Asterisk - The Open Source Telephony Project GIT-master-70eff7f
Loading...
Searching...
No Matches
pjsip_distributor.c
Go to the documentation of this file.
1/*
2 * Asterisk -- An open source telephony toolkit.
3 *
4 * Copyright (C) 2013, Digium, Inc.
5 *
6 * Mark Michelson <mmichelson@digium.com>
7 *
8 * See http://www.asterisk.org for more information about
9 * the Asterisk project. Please do not directly contact
10 * any of the maintainers of this project for assistance;
11 * the project provides a web site, mailing lists and IRC
12 * channels for your use.
13 *
14 * This program is free software, distributed under the terms of
15 * the GNU General Public License Version 2. See the LICENSE file
16 * at the top of the source tree.
17 */
18
19#include "asterisk.h"
20
21#include <pjsip.h>
22
23#include "asterisk/res_pjsip.h"
24#include "asterisk/acl.h"
27#include "asterisk/taskpool.h"
29
30static int distribute(void *data);
31static pj_bool_t distributor(pjsip_rx_data *rdata);
32static pj_status_t record_serializer(pjsip_tx_data *tdata);
33
34static pjsip_module distributor_mod = {
35 .name = {"Request Distributor", 19},
36 .priority = PJSIP_MOD_PRIORITY_TSX_LAYER - 6,
37 .on_tx_request = record_serializer,
38 .on_rx_request = distributor,
39 .on_rx_response = distributor,
40};
41
43
44#define DEFAULT_SUSPECTS_BUCKETS 53
45
47static unsigned int unidentified_count;
48static unsigned int unidentified_period;
49static unsigned int unidentified_prune_interval;
52
54 struct timeval first_seen;
55 int count;
56 char src_name[];
57};
58
59/*! Number of serializers in pool if one not otherwise known. (Best if prime number) */
60#define DISTRIBUTOR_POOL_SIZE 31
61
62/*! Pool of serializers to use if not supplied. */
64
65/*!
66 * \internal
67 * \brief Record the task's serializer name on the tdata structure.
68 * \since 14.0.0
69 *
70 * \param tdata The outgoing message.
71 *
72 * \retval PJ_SUCCESS.
73 */
74static pj_status_t record_serializer(pjsip_tx_data *tdata)
75{
77
79 if (serializer) {
80 const char *name;
81
84 && (!tdata->mod_data[distributor_mod.id]
85 || strcmp(tdata->mod_data[distributor_mod.id], name))) {
86 char *tdata_name;
87
88 /* The serializer in use changed. */
89 tdata_name = pj_pool_alloc(tdata->pool, strlen(name) + 1);
90 strcpy(tdata_name, name);/* Safe */
91
92 tdata->mod_data[distributor_mod.id] = tdata_name;
93 }
94 }
95
96 return PJ_SUCCESS;
97}
98
99/*!
100 * \internal
101 * \brief Find the request tdata to get the serializer it used.
102 * \since 14.0.0
103 *
104 * \param rdata The incoming message.
105 *
106 * \retval serializer on success.
107 * \retval NULL on error or could not find the serializer.
108 */
109static struct ast_taskprocessor *find_request_serializer(pjsip_rx_data *rdata)
110{
112 pj_str_t tsx_key;
113 pjsip_transaction *tsx;
114
115 pjsip_tsx_create_key(rdata->tp_info.pool, &tsx_key, PJSIP_ROLE_UAC,
116 &rdata->msg_info.cseq->method, rdata);
117
118 tsx = pjsip_tsx_layer_find_tsx(&tsx_key, PJ_TRUE);
119 if (!tsx) {
120 ast_debug(1, "Could not find transaction for %s.\n",
121 pjsip_rx_data_get_info(rdata));
122 return NULL;
123 }
124 ast_debug(3, "Found transaction %s for %s.\n",
125 tsx->obj_name, pjsip_rx_data_get_info(rdata));
126
127 if (tsx->last_tx) {
128 const char *serializer_name;
129
130 serializer_name = tsx->last_tx->mod_data[distributor_mod.id];
131 if (!ast_strlen_zero(serializer_name)) {
133 if (serializer) {
134 ast_debug(3, "Found serializer %s on transaction %s\n",
135 serializer_name, tsx->obj_name);
136 }
137 }
138 }
139
140#ifdef HAVE_PJ_TRANSACTION_GRP_LOCK
141 pj_grp_lock_release(tsx->grp_lock);
142#else
143 pj_mutex_unlock(tsx->mutex);
144#endif
145
146 return serializer;
147}
148
149/*! Dialog-specific information the distributor uses */
151 /*! dialog_associations ao2 container key */
152 pjsip_dialog *dlg;
153 /*! Serializer to distribute tasks to for this dialog */
155 /*! Endpoint associated with this dialog */
157};
158
159#define DIALOG_ASSOCIATIONS_BUCKETS 251
160
162
163/*!
164 * \internal
165 * \brief Compute a hash value on an arbitrary buffer.
