### Description
`secf_check_sqli_all();` block requests when a single quote is present in From name :
```
From: "O'Reilly" <sip:100@example.net>;tag=abcd
```
Since single quotes are frequent in names.
It makes it difficult to use this function.
### Possible Solutions
A solution would be to skip single quote check in From name.
I'll write the PR if you are OK with this solution
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/3984
You are receiving this because you are subscribed to this thread.
Message ID: <kamailio/kamailio/issues/3984(a)github.com>
See <https://kamailio.sipwise.com/job/kamailio57-nightly-binaries/architecture=a…>
Changes:
------------------------------------------
[...truncated 23.31 KiB...]
I: Running in no-targz mode
I: pbuilder: network access will be disabled during build
I: Current time: Sat Nov 16 01:14:55 UTC 2024
I: pbuilder-time-stamp: 1731719695
I: copying local configuration
W: No local /etc/mailname to copy, relying on /var/cache/pbuilder/build/cow.22411/etc/mailname to be correct
W: --override-config is not set; not updating apt.conf Read the manpage for details.
I: mounting /proc filesystem
I: mounting /sys filesystem
I: creating /{dev,run}/shm
I: mounting /dev/pts filesystem
I: redirecting /dev/ptmx to /dev/pts/ptmx
I: Mounting /tmp/apt-jdg_qAAW7R
I: policy-rc.d already exists
I: using eatmydata during job
I: Obtaining the cached apt archive contents
I: Copying source file
I: copying [<https://kamailio.sipwise.com/job/kamailio57-nightly-binaries/architecture=a…]>
I: copying [<https://kamailio.sipwise.com/job/kamailio57-nightly-binaries/architecture=a…]>
I: Extracting source
dpkg-source: warning: extracting unsigned source package (kamailio_5.7.7~ubuntu16.04.20241116003843.87.dsc)
dpkg-source: info: extracting kamailio in kamailio-5.7.7~ubuntu16.04.20241116003843.87
dpkg-source: info: unpacking kamailio_5.7.7~ubuntu16.04.20241116003843.87.tar.xz
I: using fakeroot in build.
I: Installing the build-deps
I: user script /var/cache/pbuilder/build/cow.22411/tmp/hooks/D10-man-db starting
I: Preseed man-db/auto-update to false
I: user script /var/cache/pbuilder/build/cow.22411/tmp/hooks/D10-man-db finished
I: user script /var/cache/pbuilder/build/cow.22411/tmp/hooks/D10aptspeedup starting
+ dpkg-query -f ${Version}\n -W dpkg
+ dpkg --compare-versions 1.18.4ubuntu1.7 ge 1.15.8.6
+ echo I: Force DPKG unsafe IO
I: Force DPKG unsafe IO
+ echo force-unsafe-io
I: user script /var/cache/pbuilder/build/cow.22411/tmp/hooks/D10aptspeedup finished
I: user script /var/cache/pbuilder/build/cow.22411/tmp/hooks/D20releaserepo starting
+ set -- /tmp/apt-jdg_qAAW7R/
+ TMPAPT=/tmp/apt-jdg_qAAW7R/
+ [ -d /tmp/apt-jdg_qAAW7R/ ]
+ UPDATE_PKGLIST=0
+ ls /tmp/apt-jdg_qAAW7R/*.list
+ [ -e /tmp/apt-jdg_qAAW7R//keyring.gpg ]
+ [ 0 = 1 ]
I: user script /var/cache/pbuilder/build/cow.22411/tmp/hooks/D20releaserepo finished
-> Attempting to satisfy build-dependencies
-> Creating pbuilder-satisfydepends-dummy package
Package: pbuilder-satisfydepends-dummy
Version: 0.invalid.0
Architecture: amd64
Maintainer: Debian Pbuilder Team <pbuilder-maint(a)lists.alioth.debian.org>
Description: Dummy package to satisfy dependencies with aptitude - created by pbuilder
This package was created automatically by pbuilder to satisfy the
build-dependencies of the package being currently built.
