asterisk/ChangeLogs/ChangeLog-20.16.0.md

## Change Log for Release asterisk-20.16.0

### Links:

 - [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-20.16.0.html)  
 - [GitHub Diff](https://github.com/asterisk/asterisk/compare/20.15.2...20.16.0)  
 - [Tarball](https://downloads.asterisk.org/pub/telephony/asterisk/asterisk-20.16.0.tar.gz)  
 - [Downloads](https://downloads.asterisk.org/pub/telephony/asterisk)  

### Summary:

- Commits: 54
- Commit Authors: 22
- Issues Resolved: 40
- Security Advisories Resolved: 0

### User Notes:

- #### app_queue.c: Add new global 'log_unpause_on_reason_change'                      
  Add new global option 'log_unpause_on_reason_change' that
  is default disabled. When enabled cause addition of UNPAUSE event on
  every re-PAUSE with reason changed.

- #### pbx_builtins: Allow custom tone for WaitExten.                                  
  The tone used while waiting for digits in WaitExten
  can now be overridden by specifying an argument for the 'd'
  option.

- #### res_tonedetect: Add option for TONE_DETECT detection to auto stop.              
  The 'e' option for TONE_DETECT now allows detection to
  be disabled automatically once the desired number of matches have
  been fulfilled, which can help prevent race conditions in the
  dialplan, since TONE_DETECT does not need to be disabled after
  a hit.

- #### sorcery: Prevent duplicate objects and ensure missing objects are created on u..
  Users relying on Sorcery multiple writable backends configurations
  (e.g., astdb + realtime) may now enable update_or_create_on_update_miss = yes
  in sorcery.conf to ensure missing objects are recreated after temporary backend
  failures. Default behavior remains unchanged unless explicitly enabled.

- #### chan_websocket: Allow additional URI parameters to be added to the outgoing URI.
  A new WebSocket channel driver option `v` has been added to the
  Dial application that allows you to specify additional URI parameters on
  outgoing connections. Run `core show application Dial` from the Asterisk CLI
  to see how to use it.

- #### app_chanspy: Add option to not automatically answer channel.                    
  ChanSpy and ExtenSpy can now be configured to not
  automatically answer the channel by using the 'N' option.

- #### cel: Add STREAM_BEGIN, STREAM_END and DTMF event types.                         
  Enabling the tracking of the
  STREAM_BEGIN and the STREAM_END event
  types in cel.conf will log media files and
  music on hold played to each channel.
  The STREAM_BEGIN event's extra field will
  contain a JSON with the file details (path,
  format and language), or the class name, in
  case of music on hold is played. The DTMF
  event's extra field will contain a JSON with
  the digit and the duration in milliseconds.

- #### res_srtp: Add menuselect options to enable AES_192, AES_256 and AES_GCM         
  Options are now available in the menuselect "Resource Modules"
  category that allow you to enable the AES_192, AES_256 and AES_GCM
  cipher suites in res_srtp. Of course, libsrtp and OpenSSL must support
  them but modern versions do.  Previously, the only way to enable them was
  to set the CFLAGS environment variable when running ./configure.
  The default setting is to disable them preserving existing behavior.

- #### cdr: add CANCEL dispostion in CDR                                               
  A new CDR option "canceldispositionenabled" has been added
  that when set to true, the NO ANSWER disposition will be split into
  two dispositions: CANCEL and NO ANSWER. The default value is 'no'

- #### func_curl: Allow auth methods to be set.                                        
  The httpauth field in CURLOPT now allows the authentication
  methods to be set.

- #### Media over Websocket Channel Driver                                             
  A new channel driver "chan_websocket" is now available. It can
  exchange media over both inbound and outbound websockets and will both frame
  and re-time the media it receives.
  See http://s.asterisk.net/mow for more information.
  The ARI channels/externalMedia API now includes support for the

### Upgrade Notes:


### Developer Notes:

- #### ARI: Add command to indicate progress to a channel                              
  A new ARI endpoint is available at `/channels/{channelId}/progress` to indicate progress to a channel.

- #### options:  Change ast_options from ast_flags to ast_flags64.                     
  The 32-bit ast_options has no room left to accomodate new
  options and so has been converted to an ast_flags64 structure. All internal
  references to ast_options have been updated to use the 64-bit flag
  manipulation macros.  External module references to the 32-bit ast_options
  should continue to work on little-endian systems because the
  least-significant bytes of a 64 bit integer will be in the same location as a
  32-bit integer.  Because that's not the case on big-endian systems, we've
  swapped the bytes in the flags manupulation macros on big-endian systems
  so external modules should still work however you are encouraged to test.


### Commit Authors:

- Alexei Gradinari: (2)
- Alexey Khabulyak: (2)
- Allan Nathanson: (1)
- Artem Umerov: (1)
- Ben Ford: (1)
- George Joseph: (12)
- Igor Goncharovsky: (2)
- Jaco Kroon: (1)
- Joe Garlick: (1)
- Jose Lopes: (1)
- Kodokaii: (1)
- Martin Tomec: (1)
- Mike Bradeen: (1)
- Mkmer: (1)
- Naveen Albert: (15)
- Sean Bright: (2)
- Sperl Viktor: (2)
- Stanislav Abramenkov: (1)
- Stuart Henderson: (1)
- Sven Kube: (2)
- Tinet-Mucw: (2)
- Zhou_jiajian: (1)

