Sean Bright b649682caa AST-2018-007: iostreams potential DoS when client connection closed prematurely ...

Before Asterisk sends an HTTP response (at least in the case of errors),
it attempts to read & discard the content of the request. If the client
lies about the Content-Length, or the connection is closed from the
client side before "Content-Length" bytes are sent, the request handling
thread will busy loop.

ASTERISK-27807

Change-Id: I945c5fc888ed92be625b8c35039fc6d2aa89c762

2018-06-11 09:28:43 -06:00

..

stdtime

Merge "BuildSystem: Cast any intptr_t explicitly to its proposed type."

2018-03-06 13:17:54 -06:00

.gitignore

…

abstract_jb.c

abstract_jb: Remove silly usage of RAII_VAR.

2017-11-20 14:03:25 -06:00

acl.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

adsi.c

…

alaw.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

alertpipe.c

utils: Add convenience function for setting fd flags

2017-12-08 13:28:04 -06:00

aoc.c

aoc: Remove silly usage of RAII_VAR.

2017-11-20 14:05:25 -06:00

app.c

loader: Create ast_module_running_ref.

2018-01-03 17:23:36 -05:00

ast_expr2.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

ast_expr2.fl

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

ast_expr2.h

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

ast_expr2.y

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

ast_expr2f.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

asterisk.c

BuildSystem: Add DragonFly BSD.

2018-04-20 12:50:03 +02:00

asterisk.dynamics

…

asterisk.exports.in

core: Remove additional symbols.

2018-03-19 18:00:20 -04:00

astfd.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

astmm.c

core: Stop using AST_INLINE_API for allocator functions.

2018-03-17 01:06:33 -04:00

astobj2_container_private.h

…

astobj2_container.c

astobj2_container: Use ast_cli_completion_add for container names.

2018-03-15 08:29:50 -04:00

astobj2_hash.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

astobj2_private.h

…

astobj2_rbtree.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

astobj2.c

Fix Common Typo's.

2017-12-20 12:40:01 -05:00

audiohook.c

audiohook.c: Fix freeing a frame and still using it.

2017-11-15 17:07:07 -05:00

autochan.c

autochan/mixmonitor/chanspy: Fix unsafe channel locking and references.

2017-03-15 17:18:55 -06:00

autoservice.c

core: Reduce video update queueing.

2017-08-28 11:12:50 -05:00

backtrace.c

backtrace: Avoid potential spurious output.

2018-02-10 14:55:42 +01:00

bridge_after.c

stasis/control: Fix possible deadlock with swap channel

2017-09-06 13:00:49 -05:00

bridge_basic.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

bridge_channel.c

bridge_channel.c: Fix Deadlock when using Local channels and fax gateway

2018-06-05 05:37:54 -06:00

bridge_roles.c

bridge_roles: Use a non-locking linked list where appropriate

2018-02-15 14:31:32 -06:00

bridge.c

bridge_softmix / app_confbridge: Add support for REMB combining.

2018-04-17 11:25:17 -06:00

bucket.c

core: Use macros to generate ao2_container callbacks where possible.

2017-12-30 13:20:16 -05:00

buildinfo.c

…

callerid.c

Replace direct checks of option_debug with DEBUG_ATLEAST macro.

2018-03-07 16:03:01 -06:00

ccss.c

Merge "loader: Convert reload_classes to built-in modules."

2018-03-19 12:53:12 -05:00

cdr.c

Merge "loader: Convert reload_classes to built-in modules."

2018-03-19 12:53:12 -05:00

cel.c

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

channel_internal_api.c

core: Remove 'Data Retrieval API'

2017-07-05 11:25:58 -05:00

channel.c

app_sendtext: Allow content types other than text/plain

2018-06-04 13:20:34 -06:00

chanvars.c

core: Remove ABI effects of MALLOC_DEBUG.

2018-03-01 13:13:55 -06:00

cli.c

streams: Add string metadata capability

2018-04-17 11:03:55 -06:00

codec_builtin.c

core: Add VP9 passthrough support.

2017-07-24 18:30:59 +00:00

codec.c

core: Use macros to generate ao2_container callbacks where possible.

2017-12-30 13:20:16 -05:00

config_options.c

aco: Use ast_cli_completion_add for 'config show help'.

2018-03-17 01:55:16 -04:00

config.c

config.c: Fix successful DELETE treated as failure

2018-05-22 08:29:29 -06:00

conversions.c

core/conversions: Added string to unsigned integer and long conversions

2017-05-17 17:41:11 -05:00

core_local.c

core: Remove non-critical cleanup from startup aborts.

2018-03-13 13:46:08 -04:00

core_unreal.c

core: Reduce video update queueing.

2017-08-28 11:12:50 -05:00

crypt.c

BuildSystem: Fix build on FreeBSD due to missing crypt.h

2017-06-08 10:42:54 -05:00

cygload.c

…

data_buffer.c

Add data buffer API to store packets.