Depends: bison, debhelper (>= 9), dh-systemd (>= 1.5), docbook-xml, dpkg-dev (>= 1.16.1.1), erlang-dev, flex, gcj-jdk, libbson-dev, libcurl4-openssl-dev, libdb-dev (>= 4.6.19), libev-dev, libevent-dev, libexpat1-dev, libgeocoding-dev (>= 7), libgeoip-dev (>= 1.4.5), libhiredis-dev (>= 0.10.0), libjansson-dev, libjson-c-dev, libldap2-dev, liblua5.1-0-dev, libmaxminddb-dev, libmemcached-dev, libmnl-dev, libmongoc-dev, libmono-2.0-dev, libmosquitto-dev, libmysqlclient-dev, libncurses5-dev, libpcre3-dev, libperl-dev, libphonenumber-dev (>= 7), libpq-dev, librabbitmq-dev, libradcli-dev, libreadline-dev, libsasl2-dev, libsctp-dev, libsnmp-dev, libsqlite3-dev, libssl-dev, libsystemd-dev, libunistring-dev, libval-dev, libxml2-dev, openssl, pkg-config, python, python-dev, python3, python3-dev, ruby-dev, unixodbc-dev, uuid-dev, xsltproc, zlib1g-dev
dpkg-deb: building package 'pbuilder-satisfydepends-dummy' in '/tmp/satisfydepends-aptitude/pbuilder-satisfydepends-dummy.deb'.
Selecting previously unselected package pbuilder-satisfydepends-dummy.
(Reading database ... 12293 files and directories currently installed.)
Preparing to unpack .../pbuilder-satisfydepends-dummy.deb ...
Unpacking pbuilder-satisfydepends-dummy (0.invalid.0) ...
dpkg: pbuilder-satisfydepends-dummy: dependency problems, but configuring anyway as you requested:
pbuilder-satisfydepends-dummy depends on bison; however:
Package bison is not installed.
pbuilder-satisfydepends-dummy depends on debhelper (>= 9); however:
Package debhelper is not installed.
pbuilder-satisfydepends-dummy depends on dh-systemd (>= 1.5); however:
Package dh-systemd is not installed.
pbuilder-satisfydepends-dummy depends on docbook-xml; however:
Package docbook-xml is not installed.
pbuilder-satisfydepends-dummy depends on erlang-dev; however:
Package erlang-dev is not installed.
pbuilder-satisfydepends-dummy depends on flex; however:
Package flex is not installed.
pbuilder-satisfydepends-dummy depends on gcj-jdk; however:
Package gcj-jdk is not installed.
pbuilder-satisfydepends-dummy depends on libbson-dev; however:
Package libbson-dev is not installed.
pbuilder-satisfydepends-dummy depends on libcurl4-openssl-dev; however:
Package libcurl4-openssl-dev is not installed.
p
Setting up pbuilder-satisfydepends-dummy (0.invalid.0) ...
Reading package lists...
Building dependency tree...
Reading state information...
Initializing package states...
Writing extended state information...
Building tag database...
pbuilder-satisfydepends-dummy is already installed at the requested version (0.invalid.0)
pbuilder-satisfydepends-dummy is already installed at the requested version (0.invalid.0)
No packages will be installed, upgraded, or removed.
0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 0 B will be used.
The following packages have unmet dependencies:
pbuilder-satisfydepends-dummy : Depends: bison which is a virtual package and is not provided by any available package.
Depends: debhelper (>= 9) which is a virtual package and is not provided by any available package.
Depends: dh-systemd (>= 1.5) which is a virtual package and is not provided by any available package.
Depends: docbook-xml which is a virtual package and is not provided by any available package.
Depends: erlang-dev which is a virtual package and is not provided by any available package.
Depends: flex which is a virtual package and is not provided by any available package.
Depends: gcj-jdk which is a virtual package and is not provided by any available package.
Depends: libbson-dev which is a virtual package and is not provided by any available package.
Depends: libcurl4-openssl-dev which is a virtual package and is not provided by any available package.
Depends: libdb-dev (>= 4.6.19) which is a virtual package and is not provided by any available package.
Depends: libev-dev which is a virtual package and is not provided by any available package.
Depends: libevent-dev which is a virtual package and is not provided by any available package.
Depends: libexpat1-dev which is a virtual package and is not provided by any available package.
Depends: libgeocoding-dev (>= 7) which is a virtual package and is not provided by any available package.
Depends: libgeoip-dev (>= 1.4.5) which is a virtual package and is not provided by any available package.
