Summary: | ASTERISK-22036: Validate that the bridge requested in a Remove Channel from Bridge operation is the bridge the channel is in | ||
Reporter: | Matt Jordan (mjordan) | Labels: | |
Date Opened: | 2013-07-07 20:27:03 | Date Closed: | 2013-08-23 12:29:03 |
Priority: | Major | Regression? | |
Status: | Closed/Complete | Components: | Resources/res_ari |
Versions: | 12 | Frequency of Occurrence | |
Related Issues: | |||
Environment: | Attachments: | ||
Description: | When we remove a channel from a bridge, we don't currently verify that the bridge ID specified is a bridge that the channel is in.
Now that the channel snapshot contains the bridge ID, this is possible. {noformat} control = find_channel_control(response, args->channel); if (!control) { return; } /* BUGBUG this should make sure the bridge requested for removal is actually * the bridge the channel is in. This will be possible once the bridge uniqueid * is added to the channel snapshot. A 409 response should be issued if the bridge * uniqueids don't match */ if (stasis_app_control_remove_channel_from_bridge(control, bridge)) { stasis_http_response_error(response, 500, "Internal Error", "Could not remove channel from bridge"); return; } {noformat} | ||
Comments: |