| 00:38.03 | seanbright | hello, i've created a private issue about a crash with a version of asterisk that a lot of people are probably still using about a remote vulnerability... |
| 00:38.16 | seanbright | i would like to re-iterate that i have made it a private issue |
| 00:38.36 | seanbright | now, i would like to ask on a public mailing list or IRC channel: was making it private correct? |
| 00:38.51 | seanbright | slaps forehead |
| 00:44.07 | lmadsen | seanbright: better safe than sorrt |
| 00:44.43 | seanbright | it just defeated the point, is all. |
| 00:45.06 | lmadsen | ah |
| 00:45.07 | lmadsen | heh |
| 00:45.19 | seanbright | is referring to 13953 and the follow-up post to the -dev mailing lsit |
| 00:47.43 | stevie_ramjet | checks the -dev list |
| 00:48.44 | stevie_ramjet | lol |
| 00:48.56 | seanbright | he may not have said what the exploit was |
| 00:49.01 | stevie_ramjet | luckily he didn't disclose details on the dev list. |
| 00:49.13 | seanbright | but anyone capable of taking advantage of it could EASILY find that based on his brief desc |
| 00:49.45 | seanbright | whatev. |
| 00:50.22 | stevie_ramjet | looks at the issue. |
| 00:50.38 | seanbright | ... my statements assume he is right |
| 00:50.55 | stevie_ramjet | I would be willing to bet that this is not a problem in non-1.2 branches and trunk. |
| 00:51.03 | stevie_ramjet | but still. |
| 00:51.17 | stevie_ramjet | Sending that to the dev list was a ... let's just call it a "silly" thing to do. |
| 00:51.18 | seanbright | aye |
| 00:51.22 | seanbright | yes. |
| 00:51.35 | seanbright | i'm glad we are in agreement. |
| 00:51.38 | seanbright | heh |
| 00:52.57 | stevie_ramjet | but, the reporter was helpful enough to point out the place where the error is, so we can fix it pretty easily. |
| 00:53.10 | seanbright | nods |
| 00:53.32 | stevie_ramjet | The problem is that a security advisory needs to go out lickety-split since there is public awareness due to the dev list e-mail. |
| 00:54.03 | seanbright | but for that to happen we need a release made, right? |
| 00:54.21 | snuff-home | yep |
| 00:54.30 | stevie_ramjet | right. |
| 00:54.41 | snuff-home | bbl |
| 00:54.51 | seanbright | heh |
| 00:54.55 | stevie_ramjet | The advisory and release may have to wait until Monday. |
| 00:55.07 | stevie_ramjet | But at least the fix can be available in SVN if people need the fix earlier. |
| 00:55.14 | seanbright | hmmm |
| 00:55.17 | seanbright | do you want to do that? |
| 00:55.32 | seanbright | that would be pointing out the exploit explicitly |
| 00:55.42 | seanbright | 2 days before we can release anything to fix it |
| 00:56.23 | stevie_ramjet | Yeah...it is a tricky situation. |
| 00:56.37 | stevie_ramjet | Putting in a fix in 1.2 just screams "security fix" |
| 00:56.44 | stevie_ramjet | Even if the commit message is vague. |
| 00:56.44 | seanbright | aye. |
| 00:56.46 | wedhorn | Not sure of the processes, but if the issue is as readily visible as is apparent from the above conversation, shouldn't a notice at least be sent in case some does write an exploit |
| 00:57.27 | stevie_ramjet | wedhorn, well, the problem is that a notice without a ready fix does more harm than good, I would think. |
| 00:57.48 | seanbright | not sure what is considered responsible disclosure in this case |
| 00:57.49 | wedhorn | yeah, I can see both sides, and it seems a gamble either way |
| 00:58.01 | stevie_ramjet | I think I may need to make some calls. |
| 00:58.12 | seanbright | russellb is going to love you |
