kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2026-07-10 00:16:50 -07:00
Code Issues Packages Projects Releases Wiki Activity
Files
0363eca2a3e301bbea976bf269f0de6a107dd1bf
asterisk/res
T
History
Milan Kyselica 0363eca2a3 res_pjsip_pubsub: Add width limit to sscanf in MWI NOTIFY parser 
The parse_simple_message_summary() function uses sscanf with an
unbounded %s format specifier to parse the Message-Account field
from incoming SIP NOTIFY bodies into a fixed-size 512-byte stack
buffer (PJSIP_MAX_URL_SIZE). A single unauthenticated SIP NOTIFY
with a Message-Account value exceeding 512 bytes overflows the
buffer, corrupting adjacent stack data and permanently disabling
the PJSIP transport layer without crashing the process.

Add a width specifier (%511s) to limit the sscanf write to
PJSIP_MAX_URL_SIZE - 1 bytes plus the NUL terminator, matching
the destination buffer size.

Resolves: #GHSA-589g-qgf8-m6mx
2026-06-25 08:22:46 -06:00
..
ael
ael: Regenerate lexers and parsers.
2023-04-03 07:58:23 -05:00
ari
WebSocket Enhancements: Proxies and Keepalives for ARI and Media Outbound Websockets.
2026-06-09 14:22:57 +00:00
cdrel_custom
cdrel_custom: fix SQLite compatibility for versions < 3.20.0
2026-04-22 19:03:20 +00:00
parking
chan_local: Update chan_local references for Local channels.
2026-06-05 14:37:18 +00:00
prometheus
build: Fix unused-but-set-variable warnings with gcc 16.
2026-02-25 13:25:13 +00:00
res_aeap
WebSocket Enhancements: Proxies and Keepalives for ARI and Media Outbound Websockets.
2026-06-09 14:22:57 +00:00
res_geolocation
res_geolocation: Fix multiple issues with XML generation.
2026-01-05 12:45:05 +00:00
res_pjsip
res_pjsip: Add external_signaling_hostname transport option
2026-06-09 14:57:18 +00:00
res_pjsip_session
Stir/Shaken Refactor
2024-02-28 18:39:03 +00:00
res_stir_shaken
res_stir_shaken: avoid direct ASN1_STRING accesses
2026-06-02 16:15:30 +00:00
snmp
app_macro: Remove deprecated module.
2023-01-10 14:07:44 -06:00
srtp
…
stasis
res ari: Add attachable states to Channels and Bridges
2026-06-03 22:54:41 +00:00
stasis_recording
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
ari.make
…
Makefile
CDR/CEL Custom Performance Improvements
2026-03-02 16:43:25 +00:00
res_adsi.c
res_adsi: Fix major regression caused by media format rearchitecture.
2022-12-08 11:19:07 -06:00
res_aeap.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_aeap.exports.in
res_aeap & res_speech_aeap: Add Asterisk External Application Protocol
2022-04-26 14:26:48 -05:00
res_ael_share.c
…
res_ael_share.exports.in
…
res_agi.c
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
res_agi.exports.in
…
res_ari_applications.c
res_ari: Fix for Doxygen.
2021-11-18 16:25:51 -06:00
res_ari_asterisk.c
res_ari: Fix for Doxygen.
2021-11-18 16:25:51 -06:00
res_ari_bridges.c
res ari: Add attachable states to Channels and Bridges
2026-06-03 22:54:41 +00:00
res_ari_channels.c
res ari: Add attachable states to Channels and Bridges
2026-06-03 22:54:41 +00:00
res_ari_device_states.c
res_ari: Fix for Doxygen.
2021-11-18 16:25:51 -06:00
res_ari_endpoints.c
core/ari/pjsip: Add refer mechanism
2023-08-09 15:10:46 +00:00
res_ari_events.c
stasis_broadcast: Add optional ARI broadcast with first-claim-wins
2026-04-22 18:04:59 +00:00
res_ari_mailboxes.c
res_ari: Fix for Doxygen.
