[Freeswitch-users] libSRTP version issue

[Fred Schulz]

Hi all,

 

as I can see freeSWITCH is using the cisco srtp reference implemenation. The version in FS 1.4.26 is 1.4.3 which is a little bit old and vulnerable by DoS Attacks according to this:

 

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6360

 

I just wanted to ask if the freeSWITCH will use the Version 1.5.4 or 2.0.0-pre which can be found here:

 

https://github.com/cisco/libsrtp/

 

 

 

I just tried to use the „new“ one while compiling but there are some declaration and invalig operator errors while making.

 

„

In file included from /usr/local/src/freeswitch/libs/srtp/crypto/include/datatypes.h:50:0,

                 from src/switch_rtp.c:53:

/usr/local/src/freeswitch/libs/srtp/crypto/include/integers.h:102:16: error: conflicting types for 'uint64_t'

In file included from /usr/lib/gcc/x86_64-linux-gnu/4.7/include/stdint.h:3:0,

                 from /usr/include/inttypes.h:28,

                 from ./src/include/switch_platform.h:123,

                 from ./src/include/switch.h:112,

                 from src/switch_rtp.c:39:

/usr/include/stdint.h:56:27: note: previous declaration of 'uint64_t' was here

In file included from src/switch_rtp.c:55:0:

/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:82:3: error: type of bit-field 'cc' is a GCC extension [-Werror=edantic]

/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:83:3: error: type of bit-field 'x' is a GCC extension [-Werror=edantic]

/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:84:3: error: type of bit-field 'p' is a GCC extension [-Werror=edantic]

/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:85:3: error: type of bit-field 'version' is a GCC extension [-Werror=edantic]

/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:86:3: error: type of bit-field 'pt' is a GCC extension [-Werror=edantic]

/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:87:3: error: type of bit-field 'm' is a GCC extension [-Werror=edantic]

/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:125:3: error: type of bit-field 'rc' is a GCC extension [-Werror=edantic]

/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:126:3: error: type of bit-field 'p' is a GCC extension [-Werror=edantic]

/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:127:3: error: type of bit-field 'version' is a GCC extension [-Werror=edantic]

/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:128:3: error: type of bit-field 'pt' is a GCC extension [-Werror=edantic]

src/switch_rtp.c: In function 'rtcp_generate_sender_info':

src/switch_rtp.c:1864:16: error: invalid operands to binary << (have 'double' and 'int')

cc1: all warnings being treated as errors

make[1]: *** [src/libfreeswitch_la-switch_rtp.lo] Fehler 1

make[1]: Leaving directory `/usr/local/src/freeswitch'

make: *** [all] Fehler 2

„

 

Is there something planned?

 

Thanks you

Fred Schulz

blackned GmbH

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160614/0ee29ea0/attachment.html