| 00:58.29 | seanbright | he's at home with the mrs. enjoying dinner and a movie. |
| 00:58.30 | seanbright | heh |
| 00:58.35 | stevie_ramjet | oh... |
| 00:58.41 | stevie_ramjet | already started calling him :) |
| 00:58.46 | seanbright | i was kidding |
| 00:58.50 | seanbright | i have no idea what he is doing |
| 00:58.57 | stevie_ramjet | it was believable though. |
| 00:59.12 | seanbright | if i was married, i wouldn't be here talking to you either ;) |
| 00:59.30 | seanbright | stevie_ramjet <3 |
| 01:08.08 | *** join/#asterisk-dev obnauticus (n=lol@about/windows/regular/obnauticus) |
| 01:11.43 | seanbright | damn wendy's |
| 01:11.48 | seanbright | i did not order a diet coke |
| 01:15.36 | stevie_ramjet | <3 diet coke |
| 01:16.22 | seanbright | </3 |
| 01:17.35 | *** join/#asterisk-dev russellb (n=russell@asterisk/digium-open-source-team-lead/russellb) |
| 01:17.35 | *** mode/#asterisk-dev [+o russellb] by ChanServ |
| 01:18.08 | seanbright | speak of el diablo |
| 01:19.45 | stevie_ramjet | seanbright, your talk of wendy's makes me want to get a frosty |
| 01:19.56 | russellb | hm, IRC appears to still be here. |
| 01:19.58 | seanbright | i had a classic triple |
| 01:20.07 | seanbright | 3 all beef patties |
| 01:20.08 | stevie_ramjet | was it truly classic? |
| 01:20.15 | seanbright | 'twas |
| 01:20.34 | seanbright | russellb: it's good to have you back, if only for a short time |
| 01:20.36 | seanbright | ;) |
| 01:20.41 | russellb | heh, thanks :) |
| 01:21.24 | seanbright | i gotta say the diet coke basically ruined it, though. |
| 01:21.30 | russellb | diet coke owns |
| 01:21.44 | seanbright | pffft |
| 01:22.30 | russellb | wish i had some. |
| 01:22.39 | seanbright | i wish i had a normal coke |
| 01:22.40 | russellb | but, i have something much better, diet dr. pepper |
| 01:23.03 | seanbright | i just had a burger with 3 all beef patties and a large order of french fries |
| 01:23.09 | seanbright | i'm not fooling anyone with the diet coke |
| 01:24.16 | stevie_ramjet | seanbright, in my younger and larger days I used to do just that. |
| 01:24.27 | stevie_ramjet | Get the absolute biggest thing on the menu with a diet coke to drink. |
| 01:24.32 | seanbright | <PROTECTED> |
| 01:24.41 | stevie_ramjet | But that was just because I love the taste of diet coke. |
| 01:25.00 | russellb | same .. all the non-diet sodas are too sweet for me |
| 01:25.02 | seanbright | well no one is perfect. |
| 01:25.42 | seanbright | so what's the dilly |
| 01:25.48 | seanbright | we cutting a release? |
| 01:25.59 | seanbright | and by 'we' i mean 'you' |
| 01:26.31 | russellb | stevie_ramjet had a call to make first |
| 01:27.35 | stevie_ramjet | seanbright, not tonight. |
| 01:27.55 | seanbright | ah |
| 01:28.03 | seanbright | well then i'll just enjoy my beverage |
| 01:28.21 | seanbright | you guys can review my ao2 patch while you're here! hooray! |
| 01:28.23 | seanbright | heh |
| 01:28.25 | russellb | heh |
| 01:28.30 | russellb | i will try to look sometime this week ... |
| 01:28.34 | seanbright | or you can go back to what you were doing |
| 01:28.44 | russellb | if i can get enough other stuff of my back :( |
| 01:28.51 | seanbright | i tell ya |
| 01:28.59 | seanbright | you gotta delegate, man. |
| 01:29.02 | file | impossible :( |
| 01:29.04 | seanbright | points at stevie_ramjet |
| 01:29.06 | russellb | unpossible |
| 01:29.16 | russellb | stevie_ramjet is plenty loaded with tasks, trust me :) |
| 01:29.30 | seanbright | fine, i'll do it. send over the NDA. |
| 01:29.31 | seanbright | heh |