## Issue and Commit Detail:

### Closed Issues:

  - 401: [bug]: app_dial: Answer Gosub option passthrough regression
  - 927: [bug]: no audio when media source changed during the call
  - 1176: [bug]: ast_slinear_saturated_multiply_float produces potentially audible distortion artifacts
  - 1259: [bug]: New TenantID feature doesn't seem to set CDR for incoming calls
  - 1260: [bug]: Asterisk sends RTP audio stream before ICE/DTLS completes
  - 1269: [bug]: MixMonitor with D option produces corrupt file
  - 1273: [bug]: When executed with GotoIf, the action Redirect does not take effect and causes confusion in dialplan execution.
  - 1280: [improvement]: logging playback of audio per channel
  - 1289: [bug]: sorcery - duplicate objects from multiple backends and backend divergence on update
  - 1301: [bug]: sig_analog: fgccamamf doesn't handle STP, STP2, or STP3
  - 1304: [bug]: FLUSH_MEDIA does not reset frame_queue_length in WebSocket channel
  - 1305: [bug]: Realtime incorrectly falls back to next backend on record-not-found (SQL_NO_DATA), causing incorrect behavior and delay
  - 1307: [improvement]: ast_tls_cert: Allow certificate validity to be configurable
  - 1309: [bug]: Crash with C++ alternative storage backend enabled
  - 1315:  [bug]: When executed with dialplan, the action Redirect does not take effect.
  - 1317: [bug]: AGI command buffer overflow with long variables
  - 1321: [improvement]: app_agent_pool: Remove obsolete documentation
  - 1323: [new-feature]: add CANCEL dispostion in CDR
  - 1327: [bug]: res_stasis_device_state: can't delete ARI Devicestate after asterisk restart
  - 1332: [new-feature]: func_curl: Allow auth methods to be set
  - 1349: [bug]: Race condition on redirect can cause missing Diversion header
  - 1352: [improvement]: Websocket channel with custom URI
  - 1353: [bug]: AST_DATA_DIR/sounds/custom directory not searched
  - 1358: [new-feature]: app_chanspy: Add option to not automatically answer channel
  - 1364: [bug]: bridge.c: BRIDGE_NOANSWER not always obeyed
  - 1366: [improvement]: func_frame_drop: Handle allocation failure properly
  - 1369: [bug]: test_res_prometheus: Compilation failure in devmode due to curlopts not using long type
  - 1371: [improvement]: func_frame_drop: Add debug messages for frames that can be dropped
  - 1375: [improvement]: dsp.c: Improve logging in tone_detect().
  - 1378: [bug]: chan_dahdi: dialmode feature is not properly reset between calls
  - 1380: [bug]: sig_analog: Segfault due to calling strcmp on NULL
  - 1384: [bug]: chan_websocket: asterisk crashes on hangup after STOP_MEDIA_BUFFERING command with id
  - 1386: [bug]: enabling announceposition_only_up prevents any queue position announcements
  - 1390: [improvement]: res_tonedetect: Add option to automatically end detection in TONE_DETECT
  - 1394: [improvement]: sig_analog: Skip Caller ID spill if Caller ID is disabled
  - 1396: [new-feature]: pbx_builtins: Make tone option for WaitExten configurable
  - 1401: [bug]: app_waitfornoise timeout is always less then configured because of time() usage
  - 1457: [bug]: segmentation fault because of a wrong ari config
  - 1462: [bug]: chan_websocket isn't handling the "opus" codec correctly.
  - 1474: [bug]: Media doesn't flow for video conference after res_rtp_asterisk change to stop media flow before DTLS completes

### Commits By Author:

- #### Alexei Gradinari (2):
  - res_config_odbc: Prevent Realtime fallback on record-not-found (SQL_NO_DATA)
  - sorcery: Prevent duplicate objects and ensure missing objects are created on u..

- #### Alexey Khabulyak (2):
  - app_dial.c: Moved channel lock to prevent deadlock
  - pbx_lua.c: segfault when pass null data to term_color function

- #### Allan Nathanson (1):
  - file.c: with "sounds_search_custom_dir = yes", search "custom" directory

- #### Artem Umerov (1):
  - Fix missing ast_test_flag64 in extconf.c

- #### Ben Ford (1):
  - res_rtp_asterisk: Don't send RTP before DTLS has negotiated.

- #### George Joseph (12):
  - Media over Websocket Channel Driver
  - app_mixmonitor:  Update the documentation concerning the "D" option.
  - cdr.c: Set tenantid from party_a->base instead of chan->base.
  - options:  Change ast_options from ast_flags to ast_flags64.
  - res_srtp: Add menuselect options to enable AES_192, AES_256 and AES_GCM
  - channelstorage_cpp_map_name_id.cc: Refactor iterators for thread-safety.
  - xmldoc.c: Fix rendering of CLI output.
  - chan_websocket: Fix buffer overrun when processing TEXT websocket frames.
  - chan_websocket: Allow additional URI parameters to be added to the outgoing URI.
  - res_ari: Ensure outbound websocket config has a websocket_client_id.
  - chan_websocket: Fix codec validation and add passthrough option.
  - res_rtp_asterisk.c: Use rtp->dtls in __rtp_sendto when rtcp mux is used.

- #### Igor Goncharovsky (2):
  - app_waitforsilence.c: Use milliseconds to calculate timeout time
  - app_queue.c: Add new global 'log_unpause_on_reason_change'

- #### Jaco Kroon (1):
  - res_musiconhold: Appropriately lock channel during start.

- #### Joe Garlick (1):
  - chan_websocket.c: Add DTMF messages

- #### Jose Lopes (1):
  - res_stasis_device_state: Fix delete ARI Devicestates after asterisk restart.

- #### Martin Tomec (1):
  - chan_pjsip.c: Change SSRC after media source change

- #### Mike Bradeen (1):
  - res_pjsip_diversion: resolve race condition between Diversion header processin..

