[Devel] Re: QOP workaround in uac_auth() doesn't work around...

[Bogdan-Andrei Iancu]

Hi Thomas,

I made a test setup and found the bug - instead, the qop val should not 
be populated as it crashes the response computation.
I applied the fix on trunk and 1.2

Thanks and regards,
Bogdan

Thomas Gelf wrote:
> Hi Bodgan,
>
> thanks for your reply! I'm probably unable to do the tests before the
> end of the next week as I'm really really busy right now. But I can
> confirm that OpenSER keeps crashing with "auth->qop = val;". To fix
> the problem I need to do nothing but simply recompiling uac.so with
> this line commented out.
>
> Btw: this is also true for older versions (tested it for example some
> time ago with an early pre-1.1 CVS-Version).
>
> Best regards,
> Thomas Gelf
>
>
> Bogdan-Andrei Iancu schrieb:
>> Hi Thomas,
>>
>> thanks for the report. I'm a bit puzzled why the crash occurs, so I 
>> need your help - could you try to get a core file? be sure and do 
>> "ulimit -c unlimited" before starting the proxy.
>>
>> regards,
>> bogdan
>>
>> Thomas Gelf wrote:
>>> Hi all,
>>>
>>> I finally found some time to prepare the migration of our VoIP platform
>>> to OpenSER 1.2. As I have seen there has been introduced my proposed
>>> "workaround" (to just go on and don't let the call fail :o) for qop in
>>> uac_auth:
>>>
>>> Atm in 1.2 it's done like this:
>>>
>>> > switch (state)
>>> > {
>>> >   case QOP_STATE:
>>> >     /* TODO - add qop support */
>>> >     auth->qop = val;
>>> >     LOG(L_NOTICE,"NOTICE:uac:parse_authenticate_body: no qop "
>>> >                  "support for the moment :-( -> ignoring\n");
>>> >     break;
>>>
>>> But unfortunately I discovered that it doesn't work - at least for me.
>>> The following example did the job (at least for OpenSER 1.1):
>>>
>>> >   case QOP_STATE:
>>> >     break;
>>>
>>> I didn't test this one with 1.2 - but I'm pretty sure that it would
>>> work. (As fas as I can remember I gave the first variant a quick try
>>> some time ago in 1.1 - and it failed there too.
>>>
>>> No core file, but at least some (cleaned up) syslog output:
>>> ...
>
>
> _______________________________________________
> Devel mailing list
> Devel at openser.org
> http://openser.org/cgi-bin/mailman/listinfo/devel
>