| 01:29.37 | *** join/#asterisk-dev kamanashisroy (n=kamanash@119.30.34.2) |
| 01:29.41 | russellb | maybe someone (seanbright) needs to move to HSV and help out :-p |
| 01:30.10 | seanbright | you know, now that you mention it, that /does/ sound like the most reasonable solution |
| 01:30.14 | seanbright | ;) |
| 01:30.21 | russellb | heh |
| 01:30.27 | stevie_ramjet | seanbright, I'll take a look at your ao2 thingie on reviewboard... |
| 01:30.39 | stevie_ramjet | I shouldn't have ended that with an ellipsis. |
| 01:30.41 | russellb | in all seriousness, you have been quite helpful as it is, and I will continue to let you know when special things come up :) |
| 01:30.51 | seanbright | stevie_ramjet: that you for including the word 'ao2' in that sentence |
| 01:30.59 | stevie_ramjet | seanbright, no prob bob |
| 01:31.02 | russellb | tries to pronounce ao2 |
| 01:31.04 | stevie_ramjet | But now that you mention it... |
| 01:31.12 | seanbright | ow-too |
| 01:31.17 | stevie_ramjet | that time I did mean to end in an ellipsis. |
| 01:31.41 | seanbright | i was trying to say "thank you for inclu..." not "that you" |
| 01:31.45 | seanbright | but i can't type. |
| 01:31.54 | stevie_ramjet | It's all good. |
| 01:31.54 | russellb | wonders what would happen if i just randomly deployed my reviewboard auth from mantis patch |
| 01:32.07 | stevie_ramjet | russellb, the world would end. |
| 01:32.32 | russellb | probably |
| 01:33.06 | seanbright | stevie_ramjet: while the whole patch needs reviewing, the interesting bit is main/astobj2.c:621-ish |
| 01:33.24 | file | pushes russellb |
| 01:33.30 | russellb | you could do what mnicholson did the other day |
| 01:33.36 | seanbright | also, astobj2 is a mess with all the REF_DEBUG and ao2_t_* silliness. |
| 01:33.38 | russellb | and just add a comment to the code you want special attention on |
| 01:33.48 | seanbright | good call |
| 01:33.55 | russellb | i thought that was a good idea |
| 01:34.03 | seanbright | you should be the open source team lead |
| 01:34.08 | seanbright | with ideas like that. |
| 01:34.09 | seanbright | ;) |
| 01:34.14 | russellb | O.O |
| 01:35.36 | russellb | throws a mouse at file |
| 01:35.41 | file | dodges |
| 01:36.14 | seanbright | comment added. |
| 01:36.25 | russellb | response not added |
| 01:36.50 | seanbright | witty retort not found |
| 01:36.51 | russellb | thanks a lot for working on that |
| 01:36.59 | seanbright | my pleasure |
| 01:37.16 | seanbright | not really though |
| 01:37.26 | seanbright | astobj2.h is ugly |
| 01:37.27 | russellb | orly |
| 01:37.31 | seanbright | next patch is cleaning it up |
| 01:37.38 | russellb | that would rock :) |
| 01:37.41 | seanbright | 'svn rm' will do nicely |
| 01:37.43 | seanbright | heh |
| 01:37.52 | seanbright | also, OBJ_MULTIPLE... |
| 01:38.01 | stevie_ramjet | seanbright, I know who you can thank for astobj2.h ugliness.. |
| 01:38.03 | russellb | i added more ifdef foo in there the other day |
| 01:38.04 | seanbright | why couldn't we just return an 'anonymous' ao2_container? |
| 01:38.05 | russellb | i'm sure that helped, heh |
| 01:38.10 | seanbright | stevie_ramjet: me too |
| 01:38.14 | seanbright | codefreeze-lap: thanks! |
| 01:38.15 | seanbright | heh |
| 01:38.17 | stevie_ramjet | lol |
| 01:38.22 | stevie_ramjet | I wasn't going to point fingers. |
| 01:38.31 | stevie_ramjet | whistles innocently |
| 01:38.38 | seanbright | codefreeze-lap <3 |
| 01:38.47 | russellb | seanbright: that's quite a nice lil' idea you got there. |
