Matthew Jordan acbe1f90e7 AST-2012-013: Resolve ACL rules being ignored during calls by some IAX2 peers ...

When an IAX2 call is made using the credentials of a peer defined in a dynamic
Asterisk Realtime Architecture (ARA) backend, the ACL rules for that peer are
not applied to the call attempt. This allows for a remote attacker who is aware
of a peer's credentials to bypass the ACL rules set for that peer.

This patch ensures that the ACLs are applied for all peers, regardless of their
storage mechanism.

(closes issue ASTERISK-20186)
Reported by: Alan Frisch
Tested by: mjordan, Alan Frisch
........

Merged revisions 372028 from http://svn.asterisk.org/svn/asterisk/branches/11


git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@372029 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2012-08-30 16:25:34 +00:00

..

h323

Asterisk media architecture conversion - no more format bitfields

2011-02-03 16:22:10 +00:00

misdn

Add named callgroups/pickupgroups

2012-08-07 12:46:36 +00:00

sip

Clean up doxygen warnings

2012-08-30 14:23:28 +00:00

chan_agent.c

Clean up doxygen warnings

2012-08-30 14:23:28 +00:00

chan_alsa.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

chan_bridge.c

Finalize ast_channel opaquification

2012-03-13 18:20:34 +00:00

chan_console.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_dahdi.c

Fix misuses of asprintf throughout the code.

2012-08-21 21:01:11 +00:00

chan_gtalk.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

chan_h323.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_iax2.c

AST-2012-013: Resolve ACL rules being ignored during calls by some IAX2 peers

2012-08-30 16:25:34 +00:00

chan_jingle.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

chan_local.c

Add some additional documentation for core AMI events

2012-07-10 22:26:27 +00:00

chan_mgcp.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_misdn.c

Add private representation of caller, connected and redirecting party ids.

2012-08-10 19:54:55 +00:00

chan_motif.c

Add support for call-id logging to chan_motif.

2012-08-22 15:55:26 +00:00

chan_multicast_rtp.c

Opaquification for ast_format structs in struct ast_channel

2012-02-24 00:32:20 +00:00

chan_nbs.c

Opaquification for ast_format structs in struct ast_channel

2012-02-24 00:32:20 +00:00

chan_oss.c

Fix misuses of asprintf throughout the code.

2012-08-21 21:01:11 +00:00

chan_phone.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_phone.h

rename DialTone.h to chan_phone.h because chan_phone.c is the only file using it

2008-05-28 20:00:21 +00:00

chan_sip.c

Clean up doxygen warnings

2012-08-30 14:23:28 +00:00

chan_sip.exports.in

Merge changes dealing with support for Digium phones.

2012-06-04 20:26:12 +00:00

chan_skinny.c

Rewrite of skinny debugging.

2012-08-07 21:58:01 +00:00

chan_unistim.c

Remove code, that operate with cdr in attempt_transfer(). That was removed somewhere between 1.2 and 1.4 and acidentaly put back in chan_unistim.

2012-07-24 08:53:01 +00:00

chan_vpb.cc

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

console_board.c

Multiple revisions 369001-369002

2012-06-15 16:20:16 +00:00

console_gui.c

Multiple revisions 369001-369002

2012-06-15 16:20:16 +00:00

console_video.c

Multiple revisions 369001-369002

2012-06-15 16:20:16 +00:00

console_video.h

implement the 'freeze' function for incoming frames;

2008-06-30 15:45:15 +00:00

iax2-parser.c

Multiple revisions 369001-369002

2012-06-15 16:20:16 +00:00

iax2-parser.h

Asterisk media architecture conversion - no more format bitfields

2011-02-03 16:22:10 +00:00

iax2-provision.c

Multiple revisions 369001-369002

2012-06-15 16:20:16 +00:00

iax2-provision.h

…

iax2.h

Media Project Phase2: SILK 8khz-24khz, SLINEAR 8khz-192khz, SPEEX 32khz, hd audio ConfBridge, and other stuff

2011-02-22 23:04:49 +00:00

Makefile

Extract sig_ss7 out of chan_dahdi.

2010-06-07 20:04:42 +00:00

misdn_config.c

Add named callgroups/pickupgroups

2012-08-07 12:46:36 +00:00

sig_analog.c

Add HANGUPCAUSE information to callee channels

2012-08-15 17:56:04 +00:00

sig_analog.h

Convert sig_analog to use a global callback table.

2012-08-08 20:32:53 +00:00

sig_pri.c

Add HANGUPCAUSE information to callee channels

2012-08-15 17:56:04 +00:00

sig_pri.h

Clean up doxygen warnings

2012-08-30 14:23:28 +00:00

sig_ss7.c

Add HANGUPCAUSE information to callee channels

2012-08-15 17:56:04 +00:00

sig_ss7.h

Convert sig_ss7 to use a global callback table.

2012-08-08 00:15:54 +00:00

vcodecs.c

Multiple revisions 369001-369002

2012-06-15 16:20:16 +00:00

vgrabbers.c

Multiple revisions 369001-369002

2012-06-15 16:20:16 +00:00