2021-11-18 16:25:51 -06:00
res_ari_model.c
…
res_ari_model.exports.in
…
res_ari_playbacks.c
res_ari: Fix for Doxygen.
2021-11-18 16:25:51 -06:00
res_ari_recordings.c
res_ari: Fix for Doxygen.
2021-11-18 16:25:51 -06:00
res_ari_sounds.c
res_ari: Fix for Doxygen.
2021-11-18 16:25:51 -06:00
res_ari.c
res_ari: Add res_ari_model as an optional_module.
2026-06-04 12:32:56 +00:00
res_ari.exports.in
…
res_audiosocket.c
res_audiosocket: Tolerate non-audio frame types
2026-04-22 17:58:17 +00:00
res_audiosocket.exports.in
…
res_calendar_caldav.c
res_calendar: Fix build with libical 4.X
2026-06-01 16:41:05 +00:00
res_calendar_ews.c
…
res_calendar_exchange.c
…
res_calendar_icalendar.c
res_calendar: Fix build with libical 4.X
2026-06-01 16:41:05 +00:00
res_calendar.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_calendar.exports.in
…
res_cdrel_custom.c
res_cdrel_custom: Resolve several formatting issues.
2026-04-01 19:16:16 +00:00
res_cdrel_custom.exports.in
CDR/CEL Custom Performance Improvements
2026-03-02 16:43:25 +00:00
res_chan_stats.c
res: Fix for Doxygen.
2021-12-03 10:38:39 -06:00
res_clialiases.c
Reduce startup/shutdown verbose logging
2024-02-12 18:46:32 +00:00
res_cliexec.c
res_cliexec: Remove unnecessary casts to char*.
2025-09-11 14:19:38 +00:00
res_clioriginate.c
…
res_config_curl.c
res_config_curl.c: Remove unnecessary warnings.
2025-03-18 14:28:02 +00:00
res_config_ldap.c
res_config_ldap: Escape LDAP filter values per RFC 4515
2026-06-25 08:22:46 -06:00
res_config_odbc.c
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
res_config_pgsql.c
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
res_config_sqlite3.c
general: Remove obsolete SVN references.
2022-08-01 11:06:37 -05:00
res_convert.c
…
res_corosync.c
res: Spelling fixes
2021-11-15 16:37:34 -06:00
res_crypto.c
res_crypto.c: Gracefully handle potential key filename truncation.
2023-06-12 17:20:31 +00:00
res_crypto.exports.in
…
res_curl.c
…
res_endpoint_stats.c
…
res_fax_spandsp.c
res_fax_spandsp.c: Clean up a spaces/tabs issue
2023-06-12 17:19:28 +00:00
res_fax.c
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
res_fax.exports.in
…
res_format_attr_celt.c
res_format_attr_*: Parameter Names are Case-Insensitive.
2021-03-10 04:22:36 -06:00
res_format_attr_g729.c
…
res_format_attr_h263.c
res_format_attr_*: Parameter Names are Case-Insensitive.
2021-03-10 04:22:36 -06:00
res_format_attr_h264.c
…
res_format_attr_ilbc.c
menuselect: Fix description of several modules.
2021-06-10 16:30:28 -05:00
res_format_attr_opus.c
res_format_attr_*: Parameter Names are Case-Insensitive.
2021-03-10 04:22:36 -06:00
res_format_attr_silk.c
res_format_attr_*: Parameter Names are Case-Insensitive.
2021-03-10 04:22:36 -06:00
res_format_attr_siren7.c
res_format_attr_*: Parameter Names are Case-Insensitive.
2021-03-10 04:22:36 -06:00
res_format_attr_siren14.c
res_format_attr_*: Parameter Names are Case-Insensitive.
2021-03-10 04:22:36 -06:00
res_format_attr_vp8.c
res_format_attr_*: Parameter Names are Case-Insensitive.
2021-03-10 04:22:36 -06:00
res_geolocation.c
Geolocation: Core Capability Preview
2022-07-12 07:52:12 -05:00
res_geolocation.exports.in
Geolocation: Core Capability Preview
2022-07-12 07:52:12 -05:00
res_hep_pjsip.c
loader: Sync load- and build-time deps.
