please file a jira for this, I'll need to review this<span></span><br><br>On Tuesday, June 14, 2016, Fred Schulz <<a href="mailto:lte@lte-net.de">lte@lte-net.de</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div bgcolor="white" lang="DE" link="#0563C1" vlink="#954F72"><div><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">Hi all,<u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt"> <u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">as I can see freeSWITCH is using the cisco srtp reference implemenation. The version in FS 1.4.26 is 1.4.3 which is a little bit old and vulnerable by DoS Attacks according to this:<u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt"> <u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt"><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6360" target="_blank"><span style="color:#0b4cb4">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6360</span></a><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt"> <u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">I just wanted to ask if the freeSWITCH will use the Version 1.5.4 or 2.0.0-pre which can be found here:<u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt"> <u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:10.0pt"><a href="https://github.com/cisco/libsrtp/" target="_blank"><span style="color:#0b4cb4">https://github.com/cisco/libsrtp/</span></a></span><span style="font-size:11.0pt"><u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt"><u></u> <u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt"><u></u> <u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt"> <u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">I just tried to use the „new“ one while compiling but there are some declaration and invalig operator errors while making.<u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt"> <u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">„<u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">In file included from /usr/local/src/freeswitch/libs/srtp/crypto/include/datatypes.h:50:0,</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo"> from src/switch_rtp.c:53:</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/crypto/include/integers.h:102:16: error: conflicting types for 'uint64_t'</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">In file included from /usr/lib/gcc/x86_64-linux-gnu/4.7/include/stdint.h:3:0,</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo"> from /usr/include/inttypes.h:28,</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo"> from ./src/include/switch_platform.h:123,</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo"> from ./src/include/switch.h:112,</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo"> from src/switch_rtp.c:39:</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/include/stdint.h:56:27: note: previous declaration of 'uint64_t' was here</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">In file included from src/switch_rtp.c:55:0:</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:82:3: error: type of bit-field 'cc' is a GCC extension [-Werror=edantic]</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:83:3: error: type of bit-field 'x' is a GCC extension [-Werror=edantic]</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:84:3: error: type of bit-field 'p' is a GCC extension [-Werror=edantic]</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:85:3: error: type of bit-field 'version' is a GCC extension [-Werror=edantic]</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:86:3: error: type of bit-field 'pt' is a GCC extension [-Werror=edantic]</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:87:3: error: type of bit-field 'm' is a GCC extension [-Werror=edantic]</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:125:3: error: type of bit-field 'rc' is a GCC extension [-Werror=edantic]</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:126:3: error: type of bit-field 'p' is a GCC extension [-Werror=edantic]</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:127:3: error: type of bit-field 'version' is a GCC extension [-Werror=edantic]</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:128:3: error: type of bit-field 'pt' is a GCC extension [-Werror=edantic]</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">src/switch_rtp.c: In function 'rtcp_generate_sender_info':</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">src/switch_rtp.c:1864:16: error: invalid operands to binary << (have 'double' and 'int')</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">cc1: all warnings being treated as errors</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">make[1]: *** [src/libfreeswitch_la-switch_rtp.lo] Fehler 1</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">make[1]: Leaving directory `/usr/local/src/freeswitch'</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:Menlo">make: *** [all] Fehler 2</span><span style="font-size:10.0pt"><u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">„<u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt"> <u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">Is there something planned?<u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt"> <u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">Thanks you<u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">Fred Schulz<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:10.0pt">blackned GmbH</span><span style="font-size:10.0pt"><u></u><u></u></span></p></div></div>
</blockquote>