[asterisk-bugs] [JIRA] (ASTERISK-23391) Audit dialplan function usage of channel variable

[Walter Doekes (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-23391?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=216789#comment-216789 ] 

Walter Doekes commented on ASTERISK-23391:
------------------------------------------

Linking 22982 because it was caused by the lack of check in static int func_channel_read. That one is fixed by the posted review.

However, 22982 would probably be better served by removing the use of ${CHANNEL()} altogether.

> Audit dialplan function usage of channel variable
> -------------------------------------------------
>
>                 Key: ASTERISK-23391
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-23391
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Functions/General
>    Affects Versions: SVN, 1.8.25.0, 11.7.0, 12.0.0
>            Reporter: Corey Farrell
>            Assignee: Corey Farrell
>         Attachments: functions-check-chan-11.patch, functions-check-chan-12.patch, functions-check-chan-1.8.patch
>
>
> Dialplan functions can be called from AMI without a channel.  This allows some functions to be executed in the global context.  Some functions do not check for NULL channels and can crash when executed as a global function.



--
This message was sent by Atlassian JIRA
(v6.2#6252)