2020-11-20 13:51:02 -06:00
res_hep_rtcp.c
…
res_hep.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_hep.exports.in
…
res_http_media_cache.c
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
res_http_post.c
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
res_http_websocket.c
res_http_websocket: Add timeout to client handshakes.
2026-06-16 14:17:42 +00:00
res_http_websocket.exports.in
…
res_limit.c
…
res_manager_devicestate.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_manager_presencestate.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_musiconhold.c
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
res_mutestream.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_mwi_devstate.c
…
res_mwi_external_ami.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_mwi_external.c
res: Fix for Doxygen.
2021-12-03 10:38:39 -06:00
res_mwi_external.exports.in
…
res_odbc_transaction.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_odbc_transaction.exports.in
…
res_odbc.c
res_odbc: Use SQL_SUCCEEDED() macro where applicable.
2025-12-29 18:33:02 +00:00
res_odbc.exports.in
…
res_parking.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_phoneprov.c
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
res_phoneprov.exports.in
…
res_pjproject.c
res_pjproject: Fix DTLS client check failing on some platforms
2025-04-21 14:46:02 +00:00
res_pjproject.exports.in
…
res_pjsip_acl.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_pjsip_aoc.c
res_pjsip_aoc: Don't assume a body exists on responses.
2022-12-13 10:52:10 -06:00
res_pjsip_authenticator_digest.c
res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
2025-08-28 14:19:44 +00:00
res_pjsip_caller_id.c
res_pjsip_caller_id: Also parse URI parameters for ANI2.
2025-04-30 12:47:39 +00:00
res_pjsip_config_wizard.c
res_pjsip_config_wizard: Trigger reloads from a pjsip servant thread
2026-04-08 17:03:04 +00:00
res_pjsip_dialog_info_body_generator.c
res_pjsip: Add TEL URI support for basic calls.
2022-09-13 04:51:10 -05:00
res_pjsip_diversion.c
res_pjsip_diversion: resolve race condition between Diversion header processing and redirect
2025-08-11 13:58:11 +00:00
res_pjsip_dlg_options.c
chan_sip: Remove deprecated module.
2023-01-03 09:00:42 -06:00
res_pjsip_dtmf_info.c
res_pjsip_dtmf_info.c: Add 'INFO' to Allow header.
2023-10-27 15:52:44 +00:00
res_pjsip_empty_info.c
res_pjsip: Sync load- and build-time deps.
2020-04-20 11:03:26 -05:00
res_pjsip_endpoint_identifier_anonymous.c
res_pjsip: Add TEL URI support for basic calls.
2022-09-13 04:51:10 -05:00
res_pjsip_endpoint_identifier_ip.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_pjsip_endpoint_identifier_user.c
res_pjsip: Expanding PJSIP endpoint ID and relevant resource length to 255 characters
2023-10-20 12:18:59 +00:00
res_pjsip_exten_state.c
res_pjsip_exten_state,res_pjsip_mwi: Allow unload on shutdown
2023-10-20 12:39:09 +00:00
res_pjsip_exten_state.exports.in
…
res_pjsip_geolocation.c
res_pjsip_geolocation: Add support for Geolocation loc-src parameter
2025-09-30 13:53:36 +00:00
res_pjsip_header_funcs.c
res_pjsip_header_funcs: Add new PJSIP_INHERITABLE_HEADER dialplan function
2026-01-27 16:49:52 +00:00
res_pjsip_history.c
time: add support for time64 libcs
2022-03-24 12:00:58 -05:00
res_pjsip_logger.c
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
res_pjsip_maintenance.c
res_pjsip_maintenance: Add PJSIP endpoint maintenance mode
2026-04-16 18:25:33 +00:00
res_pjsip_messaging.c
res_pjsip_messaging: Update To URI only if it is a SIP(S) URI
2026-05-12 16:27:40 +00:00
res_pjsip_mwi_body_generator.c
…
res_pjsip_mwi.c
res_pjsip_mwi: Fix off-nominal endpoint ao2 ref leak in mwi_get_notify_data
2025-12-30 15:28:47 +00:00
res_pjsip_nat.c
res_pjsip: Add external_signaling_hostname transport option
2026-06-09 14:57:18 +00:00
res_pjsip_notify.c
build: Fix GCC discarded-qualifiers const errors.
