[asterisk-dev] AEL security

Sergey Okhapkin sos at sokhapkin.dyndns.org
Mon Mar 19 04:12:16 MST 2007


AEL needs to use extensions when compiling "switch" statement, asterisk 
extensions pattern match is being used for "default" case.

On Monday 19 March 2007 06:39, Philipp Kempgen wrote:
> Philipp Kempgen wrote:
> > It seems like AEL compiles labels into extensions.
> > So a users could directly dial to a label which seems
> > like a security risk to me. Am I missing something?
>
> Need to correct myself: AEL compiles the cases in a switch
> block into extensions. Labels remain untouched. But that
> doesn't make it any better.
>
>
> Regards,
>   Philipp


More information about the asterisk-dev mailing list