| 01:39.01 | seanbright | russellb: thanks, i thought so too. |
| 01:39.09 | russellb | I like it. |
| 01:39.42 | seanbright | i'll have putnopvut implement it when i talk to him |
| 01:39.55 | russellb | lol |
| 01:42.32 | russellb | shouldn't be hard. |
| 01:42.42 | seanbright | agreed. |
| 01:42.56 | seanbright | i don't want to touch any of that stuff until this patch is committed though. |
| 01:43.05 | russellb | nods |
| 01:44.37 | seanbright | bourne ultimatum on the home box office |
| 01:45.13 | russellb | is finally getting around to looking at wedding photos |
| 01:45.13 | russellb | heh |
| 01:45.15 | stevie_ramjet | russellb, I'm about to go to the nook to meet rusty. Interested? |
| 01:45.31 | stevie_ramjet | oh, nvm if you're looking at wedding photo stuff. |
| 01:45.40 | russellb | thanks for the invite ... i'm going to be lame and lazy and stay at home |
| 01:45.46 | russellb | have fun! |
| 01:46.35 | stevie_ramjet | All righty! |
| 01:46.53 | russellb | disappears again |
| 02:01.08 | stevie_ramjet | seanbright, added a comment to your ao2 patch on reviewboard. |
| 02:01.20 | stevie_ramjet | I'm bouts to head out and drink some stuff that will make me happy. |
| 02:03.08 | stevie_ramjet | Later! |
| 04:26.25 | *** join/#asterisk-dev mog (n=mog@c-68-62-219-86.hsd1.al.comcast.net) |
| 04:26.25 | *** mode/#asterisk-dev [+o mog] by ChanServ |
| 05:45.58 | *** join/#asterisk-dev obnauticus (n=lol@about/windows/regular/obnauticus) |
| 07:55.04 | *** join/#asterisk-dev tzafrir_laptop (n=tzafrir@local.xorcom.com) |
| 07:55.04 | *** mode/#asterisk-dev [+o tzafrir_laptop] by ChanServ |
| 12:04.05 | *** join/#asterisk-dev snuff-home (n=none@60-240-117-7-nsw-pppoe.tpgi.com.au) |
| 12:04.05 | *** mode/#asterisk-dev [+o snuff-home] by ChanServ |
| 12:05.17 | festr_ | putnopvut: hi |
| 12:05.36 | festr_ | putnopvut: looking at bugfix in file.c ast_closestream function. |
| 12:06.53 | festr_ | putnopvut: the test in this function is redundand now |
| 13:32.23 | *** join/#asterisk-dev af_ (n=getsmart@88-149-230-152.dynamic.ngi.it) |
| 13:32.26 | af_ | hi to all |
| 13:38.31 | af_ | I am trying to connect to nikotel.com network without success. I am in doubt about the create_addr function in chan_sip.c |
| 13:56.16 | seanbright | looks at create_addr |
| 13:57.24 | seanbright | af_: what is your doubt about create_addr? |
| 13:58.00 | af_ | it gets someting like: <number>@nikotelcom anda says no such host |
| 13:58.15 | af_ | I have other errors as well |
| 13:58.23 | seanbright | could you pastebin some of those errors? |
| 13:58.25 | seanbright | ~pb |
| 13:58.25 | jbot | [~pb] A "pastebin" is a web-based service where you can paste anything over 3 lines without flooding the channel. Here are links to a few : http://www.pastebin.com , http://pastebin.ca , http://channels.debian.net/paste , http://paste.lisp.org , http://www.rafb.net/paste, or , http://bin.cakephp.org/ |
| 13:58.28 | af_ | the nikotel.com give a 3xxx error |
| 13:58.44 | af_ | uhm not now, I have to boot the * system and retry |
| 13:58.48 | seanbright | ok |
| 13:59.06 | seanbright | goes back to other things in the meantime |
| 13:59.06 | af_ | but I can come back or mail to a mailing list |
| 13:59.23 | af_ | there is a mail list specific to dev? |
| 13:59.44 | af_ | I think that create_addr (if I understood) should strip <bumber>@ string |
| 13:59.51 | af_ | as it does with the port |
| 13:59.59 | af_ | just my personal idea |
| 14:00.02 | seanbright | what version of asterisk? |
| 14:00.07 | af_ | 1.6.0.1 |