Depends: libhiredis-dev (>= 0.10.0) which is a virtual package and is not provided by any available package.
Depends: libjansson-dev which is a virtual package and is not provided by any available package.
Depends: libjson-c-dev which is a virtual package and is not provided by any available package.
Depends: libldap2-dev which is a virtual package and is not provided by any available package.
Depends: liblua5.1-0-dev which is a virtual package and is not provided by any available package.
Depends: libmaxminddb-dev which is a virtual package and is not provided by any available package.
Depends: libmemcached-dev which is a virtual package and is not provided by any available package.
Depends: libmnl-dev which is a virtual package and is not provided by any available package.
Depends: libmongoc-dev which is a virtual package and is not provided by any available package.
Depends: libmono-2.0-dev which is a virtual package and is not provided by any available package.
Depends: libmosquitto-dev which is a virtual package and is not provided by any available package.
Depends: libmysqlclient-dev which is a virtual package and is not provided by any available package.
Depends: libncurses5-dev which is a virtual package and is not provided by any available package.
Depends: libpcre3-dev which is a virtual package and is not provided by any available package.
Depends: libperl-dev which is a virtual package and is not provided by any available package.
Depends: libphonenumber-dev (>= 7) which is a virtual package and is not provided by any available package.
Depends: libpq-dev which is a virtual package and is not provided by any available package.
Depends: librabbitmq-dev which is a virtual package and is not provided by any available package.
Depends: libradcli-dev which is a virtual package and is not provided by any available package.
Depends: libreadline-dev which is a virtual package and is not provided by any available package.
Depends: libsasl2-dev which is a virtual package and is not provided by any available package.
Depends: libsctp-dev which is a virtual package and is not provided by any available package.
Depends: libsnmp-dev which is a virtual package and is not provided by any available package.
Depends: libsqlite3-dev which is a virtual package and is not provided by any available package.
Depends: libssl-dev which is a virtual package and is not provided by any available package.
Depends: libsystemd-dev which is a virtual package and is not provided by any available package.
Depends: libunistring-dev which is a virtual package and is not provided by any available package.
Depends: libval-dev which is a virtual package and is not provided by any available package.
Depends: libxml2-dev which is a virtual package and is not provided by any available package.
Depends: openssl which is a virtual package and is not provided by any available package.
Depends: pkg-config which is a virtual package and is not provided by any available package.
Depends: python which is a virtual package and is not provided by any available package.
Depends: python-dev which is a virtual package and is not provided by any available package.
Depends: python3 which is a virtual package and is not provided by any available package.
Depends: python3-dev which is a virtual package and is not provided by any available package.
Depends: ruby-dev which is a virtual package and is not provided by any available package.
Depends: unixodbc-dev which is a virtual package and is not provided by any available package.
Depends: uuid-dev which is a virtual package and is not provided by any available package.
Depends: xsltproc which is a virtual package and is not provided by any available package.
Depends: zlib1g-dev which is a virtual package and is not provided by any available package.
Unable to resolve dependencies! Giving up...
No packages will be installed, upgraded, or removed.
0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 0 B will be used.
Abort.
E: pbuilder-satisfydepends failed.
I: Copying back the cached apt archive contents
I: unmounting /tmp/apt-jdg_qAAW7R filesystem
I: unmounting dev/ptmx filesystem
I: unmounting dev/pts filesystem
I: unmounting dev/shm filesystem
I: unmounting proc filesystem
I: unmounting sys filesystem
I: Cleaning COW directory
I: forking: rm -rf /var/cache/pbuilder/build/cow.22411
+ '[' 1 -eq 0 ']'
+ bailout 1 'Error: Failed to build with cowbuilder.'
+ '[' -n 1 ']'
+ EXIT=1
+ '[' -n 'Error: Failed to build with cowbuilder.' ']'
+ echo 'Error: Failed to build with cowbuilder.'
Error: Failed to build with cowbuilder.
