[sr-dev] [ openser-Bugs-2851214 ] Registrar leaks contacts from unrelated users

[SourceForge.net]

Bugs item #2851214, was opened at 2009-09-04 16:26
Message generated for change (Tracker Item Submitted) made by axlh
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=743020&aid=2851214&group_id=139143

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: modules
Group: ver 1.5.x
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Alex Hermann (axlh)
Assigned to: Nobody/Anonymous (nobody)
Summary: Registrar leaks contacts from unrelated users

Initial Comment:
When an AOR with no active registrations queries for its current bindings (Contact: *, Expires: 0), the registrar returns the bindings of the AOR who was last handled by the same process instead of returning an empty list. Attached patch fixes this. Applies to 1.4 as well as 1.5.

Btw, why does every caller of get_urecord() check for negative return code??? The function can only return 0 or 1.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=743020&aid=2851214&group_id=139143