- #### Naveen Albert (15):
  - sig_analog: Properly handle STP, ST2P, and ST3P for fgccamamf.
  - ast_tls_cert: Make certificate validity configurable.
  - app_agent_pool: Remove documentation for removed option.
  - func_curl: Allow auth methods to be set.
  - bridge.c: Obey BRIDGE_NOANSWER variable to skip answering channel.
  - func_frame_drop: Handle allocation failure properly.
  - test_res_prometheus: Fix compilation failure on Debian 13.
  - func_frame_drop: Add debug messages for dropped frames.
  - app_chanspy: Add option to not automatically answer channel.
  - dsp.c: Improve debug logging in tone_detect().
  - sig_analog: Fix SEGV due to calling strcmp on NULL.
  - chan_dahdi: Fix erroneously persistent dialmode.
  - sig_analog: Skip Caller ID spill if usecallerid=no.
  - res_tonedetect: Add option for TONE_DETECT detection to auto stop.
  - pbx_builtins: Allow custom tone for WaitExten.

- #### Sean Bright (2):
  - res_musiconhold.c: Annotate when the channel is locked.
  - res_musiconhold.c: Ensure we're always locked around music state access.

- #### Sperl Viktor (2):
  - res_agi: Increase AGI command buffer size from 2K to 8K
  - cel: Add STREAM_BEGIN, STREAM_END and DTMF event types.

- #### Stanislav Abramenkov (1):
  - bundled_pjproject: Avoid deadlock between transport and transaction

- #### Stuart Henderson (1):
  - app_queue: fix comparison for announce-position-only-up

- #### Sven Kube (2):
  - resource_channels.c: Don't call ast_channel_get_by_name on empty optional argu..
  - ARI: Add command to indicate progress to a channel

- #### Tinet-mucw (2):
  - pbx.c: when set flag AST_SOFTHANGUP_ASYNCGOTO, ast_explicit_goto should return..
  - pbx.c: When the AST_SOFTHANGUP_ASYNCGOTO flag is set, pbx_extension_helper sho..

- #### kodokaii (1):
  - chan_websocket: Reset frame_queue_length to 0 after FLUSH_MEDIA

- #### mkmer (1):
  - utils.h: Add rounding to float conversion to int.

- #### zhou_jiajian (1):
  - cdr: add CANCEL dispostion in CDR


### Commit List:

-  res_rtp_asterisk.c: Use rtp->dtls in __rtp_sendto when rtcp mux is used.
-  chan_websocket: Fix codec validation and add passthrough option.
-  res_ari: Ensure outbound websocket config has a websocket_client_id.
-  chan_websocket.c: Add DTMF messages
-  app_queue.c: Add new global 'log_unpause_on_reason_change'
-  app_waitforsilence.c: Use milliseconds to calculate timeout time
-  Fix missing ast_test_flag64 in extconf.c
-  pbx_builtins: Allow custom tone for WaitExten.
-  res_tonedetect: Add option for TONE_DETECT detection to auto stop.
-  app_queue: fix comparison for announce-position-only-up
-  sig_analog: Skip Caller ID spill if usecallerid=no.
-  chan_dahdi: Fix erroneously persistent dialmode.
-  chan_websocket: Fix buffer overrun when processing TEXT websocket frames.
-  sig_analog: Fix SEGV due to calling strcmp on NULL.
-  ARI: Add command to indicate progress to a channel
-  dsp.c: Improve debug logging in tone_detect().
-  res_stasis_device_state: Fix delete ARI Devicestates after asterisk restart.
-  app_chanspy: Add option to not automatically answer channel.
-  xmldoc.c: Fix rendering of CLI output.
-  func_frame_drop: Add debug messages for dropped frames.
-  test_res_prometheus: Fix compilation failure on Debian 13.
-  func_frame_drop: Handle allocation failure properly.
-  pbx_lua.c: segfault when pass null data to term_color function
-  bridge.c: Obey BRIDGE_NOANSWER variable to skip answering channel.
-  res_rtp_asterisk: Don't send RTP before DTLS has negotiated.
-  app_dial.c: Moved channel lock to prevent deadlock
-  file.c: with "sounds_search_custom_dir = yes", search "custom" directory
-  cel: Add STREAM_BEGIN, STREAM_END and DTMF event types.
-  channelstorage_cpp_map_name_id.cc: Refactor iterators for thread-safety.
-  res_srtp: Add menuselect options to enable AES_192, AES_256 and AES_GCM
-  cdr: add CANCEL dispostion in CDR
-  func_curl: Allow auth methods to be set.
-  options:  Change ast_options from ast_flags to ast_flags64.
-  res_config_odbc: Prevent Realtime fallback on record-not-found (SQL_NO_DATA)
-  app_agent_pool: Remove documentation for removed option.
-  res_agi: Increase AGI command buffer size from 2K to 8K
-  ast_tls_cert: Make certificate validity configurable.
-  cdr.c: Set tenantid from party_a->base instead of chan->base.
-  app_mixmonitor:  Update the documentation concerning the "D" option.
-  sig_analog: Properly handle STP, ST2P, and ST3P for fgccamamf.
-  chan_websocket: Reset frame_queue_length to 0 after FLUSH_MEDIA
-  chan_pjsip.c: Change SSRC after media source change
-  Media over Websocket Channel Driver
-  bundled_pjproject: Avoid deadlock between transport and transaction
-  utils.h: Add rounding to float conversion to int.
-  res_musiconhold.c: Ensure we're always locked around music state access.
-  res_musiconhold.c: Annotate when the channel is locked.
-  res_musiconhold: Appropriately lock channel during start.

### Commit Details:

#### res_rtp_asterisk.c: Use rtp->dtls in __rtp_sendto when rtcp mux is used.
  Author: George Joseph
  Date:   2025-09-23

  In __rtp_sendto(), the check for DTLS negotiation completion for rtcp packets
  needs to use the rtp->dtls structure instead of rtp->rtcp->dtls when
  AST_RTP_INSTANCE_RTCP_MUX is set.

