<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#ffffff" text="#000000">
<pre>This message was generated by the Security Alerts service ( Free Trial 14th of August - 14th of September )
<a class="moz-txt-link-freetext" href="http://www.opensips.org/Resources/AlertsMain">http://www.opensips.org/Resources/AlertsMain</a>
<b>
SVN commit</b>:
<a class="moz-txt-link-freetext" href="http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9195">http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9195</a>
<b>Severity</b>: High
<b>Version</b> : 1.8, trunk
<b>Affected modules</b> : ACC
<b>Effect</b> : Missing CDRs in the back-end
<b>Affected scenarios</b>: The issue appeared when the ACC module was set to generate proper
CDRs with the duration field also populated ( cdr_flag ). When also setting the
db_extra_bye parameter in order to have some extra accounting for variable evaluated at
BYE time, internally ended dialogs ( expired dialogs or forcefully terminated on the
OpenSIPS side via an MI command ) would not generate accounting records.
<b>Description:</b> The bug was introduced along with the db_extra_bye feature, due to an
incorrectly treated error case.
In order to evaluate the pseudo-variables set in the db_extra_bye parameter, OpenSIPS
requires the BYE SIP message pointer Because in the case of internally terminated dialogs
there is no actual SIP message received from the network level, OpenSIPS would fail to
evaluate the pseudo-variables, and then due to improper error handling, the accounting
process was stopped, and no CDR was generated in the back-end.
<b>Risks</b> : When doing the new type of accounting with CDRs, there was the risk of having
some missing CDRs, and thus if using CDR type accounting, upgrading is critical.
<b>Update</b> :
- if you have an SVN checkout, 1.8 and trunk were fixed; so
update to a revision later than 9194 (trunk) or 9195 (1.8 branch)
- if you have OpenSIPS from sources, download and apply the patch from
<a class="moz-txt-link-freetext" href="http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9195">http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9195</a>
or see the attached patch;
- if using tarballs, they were already regenerated (and include the fix)
- If using the official Debian package (apt.opensips.org), they are also
re-generated including the fix.
</pre>
<pre class="moz-signature" cols="72">--
Vlad Paiu
OpenSIPS Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a> </pre>
</body>
</html>