec/exec_mod.c +++ b/modules/exec/exec_mod.c @@ -44,6 +44,7 @@ MODULE_VERSION unsigned int time_to_kill=0; +int exec_bash_safety=1; static int mod_init( void ); @@ -77,6 +78,7 @@ static cmd_export_t cmds[] = { static param_export_t params[] = { {"time_to_kill", INT_PARAM, &time_to_kill}, {"setvars", INT_PARAM, &setvars }, + {"bash_safety", INT_PARAM, &exec_bash_safety }, {0, 0, 0} };

1 0

git:4.1: exec: safety check against bash vulnerability CVE-2014-6271
by Daniel-Constantin Mierla 25 Sep '14

25 Sep '14

Module: sip-router Branch: 4.1 Commit: aebd010ee1ebff8a70877164fb7b508c1ca5503d URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=aebd010… Author: Seudin Kasumovic <seudin.kasumovic(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: Thu Sep 25 16:56:28 2014 +0200 exec: safety check against bash vulnerability CVE-2014-6271 (cherry picked from commit d5d57c0df931c9d60432def919c837cc76e4ce42) --- modules/exec/exec_hf.c | 18 ++++++++++++++---- 1 files changed, 14 insertions(+), 4 deletions(-) diff --git a/modules/exec/exec_hf.c b/modules/exec/exec_hf.c index 3bc761b..d336070 100644 --- a/modules/exec/exec_hf.c +++ b/modules/exec/exec_hf.c @@ -256,12 +256,22 @@ static int print_hf_var(struct hf_wrapper *w, int offset) memcpy(envvar, w->prefix, w->prefix_len); c=envvar+w->prefix_len; memcpy(c, hname, hlen ); c+=hlen; *c=EV_ASSIGN;c++; - memcpy(c, w->u.hf->body.s+offset, w->u.hf->body.len ); - c+=w->u.hf->body.len; + if (!strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { + memcpy(c, w->u.hf->body.s+offset+2, w->u.hf->body.len-2 ); + c+=(w->u.hf->body.len-2); + } else { + memcpy(c, w->u.hf->body.s+offset, w->u.hf->body.len ); + c+=w->u.hf->body.len; + } for (wi=w->next_same; wi; wi=wi->next_same) { *c=HF_SEPARATOR;c++; - memcpy(c, wi->u.hf->body.s+offset, wi->u.hf->body.len ); - c+=wi->u.hf->body.len; + if (!strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { + memcpy(c, w->u.hf->body.s+offset+2, w->u.hf->body.len-2 ); + c+=(w->u.hf->body.len-2); + } else { + memcpy(c, w->u.hf->body.s+offset, w->u.hf->body.len ); + c+=w->u.hf->body.len; + } } *c=0; /* zero termination */ LM_DBG("%s\n", envvar );

1 0

git:master: exec: safety check against bash vulnerability CVE-2014-6271
by Daniel-Constantin Mierla 25 Sep '14

25 Sep '14

Module: sip-router Branch: master Commit: d5d57c0df931c9d60432def919c837cc76e4ce42 URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=d5d57c0… Author: Seudin Kasumovic <seudin.kasumovic(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: Thu Sep 25 16:56:28 2014 +0200 exec: safety check against bash vulnerability CVE-2014-6271 --- modules/exec/exec_hf.c | 18 ++++++++++++++---- 1 files changed, 14 insertions(+), 4 deletions(-) diff --git a/modules/exec/exec_hf.c b/modules/exec/exec_hf.c index c83550f..e0e5491 100644 --- a/modules/exec/exec_hf.c +++ b/modules/exec/exec_hf.c @@ -256,12 +256,22 @@ static int print_hf_var(struct hf_wrapper *w, int offset) memcpy(envvar, w->prefix, w->prefix_len); c=envvar+w->prefix_len; memcpy(c, hname, hlen ); c+=hlen; *c=EV_ASSIGN;c++; - memcpy(c, w->u.hf->body.s+offset, w->u.hf->body.len ); - c+=w->u.hf->body.len; + if (!strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { + memcpy(c, w->u.hf->body.s+offset+2, w->u.hf->body.len-2 ); + c+=(w->u.hf->body.len-2); + } else { + memcpy(c, w->u.hf->body.s+offset, w->u.hf->body.len ); + c+=w->u.hf->body.len; + } for (wi=w->next_same; wi; wi=wi->next_same) { *c=HF_SEPARATOR;c++; - memcpy(c, wi->u.hf->body.s+offset, wi->u.hf->body.len ); - c+=wi->u.hf->body.len; + if (!strncmp(w->u.hf->body.s,"() {",MIN(w->u.hf->body.len,4))) { + memcpy(c, w->u.hf->body.s+offset+2, w->u.hf->body.len-2 ); + c+=(w->u.hf->body.len-2); + } else { + memcpy(c, w->u.hf->body.s+offset, w->u.hf->body.len ); + c+=w->u.hf->body.len; + } } *c=0; /* zero termination */ LM_DBG("%s\n", envvar );

1 0

← Newer
1
...
4
5
6
7
8
9
10
...
38
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

sr-dev September 2014