+ rm -f /run/lock/xenial-amd64.building.22123
+ '[' -r /run/lock/xenial-amd64.update.22123 ']'
+ '[' '' = true ']'
+ echo '*** Getting rid of files in <https://kamailio.sipwise.com/job/kamailio57-nightly-binaries/architecture=a…> to avoid problems in next run. ***'
*** Getting rid of files in <https://kamailio.sipwise.com/job/kamailio57-nightly-binaries/architecture=a…> to avoid problems in next run. ***
+ rm -f '<https://kamailio.sipwise.com/job/kamailio57-nightly-binaries/architecture=a…'>
+ '[' -n /tmp/tmp.8QYSrnNSu0 ']'
+ rm -rf /tmp/tmp.8QYSrnNSu0
+ '[' -n /tmp/apt-jdg_qAAW7R ']'
+ sudo rm -rf /tmp/apt-jdg_qAAW7R
+ '[' -n 1992 ']'
++ sed -e 's/^\([0-9]*\).*/\1/'
+ SECONDS=7
++ date
+ echo '*** Finished execution of /usr/bin/build-and-provide-package at Sat Nov 16 01:14:59 UTC 2024 [running 7 seconds] ***'
*** Finished execution of /usr/bin/build-and-provide-package at Sat Nov 16 01:14:59 UTC 2024 [running 7 seconds] ***
+ exit 1
Build step 'Execute shell' marked build as failure
Archiving artifacts
TAP Reports Processing: START
Looking for TAP results report in workspace using pattern: report/*.tap
Did not find any matching files.
Recording test results
ERROR: Step ‘Publish JUnit test result report’ failed: No test report files were found. Configuration error?
Recording fingerprints
See <https://kamailio.sipwise.com/job/kamailio57-nightly-binaries/architecture=a…>
Changes:
------------------------------------------
[...truncated 28.09 KiB...]
pbuilder-satisfydepends-dummy depends on libdb-dev (>= 4.6.19); however:
Package libdb-dev is not installed.
pbuilder-satisfydepends-dummy depends on libev-dev; however:
Package libev-dev is not installed.
pbuilder-satisfydepends-dummy depends on libevent-dev; however:
Package libevent-dev is not installed.
pbuilder-satisfydepends-dummy depends on libexpat1-dev; however:
Package libexpat1-dev is not installed.
pbuilder-satisfydepends-dummy depends on libgeoip-dev (>= 1.4.5); however:
Package libgeoip-dev is not installed.
pbuilder-satisfydepends-dummy depends on libhiredis-dev (>= 0.10.0); however:
Package libhiredis-dev is not installed.
pbuilder-satisfydepends-dummy depends on libjansson-dev; however:
Package libjansson-dev is not installed.
pbuilder-satisfydepends-dummy depends on libjson-c-dev; however:
Package libjson-c-dev is not installed.
pbuilder-satisfydepends-dummy depends on libldap2-dev; however:
Package libldap2-dev is not installed.
pbuilder-satisfydepends-dummy depends on liblua5.1-0-dev; however:
Package liblua5.1-0-dev is not installed.
pbuilder-satisfydepends-dummy depends on libmaxminddb-dev; however:
Package libmaxminddb-dev is not installed.
pbuilder-satisfydepends-dummy depends on libmemcached-dev; however:
Package libmemcached-dev is not installed.
pbuilder-satisfydepends-dummy depends on libmnl-dev; however:
Package libmnl-dev is not installed.
pbuilder-satisfydepends-dummy depends on libmongoc-dev; however:
Package libmongoc-dev is not installed.
pbuilder-satisfydepends-dummy depends on libmono-2.0-dev; however:
Package libmono-2.0-dev is not installed.
pbuilder-satisfydepends-dummy depends on libmosquitto-dev; however:
Package libmosquitto-dev is not installed.
pbuilder-satisfydepends-dummy depends on libncurses5-dev; however:
Package libncurses5-dev is not installed.
pbuilder-satisfydepends-dummy depends on libpcre3-dev; however:
Package libpcre3-dev is not installed.
pbuilder-satisfydepends-dummy depends on libperl-dev; however:
Package libperl-dev is not installed.
pbuilder-satisfydepends-dummy depends on libphonenumber-dev (>= 7); however:
Package libphonenumber-dev is not installed.
pbuilder-satisfydepends-dummy depends on libpq-dev; however:
Package libpq-dev is not installed.
pbuilder-satisfydepends-dummy depends on librabbitmq-dev; however:
Package librabbitmq-dev is not installed.