2018-03-28 14:25:21 -06:00

datastore.c

core: Remove ABI effects of MALLOC_DEBUG.

2018-03-01 13:13:55 -06:00

db.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

devicestate.c

core: Remove additional symbols.

2018-03-19 18:00:20 -04:00

dial.c

channel: Remove old epoll support and fixed max number of file descriptors.

2017-03-27 19:54:44 +00:00

dns_core.c

core: Remove non-critical cleanup from startup aborts.

2018-03-13 13:46:08 -04:00

dns_naptr.c

Add support for older name resolving version libraries like openBSD

2016-11-20 09:19:18 +11:00

dns_query_set.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

dns_recurring.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

dns_srv.c

Add support for older name resolving version libraries like openBSD

2016-11-20 09:19:18 +11:00

dns_system_resolver.c

core: Remove non-critical cleanup from startup aborts.

2018-03-13 13:46:08 -04:00

dns_test.c

…

dns_tlsa.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

dns.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

dnsmgr.c

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

dsp.c

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

ecdisa.h

…

endpoints.c

core: Use macros to generate ao2_container callbacks where possible.

2017-12-30 13:20:16 -05:00

enum.c

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

event.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

features_config.c

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

features_config.h

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

features.c

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

file.c

Add the ability to read the media file type from HTTP header for playback

2018-04-30 16:30:44 -04:00

fixedjitterbuf.c

abstract/fixed/adpative jitter buffer: disallow frame re-inserts

2017-01-17 17:08:53 -06:00

fixedjitterbuf.h

abstract/fixed/adpative jitter buffer: disallow frame re-inserts

2017-01-17 17:08:53 -06:00

format_cache.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

format_cap.c

format_cap: Fix leak on AST_VECTOR_APPEND error.

2017-11-06 16:07:01 -05:00

format_compatibility.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

format.c

core: Use macros to generate ao2_container callbacks where possible.

2017-12-30 13:20:16 -05:00

frame.c

bridge_softmix: Forward TEXT frames

2018-04-17 10:30:23 -06:00

framehook.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

fskmodem_float.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

fskmodem_int.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

fskmodem.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

global_datastores.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

hashtab.c

core: Remove ABI effects of MALLOC_DEBUG.

2018-03-01 13:13:55 -06:00

heap.c

core: Remove ABI effects of MALLOC_DEBUG.

2018-03-01 13:13:55 -06:00

http.c

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

image.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

indications.c

main/indications: Use ast_cli_completion_add for all completions.

2018-03-23 02:28:10 -04:00

io.c

Core: Add support for systemd socket activation.

2017-06-19 13:33:48 -04:00

iostream.c

AST-2018-007: iostreams potential DoS when client connection closed prematurely

2018-06-11 09:28:43 -06:00

jitterbuf.c

Fix Common Typo's.

2017-12-20 12:40:01 -05:00

json.c

json: Add conditionals to avoid locking if Jansson is thread safe.

2018-02-12 13:27:08 -05:00

libasteriskpj.c

PJPROJECT logging: Fix detection of max supported log level.

2017-01-24 11:25:19 -06:00

libasteriskssl.c

libasteriskssl: Allow OpenSSL 1.0.2 configured with no-deprecated.

2018-05-20 13:55:26 +02:00

libasteriskssl.exports.in

…

loader.c

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

lock.c

Single API for ast_store_lock_info and ast_remove_lock_info.

2017-10-24 16:11:39 -04:00

logger.c

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

Makefile

tcptls.h: Repair ./configure --with-ssl=PATH.

2018-05-28 17:29:23 +02:00

manager_bridges.c

res/ari/resource_bridges: Add the ability to manipulate the video source

2016-11-14 17:03:09 -05:00

manager_channels.c

manager_channels.c: Reordered ast_manager_build_channel_state_string_prefix()

2018-02-01 12:28:32 -06:00

manager_endpoints.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

manager_mwi.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

manager_system.c

Remove constant conditionals (dead-code).

2017-12-19 09:42:19 -05:00

manager.c

Merge "cli: Display correct unit for HTTP timeout in "manager show settings"."

2018-05-16 13:56:48 -05:00

max_forwards.c

…

md5.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

media_cache.c

Add the ability to read the media file type from HTTP header for playback

2018-04-30 16:30:44 -04:00

media_index.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

message.c

bridge_softmix: Forward TEXT frames

2018-04-17 10:30:23 -06:00

mixmonitor.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

named_acl.c

named_acl: Use ast_cli_completion_add.

2018-03-19 17:49:00 -04:00

named_locks.c

core: Use macros to generate ao2_container callbacks where possible.

