please file a jira for this, I'll need to review this On Tuesday, June 14, 2016, Fred Schulz <lte@lte-net.de> wrote:
Hi all,
as I can see freeSWITCH is using the cisco srtp reference implemenation. The version in FS 1.4.26 is 1.4.3 which is a little bit old and vulnerable by DoS Attacks according to this:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6360
I just wanted to ask if the freeSWITCH will use the Version 1.5.4 or 2.0.0-pre which can be found here:
https://github.com/cisco/libsrtp/
I just tried to use the „new“ one while compiling but there are some declaration and invalig operator errors while making.
„
In file included from /usr/local/src/freeswitch/libs/srtp/crypto/include/datatypes.h:50:0,
from src/switch_rtp.c:53:
/usr/local/src/freeswitch/libs/srtp/crypto/include/integers.h:102:16: error: conflicting types for 'uint64_t'
In file included from /usr/lib/gcc/x86_64-linux-gnu/4.7/include/stdint.h:3:0,
from /usr/include/inttypes.h:28,
from ./src/include/switch_platform.h:123,
from ./src/include/switch.h:112,
from src/switch_rtp.c:39:
/usr/include/stdint.h:56:27: note: previous declaration of 'uint64_t' was here
In file included from src/switch_rtp.c:55:0:
/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:82:3: error: type of bit-field 'cc' is a GCC extension [-Werror=edantic]
/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:83:3: error: type of bit-field 'x' is a GCC extension [-Werror=edantic]
/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:84:3: error: type of bit-field 'p' is a GCC extension [-Werror=edantic]
/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:85:3: error: type of bit-field 'version' is a GCC extension [-Werror=edantic]
/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:86:3: error: type of bit-field 'pt' is a GCC extension [-Werror=edantic]
/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:87:3: error: type of bit-field 'm' is a GCC extension [-Werror=edantic]
/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:125:3: error: type of bit-field 'rc' is a GCC extension [-Werror=edantic]
/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:126:3: error: type of bit-field 'p' is a GCC extension [-Werror=edantic]
/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:127:3: error: type of bit-field 'version' is a GCC extension [-Werror=edantic]
/usr/local/src/freeswitch/libs/srtp/include/srtp_priv.h:128:3: error: type of bit-field 'pt' is a GCC extension [-Werror=edantic]
src/switch_rtp.c: In function 'rtcp_generate_sender_info':
src/switch_rtp.c:1864:16: error: invalid operands to binary << (have 'double' and 'int')
cc1: all warnings being treated as errors
make[1]: *** [src/libfreeswitch_la-switch_rtp.lo] Fehler 1
make[1]: Leaving directory `/usr/local/src/freeswitch'
make: *** [all] Fehler 2
„
Is there something planned?
Thanks you
Fred Schulz
blackned GmbH