  Resolves: #1474

#### chan_websocket: Fix codec validation and add passthrough option.
  Author: George Joseph
  Date:   2025-09-17

  * Fixed an issue in webchan_write() where we weren't detecting equivalent
    codecs properly.
  * Added the "p" dialstring option that puts the channel driver in
    "passthrough" mode where it will not attempt to re-frame or re-time
    media coming in over the websocket from the remote app.  This can be used
    for any codec but MUST be used for codecs that use packet headers or whose
    data stream can't be broken up on arbitrary byte boundaries. In this case,
    the remote app is fully responsible for correctly framing and timing media
    sent to Asterisk and the MEDIA text commands that could be sent over the
    websocket are disabled.  Currently, passthrough mode is automatically set
    for the opus, speex and g729 codecs.
  * Now calling ast_set_read_format() after ast_channel_set_rawreadformat() to
    ensure proper translation paths are set up when switching between native
    frames and slin silence frames.  This fixes an issue with codec errors
    when transcode_via_sln=yes.

  Resolves: #1462

#### res_ari: Ensure outbound websocket config has a websocket_client_id.
  Author: George Joseph
  Date:   2025-09-12

  Added a check to outbound_websocket_apply() that makes sure an outbound
  websocket config object in ari.conf has a websocket_client_id parameter.

  Resolves: #1457

#### chan_websocket.c: Add DTMF messages
  Author: Joe Garlick
  Date:   2025-09-04

  Added DTMF messages to the chan_websocket feature.

  When a user presses DTMF during a call over chan_websocket it will send a message like:
  "DTMF_END digit:1"

  Resolves: https://github.com/asterisk/asterisk-feature-requests/issues/70

#### app_queue.c: Add new global 'log_unpause_on_reason_change'
  Author: Igor Goncharovsky
  Date:   2025-09-02

  In many asterisk-based systems, the pause reason is used to separate
  pauses by type,and logically, changing the reason defines two intervals
  that should be accounted for separately. The introduction of a new
  option allows me to separate the intervals of operator inactivity in
  the log by the event of unpausing.

  UserNote: Add new global option 'log_unpause_on_reason_change' that
  is default disabled. When enabled cause addition of UNPAUSE event on
  every re-PAUSE with reason changed.


#### app_waitforsilence.c: Use milliseconds to calculate timeout time
  Author: Igor Goncharovsky
  Date:   2025-09-04

  The functions WaitForNoise() and WaitForSilence() use the time()
  functions to calculate elapsed time, which causes the timer to fire on
  a whole second boundary, and the actual function execution time to fire
  the timer may be 1 second less than expected. This fix replaces time()
  with ast_tvnow().

  Fixes: #1401

#### Fix missing ast_test_flag64 in extconf.c
  Author: Artem Umerov
  Date:   2025-08-29

  Fix missing ast_test_flag64 after https://github.com/asterisk/asterisk/commit/43bf8a4ded7a65203b766b91eaf8331a600e9d8d


#### pbx_builtins: Allow custom tone for WaitExten.
  Author: Naveen Albert
  Date:   2025-08-25

  Currently, the 'd' option will play dial tone while waiting
  for digits. Allow it to accept an argument for any tone from
  indications.conf.

  Resolves: #1396

  UserNote: The tone used while waiting for digits in WaitExten
  can now be overridden by specifying an argument for the 'd'
  option.


#### res_tonedetect: Add option for TONE_DETECT detection to auto stop.
  Author: Naveen Albert
  Date:   2025-08-28

  One of the problems with TONE_DETECT as it was originally written
  is that if a tone is detected multiple times, it can trigger
  the redirect logic multiple times as well. For example, if we
  do an async goto in the dialplan after detecting a tone, because
  the detector is still active until explicitly disabled, if we
  detect the tone again, we will branch again and start executing
  that dialplan a second time. This is rarely ever desired behavior,
  and can happen if the detector is not removed quickly enough.

  Add a new option, 'e', which automatically disables the detector
  once the desired number of matches have been heard. This eliminates
  the potential race condition where previously the detector would
  need to be disabled immediately, but doing so quickly enough
  was not guaranteed. This also allows match criteria to be retained
  longer if needed, so the detector does not need to be destroyed
  prematurely.

  Resolves: #1390

  UserNote: The 'e' option for TONE_DETECT now allows detection to
  be disabled automatically once the desired number of matches have
  been fulfilled, which can help prevent race conditions in the
  dialplan, since TONE_DETECT does not need to be disabled after
  a hit.


#### app_queue: fix comparison for announce-position-only-up
  Author: Stuart Henderson
  Date:   2025-08-21

  Numerically comparing that the current queue position is less than
  last_pos_said can only be done after at least one announcement has been
  made, otherwise last_pos_said is at the default (0).

  Fixes: #1386

#### sorcery: Prevent duplicate objects and ensure missing objects are created on u..
  Author: Alexei Gradinari
  Date:   2025-07-07

  This patch resolves two issues in Sorcery objectset handling with multiple
  backends:

  1. Prevent duplicate objects:
     When an object exists in more than one backend (e.g., a contact in both
     'astdb' and 'realtime'), the objectset previously returned multiple instances
     of the same logical object. This caused logic failures in components like the
     PJSIP registrar, where duplicate contact entries led to overcounting and
     incorrect deletions, when max_contacts=1 and remove_existing=yes.

     This patch ensures only one instance of an object with a given key is added
     to the objectset, avoiding these duplicate-related side effects.

  2. Ensure missing objects are created:
     When using multiple writable backends, a temporary backend failure can lead
     to objects missing permanently from that backend.
     Currently, .update() silently fails if the object is not present,
     and no .create() is attempted.
     This results in inconsistent state across backends (e.g. astdb vs. realtime).

     This patch introduces a new global option in sorcery.conf:
       [general]
       update_or_create_on_update_miss = yes|no

     Default: no (preserves existing behavior).

     When enabled: if .update() fails with no data found, .create() is attempted
     in that backend. This ensures that objects missing due to temporary backend
     outages are re-synchronized once the backend is available again.