166 * \since 13.17.0
167 *
168 * \param[in] pos The buffer to add to the hash
169 * \param[in] len The buffer length to add to the hash
170 * \param[in] hash The hash value to add to
171 *
172 * \details
173 * This version of the function is for when you need to compute a
174 * hash of more than one buffer.
175 *
176 * This famous hash algorithm was written by Dan Bernstein and is
177 * commonly used.
178 *
179 * \sa http://www.cse.yorku.ca/~oz/hash.html
180 */
181static int buf_hash_add(const char *pos, size_t len, int hash)
182{
183 while (len--) {
184 hash = hash * 33 ^ *pos++;
185 }
186
187 return hash;
188}
189
190/*!
191 * \internal
192 * \brief Compute a hash value on an arbitrary buffer.
193 * \since 13.17.0
194 *
195 * \param[in] pos The buffer to add to the hash
196 * \param[in] len The buffer length to add to the hash
197 *
198 * \details
199 * This version of the function is for when you need to compute a
200 * hash of more than one buffer.
201 *
202 * This famous hash algorithm was written by Dan Bernstein and is
203 * commonly used.
204 *
205 * \sa http://www.cse.yorku.ca/~oz/hash.html
206 */
207static int buf_hash(const char *pos, size_t len)
208{
209 return buf_hash_add(pos, len, 5381);
210}
211
212static int dialog_associations_hash(const void *obj, int flags)
213{
214 const struct distributor_dialog_data *object;
215 union {
216 const pjsip_dialog *dlg;
217 const char buf[sizeof(pjsip_dialog *)];
218 } key;
219
220 switch (flags & OBJ_SEARCH_MASK) {
221 case OBJ_SEARCH_KEY:
222 key.dlg = obj;
223 break;
225 object = obj;
226 key.dlg = object->dlg;
227 break;
228 default:
229 /* Hash can only work on something with a full key. */
230 ast_assert(0);
231 return 0;
232 }
233 return ast_str_hash_restrict(buf_hash(key.buf, sizeof(key.buf)));
234}
235
236static int dialog_associations_cmp(void *obj, void *arg, int flags)
237{
238 const struct distributor_dialog_data *object_left = obj;
239 const struct distributor_dialog_data *object_right = arg;
240 const pjsip_dialog *right_key = arg;
241 int cmp = 0;
242
243 switch (flags & OBJ_SEARCH_MASK) {
245 right_key = object_right->dlg;
246 /* Fall through */
247 case OBJ_SEARCH_KEY:
248 if (object_left->dlg == right_key) {
249 cmp = CMP_MATCH;
250 }
251 break;
253 /* There is no such thing for this container. */
254 ast_assert(0);
255 break;
256 default:
257 cmp = 0;
258 break;
259 }
260 return cmp;
261}
262
264{
265 struct distributor_dialog_data *dist;
266
269 if (!dist) {
270 if (serializer) {
271 dist = ao2_alloc(sizeof(*dist), NULL);
272 if (dist) {
273 dist->dlg = dlg;
274 dist->serializer = serializer;
276 ao2_ref(dist, -1);
277 }
278 }
279 } else {
280 ao2_lock(dist);
281 dist->serializer = serializer;
282 if (!dist->serializer && !dist->endpoint) {
284 }
285 ao2_unlock(dist);
286 ao2_ref(dist, -1);
287 }
289}
290
292{
293 struct distributor_dialog_data *dist;
294
297 if (!dist) {
298 if (endpoint) {
299 dist = ao2_alloc(sizeof(*dist), NULL);
300 if (dist) {
301 dist->dlg = dlg;
302 dist->endpoint = endpoint;
304 ao2_ref(dist, -1);
305 }
306 }
307 } else {
308 ao2_lock(dist);
309 dist->endpoint = endpoint;
310 if (!dist->serializer && !dist->endpoint) {
312 }
313 ao2_unlock(dist);
314 ao2_ref(dist, -1);
315 }
317}
318
320{
321 struct distributor_dialog_data *dist;
322 struct ast_sip_endpoint *endpoint;
323
325 if (dist) {
326 ao2_lock(dist);
327 endpoint = ao2_bump(dist->endpoint);
328 ao2_unlock(dist);
329 ao2_ref(dist, -1);
330 } else {
331 endpoint = NULL;
332 }
333 return endpoint;
334}
335
336static pjsip_dialog *find_dialog(pjsip_rx_data *rdata)
337{
338 pj_str_t tsx_key;
339 pjsip_transaction *tsx;
340 pjsip_dialog *dlg;
341 pj_str_t *local_tag;
342 pj_str_t *remote_tag;
343
344 if (!rdata->msg_info.msg) {
345 return NULL;
346 }
347
348 if (rdata->msg_info.msg->type == PJSIP_REQUEST_MSG) {
349 local_tag = &rdata->msg_info.to->tag;
350 remote_tag = &rdata->msg_info.from->tag;
351 } else {
352 local_tag = &rdata->msg_info.from->tag;
353 remote_tag = &rdata->msg_info.to->tag;
354 }
355
356 /* We can only call the convenient method for
357 * 1) responses
358 * 2) non-CANCEL requests
359 * 3) CANCEL requests with a to-tag
360 */
361 if (rdata->msg_info.msg->type == PJSIP_RESPONSE_MSG ||
362 pjsip_method_cmp(&rdata->msg_info.msg->line.req.method, &pjsip_cancel_method) ||
363 rdata->msg_info.to->tag.slen != 0) {
364 dlg = pjsip_ua_find_dialog(&rdata->msg_info.cid->id, local_tag,
365 remote_tag, PJ_FALSE);
366 if (dlg) {
367 return dlg;
368 }
369 }
370
371 /*
372 * There may still be a matching dialog if this is
373 * 1) an incoming CANCEL request without a to-tag
374 * 2) an incoming response to a dialog-creating request.
