Matthew Jordan 1efe727ed8 AST-2012-009: Fix crash in chan_skinny due to Key Pad Button Message handling ...

AST-2012-008 (r367844) fixed a denial of service attack exploitable in the
Skinny channel driver that occurred when certain messages are sent after a
previously registered station sends an Off Hook message.  Unresolved in that
patch is an issue in the Asterisk 10 releases, wherein, if a Station Key
Pad Button Message is processed after an Off Hook message, the channel driver
will inappropriately dereference a NULL pointer.

This patch fixes those places where the message handling or the channel
callback functions would attempt to dereference the line's pointer to the
device.

(issue ASTERISK-19905)
Reported by: Christoph Hebeisen
Tested by: mjordan, Christoph Hebeisen
Patches:
  AST-2012-009-10.diff uploaded by mjordan (license 6283)
........

Merged revisions 368947 from http://svn.asterisk.org/svn/asterisk/branches/10


git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@368948 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2012-06-14 17:34:10 +00:00

..

h323

Asterisk media architecture conversion - no more format bitfields

2011-02-03 16:22:10 +00:00

misdn

Correct some set-but-unused variable warnings in the mISDN library.

2012-02-22 21:10:05 +00:00

sip

Fix coverity UNUSED_VALUE findings in core support level files

2012-06-11 15:23:30 +00:00

chan_agent.c

Coverity Report: Fix issues for error type REVERSE_INULL (core modules)

2012-05-31 18:39:30 +00:00

chan_alsa.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_bridge.c

Finalize ast_channel opaquification

2012-03-13 18:20:34 +00:00

chan_console.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_dahdi.c

Fix deadlock potential with ast_set_hangupsource() calls.

2012-06-11 17:34:08 +00:00

chan_gtalk.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_h323.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_iax2.c

Fix deadlock potential with ast_set_hangupsource() calls.

2012-06-11 17:34:08 +00:00

chan_jingle.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_local.c

Convert AST_FLAG_ANSWERED_ELSEWHERE usage to AST_CAUSE_ANSWERED_ELSEWHERE

2012-06-05 14:41:43 +00:00

chan_mgcp.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_misdn.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_multicast_rtp.c

Opaquification for ast_format structs in struct ast_channel

2012-02-24 00:32:20 +00:00

chan_nbs.c

Opaquification for ast_format structs in struct ast_channel

2012-02-24 00:32:20 +00:00

chan_oss.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_phone.c

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

chan_phone.h

…

chan_sip.c

Set the Caller ID "tag" on peers even if remote party information is present.

2012-06-12 15:46:48 +00:00

chan_sip.exports.in

Merge changes dealing with support for Digium phones.

2012-06-04 20:26:12 +00:00

chan_skinny.c

AST-2012-009: Fix crash in chan_skinny due to Key Pad Button Message handling

2012-06-14 17:34:10 +00:00

chan_unistim.c

Fix MWI update so LED display correct voicemail state after phone usage. Also fixes few warnings.

2012-06-08 08:32:49 +00:00

chan_vpb.cc

Commit framework for HANGUPCAUSE (replacement for SIP_CAUSE)

2012-05-14 19:44:27 +00:00

console_board.c

import the recent additions for video console into trunk,

2008-06-29 21:17:14 +00:00

console_gui.c

Add missing newlines to CLI logging

2012-04-06 18:19:03 +00:00

console_video.c

Add missing newlines to CLI logging

2012-04-06 18:19:03 +00:00

console_video.h

implement the 'freeze' function for incoming frames;

2008-06-30 15:45:15 +00:00

iax2-parser.c

Made use IAX frame cache only for cacheable frame types.

2012-05-24 00:36:19 +00:00

iax2-parser.h

Asterisk media architecture conversion - no more format bitfields

2011-02-03 16:22:10 +00:00

iax2-provision.c

Coverity Report: Fix issues for error type CHECKED_RETURN for core

2012-05-10 18:35:14 +00:00

iax2-provision.h

…

iax2.h

Media Project Phase2: SILK 8khz-24khz, SLINEAR 8khz-192khz, SPEEX 32khz, hd audio ConfBridge, and other stuff

2011-02-22 23:04:49 +00:00

Makefile

Extract sig_ss7 out of chan_dahdi.

2010-06-07 20:04:42 +00:00

misdn_config.c

Merged revisions 317478 via svnmerge from

2011-05-05 22:55:09 +00:00

sig_analog.c

Fix deadlock potential with ast_set_hangupsource() calls.

2012-06-11 17:34:08 +00:00

sig_analog.h

push 'outgoing' flag from sig_XXX up to chan_dahdi

2012-02-18 08:02:08 +00:00

sig_pri.c

Fix deadlock when executing CLI "pri show channels" and "ss7 show channels" commands.

2012-05-30 17:50:38 +00:00

sig_pri.h

Clear ISDN channel resetting state if the peer continues to use it.

2012-04-25 19:55:12 +00:00

sig_ss7.c

Fix deadlock when executing CLI "pri show channels" and "ss7 show channels" commands.

2012-05-30 17:50:38 +00:00

sig_ss7.h

Setup DSP when SS7 call is connected or early media is available.

2012-03-05 21:48:32 +00:00

vcodecs.c

Avoid cppcheck warnings; removing unused vars and a bit of cleanup.

2012-04-17 18:57:40 +00:00

vgrabbers.c

free memory used by the x11 grabber when closing it.

2008-07-14 16:50:54 +00:00