Details

    • Type: Bug Bug
    • Status: Closed
    • Severity: Critical Critical
    • Resolution: Fixed
    • Affects Version/s: None
    • Target Release Version/s: None
    • Component/s: Channels/chan_sip/T.38
    • Labels:
      None
    • Mantis ID:
      16634
    • Regression:
      No

      Description

      [general]
      t38pt_udptl=yes
      #next three lines makes no changes
      t38pt_rtp=yes
      t38pt_usertpsource=yes
      faxdetect = yes

      [provider]
      type=peer
      host=sip.provider.com
      fromdomain=sip.provider.com
      context=incoming-from-prov
      port=5065
      defaultuser=user
      secret=password
      fromuser=user
      call-limit=10
      canreinvite=yes
      insecure=invite,port
      nat=no
      disallow=all
      allow=ulaw
      allow=alaw
      dtmfmode=rfc2833

      [IntUser]
      type=friend
      host=dynamic
      context=office-internal
      defaultuser=intuser
      secret=password
      callgroup=3
      pickupgroup=3
      callerid=103 User
      canreinvite=yes
      qualify=30000
      call-limit=2
      t38pt_udptl=yes
      disallow=all
      allow=ulaw
      allow=alaw
      t38pt_udptl=yes
      faxdetect=yes
      dtmfmode=rfc2833
      nat=no

      IntUser - ATA Linksys SPA2102 with fax attached
      T.38 with reinvite, vad disabled, external non-firewalled ip

      Messages before crash:
      WARNING[11356]: udptl.c:766 calculate_far_max_ifp: (no tag): Cannot calculate far_max_ifp before far_max_datagram has been set.
      WARNING[11389]: udptl.c:725 calculate_local_max_datagram: (no tag): Cannot calculate local_max_datagram before local_max_ifp has been set.
      WARNING[11389]: udptl.c:766 calculate_far_max_ifp: (SIP/xxxxxxxxxxxxxx): Cannot calculate far_max_ifp before far_max_datagram has been set.

        Issue Links

          Activity

          Hide
          Leif Madsen added a comment -

          OK, marking this as private now that it is assigned to dvossel. This is definitely a duplicate of the other open issues, which are currently being worked on by dvossel as this is considered a security issue.

          Show
          Leif Madsen added a comment - OK, marking this as private now that it is assigned to dvossel. This is definitely a duplicate of the other open issues, which are currently being worked on by dvossel as this is considered a security issue.
          Hide
          Digium Subversion added a comment -

          Repository: asterisk
          Revision: 244443

          U trunk/channels/chan_sip.c
          U trunk/include/asterisk/udptl.h
          U trunk/main/udptl.c

          ------------------------------------------------------------------------
          r244443 | dvossel | 2010-02-02 16:27:24 -0600 (Tue, 02 Feb 2010) | 18 lines

          fixes crash during T.38 negotiation caused by invalid or missing FaxMaxDatagram field

          AST-2010-001

          (closes issue ASTERISK-15457)
          Reported by: krn

          (closes issue ASTERISK-15538)
          Reported by: barthpbx

          (closes issue ASTERISK-15371)
          Reported by: bklang

          (closes issue ASTERISK-15343)
          Reported by: elsto

          ------------------------------------------------------------------------

          http://svn.digium.com/view/asterisk?view=rev&revision=244443

          Show
          Digium Subversion added a comment - Repository: asterisk Revision: 244443 U trunk/channels/chan_sip.c U trunk/include/asterisk/udptl.h U trunk/main/udptl.c ------------------------------------------------------------------------ r244443 | dvossel | 2010-02-02 16:27:24 -0600 (Tue, 02 Feb 2010) | 18 lines fixes crash during T.38 negotiation caused by invalid or missing FaxMaxDatagram field AST-2010-001 (closes issue ASTERISK-15457 ) Reported by: krn (closes issue ASTERISK-15538 ) Reported by: barthpbx (closes issue ASTERISK-15371 ) Reported by: bklang (closes issue ASTERISK-15343 ) Reported by: elsto ------------------------------------------------------------------------ http://svn.digium.com/view/asterisk?view=rev&revision=244443
          Hide
          Digium Subversion added a comment -

          Repository: asterisk
          Revision: 244445

          _U branches/1.6.2/
          U branches/1.6.2/channels/chan_sip.c
          U branches/1.6.2/include/asterisk/udptl.h
          U branches/1.6.2/main/udptl.c

          ------------------------------------------------------------------------
          r244445 | dvossel | 2010-02-02 16:29:38 -0600 (Tue, 02 Feb 2010) | 23 lines

          Merged revisions 244443 via svnmerge from
          https://origsvn.digium.com/svn/asterisk/trunk

          ........
          r244443 | dvossel | 2010-02-02 16:27:23 -0600 (Tue, 02 Feb 2010) | 18 lines

          fixes crash during T.38 negotiation caused by invalid or missing FaxMaxDatagram field

          AST-2010-001

          (closes issue ASTERISK-15457)
          Reported by: krn

          (closes issue ASTERISK-15538)
          Reported by: barthpbx

          (closes issue ASTERISK-15371)
          Reported by: bklang

          (closes issue ASTERISK-15343)
          Reported by: elsto
          ........

