You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Walter Doekes 26dd464dbd chan_sip: Do not allow non-SP/HTAB between header key and colon. ... RFC says SIP headers look like: HCOLON = *( SP / HTAB ) ":" SWS SWS = [LWS] ; sep whitespace LWS = [*WSP CRLF] 1*WSP ; linear whitespace WSP = SP / HTAB ; from rfc2234 chan_sip implemented this: HCOLON = *( LOWCTL / SP ) ":" SWS LOWCTL = %x00-1F ; CTL without DEL This discrepancy meant that SIP proxies in front of Asterisk with chan_sip could pass on unknown headers with \x00-\x1F in them, which would be treated by Asterisk as a different (known) header. For example, the "To\x01:" header would gladly be forwarded by some proxies as irrelevant, but chan_sip would treat it as the relevant "To:" header. Those relying on a SIP proxy to scrub certain headers could mistakenly get unexpected and unvalidated data fed to Asterisk. This change fixes so chan_sip only considers SP/HTAB as valid tokens before the colon, making it agree on the headers with other speakers of SIP. ASTERISK-26433 #close AST-2016-009 Change-Id: I78086fbc524ac733b8f7f78cb423c91075fd489b		9 years ago
..
h323	v11: More files to ignore.	10 years ago
misdn	Makefile: Remove coverage files on 'make clean'	10 years ago
sip	Unit tests: Use AST_TEST_DEFINE in conditional code only.	9 years ago
Makefile	Makefile: Remove coverage files on 'make clean'	10 years ago
chan_agent.c	BuildSystem: Fix a few issues hightlighted by gcc 6.x	9 years ago
chan_alsa.c	Allow Asterisk to compile under GCC 4.10	11 years ago
chan_bridge.c	confbridge: Minor fixes playing user counts to the conference.	12 years ago
chan_console.c	chan_console: Fix reference leaks to pvt.	11 years ago
chan_dahdi.c	build: GCC 5.1.x catches some new const, array bounds and missing paren issues	10 years ago
chan_gtalk.c	Allow Asterisk to compile under GCC 4.10	11 years ago
chan_h323.c	Fix printf problems with high ascii characters after r413586 (1.8).	11 years ago
chan_iax2.c	chan_iax2: Fix use of uninited memory in try_transfer.	9 years ago
chan_jingle.c	Allow Asterisk to compile under GCC 4.10	11 years ago
chan_local.c	chan_local: Fix hangupcauses not getting set on Local channels	9 years ago
chan_mgcp.c	chan_mgcp: Don't call close on fd -1.	10 years ago
chan_misdn.c	chan_misdn: Fix a few issues causing compile errors	9 years ago
chan_motif.c	BuildSystem: Fix a few issues hightlighted by gcc 6.x	9 years ago
chan_multicast_rtp.c	…
chan_nbs.c	…
chan_oss.c	main/Makefile: Fix build failure on SmartOS/Illumos/SunOS	11 years ago
chan_phone.c	Allow Asterisk to compile under GCC 4.10	11 years ago
chan_phone.h	…
chan_sip.c	chan_sip: Do not allow non-SP/HTAB between header key and colon.	9 years ago
chan_skinny.c	Audit improper usage of scheduler exposed by 5c713fdf18.	10 years ago
chan_unistim.c	chan_unistim: Fix memcpy in get_to_address	9 years ago
chan_vpb.cc	chan_vpb.cc: Fix compiler warning Jenkins found.	10 years ago
console_board.c	Multiple revisions 369001-369002	13 years ago
console_gui.c	Multiple revisions 369001-369002	13 years ago
console_video.c	Multiple revisions 369001-369002	13 years ago
console_video.h	…
iax2-parser.c	Fix printf problems with high ascii characters after r413586 (1.8).	11 years ago
iax2-parser.h	…
iax2-provision.c	iax2-provision: Fix improper return on failed cache retrieval	13 years ago
iax2-provision.h	…
iax2.h	Correct the number of available call numbers in IAX2.	12 years ago
misdn_config.c	chan_misdn: Fix a few issues causing compile errors	9 years ago
sig_analog.c	chan_dahdi/sig_analog: Fix distinctive ring detection to suck less.	10 years ago
sig_analog.h	chan_dahdi/sig_analog: Fix distinctive ring detection to suck less.	10 years ago
sig_pri.c	build: GCC 5.1.x catches some new const, array bounds and missing paren issues	10 years ago
sig_pri.h	sig_pri.h: force_restart_unavailable_chans in wrong scope	10 years ago
sig_ss7.c	chan_dahdi: CLI "core stop gracefully" has needless delay for PRI and SS7.	12 years ago
sig_ss7.h	Convert sig_ss7 to use a global callback table.	13 years ago
vcodecs.c	Fix printf problems with high ascii characters after r413586 (1.8).	11 years ago
vgrabbers.c	Multiple revisions 369001-369002	13 years ago