[asterisk-commits] may: branch 11 r408312 - /branches/11/addons/ooh323c/src/ooh323.c

[SVN commits to the Asterisk project]

Author: may
Date: Wed Feb 19 04:15:46 2014
New Revision: 408312

URL: http://svnview.digium.com/svn/asterisk?view=rev&rev=408312
Log:
Allow different socket and signalling ip on h.323 connection if gk mode is active
Reported by: Gabriele Odone
Patches:
	ASTERISK-22738-1.patch
Tested by: Gabriele Odone

Modified:
    branches/11/addons/ooh323c/src/ooh323.c

Modified: branches/11/addons/ooh323c/src/ooh323.c
URL: http://svnview.digium.com/svn/asterisk/branches/11/addons/ooh323c/src/ooh323.c?view=diff&rev=408312&r1=408311&r2=408312
==============================================================================
--- branches/11/addons/ooh323c/src/ooh323.c (original)
+++ branches/11/addons/ooh323c/src/ooh323.c Wed Feb 19 04:15:46 2014
@@ -535,11 +535,13 @@
       }
    }
 
+/* Allow sourceCallSignallAddress different with socket IP for gk routed calls */
    if (strncmp(remoteIP, call->remoteIP, strlen(remoteIP))) {
-     OOTRACEERR5("ERROR: Security denial remote sig IP isn't a socket ip, %s not %s "
-		     "(%s, %s)\n", remoteIP, call->remoteIP, call->callType, 
-		     call->callToken);
-     return OO_FAILED;
+	if(!gH323ep.gkClient || OO_TESTFLAG(call->flags, OO_M_DISABLEGK) || (gH323ep.gkClient->state != GkClientRegistered)) {
+     		OOTRACEERR5("ERROR: Security denial remote sig IP isn't a socket ip, %s not %s "
+		     	"(%s, %s)\n", remoteIP, call->remoteIP, call->callType, call->callToken);
+     		return OO_FAILED;
+	}
    }
    
    /* check for fast start */