     Added a new CLI command:
       sorcery show settings
     Displays global Sorcery settings, including the current value of
     update_or_create_on_update_miss.

     Updated tests to validate both flag enabled/disabled behavior.

  Fixes: #1289

  UserNote: Users relying on Sorcery multiple writable backends configurations
  (e.g., astdb + realtime) may now enable update_or_create_on_update_miss = yes
  in sorcery.conf to ensure missing objects are recreated after temporary backend
  failures. Default behavior remains unchanged unless explicitly enabled.


#### sig_analog: Skip Caller ID spill if usecallerid=no.
  Author: Naveen Albert
  Date:   2025-08-25

  If Caller ID is disabled for an FXS port, then we should not send any
  Caller ID spill on the line, as we have no Caller ID information that
  we can/should be sending.

  Resolves: #1394

#### chan_dahdi: Fix erroneously persistent dialmode.
  Author: Naveen Albert
  Date:   2025-08-18

  It is possible to modify the dialmode setting in the chan_dahdi/sig_analog
  private using the CHANNEL function, to modify it during calls. However,
  it was not being reset between calls, meaning that if, for example, tone
  dialing was disabled, it would never work again unless explicitly enabled.

  This fixes the setting by pairing it with a "perm" version of the setting,
  as a few other features have, so that it can be reset to the permanent
  setting between calls. The documentation is also clarified to explain
  the interaction of this setting and the digitdetect setting more clearly.

  Resolves: #1378

#### chan_websocket: Allow additional URI parameters to be added to the outgoing URI.
  Author: George Joseph
  Date:   2025-08-13

  * Added a new option to the WebSocket dial string to capture the additional
    URI parameters.
  * Added a new API ast_uri_verify_encoded() that verifies that a string
    either doesn't need URI encoding or that it has already been encoded.
  * Added a new API ast_websocket_client_add_uri_params() to add the params
    to the client websocket session.
  * Added XML documentation that will show up with `core show application Dial`
    that shows how to use it.

  Resolves: #1352

  UserNote: A new WebSocket channel driver option `v` has been added to the
  Dial application that allows you to specify additional URI parameters on
  outgoing connections. Run `core show application Dial` from the Asterisk CLI
  to see how to use it.


#### chan_websocket: Fix buffer overrun when processing TEXT websocket frames.
  Author: George Joseph
  Date:   2025-08-19

  ast_websocket_read() receives data into a fixed 64K buffer then continually
  reallocates a final buffer that, after all continuation frames have been
  received, is the exact length of the data received and returns that to the
  caller.  process_text_message() in chan_websocket was attempting to set a
  NULL terminator on the received payload assuming the payload buffer it
  received was the large 64K buffer.  The assumption was incorrect so when it
  tried to set a NULL terminator on the payload, it could, depending on the
  state of the heap at the time, cause heap corruption.

  process_text_message() now allocates its own payload_len + 1 sized buffer,
  copies the payload received from ast_websocket_read() into it then NULL
  terminates it prevent the possibility of the overrun and corruption.

  Resolves: #1384

#### sig_analog: Fix SEGV due to calling strcmp on NULL.
  Author: Naveen Albert
  Date:   2025-08-18

  Add an additional check to guard against the channel application being
  NULL.

  Resolves: #1380

#### ARI: Add command to indicate progress to a channel
  Author: Sven Kube
  Date:   2025-07-30

  Adds an ARI command to send a progress indication to a channel.

  DeveloperNote: A new ARI endpoint is available at `/channels/{channelId}/progress` to indicate progress to a channel.

#### dsp.c: Improve debug logging in tone_detect().
  Author: Naveen Albert
  Date:   2025-08-15

  The debug logging during DSP processing has always been kind
  of overwhelming and annoying to troubleshoot. Simplify and
  improve the logging in a few ways to aid DSP debugging:

  * If we had a DSP hit, don't also emit the previous debug message that
    was always logged. It is duplicated by the hit message, so this can
    reduce the number of debug messages during detection by 50%.
  * Include the hit count and required number of hits in the message so
    on partial detections can be more easily troubleshot.
  * Use debug level 9 for hits instead of 10, so we can focus on hits
    without all the noise from the per-frame debug message.
  * 1-index the hit count in the debug messages. On the first hit, it
    currently logs '0', just as when we are not detecting anything,
    which can be confusing.

  Resolves: #1375

#### res_stasis_device_state: Fix delete ARI Devicestates after asterisk restart.
  Author: Jose Lopes
  Date:   2025-07-30

  After an asterisk restart, the deletion of ARI Devicestates didn't
  return error, but the devicestate was not deleted.
  Found a typo on populate_cache function that created wrong cache for
  device states.
  This bug caused wrong assumption that devicestate didn't exist,
  since it was not in cache, so deletion didn't returned error.

  Fixes: #1327

#### app_chanspy: Add option to not automatically answer channel.
  Author: Naveen Albert
  Date:   2025-08-13

  Add an option for ChanSpy and ExtenSpy to not answer the channel
  automatically. Most applications that auto-answer by default
  already have an option to disable this behavior if unwanted.

  Resolves: #1358

  UserNote: ChanSpy and ExtenSpy can now be configured to not
  automatically answer the channel by using the 'N' option.


#### xmldoc.c: Fix rendering of CLI output.
  Author: George Joseph
  Date:   2025-08-14

  If you do a `core show application Dial`, you'll see it's kind of a mess.
  Indents are wrong is some places, examples are printed in black which makes
  them invisible on most terminals, and the lack of line breaks in some cases
  makes it hard to follow.

  * Fixed the rendering of examples so they are indented properly and changed
  the color so they can be seen.
  * There is now a line break before each option.
  * Options are now printed on their own line with all option content indented
  below them.