375 */
376 if (rdata->msg_info.msg->type == PJSIP_REQUEST_MSG) {
377 /* CANCEL requests will need to match the INVITE we initially received. Any
378 * other request type will either have been matched already or is not in
379 * dialog
380 */
381 pjsip_tsx_create_key(rdata->tp_info.pool, &tsx_key, PJSIP_ROLE_UAS,
382 pjsip_get_invite_method(), rdata);
383 } else {
384 pjsip_tsx_create_key(rdata->tp_info.pool, &tsx_key, PJSIP_ROLE_UAC,
385 &rdata->msg_info.cseq->method, rdata);
386 }
387
388 tsx = pjsip_tsx_layer_find_tsx(&tsx_key, PJ_TRUE);
389 if (!tsx) {
390 ast_debug(3, "Could not find matching transaction for %s\n",
391 pjsip_rx_data_get_info(rdata));
392 return NULL;
393 }
394
395 dlg = pjsip_tsx_get_dlg(tsx);
396
397#ifdef HAVE_PJ_TRANSACTION_GRP_LOCK
398 pj_grp_lock_release(tsx->grp_lock);
399#else
400 pj_mutex_unlock(tsx->mutex);
401#endif
402
403 return dlg;
404}
405
406/*!
407 * \internal
408 * \brief Compute a hash value on a pjlib string
409 * \since 13.10.0
410 *
411 * \param[in] str The pjlib string to add to the hash
412 * \param[in] hash The hash value to add to
413 *
414 * \details
415 * This version of the function is for when you need to compute a
416 * string hash of more than one string.
417 *
418 * This famous hash algorithm was written by Dan Bernstein and is
419 * commonly used.
420 *
421 * \sa http://www.cse.yorku.ca/~oz/hash.html
422 */
423static int pjstr_hash_add(pj_str_t *str, int hash)
424{
425 return buf_hash_add(pj_strbuf(str), pj_strlen(str), hash);
426}
427
428/*!
429 * \internal
430 * \brief Compute a hash value on a pjlib string
431 * \since 13.10.0
432 *
433 * \param[in] str The pjlib string to hash
434 *
435 * This famous hash algorithm was written by Dan Bernstein and is
436 * commonly used.
437 *
438 * http://www.cse.yorku.ca/~oz/hash.html
439 */
440static int pjstr_hash(pj_str_t *str)
441{
442 return pjstr_hash_add(str, 5381);
443}
444
446{
447 int hash;
448 pj_str_t *remote_tag;
450
451 if (!rdata->msg_info.msg) {
452 return NULL;
453 }
454
455 if (rdata->msg_info.msg->type == PJSIP_REQUEST_MSG) {
456 remote_tag = &rdata->msg_info.from->tag;
457 } else {
458 remote_tag = &rdata->msg_info.to->tag;
459 }
460
461 /* Compute the hash from the SIP message call-id and remote-tag */
462 hash = pjstr_hash(&rdata->msg_info.cid->id);
463 hash = pjstr_hash_add(remote_tag, hash);
464 hash = ast_str_hash_restrict(hash);
465
467 if (serializer) {
468 ast_debug(3, "Calculated serializer %s to use for message %s\n",
469 ast_taskprocessor_name(serializer), pjsip_rx_data_get_info(rdata));
470 }
471 return serializer;
472}
473
475{
476 int hash;
478
479 if (!dlg) {
480 return NULL;
481 }
482
483 /* Compute the hash from the SIP message call-id and tag */
484 hash = pjstr_hash(&dlg->call_id->id);
485 hash = pjstr_hash_add(&dlg->local.info->tag, hash);
486 hash = ast_str_hash_restrict(hash);
487
489 if (serializer) {
490 ast_debug(3, "Calculated serializer %s to use for dialog %s\n",
491 ast_taskprocessor_name(serializer), dlg->obj_name);
492 }
493 return serializer;
494}
495
497{
499
501 if (serializer) {
502 ast_debug(3, "Calculated serializer %s to use for hash %u\n",
504 }
505 return serializer;
506}
507
508static pj_bool_t endpoint_lookup(pjsip_rx_data *rdata);
509
510static pjsip_module endpoint_mod = {
511 .name = {"Endpoint Identifier", 19},
512 .priority = PJSIP_MOD_PRIORITY_TSX_LAYER - 3,
513 .on_rx_request = endpoint_lookup,
514};
515
516static pj_bool_t distributor(pjsip_rx_data *rdata)
517{
518 pjsip_dialog *dlg;
519 struct distributor_dialog_data *dist = NULL;
521 pjsip_rx_data *clone;
522
523 if (!ast_fully_booted) {
524 /*
525 * Ignore everything until we are fully booted. Let the
526 * peer retransmit messages until we are ready.
527 */
528 return PJ_TRUE;
529 }
530
531 dlg = find_dialog(rdata);
532 if (dlg) {
533 ast_debug(3, "Searching for serializer associated with dialog %s for %s\n",
534 dlg->obj_name, pjsip_rx_data_get_info(rdata));
536 if (dist) {
537 ao2_lock(dist);
539 ao2_unlock(dist);
540 if (serializer) {
541 ast_debug(3, "Found serializer %s associated with dialog %s\n",
542 ast_taskprocessor_name(serializer), dlg->obj_name);
543 }
544 }
545 }
546
547 if (serializer) {
548 /* We have a serializer so we know where to send the message. */
549 } else if (rdata->msg_info.msg->type == PJSIP_RESPONSE_MSG) {
550 ast_debug(3, "No dialog serializer for %s. Using request transaction as basis.\n",
551 pjsip_rx_data_get_info(rdata));
553 if (!serializer) {
554 /*
555 * Pick a serializer for the unmatched response.
556 * We couldn't determine what serializer originally
557 * sent the request or the serializer is gone.
558 */
560 }
561 } else if (!pjsip_method_cmp(&rdata->msg_info.msg->line.req.method, &pjsip_cancel_method)
562 || !pjsip_method_cmp(&rdata->msg_info.msg->line.req.method, &pjsip_bye_method)) {
563 /* We have a BYE or CANCEL request without a serializer. */
564 pjsip_endpt_respond_stateless(ast_sip_get_pjsip_endpoint(), rdata,
565 PJSIP_SC_CALL_TSX_DOES_NOT_EXIST, NULL, NULL, NULL);
566 ao2_cleanup(dist);
567 return PJ_TRUE;
568 } else {
573 /*
574 * When taskprocessors get backed up, there is a good chance that
575 * we are being overloaded and need to defer adding new work to
576 * the system. To defer the work we will ignore the request and
577 * rely on the peer's transport layer to retransmit the message.
578 * We usually work off the overload within a few seconds.
579 * If transport is non-UDP we send a 503 response instead.
580 */
581 switch (rdata->tp_info.transport->key.type) {
582 case PJSIP_TRANSPORT_UDP6:
583 case PJSIP_TRANSPORT_UDP:
584 ast_debug(3, "Taskprocessor overload alert: Ignoring '%s'.\n",
585 pjsip_rx_data_get_info(rdata));
586 break;
587 default:
588 ast_debug(3, "Taskprocessor overload on non-udp transport. Received:'%s'. "
589 "Responding with a 503.\n", pjsip_rx_data_get_info(rdata));
590 pjsip_endpt_respond_stateless(ast_sip_get_pjsip_endpoint(), rdata,
591 PJSIP_SC_SERVICE_UNAVAILABLE, NULL, NULL, NULL);
592 break;
593 }
594 ao2_cleanup(dist);
595 return PJ_TRUE;
596 }
597
598 /* Pick a serializer for the out-of-dialog request. */
600 }
601
602 if (pjsip_rx_data_clone(rdata, 0, &clone) != PJ_SUCCESS) {
604 ao2_cleanup(dist);
605 return PJ_TRUE;
606 }
607
608 if (dist) {
609 ao2_lock(dist);
610 clone->endpt_info.mod_data[endpoint_mod.id] = ao2_bump(dist->endpoint);
611 ao2_unlock(dist);
612 ao2_cleanup(dist);
613 }
614
616 ao2_cleanup(clone->endpt_info.mod_data[endpoint_mod.id]);
617 pjsip_rx_data_free_cloned(clone);
618 }
619
621
622 return PJ_TRUE;
623}
624
626 char *default_algos_uac, char *default_algos_uas)
627{
628 struct ast_sip_auth *fake_auth;
629
631 "artificial");
632 if (!fake_auth) {
633 return NULL;
634 }
635
637 ast_string_field_set(fake_auth, auth_user, "");
638 ast_string_field_set(fake_auth, auth_pass, "");
639
641 &fake_auth->supported_algorithms_uac, "UAC", default_algos_uac);
642
644 &fake_auth->supported_algorithms_uas, "UAS", default_algos_uas);
645
647
648 return fake_auth;
649}
650
651static AO2_GLOBAL_OBJ_STATIC(artificial_auth);
652
654{
656 struct ast_sip_auth *fake_auth;
657 char default_algos_uac[AST_SIP_AUTH_MAX_SUPPORTED_ALGORITHMS_LENGTH + 1];
658 char default_algos_uas[AST_SIP_AUTH_MAX_SUPPORTED_ALGORITHMS_LENGTH + 1];
659
662 sizeof(default_algos_uac));
664 sizeof(default_algos_uas));
665
666 fake_auth = alloc_artificial_auth(default_realm, default_algos_uac,
667 default_algos_uas);
668 if (!fake_auth) {
669 ast_log(LOG_ERROR, "Unable to create artificial auth\n");
670 return -1;
671 }
672 ao2_global_obj_replace_unref(artificial_auth, fake_auth);
673 ao2_cleanup(fake_auth);
674 return 0;
675}
676
678{
679 return ao2_global_obj_ref(artificial_auth);
680}
681
683
685{
687 if (!artificial_endpoint) {
688 return -1;
689 }
690
692 /* Pushing a bogus value into the vector will ensure that
693 * the proper size of the vector is returned. This value is
694 * not actually used anywhere
695 */
697 return 0;
698}
699
705
706static void log_failed_request(pjsip_rx_data *rdata, char *msg, unsigned int count, unsigned int period)
707{
708 char from_buf[PJSIP_MAX_URL_SIZE];
709 char callid_buf[PJSIP_MAX_URL_SIZE];
710 char method_buf[PJSIP_MAX_URL_SIZE];
711 char src_addr_buf[AST_SOCKADDR_BUFLEN];
712 pjsip_uri_print(PJSIP_URI_IN_FROMTO_HDR, rdata->msg_info.from->uri, from_buf, PJSIP_MAX_URL_SIZE);
713 ast_copy_pj_str(callid_buf, &rdata->msg_info.cid->id, PJSIP_MAX_URL_SIZE);
714 ast_copy_pj_str(method_buf, &rdata->msg_info.msg->line.req.method.name, PJSIP_MAX_URL_SIZE);
715 if (count) {
716 ast_log(LOG_NOTICE, "Request '%s' from '%s' failed for '%s' (callid: %s) - %s"
717 " after %u tries in %.3f ms\n",
718 method_buf, from_buf,
719 pj_sockaddr_print(&rdata->pkt_info.src_addr, src_addr_buf, sizeof(src_addr_buf), 3),
720 callid_buf, msg, count, period / 1000.0);
721 } else {
722 ast_log(LOG_NOTICE, "Request '%s' from '%s' failed for '%s' (callid: %s) - %s\n",
723 method_buf, from_buf,
724 pj_sockaddr_print(&rdata->pkt_info.src_addr, src_addr_buf, sizeof(src_addr_buf), 3),
725 callid_buf, msg);
726 }
727}
728
729static void check_endpoint(pjsip_rx_data *rdata, struct unidentified_request *unid,
730 const char *name)
731{
732 int64_t ms = ast_tvdiff_ms(ast_tvnow(), unid->first_seen);
733
734 ao2_wrlock(unid);
735 unid->count++;
736
737 if (ms < (unidentified_period * 1000) && unid->count >= unidentified_count) {
738 log_failed_request(rdata, "No matching endpoint found", unid->count, ms);
740 }
741 ao2_unlock(unid);
742}
743
744static int apply_endpoint_acl(pjsip_rx_data *rdata, struct ast_sip_endpoint *endpoint);
745static int apply_endpoint_contact_acl(pjsip_rx_data *rdata, struct ast_sip_endpoint *endpoint);
746
747static void apply_acls(pjsip_rx_data *rdata)
748{
749 struct ast_sip_endpoint *endpoint;
750
751 /* Is the endpoint allowed with the source or contact address? */
752 endpoint = rdata->endpt_info.mod_data[endpoint_mod.id];
753 if (endpoint != artificial_endpoint
754 && (apply_endpoint_acl(rdata, endpoint)
755 || apply_endpoint_contact_acl(rdata, endpoint))) {
756 ast_debug(1, "Endpoint '%s' not allowed by ACL\n",
757 ast_sorcery_object_get_id(endpoint));
758
759 /* Replace the rdata endpoint with the artificial endpoint. */
760 ao2_replace(rdata->endpt_info.mod_data[endpoint_mod.id], artificial_endpoint);
761 }
762}
763
764static pj_bool_t endpoint_lookup(pjsip_rx_data *rdata)
765{
766 struct ast_sip_endpoint *endpoint;
767 struct unidentified_request *unid;
768 int is_ack = rdata->msg_info.msg->line.req.method.id == PJSIP_ACK_METHOD;
769
770 endpoint = rdata->endpt_info.mod_data[endpoint_mod.id];
771 if (endpoint) {
772 /*
773 * ao2_find with OBJ_UNLINK always write locks the container before even searching
774 * for the object. Since the majority case is that the object won't be found, do
775 * the find without OBJ_UNLINK to prevent the unnecessary write lock, then unlink
776 * if needed.
777 */
778 unid = ao2_find(unidentified_requests, rdata->pkt_info.src_name, OBJ_SEARCH_KEY);
779 if (unid) {
781 ao2_ref(unid, -1);
782 }
783 apply_acls(rdata);
784 return PJ_FALSE;
785 }
786
787 endpoint = ast_sip_identify_endpoint(rdata);
788 if (endpoint) {
789 unid = ao2_find(unidentified_requests, rdata->pkt_info.src_name, OBJ_SEARCH_KEY);
790 if (unid) {
792 ao2_ref(unid, -1);
793 }
794 }
795
796 if (!endpoint) {
797 /* always use an artificial endpoint - per discussion no reason
798 to have "alwaysauthreject" as an option. It is felt using it
799 was a bug fix and it is not needed since we are not worried about
800 breaking old stuff and we really don't want to enable the discovery
801 of SIP accounts */
803 }
804
805 /* endpoint ref held by mod_data[] */
806 rdata->endpt_info.mod_data[endpoint_mod.id] = endpoint;
807
808 if (endpoint == artificial_endpoint && !is_ack) {
809 char name[AST_UUID_STR_LEN] = "";
810 pjsip_uri *from = rdata->msg_info.from->uri;
811
812 if (ast_sip_is_allowed_uri(from)) {
814 }
815
816 unid = ao2_find(unidentified_requests, rdata->pkt_info.src_name, OBJ_SEARCH_KEY);
817 if (unid) {
818 check_endpoint(rdata, unid, name);
819 ao2_ref(unid, -1);
820 } else if (using_auth_username) {
822 /* Checking again with the write lock held allows us to eliminate the DUPS_REPLACE and sort_fn */
823 unid = ao2_find(unidentified_requests, rdata->pkt_info.src_name,
825 if (unid) {
826 check_endpoint(rdata, unid, name);
827 } else {
828 unid = ao2_alloc_options(sizeof(*unid) + strlen(rdata->pkt_info.src_name) + 1,
830 if (!unid) {
832 pjsip_endpt_respond_stateless(ast_sip_get_pjsip_endpoint(), rdata, 500, NULL, NULL, NULL);
833 return PJ_TRUE;
834 }
835 strcpy(unid->src_name, rdata->pkt_info.src_name); /* Safe */
836 unid->first_seen = ast_tvnow();
837 unid->count = 1;
839 }
840 ao2_ref(unid, -1);
842 } else {
843 log_failed_request(rdata, "No matching endpoint found", 0, 0);
845 }
846 }
847
848 apply_acls(rdata);
849 return PJ_FALSE;
850}
851
852static int apply_endpoint_acl(pjsip_rx_data *rdata, struct ast_sip_endpoint *endpoint)
853{
854 struct ast_sockaddr addr;
855
856 if (ast_acl_list_is_empty(endpoint->acl)) {
857 return 0;
858 }
859
860 memset(&addr, 0, sizeof(addr));
861 ast_sockaddr_parse(&addr, rdata->pkt_info.src_name, PARSE_PORT_FORBID);
862 ast_sockaddr_set_port(&addr, rdata->pkt_info.src_port);
863
864 if (ast_apply_acl(endpoint->acl, &addr, "SIP ACL: ") != AST_SENSE_ALLOW) {
865 log_failed_request(rdata, "Not match Endpoint ACL", 0, 0);
866 ast_sip_report_failed_acl(endpoint, rdata, "not_match_endpoint_acl");
867 return 1;
868 }
869 return 0;
870}
871
872static int extract_contact_addr(pjsip_contact_hdr *contact, struct ast_sockaddr **addrs)
873{
874 pjsip_sip_uri *sip_uri;
875 char host[256];
876
877 if (!contact || contact->star) {
878 *addrs = NULL;
879 return 0;
880 }
881
882 if (!PJSIP_URI_SCHEME_IS_SIP(contact->uri) && !PJSIP_URI_SCHEME_IS_SIPS(contact->uri)) {
883 *addrs = NULL;
884 return 0;
885 }
886 sip_uri = pjsip_uri_get_uri(contact->uri);
887 ast_copy_pj_str(host, &sip_uri->host, sizeof(host));
889}
890
891static int apply_endpoint_contact_acl(pjsip_rx_data *rdata, struct ast_sip_endpoint *endpoint)
892{
893 int num_contact_addrs;
894 int forbidden = 0;
895 struct ast_sockaddr *contact_addrs;
896 int i;
897 pjsip_contact_hdr *contact = (pjsip_contact_hdr *)&rdata->msg_info.msg->hdr;
898
899 if (ast_acl_list_is_empty(endpoint->contact_acl)) {
900 return 0;
901 }
902
903 while ((contact = pjsip_msg_find_hdr(rdata->msg_info.msg, PJSIP_H_CONTACT, contact->next))) {
904 num_contact_addrs = extract_contact_addr(contact, &contact_addrs);
905 if (num_contact_addrs <= 0) {
906 continue;
907 }
908 for (i = 0; i < num_contact_addrs; ++i) {
909 if (ast_apply_acl(endpoint->contact_acl, &contact_addrs[i], "SIP Contact ACL: ") != AST_SENSE_ALLOW) {
910 log_failed_request(rdata, "Not match Endpoint Contact ACL", 0, 0);
911 ast_sip_report_failed_acl(endpoint, rdata, "not_match_endpoint_contact_acl");
912 forbidden = 1;
913 break;
914 }
915 }
916 ast_free(contact_addrs);
917 if (forbidden) {
918 /* No use checking other contacts if we already have failed ACL check */
919 break;
920 }
921 }
922
923 return forbidden;
924}
925
926static pj_bool_t authenticate(pjsip_rx_data *rdata)
927{
929 int is_ack = rdata->msg_info.msg->line.req.method.id == PJSIP_ACK_METHOD;
930
931 ast_assert(endpoint != NULL);
932
933 if (is_ack) {
934 return PJ_FALSE;
935 }
936
937 if (ast_sip_requires_authentication(endpoint, rdata)) {
938 pjsip_tx_data *tdata;
939 struct unidentified_request *unid;
940
941 pjsip_endpt_create_response(ast_sip_get_pjsip_endpoint(), rdata, 401, NULL, &tdata);
942 switch (ast_sip_check_authentication(endpoint, rdata, tdata)) {
944 /* Send the 401 we created for them */
945 ast_sip_report_auth_challenge_sent(endpoint, rdata, tdata);
946 if (pjsip_endpt_send_response2(ast_sip_get_pjsip_endpoint(), rdata, tdata, NULL, NULL) != PJ_SUCCESS) {
947 pjsip_tx_data_dec_ref(tdata);
948 }
949 return PJ_TRUE;
951 /* See note in endpoint_lookup about not holding an unnecessary write lock */
952 unid = ao2_find(unidentified_requests, rdata->pkt_info.src_name, OBJ_SEARCH_KEY);
953 if (unid) {
955 ao2_ref(unid, -1);
956 }
957 ast_sip_report_auth_success(endpoint, rdata);
958 break;
960 log_failed_request(rdata, "Failed to authenticate", 0, 0);
962 if (pjsip_endpt_send_response2(ast_sip_get_pjsip_endpoint(), rdata, tdata, NULL, NULL) != PJ_SUCCESS) {
963 pjsip_tx_data_dec_ref(tdata);
964 }
965 return PJ_TRUE;
967 log_failed_request(rdata, "Error to authenticate", 0, 0);
969 pjsip_tx_data_dec_ref(tdata);
970 pjsip_endpt_respond_stateless(ast_sip_get_pjsip_endpoint(), rdata, 500, NULL, NULL, NULL);
971 return PJ_TRUE;
972 }
973 pjsip_tx_data_dec_ref(tdata);
974 } else if (endpoint == artificial_endpoint) {
975 /* Uh. Oh. The artificial endpoint couldn't challenge so block the request. */
976 pjsip_endpt_respond_stateless(ast_sip_get_pjsip_endpoint(), rdata, 500, NULL, NULL, NULL);
977 return PJ_TRUE;
978 }
979
980 return PJ_FALSE;
981}
982
983static pjsip_module auth_mod = {
984 .name = {"Request Authenticator", 21},
985 .priority = PJSIP_MOD_PRIORITY_APPLICATION - 2,
986 .on_rx_request = authenticate,
987};
988
989static int distribute(void *data)
990{
991 static pjsip_process_rdata_param param = {
992 .start_mod = &distributor_mod,
993 .idx_after_start = 1,
994 };
995 pj_bool_t handled = PJ_FALSE;
996 pjsip_rx_data *rdata = data;
997 int is_request = rdata->msg_info.msg->type == PJSIP_REQUEST_MSG;
998 int is_ack = is_request ? rdata->msg_info.msg->line.req.method.id == PJSIP_ACK_METHOD : 0;
999 struct ast_sip_endpoint *endpoint;
1000
1001 pjsip_endpt_process_rx_data(ast_sip_get_pjsip_endpoint(), rdata, &param, &handled);
1002 if (!handled && is_request && !is_ack) {
1003 pjsip_endpt_respond_stateless(ast_sip_get_pjsip_endpoint(), rdata, 501, NULL, NULL, NULL);
1004 }
1005
1006 /* The endpoint_mod stores an endpoint reference in the mod_data of rdata. This
1007 * is the only appropriate spot to actually decrement the reference.