          ------------------------------------------------------------------------

          http://svn.digium.com/view/asterisk?view=rev&revision=244445

          Show
          Digium Subversion added a comment - Repository: asterisk Revision: 244445 _U branches/1.6.2/ U branches/1.6.2/channels/chan_sip.c U branches/1.6.2/include/asterisk/udptl.h U branches/1.6.2/main/udptl.c ------------------------------------------------------------------------ r244445 | dvossel | 2010-02-02 16:29:38 -0600 (Tue, 02 Feb 2010) | 23 lines Merged revisions 244443 via svnmerge from https://origsvn.digium.com/svn/asterisk/trunk ........ r244443 | dvossel | 2010-02-02 16:27:23 -0600 (Tue, 02 Feb 2010) | 18 lines fixes crash during T.38 negotiation caused by invalid or missing FaxMaxDatagram field AST-2010-001 (closes issue ASTERISK-15457 ) Reported by: krn (closes issue ASTERISK-15538 ) Reported by: barthpbx (closes issue ASTERISK-15371 ) Reported by: bklang (closes issue ASTERISK-15343 ) Reported by: elsto ........ ------------------------------------------------------------------------ http://svn.digium.com/view/asterisk?view=rev&revision=244445
          Hide
          Digium Subversion added a comment -

          Repository: asterisk
          Revision: 244446

          _U branches/1.6.1/
          U branches/1.6.1/channels/chan_sip.c
          U branches/1.6.1/include/asterisk/udptl.h
          U branches/1.6.1/main/udptl.c

          ------------------------------------------------------------------------
          r244446 | dvossel | 2010-02-02 16:31:30 -0600 (Tue, 02 Feb 2010) | 23 lines

          Merged revisions 244443 via svnmerge from
          https://origsvn.digium.com/svn/asterisk/trunk

          ........
          r244443 | dvossel | 2010-02-02 16:27:23 -0600 (Tue, 02 Feb 2010) | 18 lines

          fixes crash during T.38 negotiation caused by invalid or missing FaxMaxDatagram field

          AST-2010-001

          (closes issue ASTERISK-15457)
          Reported by: krn

          (closes issue ASTERISK-15538)
          Reported by: barthpbx

          (closes issue ASTERISK-15371)
          Reported by: bklang

          (closes issue ASTERISK-15343)
          Reported by: elsto
          ........

          ------------------------------------------------------------------------

          http://svn.digium.com/view/asterisk?view=rev&revision=244446

          Show
          Digium Subversion added a comment - Repository: asterisk Revision: 244446 _U branches/1.6.1/ U branches/1.6.1/channels/chan_sip.c U branches/1.6.1/include/asterisk/udptl.h U branches/1.6.1/main/udptl.c ------------------------------------------------------------------------ r244446 | dvossel | 2010-02-02 16:31:30 -0600 (Tue, 02 Feb 2010) | 23 lines Merged revisions 244443 via svnmerge from https://origsvn.digium.com/svn/asterisk/trunk ........ r244443 | dvossel | 2010-02-02 16:27:23 -0600 (Tue, 02 Feb 2010) | 18 lines fixes crash during T.38 negotiation caused by invalid or missing FaxMaxDatagram field AST-2010-001 (closes issue ASTERISK-15457 ) Reported by: krn (closes issue ASTERISK-15538 ) Reported by: barthpbx (closes issue ASTERISK-15371 ) Reported by: bklang (closes issue ASTERISK-15343 ) Reported by: elsto ........ ------------------------------------------------------------------------ http://svn.digium.com/view/asterisk?view=rev&revision=244446
          Hide
          Digium Subversion added a comment -

          Repository: asterisk
          Revision: 244447

          _U branches/1.6.0/
          U branches/1.6.0/channels/chan_sip.c
          U branches/1.6.0/include/asterisk/udptl.h
          U branches/1.6.0/main/udptl.c

          ------------------------------------------------------------------------
          r244447 | dvossel | 2010-02-02 16:32:56 -0600 (Tue, 02 Feb 2010) | 23 lines

          Merged revisions 244443 via svnmerge from
          https://origsvn.digium.com/svn/asterisk/trunk

          ........
          r244443 | dvossel | 2010-02-02 16:27:23 -0600 (Tue, 02 Feb 2010) | 18 lines

          fixes crash during T.38 negotiation caused by invalid or missing FaxMaxDatagram field

          AST-2010-001

          (closes issue ASTERISK-15457)
          Reported by: krn

          (closes issue ASTERISK-15538)
          Reported by: barthpbx

          (closes issue ASTERISK-15371)
          Reported by: bklang

          (closes issue ASTERISK-15343)
          Reported by: elsto
          ........

          ------------------------------------------------------------------------

          http://svn.digium.com/view/asterisk?view=rev&revision=244447

          Show
          Digium Subversion added a comment - Repository: asterisk Revision: 244447 _U branches/1.6.0/ U branches/1.6.0/channels/chan_sip.c U branches/1.6.0/include/asterisk/udptl.h U branches/1.6.0/main/udptl.c ------------------------------------------------------------------------ r244447 | dvossel | 2010-02-02 16:32:56 -0600 (Tue, 02 Feb 2010) | 23 lines Merged revisions 244443 via svnmerge from https://origsvn.digium.com/svn/asterisk/trunk ........ r244443 | dvossel | 2010-02-02 16:27:23 -0600 (Tue, 02 Feb 2010) | 18 lines fixes crash during T.38 negotiation caused by invalid or missing FaxMaxDatagram field AST-2010-001 (closes issue ASTERISK-15457 ) Reported by: krn (closes issue ASTERISK-15538 ) Reported by: barthpbx (closes issue ASTERISK-15371 ) Reported by: bklang (closes issue ASTERISK-15343 ) Reported by: elsto ........ ------------------------------------------------------------------------ http://svn.digium.com/view/asterisk?view=rev&revision=244447

            People

            • Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development