[asterisk-bugs] [JIRA] (ASTERISK-30259) Crash on missing JSON validation in ARI push registration

[Joshua C. Colp (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-30259?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joshua C. Colp updated ASTERISK-30259:
--------------------------------------

    Assignee: Thomas Guebels
      Status: Waiting for Feedback  (was: Triage)

> Crash on missing JSON validation in ARI push registration
> ---------------------------------------------------------
>
>                 Key: ASTERISK-30259
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30259
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_ari, Resources/res_pjsip_outbound_registration
>    Affects Versions: 18.14.0
>            Reporter: Thomas Guebels
>            Assignee: Thomas Guebels
>
> When creating a new outbound registration using ARI push method, an unexpected JSON body can easily trigger a crash.
> The code expects "attribute" and "value" to be present and to be string in the objects of the field array.
> So anything not in the form 
> [
>   {
>     "attribute": "string",
>     "value": "string"
>   },
> ]
> will trigger it. Example: 
> [
>   {
>     "attribute": "string",
>     "value": 123
>   },
> ]
> or
> [
>   {
>   },
> ]



--
This message was sent by Atlassian JIRA
(v6.2#6252)