[asterisk-users] IAX issues with 1.4.19.1

[Tilghman Lesher]

On Tuesday 06 May 2008 07:35:14 Brian J. Murrell wrote:
> On Tue, 2008-05-06 at 13:23 +0100, Julian Lyndon-Smith wrote:
> > Yes.
>
> Hrm.  For those of us that are following along the AST-* train, patching
> as per the AST-* release notices, as a matter of process, wouldn't it
> have been good to republish AST-2008-006 and include this fix along with
> the original patch?
>
> IOW, IMHO, it should be standard practice that when you release a fix to
> a patch in an AST-* security release, that you re-publish the security
> notice complete with the original security fix and the security fix fix.

It's not actually a fix to the security fix.  The security fix simply
highlighted an issue which was already present in Asterisk.  You would
have seen this same issue prior to the security fix simply by running
'iax2 show channels', as that command runs through every single slot
in the channel array, looking for active channels.  The security issue
fix simply made that slow search process (already there, nothing new)
painfully obvious.

-- 
Tilghman