2017-12-30 13:20:16 -05:00

netsock2.c

netsock2: Add ast_sockaddr_resolve_first_af to netsock2 public API

2018-05-21 11:03:10 -05:00

optional_api.c

optional_api: Refactor to use vector's and standard allocators.

2018-02-12 22:53:35 -05:00

options.c

core: Create main/options.c.

2018-03-22 00:33:12 -04:00

parking.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

pbx_app.c

cli: Enable ast_cli_completion_add on public completion generators.

2018-03-15 07:25:28 -04:00

pbx_builtins.c

core: Remove non-critical cleanup from startup aborts.

2018-03-13 13:46:08 -04:00

pbx_functions.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

pbx_hangup_handler.c

cli: Fix various CLI documentation and completion issues

2017-02-13 11:33:15 -05:00

pbx_ignorepat.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

pbx_include.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

pbx_private.h

pbx: Create pbx_sw.c for management of 'struct ast_sw'.

2016-07-21 13:58:26 -04:00

pbx_sw.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

pbx_switch.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

pbx_timing.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

pbx_variables.c

pbx_variables.c: Misc fixes in variable substitution.

2018-01-22 12:38:13 -06:00

pbx.c

Fix GCC 8 build issues.

2018-05-11 09:48:58 -04:00

pickup.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

plc.c

channel.c: Allow generic plc then channel formats are equal

2018-03-19 15:36:09 -06:00

poll.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

presencestate.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

privacy.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

rtp_engine.c

rtp: Add support for RTP extension negotiation and abs-send-time.

2018-05-23 09:41:59 -06:00

say.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

sched.c

Replace direct checks of option_debug with DEBUG_ATLEAST macro.

2018-03-07 16:03:01 -06:00

sdp_srtp.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

security_events.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

sem.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

sha1.c

…

sip_api.c

…

slinfactory.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

smoother.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

sorcery.c

core: Remove non-critical cleanup from startup aborts.

2018-03-13 13:46:08 -04:00

sounds.c

main/sounds: Use ast_cli_completion_add.

2018-03-19 17:45:09 -04:00

srv.c

srv: Fix crash when ast_srv_lookup is used and 0 records are returned.

2017-02-07 12:13:23 -06:00

stasis_bridges.c

stringfields: Collect extended stringfields into the stringfield section.

2018-04-16 16:43:20 -05:00

stasis_cache_pattern.c

stasis_cache_pattern: Remove silly usage of RAII_VAR.

2018-01-10 16:01:17 -06:00

stasis_cache.c

stasis_cache: Remove silly usage of RAII_VAR.

2018-01-09 20:43:17 -06:00

stasis_channels.c

stasis_channels.c: Misc cleanup.

2017-12-28 13:53:27 -06:00

stasis_endpoints.c

stasis_endpoints: Remove silly usage of RAII_VAR.

2018-01-09 20:36:52 -06:00

stasis_message_router.c

stasis_message_router: Remove silly usage of RAII_VAR.

2018-01-09 18:55:46 -06:00

stasis_message.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

stasis_system.c

stasis_system: Remove silly usage of RAII_VAR.

2018-01-09 18:55:06 -06:00

stasis.c

stasis: Remove silly usage of RAII_VAR.

2018-01-10 16:09:50 -06:00

strcompat.c

core: Remove ABI effects of MALLOC_DEBUG.

2018-03-01 13:13:55 -06:00

stream.c

stream: Make the topology a reference counted object.

2018-05-03 16:31:56 +00:00

stringfields.c

stringfields: Remove MALLOC_DEBUG fields from struct ast_string_field_mgr.

2018-03-13 16:24:06 -04:00

strings.c

core: Remove ABI effects of MALLOC_DEBUG.

2018-03-01 13:13:55 -06:00

stun.c

STUN/netsock2: Fix some valgrind uninitialized memory findings.

2017-08-10 14:38:12 -05:00

syslog.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

taskprocessor.c

main/taskprocessor: Use ast_cli_completion_add.

2018-03-17 03:00:45 -04:00

tcptls.c

Merge "tcptls: Allow OpenSSL configured with no-dh."

2018-06-06 04:36:06 -05:00

tdd.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

term.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

test.c

main/test: Use ast_cli_completion_add.

2018-03-19 15:41:45 -04:00

threadpool.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

threadstorage.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

timing.c

loader: Create ast_module_running_ref.

2018-01-03 17:23:36 -05:00

translate.c

translate: generic plc not filled in after translation

2018-04-24 14:54:25 -06:00

udptl.c

loader: Convert reload_classes to built-in modules.

2018-03-14 05:20:12 -04:00

ulaw.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

uri.c

…

utils.c

BuildSystem: Add DragonFly BSD.

2018-04-20 12:50:03 +02:00

uuid.c

…

xml.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00

xmldoc.c

Remove as much trailing whitespace as possible.

2017-12-22 09:23:22 -05:00