  Example from Dial before fixes:
  ```
      Example: Dial 555-1212 on first available channel in group 1, searching
      from highest to lowest

      Example: Ringing FXS channel 4 with ring cadence 2

      Example: Dial 555-1212 on channel 3 and require answer confirmation

  ...

      O([mode]):
          mode - With <mode> either not specified or set to '1', the originator
          hanging up will cause the phone to ring back immediately.
   - With <mode> set to '2', when the operator flashes the trunk, it will ring
   their phone back.
  Enables *operator services* mode.  This option only works when bridging a DAHDI
  channel to another DAHDI channel only. If specified on non-DAHDI interfaces, it
  will be ignored. When the destination answers (presumably an operator services
  station), the originator no longer has control of their line. They may hang up,
  but the switch will not release their line until the destination party (the
  operator) hangs up.

      p: This option enables screening mode. This is basically Privacy mode
      without memory.
  ```

  After:
  ```
      Example: Dial 555-1212 on first available channel in group 1, searching
      from highest to lowest

       same => n,Dial(DAHDI/g1/5551212)

      Example: Ringing FXS channel 4 with ring cadence 2

       same => n,Dial(DAHDI/4r2)

      Example: Dial 555-1212 on channel 3 and require answer confirmation

       same => n,Dial(DAHDI/3c/5551212)

  ...

      O([mode]):
          mode - With <mode> either not specified or set to '1', the originator
          hanging up will cause the phone to ring back immediately.
          With <mode> set to '2', when the operator flashes the trunk, it will
          ring their phone back.
          Enables *operator services* mode.  This option only works when bridging
          a DAHDI channel to another DAHDI channel only. If specified on
          non-DAHDI interfaces, it will be ignored. When the destination answers
          (presumably an operator services station), the originator no longer has
          control of their line. They may hang up, but the switch will not
          release their line until the destination party (the operator) hangs up.

      p:
          This option enables screening mode. This is basically Privacy mode
          without memory.
  ```

  There are still things we can do to make this more readable but this is a
  start.


#### func_frame_drop: Add debug messages for dropped frames.
  Author: Naveen Albert
  Date:   2025-08-14

  Add debug messages in scenarios where frames that are usually processed
  are dropped or skipped.

  Resolves: #1371

#### test_res_prometheus: Fix compilation failure on Debian 13.
  Author: Naveen Albert
  Date:   2025-08-14

  curl_easy_setopt expects long types, so be explicit.

  Resolves: #1369

#### func_frame_drop: Handle allocation failure properly.
  Author: Naveen Albert
  Date:   2025-08-14

  Handle allocation failure and simplify the allocation using asprintf.

  Resolves: #1366

#### pbx_lua.c: segfault when pass null data to term_color function
  Author: Alexey Khabulyak
  Date:   2025-08-14

  This can be reproduced under certain curcomstences.
  For example: call app.playback from lua with invalid data: app.playback({}).
  pbx_lua.c will try to get data for this playback using lua_tostring function.
  This function returs NULL for everything but strings and numbers.
  Then, it calls term_color with NULL data.
  term_color function can call(if we don't use vt100 compat term)
  ast_copy_string with NULL inbuf which cause segfault. bt example:
  ast_copy_string (size=8192, src=0x0, dst=0x7fe44b4be8b0)
  at /usr/src/asterisk/asterisk-20.11.0/include/asterisk/strings.h:412

  Resolves: https://github.com/asterisk/asterisk/issues/1363

#### bridge.c: Obey BRIDGE_NOANSWER variable to skip answering channel.
  Author: Naveen Albert
  Date:   2025-08-14

  If the BRIDGE_NOANSWER variable is set on a channel, it is not supposed
  to answer when another channel bridges to it using Bridge(), and this is
  checked when ast_bridge_call* is called. However, another path exists
  (bridge_exec -> ast_bridge_add_channel) where this variable was not
  checked and channels would be answered. We now check the variable there.

  Resolves: #401
  Resolves: #1364

#### res_rtp_asterisk: Don't send RTP before DTLS has negotiated.
  Author: Ben Ford
  Date:   2025-08-04

  There was no check in __rtp_sendto that prevented Asterisk from sending
  RTP before DTLS had finished negotiating. This patch adds logic to do
  so.

  Fixes: #1260

#### app_dial.c: Moved channel lock to prevent deadlock
  Author: Alexey Khabulyak
  Date:   2025-08-04

  It's reproducible with pbx_lua, not regular dialplan.

  deadlock description:
  1. asterisk locks a channel
  2. calls function onedigit_goto
  3. calls ast_goto_if_exists funciton
  4. checks ast_exists_extension -> pbx_extension_helper
  5. pbx_extension_helper calls pbx_find_extension
  6. Then asterisk starts autoservice in a new thread
  7. autoservice run tries to lock the channel again

  Because our channel is locked already, autoservice can't lock.
  Autoservice can't lock -> autoservice stop is waiting forever.
  onedigit_goto waits for autoservice stop.

  Resolves: https://github.com/asterisk/asterisk/issues/1335

#### res_pjsip_diversion: resolve race condition between Diversion header processin..
  Author: Mike Bradeen
  Date:   2025-08-07

  Based on the firing order of the PJSIP call-backs on a redirect, it was possible for
  the Diversion header to not be included in the outgoing 181 response to the UAC and
  the INVITE to the UAS.

  This change moves the Diversion header processing to an earlier PJSIP callback while also
  preventing the corresponding update that can cause a duplicate 181 response when processing
  the header at that time.

  Resolves: #1349

#### file.c: with "sounds_search_custom_dir = yes", search "custom" directory
  Author: Allan Nathanson
  Date:   2025-08-10

  With `sounds_search_custom_dir = yes`, we are supposed to search for sounds
  in the `AST_DATA_DIR/sounds/custom` directory before searching the normal
  directories.  Unfortunately, a recent change
  (https://github.com/asterisk/asterisk/pull/1172) had a typo resulting in
  the "custom" directory not being searched.  This change restores this
  expected behavior.

