asterisk users - Feb 2004 - Patching Asterisk for OpenH323 ASN.1 Vulnera bilities

Hi, 

In the Makefile inside asterisk/channels/h323 directory, there's a line like
this:
CFLAGS += -I$(PWLIBDIR)/include/ptlib/unix -I$(PWLIBDIR)/include

try to use "-I$(PWLIBDIR)/include" ONLY, it should work.  I've
compiled it
with pwlib 1_6_2, which works fine

leo

-----Original Message-----
From: Adam Hart [mailto:adam@teragen.com.au]
Sent: Thursday, February 26, 2004 6:43 AM
To: asterisk-users@lists.digium.com
Subject: Re: [Asterisk-Users] Patching Asterisk for OpenH323 ASN.1
Vulnerabilities


Wierd errors, the actual library compiled fine though? Cause pdirect.h
doesn't been touched for 5 months

----- Original Message ----- 
From: "Jim Rosenberg" <jr@amanue.com>
To: <asterisk-users@lists.digium.com>
Sent: Thursday, February 26, 2004 9:33 AM
Subject: Re: [Asterisk-Users] Patching Asterisk for OpenH323 ASN.1
Vulnerabilities

> On Thu, Feb 26, 2004 at 09:13:20AM +1100, Adam Hart wrote:
> > Yes, asterisk is vulnerable if you have H.323 running.
>
> > What happens when you try and compile asterisk with the latest version
of
> > OpenH323, it's been a few months since i've done it but it
used to work.
>
> A flood of errors. Starting off like this:
>
> In file included from
/local/dist/asterisk/pwlib_1.6.0/include/ptlib.h:169,
>                  from ast_h323.h:30,
>                  from ast_h323.cpp:29:
> /local/dist/asterisk/pwlib_1.6.0/include/ptlib/unix/ptlib/pdirect.h:78:
syntax
>    error before `protected'
> /local/dist/asterisk/pwlib_1.6.0/include/ptlib/unix/ptlib/pdirect.h:80:
syntax
>    error before `*' token
> In file included from
/local/dist/asterisk/pwlib_1.6.0/include/ptlib.h:181,
>                  from ast_h323.h:30,
>                  from ast_h323.cpp:29:
> /local/dist/asterisk/pwlib_1.6.0/include/ptlib/unix/ptlib/config.h:53:
syntax
>    error before `public'
> /local/dist/asterisk/pwlib_1.6.0/include/ptlib/unix/ptlib/config.h:55:
destructors
>    must be member functions
> /local/dist/asterisk/pwlib_1.6.0/include/ptlib/unix/ptlib/config.h:57:
syntax
>    error before `protected'
> In file included from
/local/dist/asterisk/pwlib_1.6.0/include/ptlib.h:187,
>                  from ast_h323.h:30,
>                  from ast_h323.cpp:29:
> /local/dist/asterisk/pwlib_1.6.0/include/ptlib/args.h:121: syntax error
before
>    `{' token
>
> (This isn't the actual "latest" version, but the one
published on the
> OpenH323 mailing list as the one to use to pick up the patch for the ASN.1
> problem.)
>
> -Thanks, Jim
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users@lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
_______________________________________________
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

On Thu, Feb 26, 2004 at 09:18:45AM +0800, LEOLCH@hgc.com.hk
wrote:
> In the Makefile inside asterisk/channels/h323 directory, there's a line
like
> this:
> CFLAGS += -I$(PWLIBDIR)/include/ptlib/unix -I$(PWLIBDIR)/include
> 
> try to use "-I$(PWLIBDIR)/include" ONLY, it should work. 
I've compiled it
> with pwlib 1_6_2, which works fine
> 
> leo
Sigh. I am having a very rough time here. Could you please post exactly
which versions of Asterisk and OpenH323 you used? When I use your advice
above I get a successful build, but I haven't got a single call to actually
*work* through H.323. Here are my results (all trials are Asterisk 0.7.2):

OpenH323 1.13.0 / Pwlib 1.6.0: Asterisk segfaults when it gets an H.323 call.

OpenH323 1.13.2 / Pwlib 1.6.3: Channel won't load, there's an unresolved
symbol.

OpenH323 1.13.2 / Pwlib 1.6.2: Asterisk appears to be fully stable. As far
as Asterisk is concerned, everything works: calls are made, answered,
bridged, all looks fine from the console. But nothing is actually making
it *back* through H.323 from the Asterisk end. When I call Asterisk through
H.323, Asterisk thinks things are fine, but from the calling end it
thinks no one answered. When I call from the Asterisk end, I never hear
anything that sounds like an answer.

Now this looks *VERY* familiar. It sure is like the H.323 problems I had
right at first until I caught on to using *only* G.711 A-law. Once I
started making sure everyone was on ALAW, H.323 starting working fine
(except for DTMF, but that's a subject for a new thread ...)

* * *

This particular siege has been really frustraing. I hate to seem like
I'm whining, but really there should be an "official" patch here,
and
asterisk.org should point people properly so that new downloaders who
need to build H.323 support will get the patched version.

Hi, all

I wonder when passing calls through asterisk with H323, is there anyway to
find out what codec the calls are using, anyone can help please, thanks alot
!

TC
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.590 / Virus Database: 373 - Release Date: 2/16/2004