[asterisk-bugs] [JIRA] (ASTERISK-30259) Crash on missing JSON validation in ARI push registration

[Joshua C. Colp (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-30259?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=260409#comment-260409 ] 

Joshua C. Colp commented on ASTERISK-30259:
-------------------------------------------

Thank you for the crash report. However, we need more information to investigate the crash. Please provide:

1. A backtrace generated from a core dump using the instructions provided on the Asterisk wiki [1].
2. Specific steps taken that lead to the crash.
3. All configuration information necesary to reproduce the crash.

Thanks!

[1]: https://wiki.asterisk.org/wiki/display/AST/Getting+a+Backtrace



> Crash on missing JSON validation in ARI push registration
> ---------------------------------------------------------
>
>                 Key: ASTERISK-30259
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30259
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_ari, Resources/res_pjsip_outbound_registration
>    Affects Versions: 18.14.0
>            Reporter: Thomas Guebels
>
> When creating a new outbound registration using ARI push method, an unexpected JSON body can easily trigger a crash.
> The code expects "attribute" and "value" to be present and to be string in the objects of the field array.
> So anything not in the form 
> [
>   {
>     "attribute": "string",
>     "value": "string"
>   },
> ]
> will trigger it. Example: 
> [
>   {
>     "attribute": "string",
>     "value": 123
>   },
> ]
> or
> [
>   {
>   },
> ]



--
This message was sent by Atlassian JIRA
(v6.2#6252)