<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#ffffff" text="#000000">
<pre>This message was generated by the Security Alerts service ( Free Trial 14th of August - 14th of September )
<a class="moz-txt-link-freetext" href="http://www.opensips.org/Resources/AlertsMain">http://www.opensips.org/Resources/AlertsMain</a>
<b>
SVN commit</b>:
<a class="moz-txt-link-freetext" href="http://opensips.svn.sourceforge.net/opensips/?rev=9166">http://opensips.svn.sourceforge.net/opensips/?rev=9169</a>
<b>Severity</b>: Low
<b>Version</b> : 1.8 and trunk
<b>Affected modules</b> : dialog module
<b>Effect</b> : more dialog flags (P,p,B) than actually set
<b>Affected scenarios</b>: If using from script multiple time the create_dialog() function (in order to change some dialog
flags), the previously set flags (P,p,B) will still be considered (instead of being reset).
<b>Description:</b> instead of combining the existing dialog flags (with the new ones), we simply overriding existing parameters
with the new ones (when calling create_dialog() several times for the same INVITE request).
Old behavior:
create_dialog("Pp");
create_dialog("B");
=> resulting flags = "PpB"
New behavior:
create_dialog("Pp");
create_dialog("B");
=> resulting flags = "B"
<b>Risks</b> : have a unexpected dialog behavior (undesired pinging, or undesired BYE on timeout)
<b>Update</b> :
- if you have an SVN checkout, 1.8 and trunk were fixed; so
update to a revision later than 9169 (trunk) or 9170 (1.8 branch).
- if you have OpenSIPS from sources see the attached patch;
- if using tarballs, they were already regenerated (and include the fix). Available only for 1.8.
- If using the official Debian package (apt.opensips.org), they are also
re-generated including the fix (available for 1.8 and trunk).
</pre>
<br>
<pre class="moz-signature" cols="72">--
Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a></pre>
</body>
</html>