[asterisk-bugs] [JIRA] (ASTERISK-22036) Validate that the bridge requested in a Remove Channel from Bridge operation is the bridge the channel is in

[Matt Jordan (JIRA)]

Matt Jordan created ASTERISK-22036:
--------------------------------------

             Summary: Validate that the bridge requested in a Remove Channel from Bridge operation is the bridge the channel is in
                 Key: ASTERISK-22036
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-22036
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Resources/res_stasis_http
    Affects Versions: 12
            Reporter: Matt Jordan


When we remove a channel from a bridge, we don't currently verify that the bridge ID specified is a bridge that the channel is in.

Now that the channel snapshot contains the bridge ID, this is possible.

{noformat}
	control = find_channel_control(response, args->channel);
	if (!control) {
		return;
	}

	/* BUGBUG this should make sure the bridge requested for removal is actually
	 * the bridge the channel is in. This will be possible once the bridge uniqueid
	 * is added to the channel snapshot. A 409 response should be issued if the bridge
	 * uniqueids don't match */
	if (stasis_app_control_remove_channel_from_bridge(control, bridge)) {
		stasis_http_response_error(response, 500, "Internal Error",
			"Could not remove channel from bridge");
		return;
	}

{noformat}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira