[asterisk-bugs] [JIRA] (ASTERISK-26047) ARI allows certain commands to run on down channels.

Joshua Colp (JIRA) noreply at issues.asterisk.org
Sun May 22 11:25:56 CDT 2016


     [ https://issues.asterisk.org/jira/browse/ASTERISK-26047?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joshua Colp updated ASTERISK-26047:
-----------------------------------

    Status: Open  (was: Triage)

> ARI allows certain commands to run on down channels.
> ----------------------------------------------------
>
>                 Key: ASTERISK-26047
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26047
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_stasis
>            Reporter: Mark Michelson
>
> ARI recently was given new commands to create and to dial a channel. This allows for people to attempt weird things such as creating a channel and then trying to playback media on it. Right now, ARI does not perform channel state checking to see if it makes sense to be performing certain operations on the channel. The result is that ARI will happily report that it will play the media on the channel, but then will fail to do so once it actually tries to do it.
> ARI needs to be prepared to notice the bad state and give an immediate 409 response to indicate the channel is not in the proper state to execute such commands.
> So far, the operations this is known to affect are:
> * Playing back media
> * Continuing in the dialplan
> There may be others as well, so when fixing this, it's probably a good idea to comb through the ARI channel commands to see if there are others that need the same treatment.



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list