pbuilder-satisfydepends-dummy depends on libradcli-dev; however:
Package libradcli-dev is not installed.
pbuilder-satisfydepends-dummy depends on libreadline-dev; however:
Package libreadline-dev is not installed.
pbuilder-satisfydepends-dummy depends on libsasl2-dev; however:
Package libsasl2-dev is not installed.
pbuilder-satisfydepends-dummy depends on libsctp-dev; however:
Package libsctp-dev is not installed.
pbuilder-satisfydepends-dummy depends on libsnmp-dev; however:
Package libsnmp-dev is not installed.
pbuilder-satisfydepends-dummy depends on libsqlite3-dev; however:
Package libsqlite3-dev is not installed.
pbuilder-satisfydepends-dummy depends on libssl-dev; however:
Package libssl-dev is not installed.
pbuilder-satisfydepends-dummy depends on libsystemd-dev; however:
Package libsystemd-dev is not installed.
pbuilder-satisfydepends-dummy depends on libunistring-dev; however:
Package libunistring-dev is not installed.
pbuilder-satisfydepends-dummy depends on libxml2-dev; however:
Package libxml2-dev is not installed.
pbuilder-satisfydepends-dummy depends on openssl; however:
Package openssl is not installed.
pbuilder-satisfydepends-dummy depends on pkg-config; however:
Package pkg-config is not installed.
pbuilder-satisfydepends-dummy depends on python; however:
Package python is not installed.
pbuilder-satisfydepends-dummy depends on python-dev; however:
Package python-dev is not installed.
pbuilder-satisfydepends-dummy depends on python3; however:
Package python3 is not installed.
pbuilder-satisfydepends-dummy depends on python3-dev; however:
Package python3-dev is not installed.
pbuilder-satisfydepends-dummy depends on ruby-dev; however:
Package ruby-dev is not installed.
pbuilder-satisfydepends-dummy depends on unixodbc-dev; however:
Package unixodbc-dev is not installed.
pbuilder-satisfydepends-dummy depends on uuid-dev; however:
Package uuid-dev is not installed.
pbuilder-satisfydepends-dummy depends on xsltproc; however:
Package xsltproc is not installed.
pbuilder-satisfydepends-dummy depends on zlib1g-dev; however:
Package zlib1g-dev is not installed.
Setting up pbuilder-satisfydepends-dummy (0.invalid.0) ...
Reading package lists...
Building dependency tree...
Reading state information...
Initializing package states...
Writing extended state information...
Building tag database...
pbuilder-satisfydepends-dummy is already installed at the requested version (0.invalid.0)
pbuilder-satisfydepends-dummy is already installed at the requested version (0.invalid.0)
No packages will be installed, upgraded, or removed.
0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 0 B will be used.
The following packages have unmet dependencies:
pbuilder-satisfydepends-dummy : Depends: bison which is a virtual package and is not provided by any available package
Depends: debhelper (>= 9) which is a virtual package and is not provided by any available package
Depends: default-libmysqlclient-dev which is a virtual package and is not provided by any available package
Depends: dh-systemd (>= 1.5) which is a virtual package and is not provided by any available package
Depends: docbook-xml which is a virtual package and is not provided by any available package
Depends: erlang-dev which is a virtual package and is not provided by any available package
Depends: flex which is a virtual package and is not provided by any available package
Depends: libcurl4-openssl-dev which is a virtual package and is not provided by any available package
Depends: libdb-dev (>= 4.6.19) which is a virtual package and is not provided by any available package
Depends: libev-dev which is a virtual package and is not provided by any available package
Depends: libevent-dev which is a virtual package and is not provided by any available package
Depends: libexpat1-dev which is a virtual package and is not provided by any available package
Depends: libgeoip-dev (>= 1.4.5) which is a virtual package and is not provided by any available package
Depends: libhiredis-dev (>= 0.10.0) which is a virtual package and is not provided by any available package
Depends: libjansson-dev which is a virtual package and is not provided by any available package
Depends: libjson-c-dev which is a virtual package and is not provided by any available package
Depends: libldap2-dev which is a virtual package and is not provided by any available package
Depends: liblua5.1-0-dev which is a virtual package and is not provided by any available package
Depends: libmaxminddb-dev which is a virtual package and is not provided by any available package
Depends: libmemcached-dev which is a virtual package and is not provided by any available package
Depends: libmnl-dev which is a virtual package and is not provided by any available package