| 14:00.30 | seanbright | have you searched the bug tracker to see if there is anything similar? |
| 14:00.39 | seanbright | have you asked in #asterisk? it may just be a configuration problem |
| 14:00.42 | af_ | I need to subscribe to that? |
| 14:01.03 | seanbright | subscribe to what? |
| 14:01.08 | af_ | I am pretty sure it's not a conf problem. If add a peer |
| 14:01.14 | af_ | to the bug tracker? |
| 14:01.18 | seanbright | http://bugs.digium.com/ |
| 14:01.23 | af_ | let's see it |
| 14:01.44 | seanbright | also, if you are having a non-configuration related problem, surely a lot of people would be having similar problems |
| 14:01.50 | seanbright | and we haven't seen that |
| 14:01.52 | seanbright | which makes me think it's configuration related |
| 14:01.58 | seanbright | i would try asking over in #asterisk |
| 14:02.11 | seanbright | but i would have some log information in hand before asking there |
| 14:02.18 | seanbright | they are not patient :) |
| 14:03.33 | af_ | I have reporetd that days ago |
| 14:03.52 | seanbright | and? |
| 14:04.27 | af_ | they send to this channel |
| 14:04.35 | seanbright | i see |
| 14:04.44 | af_ | what could I search for in the mantis? |
| 14:05.09 | seanbright | the errors you are getting? |
| 14:05.31 | af_ | http://bugs.digium.com/view.php?id=13758 |
| 14:05.36 | af_ | this looks the same |
| 14:05.55 | af_ | exactly the same |
| 14:06.37 | seanbright | ok |
| 14:06.44 | seanbright | well then you should apply that patch and see if it fixes your problem |
| 14:07.12 | seanbright | cd /path/to/asterisk/source |
| 14:07.15 | seanbright | wget 'http://bugs.digium.com/file_download.php?file_id=20211&type=bug' -O - | patch -p0 |
| 14:07.21 | seanbright | make && make install |
| 14:07.49 | seanbright | but you can't do that now since your machine is turned off :) |
| 14:08.05 | af_ | I will do tomorrow morning, the system it's not here :) |
| 14:09.13 | seanbright | gotcha |
| 14:09.19 | seanbright | well good luck and god speed |
| 14:09.25 | seanbright | wanders off |
| 14:09.38 | af_ | I am not getting the patch file... |
| 14:09.44 | seanbright | why not? |
| 14:11.42 | af_ | oh yes |
| 14:11.45 | af_ | got it thanks |
| 14:11.57 | seanbright | splendid. |
| 14:12.02 | seanbright | NOW i am going away |
| 14:12.09 | af_ | yeah, there is a check for @ |
| 14:12.20 | af_ | tahnks so much |
| 14:12.29 | af_ | have good one |
| 14:15.40 | *** join/#asterisk-dev telecos (n=sergio@184.167.219.87.dynamic.jazztel.es) |
| 14:17.12 | *** join/#asterisk-dev frawd (n=francois@18.pool85-53-6.dynamic.orange.es) |
| 14:18.53 | *** join/#asterisk-dev DarkRift (n=dark@65.92.171.184) |
| 14:21.16 | frawd | hello core developers and others, if anyone is awake, I'm new and want to know if there is a common function in the core of asterisk that is called in any type of transfer situation (independently from channel technology). |
| 14:21.42 | frawd | I saw ast_channel_masquerade, but it seems to be used for other things as well like call pickup, and sometimes transfers prefer to call ast_async_goto if I'm not wrong. |
| 14:22.41 | frawd | My goal is to call some function in any type of transfer situation (blind, attended and park). Do I have to implement the call in each and every channel transfer function? |
| 15:13.34 | codefreeze-lap | seanbright: ao2 foo getting to you? welcome to the club.... |
| 15:17.56 | codefreeze-lap | frawd: Well, there's several ways to initiate xfers; some ways involve the channel driver, some don't. For instance, hookflash in the dahdi driver. sip has some xfer capability. Another way is in the features stuff, # for blind xfer, etc. |
