Module: sip-router
Branch: sr_3.0
Commit: af8f3e1536d1415ae757d868ff8cfcbb2578c2f5
URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=af8f3e1…
Author: Andrei Pelinescu-Onciul <andrei(a)iptel.org>
Committer: Andrei Pelinescu-Onciul <andrei(a)iptel.org>
Date: Tue Oct 13 20:11:25 2009 +0200
core: fix memleak in fixup_free*
fparam_free_contents() (which is what all the fixup_free* call in
sr) did not free the original string (which in sr is kept inside
the fixed fparam/gparam).
It should have no impact, since at this point nobody seems to use
any fixup_free* functions.
---
sr_module.c | 6 +++++-
1 files changed, 5 insertions(+), 1 deletions(-)
diff --git a/sr_module.c b/sr_module.c
index 5414529..1df69b7 100644
--- a/sr_module.c
+++ b/sr_module.c
@@ -1189,7 +1189,7 @@ void fparam_free_contents(fparam_t* fp)
case FPARAM_INT:
case FPARAM_STR:
/* nothing to do */
- return;
+ break;
case FPARAM_REGEX:
if (fp->v.regex){
regfree(fp->v.regex);
@@ -1225,6 +1225,10 @@ void fparam_free_contents(fparam_t* fp)
}
break;
}
+ if (fp->orig){
+ pkg_free(fp->orig);
+ fp->orig=0;
+ }
}
"
Try to avoid using keys larger then 1024 bytes. Large keys
significantly slow down the TLS connection handshake, thus limiting
the maximum SIP-router TLS connection rate.
"
Is this still a valid recommendation? Based on which size of CPU/system?
/O
Hello,
is anyone aware of a git command that downloads locally only one branch
of sip repository?
I searched on the web and found only some tools, but maybe there are
standard git commands to help.
Thanks,
Daniel
--
Daniel-Constantin Mierla
* Kamailio SIP Masterclass, Nov 9-13, 2009, Berlin
* http://www.asipto.com/index.php/sip-router-masterclass/
Hi all,
There is a permission problem if the daemon is started given -u and -g
parameters (sets up user and group for the process).
The do_suid function (defined in demonize.c) is called after the call to
init_modules(), so the mod_init functions of the configured module are
loaded before the call to do_suid. This wasn't a problem in 1.3 because
no module(I am aware off) use the uid and gid of the process to do
permission checks.
This has changed in 1.5, module carrierroute, as there is a check to see
if the route file in config-file mode (usually
/etc/kamailio/carrierroute.conf) has the right permission set on it
(Issues an warning if it's worldly writable and error if it's not
writable by the process owner). This of course is a problem because
kamailio hasn't yet setuid()/setgid() so the checks are done using the
wrong uid.
A correct (imho) course of action is to move the call to do_suid
function before the call to init_modules()(and before any other calls to
initialization functions).
I've attached a small patch that does this (tested).
There are any considerations on why the init_modules() should be called
with another uid/gid?
Greetings,
Marius
Index: main.c
===================================================================
--- main.c (revision 5937)
+++ main.c (working copy)
@@ -656,10 +656,6 @@
LM_WARN("using only the first listen address (no fork)\n");
}
- /* try to drop privileges */
- if (do_suid(uid, gid)==-1)
- goto error;
-
/* we need another process to act as the timer*/
if (start_timer_processes()!=0) {
LM_CRIT("cannot start timer process(es)\n");
@@ -752,7 +748,6 @@
/* all processes should have access to all the sockets (for sending)
* so we open all first*/
- if (do_suid(uid, gid)==-1) goto error; /* try to drop privileges */
/* udp processes */
for(si=udp_listen; si; si=si->next){
@@ -1278,6 +1273,12 @@
LM_INFO("no private memory pool configured, processes use system memory\n");
#endif
+ /* Set uid/gid */
+ if (do_suid(uid, gid)==-1){
+ LM_ERR("failed to drop privileges");
+ goto error; /* try to drop privileges */
+ }
+
/* Init statistics */
if (init_stats_collector()<0) {
LM_ERR("failed to initialize statistics\n");
@@ -1330,3 +1331,4 @@
cleanup(0);
return ret;
}
+
dear,
I want creat video client chat in net. So, I am using jmf2.1e to send and
recieve video.
Can I use kamailio OpenSER to relay two client video chat in the internet?
if it's possible how I can do that?
thinks.
Hello,
Attached are the minutes from the last meeting in Berlin. I also
uploaded them to the wiki:
http://sip-router.org/wiki/meetings/berlin_2009
The minutes are probably not complete because in addition to being a
scribe, I was also trying to be a meeting participant, well, I did my
best. Enjoy.
-- Jan