  Resolves: #1353

#### cel: Add STREAM_BEGIN, STREAM_END and DTMF event types.
  Author: Sperl Viktor
  Date:   2025-06-30

  Fixes: #1280

  UserNote: Enabling the tracking of the
  STREAM_BEGIN and the STREAM_END event
  types in cel.conf will log media files and
  music on hold played to each channel.
  The STREAM_BEGIN event's extra field will
  contain a JSON with the file details (path,
  format and language), or the class name, in
  case of music on hold is played. The DTMF
  event's extra field will contain a JSON with
  the digit and the duration in milliseconds.


#### channelstorage_cpp_map_name_id.cc: Refactor iterators for thread-safety.
  Author: George Joseph
  Date:   2025-07-30

  The fact that deleting an object from a map invalidates any iterator
  that happens to currently point to that object was overlooked in the initial
  implementation.  Unfortunately, there's no way to detect that an iterator
  has been invalidated so the result was an occasional SEGV triggered by modules
  like app_chanspy that opens an iterator and can keep it open for a long period
  of time.  The new implementation doesn't keep the underlying C++ iterator
  open across calls to ast_channel_iterator_next() and uses a read lock
  on the map to ensure that, even for the few microseconds we use the
  iterator, another thread can't delete a channel from under it.  Even with
  this change, the iterators are still WAY faster than the ao2_legacy
  storage driver.

  Full details about the new implementation are located in the comments for
  iterator_next() in channelstorage_cpp_map_name_id.cc.

  Resolves: #1309

#### res_srtp: Add menuselect options to enable AES_192, AES_256 and AES_GCM
  Author: George Joseph
  Date:   2025-08-05

  UserNote: Options are now available in the menuselect "Resource Modules"
  category that allow you to enable the AES_192, AES_256 and AES_GCM
  cipher suites in res_srtp. Of course, libsrtp and OpenSSL must support
  them but modern versions do.  Previously, the only way to enable them was
  to set the CFLAGS environment variable when running ./configure.
  The default setting is to disable them preserving existing behavior.


#### cdr: add CANCEL dispostion in CDR
  Author: zhou_jiajian
  Date:   2025-07-24

  In the original implementation, both CANCEL and NO ANSWER states were
  consolidated under the NO ANSWER disposition. This patch introduces a
  separate CANCEL disposition, with an optional configuration switch to
  enable this new disposition.

  Resolves: #1323

  UserNote: A new CDR option "canceldispositionenabled" has been added
  that when set to true, the NO ANSWER disposition will be split into
  two dispositions: CANCEL and NO ANSWER. The default value is 'no'


#### func_curl: Allow auth methods to be set.
  Author: Naveen Albert
  Date:   2025-08-01

  Currently the CURL function only supports Basic Authentication,
  the default auth method in libcurl. Add an option that also
  allows enabling digest authentication.

  Resolves: #1332

  UserNote: The httpauth field in CURLOPT now allows the authentication
  methods to be set.


#### options:  Change ast_options from ast_flags to ast_flags64.
  Author: George Joseph
  Date:   2025-07-21

  DeveloperNote: The 32-bit ast_options has no room left to accomodate new
  options and so has been converted to an ast_flags64 structure. All internal
  references to ast_options have been updated to use the 64-bit flag
  manipulation macros.  External module references to the 32-bit ast_options
  should continue to work on little-endian systems because the
  least-significant bytes of a 64 bit integer will be in the same location as a
  32-bit integer.  Because that's not the case on big-endian systems, we've
  swapped the bytes in the flags manupulation macros on big-endian systems
  so external modules should still work however you are encouraged to test.


#### res_config_odbc: Prevent Realtime fallback on record-not-found (SQL_NO_DATA)
  Author: Alexei Gradinari
  Date:   2025-07-15

  This patch fixes an issue in the ODBC Realtime engine where Asterisk incorrectly
  falls back to the next configured backend when the current one returns
  SQL_NO_DATA (i.e., no record found).
  This is a logical error and performance risk in multi-backend configurations.

  Solution:
  Introduced CONFIG_RT_NOT_FOUND ((void *)-1) as a special return marker.
  ODBC Realtime backend now return CONFIG_RT_NOT_FOUND when no data is found.
  Core engine stops iterating on this marker, avoiding unnecessary fallback.

  Notes:
  Other Realtime backends (PostgreSQL, LDAP, etc.) can be updated similarly.
  This patch only covers ODBC.

  Fixes: #1305

#### resource_channels.c: Don't call ast_channel_get_by_name on empty optional argu..
  Author: Sven Kube
  Date:   2025-07-30

  `ast_ari_channels_create` and `ast_ari_channels_dial` called the
  `ast_channel_get_by_name` function with optional arguments. Since
  8f1982c4d6, this function logs an error for empty channel names.
  This commit adds checks for empty optional arguments that are used
  to call `ast_channel_get_by_name` to prevent these error logs.


#### app_agent_pool: Remove documentation for removed option.
  Author: Naveen Albert
  Date:   2025-07-28

  The already-deprecated "password" option for the AGENT function was
  removed in commit d43b17a872e8227aa8a9905a21f90bd48f9d5348 for
  Asterisk 12, but the documentation for it wasn't removed then.

  Resolves: #1321

#### pbx.c: When the AST_SOFTHANGUP_ASYNCGOTO flag is set, pbx_extension_helper sho..
  Author: Tinet-mucw
  Date:   2025-07-22

  Under certain circumstances the context/extens/prio are set in the ast_async_goto, for example action Redirect.
  In the situation that action Redirect is broken by pbx_extension_helper this info is changed.
  This will cause the current dialplan location to be executed twice.
  In other words, the Redirect action does not take effect.