Depends: libmongoc-dev which is a virtual package and is not provided by any available package
Depends: libmono-2.0-dev which is a virtual package and is not provided by any available package
Depends: libmosquitto-dev which is a virtual package and is not provided by any available package
Depends: libncurses5-dev which is a virtual package and is not provided by any available package
Depends: libpcre3-dev which is a virtual package and is not provided by any available package
Depends: libperl-dev which is a virtual package and is not provided by any available package
Depends: libphonenumber-dev (>= 7) which is a virtual package and is not provided by any available package
Depends: libpq-dev which is a virtual package and is not provided by any available package
Depends: librabbitmq-dev which is a virtual package and is not provided by any available package
Depends: libradcli-dev which is a virtual package and is not provided by any available package
Depends: libreadline-dev which is a virtual package and is not provided by any available package
Depends: libsasl2-dev which is a virtual package and is not provided by any available package
Depends: libsctp-dev which is a virtual package and is not provided by any available package
Depends: libsnmp-dev which is a virtual package and is not provided by any available package
Depends: libsqlite3-dev which is a virtual package and is not provided by any available package
Depends: libssl-dev which is a virtual package and is not provided by any available package
Depends: libsystemd-dev which is a virtual package and is not provided by any available package
Depends: libunistring-dev which is a virtual package and is not provided by any available package
Depends: libxml2-dev which is a virtual package and is not provided by any available package
Depends: openssl which is a virtual package and is not provided by any available package
Depends: pkg-config which is a virtual package and is not provided by any available package
Depends: python which is a virtual package and is not provided by any available package
Depends: python-dev which is a virtual package and is not provided by any available package
Depends: python3 which is a virtual package and is not provided by any available package
Depends: python3-dev which is a virtual package and is not provided by any available package
Depends: ruby-dev which is a virtual package and is not provided by any available package
Depends: unixodbc-dev which is a virtual package and is not provided by any available package
Depends: uuid-dev which is a virtual package and is not provided by any available package
Depends: xsltproc which is a virtual package and is not provided by any available package
Depends: zlib1g-dev which is a virtual package and is not provided by any available package
Unable to resolve dependencies! Giving up...
No packages will be installed, upgraded, or removed.
0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 0 B will be used.
Abort.
E: pbuilder-satisfydepends failed.
I: Copying back the cached apt archive contents
I: unmounting /tmp/apt-jdg_MhieC2 filesystem
I: unmounting dev/ptmx filesystem
I: unmounting dev/pts filesystem
I: unmounting dev/shm filesystem
I: unmounting proc filesystem
I: unmounting sys filesystem
I: Cleaning COW directory
I: forking: rm -rf /var/cache/pbuilder/build/cow.16538
+ '[' 1 -eq 0 ']'
+ bailout 1 'Error: Failed to build with cowbuilder.'
+ '[' -n 1 ']'
+ EXIT=1
+ '[' -n 'Error: Failed to build with cowbuilder.' ']'
+ echo 'Error: Failed to build with cowbuilder.'
Error: Failed to build with cowbuilder.
+ rm -f /run/lock/bionic-amd64.building.16279
+ '[' -r /run/lock/bionic-amd64.update.16279 ']'
+ '[' '' = true ']'
+ echo '*** Getting rid of files in <https://kamailio.sipwise.com/job/kamailio57-nightly-binaries/architecture=a…> to avoid problems in next run. ***'
*** Getting rid of files in <https://kamailio.sipwise.com/job/kamailio57-nightly-binaries/architecture=a…> to avoid problems in next run. ***
+ rm -f '<https://kamailio.sipwise.com/job/kamailio57-nightly-binaries/architecture=a…'>
+ '[' -n /tmp/tmp.iK1ETC0Ogs ']'
+ rm -rf /tmp/tmp.iK1ETC0Ogs
+ '[' -n /tmp/apt-jdg_MhieC2 ']'
+ sudo rm -rf /tmp/apt-jdg_MhieC2
+ '[' -n 1319 ']'
++ sed -e 's/^\([0-9]*\).*/\1/'
+ SECONDS=8
++ date
+ echo '*** Finished execution of /usr/bin/build-and-provide-package at Sat Nov 16 01:03:47 UTC 2024 [running 8 seconds] ***'
*** Finished execution of /usr/bin/build-and-provide-package at Sat Nov 16 01:03:47 UTC 2024 [running 8 seconds] ***
+ exit 1
Build step 'Execute shell' marked build as failure
Archiving artifacts
TAP Reports Processing: START
Looking for TAP results report in workspace using pattern: report/*.tap
Did not find any matching files.
