[asterisk-bugs] [JIRA] (ASTERISK-28295) Non-breaking space handling

[Philip Mott (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-28295?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Philip Mott updated ASTERISK-28295:
-----------------------------------

    Description: 
We recently received a SIP invite header of the following form:

bq. INVITE sip:01234567890%A0 at 1.2.3.4

Which led to the following Asterisk errors:

bq. json.c: Error building JSON from '\{s: s, s: s\}': Invalid UTF-8 string.
bq. stasis_channels.c: Error creating message

I believe "%A0" is a URL-encoded non-breaking space, so it seems like that's not being handled correctly.

Two questions:

# Is this something that can be fixed?
# Is there a simple way for me to recreate the error?  Only I'm finding it difficult to put a non-breaking space into the Dial command, and obviously if I can replicate the issue then I can look into ways of protecting against it if need be.

P.S. Sorry I couldn't find a component relating to json.c when filling out this form so went with 'General' - please correct if wrong!

  was:
We recently received a SIP invite packet of the following form:

bq. INVITE sip:01234567890%A0 at 1.2.3.4

Which led to the following Asterisk errors:

bq. json.c: Error building JSON from '\{s: s, s: s\}': Invalid UTF-8 string.
bq. stasis_channels.c: Error creating message

I believe "%A0" is a URL-encoded non-breaking space, so it seems like that's not being handled correctly.

Two questions:

# Is this something that can be fixed?
# Is there a simple way for me to recreate the error?  Only I'm finding it difficult to put a non-breaking space into the Dial command, and obviously if I can replicate the issue then I can look into ways of protecting against it if need be.

P.S. Sorry I couldn't find a component relating to json.c when filling out this form so went with 'General' - please correct if wrong!


> Non-breaking space handling
> ---------------------------
>
>                 Key: ASTERISK-28295
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-28295
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: General
>    Affects Versions: 13.23.1
>         Environment: Debian 9.6
>            Reporter: Philip Mott
>            Severity: Minor
>
> We recently received a SIP invite header of the following form:
> bq. INVITE sip:01234567890%A0 at 1.2.3.4
> Which led to the following Asterisk errors:
> bq. json.c: Error building JSON from '\{s: s, s: s\}': Invalid UTF-8 string.
> bq. stasis_channels.c: Error creating message
> I believe "%A0" is a URL-encoded non-breaking space, so it seems like that's not being handled correctly.
> Two questions:
> # Is this something that can be fixed?
> # Is there a simple way for me to recreate the error?  Only I'm finding it difficult to put a non-breaking space into the Dial command, and obviously if I can replicate the issue then I can look into ways of protecting against it if need be.
> P.S. Sorry I couldn't find a component relating to json.c when filling out this form so went with 'General' - please correct if wrong!



--
This message was sent by Atlassian JIRA
(v6.2#6252)