[asterisk-dev] [Code Review] 2554: Pimp my SIP: alwaysauthreject

Joshua Colp reviewboard at asterisk.org
Tue May 28 09:42:09 CDT 2013


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviewboard.asterisk.org/r/2554/#review8718
-----------------------------------------------------------



team/group/pimp_my_sip/res/res_sip/sip_distributor.c
<https://reviewboard.asterisk.org/r/2554/#comment17083>

    Both the auth and the endpoint need to be created at load time or you risk a race condition where two at the same time may overwrite and leak memory.


- Joshua Colp


On May 24, 2013, 9:39 p.m., Kevin Harwell wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviewboard.asterisk.org/r/2554/
> -----------------------------------------------------------
> 
> (Updated May 24, 2013, 9:39 p.m.)
> 
> 
> Review request for Asterisk Developers.
> 
> 
> Bugs: ASTERISK-21433
>     https://issues.asterisk.org/jira/browse/ASTERISK-21433
> 
> 
> Repository: Asterisk
> 
> 
> Description
> -------
> 
> Adds support for 'alwaysauthreject' to the new SIP channel driver.  When the 'alwaysauthreject' option is set to 'yes' (default) and no matching endpoint is found for the incoming request, after challenging, Asterisk will respond with a 401 Unauthorized regardless of the reason it rejects the request.
> 
> These changes also include a new global 'security' configuration section in res_sip.conf that now includes the 'alwaysauthreject' and ACL options.
> 
> 
> Diffs
> -----
> 
>   team/group/pimp_my_sip/include/asterisk/res_sip.h 389750 
>   team/group/pimp_my_sip/res/res_sip.c 389750 
>   team/group/pimp_my_sip/res/res_sip.exports.in 389750 
>   team/group/pimp_my_sip/res/res_sip/config_auth.c 389750 
>   team/group/pimp_my_sip/res/res_sip/config_security.c PRE-CREATION 
>   team/group/pimp_my_sip/res/res_sip/sip_configuration.c 389750 
>   team/group/pimp_my_sip/res/res_sip/sip_distributor.c 389750 
>   team/group/pimp_my_sip/res/res_sip_acl.c 389750 
>   team/group/pimp_my_sip/res/res_sip_authenticator_digest.c 389750 
>   team/group/pimp_my_sip/res/res_sip_outbound_authenticator_digest.c 389750 
> 
> Diff: https://reviewboard.asterisk.org/r/2554/diff/
> 
> 
> Testing
> -------
> 
> Attempted to connect to an unknown endpoint in Asterisk and observed that it responded appropriately and with a correct 401 when 'alwaysauthreject' was enabled.
> 
> 
> Thanks,
> 
> Kevin Harwell
> 
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20130528/36a5724b/attachment-0001.htm>


More information about the asterisk-dev mailing list