| 15:19.01 | codefreeze-lap | seanbright: tomm. I'll look at your reviewboard stuff. |
| 15:19.03 | frawd | codefreeze-lap, but wether it comes from a channel driver or from features, is there some core function called to handle CDR or things like that? |
| 15:19.42 | frawd | or to set some flags in the channel to know if it was transfered, ... |
| 15:19.49 | codefreeze-lap | Not at the moment. Is your research driven by CDR needs? |
| 15:20.01 | frawd | is that all done in the channel/features specific transfer function? |
| 15:20.05 | frawd | yes :-) |
| 15:20.40 | codefreeze-lap | Blind xfers set BLINDTRANSFER type channel vars.... I have a patch out to set the same for attended xfers.... |
| 15:20.42 | frawd | i want to try and fix this "transfer-CDR" problem whatever it takes |
| 15:21.01 | frawd | lost too many clients because of that |
| 15:21.09 | codefreeze-lap | I've been working on it for the last year or so. |
| 15:21.15 | frawd | oh... |
| 15:21.28 | frawd | then i'll keep on loosing clients i guess |
| 15:22.35 | frawd | just to know: my idea is to implement CDR inheritence from the transferer to the transferee whenever a transfer happens. |
| 15:22.35 | frawd | does this sound ok? |
| 15:22.35 | codefreeze-lap | Don't lose all hope. I think part of the problem is we don't really have a spec to say what is Asterisk is going to supply; and the code follow it. |
| 15:23.14 | frawd | i've already written the function that should do it, but i just need to call it like so: ast_cdr_transfer(transferer, transferee) |
| 15:23.19 | codefreeze-lap | As to the inheritance, the newcdr branch (for CEL) does have the linkedid field, which is 'inherited'.... I call it viral... |
| 15:23.23 | frawd | but i don't know where... |
| 15:23.45 | frawd | sorry, i don't have time to wait for it :-( |
| 15:23.59 | frawd | i want the smallest fix possible, at least for 1.4 branch |
| 15:24.24 | frawd | but i'll test the CEL things, it sounds very nice |
| 15:25.15 | codefreeze-lap | It's a different approach... |
| 15:25.40 | codefreeze-lap | and, CEL doesn't output CDR's.... that's got to be done yet. |
| 15:26.05 | codefreeze-lap | frawd: gtg.... look for me later |
| 15:28.17 | frawd | codefreeze-lap, me too, i'll be there in a couple of hours |
| 15:31.53 | seanbright | codefreeze-lap: it's a relatively minor change |
| 15:32.07 | seanbright | codefreeze-lap: and i already have a micro-optimization to introduce |
| 15:32.35 | seanbright | going to do that now. |
| 15:52.03 | seanbright | silly svn mirror is out of sync |
| 16:21.10 | *** join/#asterisk-dev schmooze (n=schmooze@rrcs-67-52-214-19.west.biz.rr.com) |
| 17:03.33 | *** join/#asterisk-dev outtolunc (n=me@c-67-188-204-139.hsd1.ca.comcast.net) |
| 17:04.32 | *** join/#asterisk-dev outtolunc (n=me@c-67-188-204-139.hsd1.ca.comcast.net) |
| 18:00.45 | *** join/#asterisk-dev write_erase (n=Olivier@royale.aixmarseille.com) |
| 18:43.06 | *** join/#asterisk-dev obnauticus (n=lol@about/windows/regular/obnauticus) |
| 21:17.56 | *** join/#asterisk-dev outtolunc (n=me@c-67-188-204-139.hsd1.ca.comcast.net) |
| 22:01.19 | write_erase | Hi... Any tools for troubleshooting channel locks problems ? thx |
| 22:53.37 | *** join/#asterisk-dev telecos (n=sergio@184.167.219.87.dynamic.jazztel.es) |
| 23:43.43 | *** join/#asterisk-dev De_Mon (i=de_mon@fl-67-77-166-5.dyn.embarqhsd.net) |
| 23:52.15 | *** join/#asterisk-dev kamanashisroy (n=kamanash@119.30.34.3) |