kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2025-10-12 15:45:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

ARI: Fix crash if integer values used in JSON payload 'variables' object.

Browse Source 
Sending the following ARI commands caused Asterisk to crash if the JSON
body 'variables' object passes values of types other than strings.

POST /ari/channels
POST /ari/channels/{channelid}
PUT /ari/endpoints/sendMessage
PUT /ari/endpoints/{tech}/{resource}/sendMessage

* Eliminated RAII_VAR usage in ast_ari_channels_originate_with_id(),
ast_ari_channels_originate(), ast_ari_endpoints_send_message(), and
ast_ari_endpoints_send_message_to_endpoint().

ASTERISK-24751 #close
Reported by:  jeffrey putnam

Review: https://reviewboard.asterisk.org/r/4447/


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/13@432404 65c4cc65-6c06-0410-ace0-fbb531ad65f3
This commit is contained in:
Richard Mudgett
2015-02-27 18:23:22 +00:00
parent c33c5183a5
commit 9d85e855de
6 changed files with 130 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files

57
res/ari/resource_channels.c
View File

@@ -1147,11 +1147,44 @@ static void ari_channels_handle_originate_with_id(const char *args_endpoint,
return;
}
/*!
* \internal
* \brief Convert a \c ast_json list of key/value pair tuples into a \c ast_variable list
* \since 13.3.0
*
* \param[out] response HTTP response if error
* \param json_variables The JSON blob containing the variable
* \param[out] variables An out reference to the variables to populate.
*
* \retval 0 on success.
* \retval -1 on error.
*/
static int json_to_ast_variables(struct ast_ari_response *response, struct ast_json *json_variables, struct ast_variable **variables)
{
enum ast_json_to_ast_vars_code res;
res = ast_json_to_ast_variables(json_variables, variables);
switch (res) {
case AST_JSON_TO_AST_VARS_CODE_SUCCESS:
return 0;
case AST_JSON_TO_AST_VARS_CODE_INVALID_TYPE:
ast_ari_response_error(response, 400, "Bad Request",
"Only string values in the 'variables' object allowed");
break;
case AST_JSON_TO_AST_VARS_CODE_OOM:
ast_ari_response_alloc_failed(response);
break;
}
ast_log(AST_LOG_ERROR, "Unable to convert 'variables' in JSON body to channel variables\n");
return -1;
}
void ast_ari_channels_originate_with_id(struct ast_variable *headers,
struct ast_ari_channels_originate_with_id_args *args,
struct ast_ari_response *response)
{
RAII_VAR(struct ast_variable *, variables, NULL, ast_variables_destroy);
struct ast_variable *variables = NULL;
/* Parse any query parameters out of the body parameter */
if (args->variables) {
@@ -1159,12 +1192,9 @@ void ast_ari_channels_originate_with_id(struct ast_variable *headers,
ast_ari_channels_originate_with_id_parse_body(args->variables, args);
json_variables = ast_json_object_get(args->variables, "variables");
if (json_variables) {
if (ast_json_to_ast_variables(json_variables, &variables)) {
ast_log(AST_LOG_ERROR, "Unable to convert 'variables' in JSON body to channel variables\n");
ast_ari_response_alloc_failed(response);
return;
}
if (json_variables
&& json_to_ast_variables(response, json_variables, &variables)) {
return;
}
}
@@ -1183,13 +1213,14 @@ void ast_ari_channels_originate_with_id(struct ast_variable *headers,
args->other_channel_id,
args->originator,
response);
ast_variables_destroy(variables);
}
void ast_ari_channels_originate(struct ast_variable *headers,
struct ast_ari_channels_originate_args *args,
struct ast_ari_response *response)
{
RAII_VAR(struct ast_variable *, variables, NULL, ast_variables_destroy);
struct ast_variable *variables = NULL;
/* Parse any query parameters out of the body parameter */
if (args->variables) {
@@ -1197,12 +1228,9 @@ void ast_ari_channels_originate(struct ast_variable *headers,
ast_ari_channels_originate_parse_body(args->variables, args);
json_variables = ast_json_object_get(args->variables, "variables");
if (json_variables) {
if (ast_json_to_ast_variables(json_variables, &variables)) {
ast_log(AST_LOG_ERROR, "Unable to convert 'variables' in JSON body to channel variables\n");
ast_ari_response_alloc_failed(response);
return;
}
if (json_variables
&& json_to_ast_variables(response, json_variables, &variables)) {
return;
}
}
@@ -1221,6 +1249,7 @@ void ast_ari_channels_originate(struct ast_variable *headers,
args->other_channel_id,
args->originator,
response);
ast_variables_destroy(variables);
}
void ast_ari_channels_get_channel_var(struct ast_variable *headers,

