Matthew Jordan d1c00fe8cd AST-2012-013: Resolve ACL rules being ignored during calls by some IAX2 peers ...

When an IAX2 call is made using the credentials of a peer defined in a dynamic
Asterisk Realtime Architecture (ARA) backend, the ACL rules for that peer are
not applied to the call attempt. This allows for a remote attacker who is aware
of a peer's credentials to bypass the ACL rules set for that peer.

This patch ensures that the ACLs are applied for all peers, regardless of their
storage mechanism.

(closes issue ASTERISK-20186)
Reported by: Alan Frisch
Tested by: mjordan, Alan Frisch
........

Merged revisions 372015 from http://svn.asterisk.org/svn/asterisk/branches/1.8


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/10@372020 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2012-08-30 16:22:54 +00:00

..

h323

Asterisk media architecture conversion - no more format bitfields

2011-02-03 16:22:10 +00:00

misdn

Multiple revisions 369001-369002

2012-06-15 16:07:08 +00:00

sip

Multiple revisions 370769-370771

2012-08-03 21:50:29 +00:00

chan_agent.c

Coverity Report: Fix issues for error type REVERSE_INULL (core modules)

2012-05-31 18:20:15 +00:00

chan_alsa.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:57:09 +00:00

chan_bridge.c

Fix crash from bridge channel hangup race condition in ConfBridge

2012-01-13 16:43:11 +00:00

chan_console.c

Merged revisions 335064 via svnmerge from

2011-09-09 16:27:01 +00:00

chan_dahdi.c

Fix misuses of asprintf throughout the code.

2012-08-21 20:40:18 +00:00

chan_gtalk.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:57:09 +00:00

chan_h323.c

Multiple revisions 350788-350789

2012-01-14 15:38:51 +00:00

chan_iax2.c

AST-2012-013: Resolve ACL rules being ignored during calls by some IAX2 peers

2012-08-30 16:22:54 +00:00

chan_jingle.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:57:09 +00:00

chan_local.c

Fix local channel chains optimizing themselves out of a call.

2012-05-04 16:28:06 +00:00

chan_mgcp.c

Add missing newlines to CLI logging

2012-04-06 18:13:04 +00:00

chan_misdn.c

Release B channel allocation on error path in chan_misdn.

2012-07-30 16:49:12 +00:00

chan_multicast_rtp.c

Merged revisions 328209 via svnmerge from

2011-07-14 20:25:31 +00:00

chan_nbs.c

Merged revisions 328209 via svnmerge from

2011-07-14 20:25:31 +00:00

chan_oss.c

Fix misuses of asprintf throughout the code.

2012-08-21 20:40:18 +00:00

chan_phone.c

Merged revisions 328209 via svnmerge from

2011-07-14 20:25:31 +00:00

chan_phone.h

rename DialTone.h to chan_phone.h because chan_phone.c is the only file using it

2008-05-28 20:00:21 +00:00

chan_sip.c

chan_sip: Send 408 on retransmit timeout instead of 603

2012-08-29 17:07:35 +00:00

chan_skinny.c

AST-2012-009: Fix crash in chan_skinny due to Key Pad Button Message handling

2012-06-14 17:31:33 +00:00

chan_unistim.c

Fix a variety of potential buffer overflows

2012-04-19 02:27:08 +00:00

chan_vpb.cc

chan_vpb: remove unused variables (gcc4.6)

2011-08-28 09:55:56 +00:00

console_board.c

Multiple revisions 369001-369002

2012-06-15 16:07:08 +00:00

console_gui.c

Multiple revisions 369001-369002

2012-06-15 16:07:08 +00:00

console_video.c

Multiple revisions 369001-369002

2012-06-15 16:07:08 +00:00

console_video.h

implement the 'freeze' function for incoming frames;

2008-06-30 15:45:15 +00:00

iax2-parser.c

Multiple revisions 369001-369002

2012-06-15 16:07:08 +00:00

iax2-parser.h

Asterisk media architecture conversion - no more format bitfields

2011-02-03 16:22:10 +00:00

iax2-provision.c

Multiple revisions 369001-369002

2012-06-15 16:07:08 +00:00

iax2-provision.h

Don't reload a configuration file if nothing has changed.

2007-08-16 21:09:46 +00:00

iax2.h

Media Project Phase2: SILK 8khz-24khz, SLINEAR 8khz-192khz, SPEEX 32khz, hd audio ConfBridge, and other stuff

2011-02-22 23:04:49 +00:00

Makefile

Extract sig_ss7 out of chan_dahdi.

2010-06-07 20:04:42 +00:00

misdn_config.c

Multiple revisions 369001-369002

2012-06-15 16:07:08 +00:00

sig_analog.c

Fix the analog dial *0 flash-hook of bridged peer feature.

2012-08-08 20:04:44 +00:00

sig_analog.h

Fix the analog dial *0 flash-hook of bridged peer feature.

2012-08-08 20:04:44 +00:00

sig_pri.c

Use better libss7 detection test and move libpri compile test.

2012-08-09 19:11:01 +00:00

sig_pri.h

Clear ISDN channel resetting state if the peer continues to use it.

2012-04-25 19:47:44 +00:00

sig_ss7.c

Use better libss7 detection test and move libpri compile test.

2012-08-09 19:11:01 +00:00

sig_ss7.h

Setup DSP when SS7 call is connected or early media is available.

2012-03-05 21:38:50 +00:00

vcodecs.c

Multiple revisions 369001-369002

2012-06-15 16:07:08 +00:00

vgrabbers.c

Multiple revisions 369001-369002

2012-06-15 16:07:08 +00:00