[asterisk-bugs] [JIRA] (ASTERISK-30257) res_pjsip: IP addresses get butchered

[Joshua C. Colp (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-30257?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=260393#comment-260393 ] 

Joshua C. Colp edited comment on ASTERISK-30257 at 10/2/22 11:22 AM:
---------------------------------------------------------------------

I should also add - how did you come to the conclusion that the second octet "got butchered". Is it purely because of the log message you see? Is this traffic legitimate traffic? Is it actually someone trying to crash or exploit the system? The only use of ast_sockaddr_resolve in ACLs is for the Contact header, which is provided by the remote side unless you have rewrite_contact enabled which hasn't been stated.


was (Author: jcolp):
I should also add - how did you come to the conclusion that the second octet "got butchered". Is it purely because of the log message you see? Is this traffic legitimate traffic? Is it actually someone trying to crash or exploit the system?

> res_pjsip: IP addresses get butchered
> -------------------------------------
>
>                 Key: ASTERISK-30257
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30257
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_pjsip
>    Affects Versions: 18.14.0
>            Reporter: N A
>            Assignee: N A
>
> This happened a few times today:
> Note how the 2nd octet gets butchered into nonsense, causing an ACL failure.
> {noformat}
>  [2022-10-02 14:50:43] ERROR[13793]: pjproject: <?>:            sip_transport.c Error processing 100 bytes packet from UDP 173.56.227.13:18599 : PJSIP syntax error exception when parsing 'Request Line' header on line 1 col 1:
> [2022-10-02 14:50:43]        > ▒
> [2022-10-02 14:50:43] ERROR[12886]: netsock2.c:303 ast_sockaddr_resolve: getaddrinfo("173.566.227.13", "(null)", ...): Name or service not known
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)