  Resolves: #1315

#### res_agi: Increase AGI command buffer size from 2K to 8K
  Author: Sperl Viktor
  Date:   2025-07-22

  Fixes: #1317

#### ast_tls_cert: Make certificate validity configurable.
  Author: Naveen Albert
  Date:   2025-07-16

  Currently, the ast_tls_cert script is hardcoded to produce certificates
  with a validity of 365 days, which is not generally desirable for self-
  signed certificates. Make this parameter configurable.

  Resolves: #1307

#### cdr.c: Set tenantid from party_a->base instead of chan->base.
  Author: George Joseph
  Date:   2025-07-17

  The CDR tenantid was being set in cdr_object_alloc from the channel->base
  snapshot.  Since this happens at channel creation before the dialplan is even
  reached, calls to `CHANNEL(tenantid)=<something>` in the dialplan were being
  ignored.  Instead we now take tenantid from party_a when
  cdr_object_create_public_records() is called which is after the call has
  ended and all channel snapshots rebuilt.  This is exactly how accountcode
  and amaflags, which can also be set in tha dialplpan, are handled.

  Resolves: #1259

#### app_mixmonitor:  Update the documentation concerning the "D" option.
  Author: George Joseph
  Date:   2025-07-16

  When using the "D" option to output interleaved audio, the file extension
  must be ".raw".  That info wasn't being properly rendered in the markdown
  and HTML on the documentation site.  The XML was updated to move the
  note in the option section to a warning in the description.

  Resolves: #1269

#### sig_analog: Properly handle STP, ST2P, and ST3P for fgccamamf.
  Author: Naveen Albert
  Date:   2025-07-14

  Previously, we were only using # (ST) as a terminator, and not handling
  A (STP), B (ST2P), or C (ST3P), which erroneously led to it being
  treated as part of the dialed number. Parse any of these as the start
  digit.

  Resolves: #1301

#### chan_websocket: Reset frame_queue_length to 0 after FLUSH_MEDIA
  Author: kodokaii
  Date:   2025-07-03

  In the WebSocket channel driver, the FLUSH_MEDIA command clears all frames from
  the queue but does not reset the frame_queue_length counter.

  As a result, the driver incorrectly thinks the queue is full after flushing,
  which prevents new multimedia frames from being sent, especially after multiple
  flush commands.

  This fix sets frame_queue_length to 0 after flushing, ensuring the queue state
  is consistent with its actual content.

  Fixes: #1304

#### chan_pjsip.c: Change SSRC after media source change
  Author: Martin Tomec
  Date:   2025-06-25

  When the RTP media source changes, such as after a blind transfer, the new source introduces a discontinuous timestamp. According to RFC 3550, Section 5.1, an RTP stream's timestamp for a given SSRC must increment monotonically and linearly.
  To comply with the standard and avoid a large timestamp jump on the existing SSRC, a new SSRC is generated for the new media stream.
  This change resolves known interoperability issues with certain SBCs (like Sonus/Ribbon) that stop forwarding media when they detect such a timestamp violation. This code uses the existing implementation from chan_sip.

  Resolves: #927

#### Media over Websocket Channel Driver
  Author: George Joseph
  Date:   2025-04-28

  * Created chan_websocket which can exchange media over both inbound and
  outbound websockets which the driver will frame and time.
  See http://s.asterisk.net/mow for more information.

  * res_http_websocket: Made defines for max message size public and converted
  a few nuisance verbose messages to debugs.

  * main/channel.c: Changed an obsolete nuisance error to a debug.

  * ARI channels: Updated externalMedia to include chan_websocket as a supported
  transport.

  UserNote: A new channel driver "chan_websocket" is now available. It can
  exchange media over both inbound and outbound websockets and will both frame
  and re-time the media it receives.
  See http://s.asterisk.net/mow for more information.

  UserNote: The ARI channels/externalMedia API now includes support for the
  WebSocket transport provided by chan_websocket.


#### bundled_pjproject: Avoid deadlock between transport and transaction
  Author: Stanislav Abramenkov
  Date:   2025-07-01

  Backport patch from upstream
  * Avoid deadlock between transport and transaction
  https://github.com/pjsip/pjproject/commit/edde06f261ac

  Issue described in
  https://github.com/pjsip/pjproject/issues/4442


#### utils.h: Add rounding to float conversion to int.
  Author: mkmer
  Date:   2025-03-23

  Quote from an audio engineer NR9V:
  There is a minor issue of a small amount of crossover distortion though as a result of `ast_slinear_saturated_multiply_float()` not rounding the float. This could result in some quiet but potentially audible distortion artifacts in lower volume parts of the signal. If you have for example a sign wave function with a max amplitude of just a few samples, all samples between -1 and 1 will be truncated to zero, resulting in the waveform no longer being a sine wave and in harmonic distortion.

  Resolves: #1176

#### pbx.c: when set flag AST_SOFTHANGUP_ASYNCGOTO, ast_explicit_goto should return..
  Author: Tinet-mucw
  Date:   2025-06-18

  Under certain circumstances the context/extens/prio are set in the ast_async_goto, for example action Redirect.
  In the situation that action Redirect is broken by GotoIf this info is changed.
  that will causes confusion in dialplan execution.

  Resolves: #1273

#### res_musiconhold.c: Ensure we're always locked around music state access.
  Author: Sean Bright
  Date:   2025-04-08


#### res_musiconhold.c: Annotate when the channel is locked.
  Author: Sean Bright
  Date:   2025-04-08


#### res_musiconhold: Appropriately lock channel during start.
  Author: Jaco Kroon
  Date:   2024-12-19

  This relates to #829

  This doesn't sully solve the Ops issue, but it solves the specific crash
  there.  Further PRs to follow.

  In the specific crash the generator was still under construction when
  moh was being stopped, which then proceeded to close the stream whilst
  it was still in use.

  Signed-off-by: Jaco Kroon <jaco@uls.co.za>