61
res/ari/resource_endpoints.c
View File

@@ -220,35 +220,66 @@ static void send_message(const char *to, const char *from, const char *body, str
response->response_text = "Accepted";
}
/*!
* \internal
* \brief Convert a \c ast_json list of key/value pair tuples into a \c ast_variable list
* \since 13.3.0
*
* \param[out] response HTTP response if error
* \param json_variables The JSON blob containing the variable
* \param[out] variables An out reference to the variables to populate.
*
* \retval 0 on success.
* \retval -1 on error.
*/
static int json_to_ast_variables(struct ast_ari_response *response, struct ast_json *json_variables, struct ast_variable **variables)
{
enum ast_json_to_ast_vars_code res;
res = ast_json_to_ast_variables(json_variables, variables);
switch (res) {
case AST_JSON_TO_AST_VARS_CODE_SUCCESS:
return 0;
case AST_JSON_TO_AST_VARS_CODE_INVALID_TYPE:
ast_ari_response_error(response, 400, "Bad Request",
"Only string values in the 'variables' object allowed");
break;
case AST_JSON_TO_AST_VARS_CODE_OOM:
ast_ari_response_alloc_failed(response);
break;
}
ast_log(AST_LOG_ERROR, "Unable to convert 'variables' in JSON body to Asterisk variables\n");
return -1;
}
void ast_ari_endpoints_send_message(struct ast_variable *headers,
struct ast_ari_endpoints_send_message_args *args,
struct ast_ari_response *response)
{
RAII_VAR(struct ast_variable *, variables, NULL, ast_variables_destroy);
struct ast_variable *variables = NULL;
if (args->variables) {
struct ast_json *json_variables;
ast_ari_endpoints_send_message_parse_body(args->variables, args);
json_variables = ast_json_object_get(args->variables, "variables");
if (json_variables) {
if (ast_json_to_ast_variables(json_variables, &variables)) {
ast_log(AST_LOG_ERROR, "Unable to convert 'variables' in JSON body to Asterisk variables\n");
ast_ari_response_alloc_failed(response);
return;
}
if (json_variables
&& json_to_ast_variables(response, json_variables, &variables)) {
return;
}
}
send_message(args->to, args->from, args->body, variables, response);
ast_variables_destroy(variables);
}
void ast_ari_endpoints_send_message_to_endpoint(struct ast_variable *headers,
struct ast_ari_endpoints_send_message_to_endpoint_args *args,
struct ast_ari_response *response)
{
RAII_VAR(struct ast_variable *, variables, NULL, ast_variables_destroy);
RAII_VAR(struct ast_endpoint_snapshot *, snapshot, NULL, ao2_cleanup);
struct ast_variable *variables = NULL;
struct ast_endpoint_snapshot *snapshot;
char msg_to[128];
char *tech = ast_strdupa(args->tech);
@@ -259,23 +290,21 @@ void ast_ari_endpoints_send_message_to_endpoint(struct ast_variable *headers,
"Endpoint not found");
return;
}
ao2_ref(snapshot, -1);
if (args->variables) {
struct ast_json *json_variables;
ast_ari_endpoints_send_message_to_endpoint_parse_body(args->variables, args);
json_variables = ast_json_object_get(args->variables, "variables");
if (json_variables) {
if (ast_json_to_ast_variables(json_variables, &variables)) {
ast_log(AST_LOG_ERROR, "Unable to convert 'variables' in JSON body to Asterisk variables\n");
ast_ari_response_alloc_failed(response);
return;
}
if (json_variables
&& json_to_ast_variables(response, json_variables, &variables)) {
return;
}
}
snprintf(msg_to, sizeof(msg_to), "%s:%s", ast_str_to_lower(tech), args->resource);
send_message(msg_to, args->from, args->body, variables, response);
ast_variables_destroy(variables);
}