2026-02-18 13:43:32 +00:00
res_pjsip_one_touch_record_info.c
res_pjsip: Sync load- and build-time deps.
2020-04-20 11:03:26 -05:00
res_pjsip_outbound_authenticator_digest.c
Add SHA-256 and SHA-512-256 as authentication digest algorithms
2025-01-10 16:21:24 +00:00
res_pjsip_outbound_publish.c
res_pjsip_outbound_publish.c: Add more verbose documentation for outbound_proxy usage
2026-05-07 15:40:21 +00:00
res_pjsip_outbound_publish.exports.in
…
res_pjsip_outbound_registration.c
res_pjsip_outbound_registration: only update the Expires header if the value has changed
2026-04-13 14:15:02 +00:00
res_pjsip_path.c
res_pjsip_path.c: Fix path when dialing using PJSIP_DIAL_CONTACTS()
2024-07-10 17:02:12 +00:00
res_pjsip_phoneprov_provider.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_pjsip_pidf_body_generator.c
…
res_pjsip_pidf_digium_body_supplement.c
res_pjsip_pidf_digium_body_supplement: Support Sangoma user agent.
2020-12-16 08:01:11 -06:00
res_pjsip_pidf_eyebeam_body_supplement.c
…
res_pjsip_publish_asterisk.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_pjsip_pubsub.c
res_pjsip_pubsub: Add width limit to sscanf in MWI NOTIFY parser
2026-06-25 08:22:46 -06:00
res_pjsip_pubsub.exports.in
…
res_pjsip_refer.c
res_pjsip_refer: don't defer session termination for ari transfer
2025-12-29 20:13:40 +00:00
res_pjsip_registrar.c
docs: AMI documentation fixes.
2025-03-07 16:53:19 +00:00
res_pjsip_rfc3326.c
pjsip: Move from threadpool to taskpool
2025-12-16 17:03:43 +00:00
res_pjsip_rfc3329.c
pjsip: Move from threadpool to taskpool
2025-12-16 17:03:43 +00:00
res_pjsip_sdp_rtp.c
res_pjsip: Add per-endpoint RTP port range configuration
2026-04-28 17:45:53 +00:00
res_pjsip_send_to_voicemail.c
…
res_pjsip_session.c
res_pjsip_maintenance: Add PJSIP endpoint maintenance mode
2026-04-16 18:25:33 +00:00
res_pjsip_session.exports.in
Stir/Shaken Refactor
2024-02-28 18:39:03 +00:00
res_pjsip_sips_contact.c
…
res_pjsip_stir_shaken.c
res_stir_shaken: Add STIR_SHAKEN_ATTESTATION dialplan function.
2025-10-28 13:56:09 +00:00
res_pjsip_t38.c
res_pjsip_t38.c: Permit IPv6 SDP connection addresses.
2024-01-30 19:06:40 +00:00
res_pjsip_transport_websocket.c
res_pjsip_transport_websocket: Prevent transport from being destroyed before message finishes.
2023-09-21 14:47:58 +00:00
res_pjsip_xpidf_body_generator.c
…
res_pjsip.c
chan_pjsip: Set correct cause codes for non-2XX responses.
2026-03-17 16:15:38 +00:00
res_pjsip.exports.in
res_pjsip: Add utils for checking media types
2022-01-17 08:25:58 -06:00
res_prometheus.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_prometheus.exports.in
…
res_realtime.c
…
res_remb_modifier.c
xml: Embed module information into core XML documentation.
2021-03-16 10:30:43 -05:00
res_resolver_unbound.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_rtp_asterisk.c
res_rtp_asterisk: Fix incorrect reference in ast_rtp_get_stat().
