[sr-dev] LCR: defunct_gw() is dangerous

Iñaki Baz Castillo ibc at aliax.net
Thu Dec 29 13:43:08 CET 2011


2011/12/29 Iñaki Baz Castillo <ibc at aliax.net>:
> In the other side, please check this SIP request:
>
> --------------------------
> OPTIONS sip:bob at domain.com SIP/2.0
> Via: SIP/2.0/UDP 1.1.1.1;branch=qweqweqwe
> From: "Alice" <sip:alice at domain.com>;tag=tag1234
> To: "Bob" <sip:bob at domain.com>
> Bad-Header( lalala <sip:lalala at 1.2.3.4>
> Call-id: qweqweqweqwe
> Cseq: 1234 OPTIONS
> Content-Length: 0
> --------------------------
>
> This request is *invalid* since the "Bad-Header" header is fully
> malformed (it's not a header in fact), so it becomes an invalid whole
> SIP message.
> But send this request to Kamailio and Kamailio will happily forward
> it. And maybe the UAS receiving it will just *drop* the request rather
> than replying 400 (since it's not a valid SIP request).


The original "header" causing the problem in my system was the
following (number and IP replaced):

  P-Asserted-Identity(<sip: XXXXXXXX at XXX.XXX.XXX.XXX>)

Cheers.

-- 
Iñaki Baz Castillo
<ibc at aliax.net>



More information about the sr-dev mailing list