Recording test results
ERROR: Step ‘Publish JUnit test result report’ failed: No test report files were found. Configuration error?
Recording fingerprints
### Description
<!--
Explain what you did, what you expected to happen, and what actually happened.
-->
I used `jwt_verify()` function and expected to automatically handle the expiration check. But it doesn't.
### Troubleshooting
#### Reproduction
Have the following Kamailio config:
```
loadmodule "jwt.so"
...
modparam("jwt", "key_mode", 0)
....
$var(authorization_header_value) = "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxNDQ0ODEiLCJuYW1lIjoiSm9obiBEb2UiLCJpYXQiOjExMTYyMzkwMjJ9.Ce0o-10D-ghrfQ8jAZTFgJxw6pufLa6gtoCsylI9cPQo2MANVKV1sjwwKtbLfPzSobz1VhOVZ3RtbFME1GKwEOQq0MuNh7EsmMypjAyBbSPj3he0H4ysa3Lt2i8nJ2Z02j_PU387EEwziC4ilkbXNLXdx43ji_SP--dF3rij2C1Wv8AWbNloPnIAIgtTMdXRuxQPPGFhpBLfUPa54dgrRjLRSGzUJKNbszVljhpzqLM6rJ7hsf2MiB3Ww0goRH7r_9-rm4s9eYMK1xaCPlxBUIxw9bVbNkpiFypq_IcdhXnfyTsF4FUuXSgoUqGD6dOCOh6umsDfl7rrBTMRDdqT1CcBj-_CIWSwmxreVxYz1ET5cZe0oj1GnZRYFXrJzUFd1y9srV6qKY-QK1hlflONd_YZ23hpT1hXOVF0fsgB5JQBjDYBi2kLKms5zi-EAmoIVr1JVJS5-tE_iS3p40YGblI0oOOfxeKCtskgl9KtsRvUWi_25pU5BOEX8KiXVkJ2MH9KFYv2-HXrBVkZyY4kCsHIedz8k_nMfOICrh932pC2bgkQLJEZLSwtO8nTK5G1OrS_VLYwqJv0oGtnmcupexTGYiDjN6t1nqnH6s6409z16M-pKG2wwrt-40sFJh-5eDrpqs8KreSDdOYZsoB5POn7ipqZ0OfbVUCT4TzYYPA";
$var(jwt_verification) = jwt_verify("/etc/kamailio/oauth_pub.pem", "RS256",
"sub='$fU'",
"$var(authorization_header_value)"
);
xlog("JWT verification Status: $var(jwt_verification)");
#Outputs 1
...
```
If you decode the JWT you'll see that the timestamp in the `iat` header is in the past.
#### Debugging Data
#### Log Messages
```
{1 90377072 REGISTER 1d0833c1-0d75-123e-8abe-560004469ea4} <script>: JWT verification Status: 1
```
### Possible Solutions
Compare the timestamp from the token's `iat` claim with the current timestamp and fail the verification if it's in the past.
### Additional Information
* **Kamailio Version** - output of `kamailio -v`
```
version: kamailio 5.8.2 (x86_64/linux) 3fa5f4
flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, MEM_JOIN_FREE, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED
ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_SEND_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: 3fa5f4
compiled on 10:39:56 Jun 12 2024 with gcc 8.5.0
```
* **Operating System**:
<!--
Details about the operating system, the type: Linux (e.g.,: Debian 8.4, Ubuntu 16.04, CentOS 7.1, ...), MacOS, xBSD, Solaris, ...;
Kernel details (output of `lsb_release -a` and `uname -a`)
-->
```
Rocky Linux 8.10 (Green Obsidian)
```
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/4007
You are receiving this because you are subscribed to this thread.
Message ID: <kamailio/kamailio/issues/4007(a)github.com>