2026-05-20 13:15:16 +00:00
res_rtp_multicast.c
…
res_rtp_multicast.exports.in
…
res_security_log.c
…
res_smdi.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_smdi.exports.in
…
res_snmp.c
…
res_sorcery_astdb.c
sorcery: Prevent duplicate objects and ensure missing objects are created on update
2025-08-27 16:56:13 +00:00
res_sorcery_config.c
res: Spelling fixes
2021-11-15 16:37:34 -06:00
res_sorcery_memory_cache.c
res_sorcery_memory_cache: Reduce cache lock time for sorcery memory cache populate command
2026-01-08 13:26:18 +00:00
res_sorcery_memory.c
sorcery: Prevent duplicate objects and ensure missing objects are created on update
2025-08-27 16:56:13 +00:00
res_sorcery_realtime.c
sorcery: Prevent duplicate objects and ensure missing objects are created on update
2025-08-27 16:56:13 +00:00
res_speech_aeap.c
res_speech_aeap: add aeap error handling
2023-10-05 10:42:18 -06:00
res_speech.c
Reduce startup/shutdown verbose logging
2024-02-12 18:46:32 +00:00
res_speech.exports.in
…
res_srtp.c
res_srtp: Add menuselect options to enable AES_192, AES_256 and AES_GCM
2025-08-06 15:40:02 +00:00
res_srtp.exports.in
…
res_stasis_answer.c
…
res_stasis_answer.exports.in
…
res_stasis_broadcast.c
stasis_broadcast: Add optional ARI broadcast with first-claim-wins
2026-04-22 18:04:59 +00:00
res_stasis_device_state.c
res_stasis_device_state: Fix delete ARI Devicestates after asterisk restart.
2025-08-18 14:53:16 +00:00
res_stasis_device_state.exports.in
…
res_stasis_mailbox.c
…
res_stasis_mailbox.exports.in
…
res_stasis_playback.c
res: Spelling fixes
2021-11-15 16:37:34 -06:00
res_stasis_playback.exports.in
…
res_stasis_recording.c
res_stasis_recording.c: Save recording state when unmuted.
2023-09-13 17:34:37 +00:00
res_stasis_recording.exports.in
…
res_stasis_snoop.c
Disable device state caching for ephemeral channels
2025-12-16 14:56:02 +00:00
res_stasis_snoop.exports.in
…
res_stasis_test.c
…
res_stasis_test.exports.in
…
res_stasis.c
res ari: Add attachable states to Channels and Bridges
2026-06-03 22:54:41 +00:00
res_stasis.exports.in
…
res_statsd.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_statsd.exports.in
…
res_stir_shaken.c
res_stir_shaken: Add STIR_SHAKEN_ATTESTATION dialplan function.
2025-10-28 13:56:09 +00:00
res_stir_shaken.exports.in
res_stir_shaken: Add inbound INVITE support.
2020-06-08 10:50:16 -05:00
res_stun_monitor.c
res: Fix for Doxygen.
2021-12-03 10:38:39 -06:00
res_timing_dahdi.c
general: Fix broken links.
2023-12-08 13:11:54 +00:00
res_timing_kqueue.c
main, res, tests: Fix compilation errors on FreeBSD.
2024-10-01 14:22:53 +00:00
res_timing_pthread.c
…
res_timing_timerfd.c
…
res_tonedetect.c
res_tonedetect: Fix formatting of XML documentation.
2025-10-06 15:41:17 +00:00
res_websocket_client.c
WebSocket Enhancements: Proxies and Keepalives for ARI and Media Outbound Websockets.
2026-06-09 14:22:57 +00:00
res_websocket_client.exports.in
res_websocket_client: Create common utilities for websocket clients.
2025-06-02 15:15:15 +00:00
res_xmpp.c
docs: Indent <since> tags.
2025-01-29 14:18:25 +00:00
res_xmpp.exports.in
…
res.xml
Add res_pjsip_config_sangoma external module.
2024-11-04 15:12:42 +00:00