]> git.ipfire.org Git - thirdparty/asterisk.git/commit
projects / thirdparty / asterisk.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b05d7e8) | patch
res_rtp_asterisk.c: Check DTLS packets against ICE candidate list
authorGeorge Joseph <gjoseph@sangoma.com>
Thu, 9 Nov 2023 16:14:03 +0000 (09:14 -0700)
committerGeorge Joseph <gjoseph@sangoma.com>
Thu, 14 Dec 2023 18:48:10 +0000 (18:48 +0000)
commitb9ebccf0645408f31e5dc0e2677116177c5f8dd0
tree2fe771ee695ef9cf4c43509c8af69c5f815c1c40tree
parentb05d7e890153cf35737bc7f1efe3d298ca3e6b4bcommit | diff
res_rtp_asterisk.c: Check DTLS packets against ICE candidate list

When ICE is in use, we can prevent a possible DOS attack by allowing
DTLS protocol messages (client hello, etc) only from sources that
are in the active remote candidates list.

Resolves: GHSA-hxj9-xwr8-w8pq
res/res_rtp_asterisk.c diff | blob | blame | history
Mirror of https://github.com/asterisk/asterisk.git