[asterisk-bugs] [JIRA] (ASTERISK-25490) SDP crypto tag is validated incorrectly

[Joerg Sonnenberger (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-25490?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=228006#comment-228006 ] 

Joerg Sonnenberger commented on ASTERISK-25490:
-----------------------------------------------

Sorry, couldn't figure out how to do the patch attachment during the initial submission. I've signed the CLA in the past, just don't have time to fight with gerrit right now.

> SDP crypto tag is validated incorrectly
> ---------------------------------------
>
>                 Key: ASTERISK-25490
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25490
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/SRTP
>    Affects Versions: 11.20.0
>         Environment: Interoperability with Snom D725
>            Reporter: Joerg Sonnenberger
>         Attachments: patch-channels_sip_sdp__crypto.c
>
>
> When trying to forward a call from a D725 with encrypted RTP, the crypto handshake fails as the phone tries to use a zero crypto tag.
> A potential fix can be found in https://www.netbsd.org/~joerg/patch-channels_sip_sdp__crypto.c
> The same issue should apply to newer releases as well, but I can't test that easily.



--
This message was sent by Atlassian JIRA
(v6.2#6252)