[Asterisk-Users] Patching Asterisk for OpenH323 ASN.1 Vulnerabilities

[Jim Rosenberg]

On Thu, Feb 26, 2004 at 09:13:20AM +1100, Adam Hart wrote:
> Yes, asterisk is vulnerable if you have H.323 running.

> What happens when you try and compile asterisk with the latest version of
> OpenH323, it's been a few months since i've done it but it used to work.

A flood of errors. Starting off like this:

In file included from /local/dist/asterisk/pwlib_1.6.0/include/ptlib.h:169,
                 from ast_h323.h:30,
                 from ast_h323.cpp:29:
/local/dist/asterisk/pwlib_1.6.0/include/ptlib/unix/ptlib/pdirect.h:78: syntax 
   error before `protected'
/local/dist/asterisk/pwlib_1.6.0/include/ptlib/unix/ptlib/pdirect.h:80: syntax 
   error before `*' token
In file included from /local/dist/asterisk/pwlib_1.6.0/include/ptlib.h:181,
                 from ast_h323.h:30,
                 from ast_h323.cpp:29:
/local/dist/asterisk/pwlib_1.6.0/include/ptlib/unix/ptlib/config.h:53: syntax 
   error before `public'
/local/dist/asterisk/pwlib_1.6.0/include/ptlib/unix/ptlib/config.h:55: destructors
   must be member functions
/local/dist/asterisk/pwlib_1.6.0/include/ptlib/unix/ptlib/config.h:57: syntax 
   error before `protected'
In file included from /local/dist/asterisk/pwlib_1.6.0/include/ptlib.h:187,
                 from ast_h323.h:30,
                 from ast_h323.cpp:29:
/local/dist/asterisk/pwlib_1.6.0/include/ptlib/args.h:121: syntax error before 
   `{' token

(This isn't the actual "latest" version, but the one published on the
OpenH323 mailing list as the one to use to pick up the patch for the ASN.1
problem.)

-Thanks, Jim