1008 */
1009 endpoint = rdata->endpt_info.mod_data[endpoint_mod.id];
1010 ao2_cleanup(endpoint);
1011 pjsip_rx_data_free_cloned(rdata);
1012 return 0;
1013}
1014
1016{
1017 struct ast_sip_endpoint *endpoint = rdata->endpt_info.mod_data[endpoint_mod.id];
1018 if (endpoint) {
1019 ao2_ref(endpoint, +1);
1020 }
1021 return endpoint;
1022}
1023
1024static int suspects_sort(const void *obj, const void *arg, int flags)
1025{
1026 const struct unidentified_request *object_left = obj;
1027 const struct unidentified_request *object_right = arg;
1028 const char *right_key = arg;
1029 int cmp;
1030
1031 switch (flags & OBJ_SEARCH_MASK) {
1032 case OBJ_SEARCH_OBJECT:
1033 right_key = object_right->src_name;
1034 /* Fall through */
1035 case OBJ_SEARCH_KEY:
1036 cmp = strcmp(object_left->src_name, right_key);
1037 break;
1039 cmp = strncmp(object_left->src_name, right_key, strlen(right_key));
1040 break;
1041 default:
1042 cmp = 0;
1043 break;
1044 }
1045 return cmp;
1046}
1047
1048static int suspects_compare(void *obj, void *arg, int flags)
1049{
1050 const struct unidentified_request *object_left = obj;
1051 const struct unidentified_request *object_right = arg;
1052 const char *right_key = arg;
1053 int cmp = 0;
1054
1055 switch (flags & OBJ_SEARCH_MASK) {
1056 case OBJ_SEARCH_OBJECT:
1057 right_key = object_right->src_name;
1058 /* Fall through */
1059 case OBJ_SEARCH_KEY:
1060 if (strcmp(object_left->src_name, right_key) == 0) {
1061 cmp = CMP_MATCH;
1062 }
1063 break;
1065 if (strncmp(object_left->src_name, right_key, strlen(right_key)) == 0) {
1066 cmp = CMP_MATCH;
1067 }
1068 break;
1069 default:
1070 cmp = 0;
1071 break;
1072 }
1073 return cmp;
1074}
1075
1076static int suspects_hash(const void *obj, int flags)
1077{
1078 const struct unidentified_request *object;
1079 const char *key;
1080
1081 switch (flags & OBJ_SEARCH_MASK) {
1082 case OBJ_SEARCH_KEY:
1083 key = obj;
1084 break;
1085 case OBJ_SEARCH_OBJECT:
1086 object = obj;
1087 key = object->src_name;
1088 break;
1089 default:
1090 /* Hash can only work on something with a full key. */
1091 ast_assert(0);
1092 return 0;
1093 }
1094 return ast_str_hash(key);
1095}
1096
1097static struct ao2_container *cli_unid_get_container(const char *regex)
1098{
1099 struct ao2_container *s_container;
1100
1103 if (!s_container) {
1104 return NULL;
1105 }
1106
1107 if (ao2_container_dup(s_container, unidentified_requests, 0)) {
1108 ao2_ref(s_container, -1);
1109 return NULL;
1110 }
1111
1112 return s_container;
1113}
1114
1116{
1118
1119 return 0;
1120}
1121
1122static void *cli_unid_retrieve_by_id(const char *id)
1123{
1125}
1126
1127static const char *cli_unid_get_id(const void *obj)
1128{
1129 const struct unidentified_request *unid = obj;
1130
1131 return unid->src_name;
1132}
1133
1134static int cli_unid_print_header(void *obj, void *arg, int flags)
1135{
1136 struct ast_sip_cli_context *context = arg;
1137 RAII_VAR(struct ast_sip_cli_formatter_entry *, formatter_entry, NULL, ao2_cleanup);
1138
1139 int indent = CLI_INDENT_TO_SPACES(context->indent_level);
1140 int filler = CLI_LAST_TABSTOP - indent - 7;
1141
1142 ast_assert(context->output_buffer != NULL);
1143
1144 ast_str_append(&context->output_buffer, 0,
1145 "%*s: <IP Address%*.*s> <Count> <Age(sec)>\n",
1146 indent, "Request", filler, filler, CLI_HEADER_FILLER);
1147
1148 return 0;
1149}
1150
1151static int cli_unid_print_body(void *obj, void *arg, int flags)
1152{
1153 struct unidentified_request *unid = obj;
1154 struct ast_sip_cli_context *context = arg;
1155 int indent;
1156 int flexwidth;
1157 int64_t ms = ast_tvdiff_ms(ast_tvnow(), unid->first_seen);
1158
1159 ast_assert(context->output_buffer != NULL);
1160
1161 indent = CLI_INDENT_TO_SPACES(context->indent_level);
1162 flexwidth = CLI_LAST_TABSTOP - 4;
1163
1164 ast_str_append(&context->output_buffer, 0, "%*s: %-*.*s %7d %10.3f\n",
1165 indent,
1166 "Request",
1167 flexwidth, flexwidth,
1168 unid->src_name, unid->count, ms / 1000.0);
1169
1170 return 0;
1171}
1172
1173static struct ast_cli_entry cli_commands[] = {
1174 AST_CLI_DEFINE(ast_sip_cli_traverse_objects, "Show PJSIP Unidentified Requests",
1175 .command = "pjsip show unidentified_requests",
1176 .usage = "Usage: pjsip show unidentified_requests\n"
1177 " Show the PJSIP Unidentified Requests\n"),
1178};
1179
1181
1182static int expire_requests(void *object, void *arg, int flags)
1183{
1184 struct unidentified_request *unid = object;
1185 int *maxage = arg;
1186 int64_t ms = ast_tvdiff_ms(ast_tvnow(), unid->first_seen);
1187
1188 if (ms > (*maxage) * 2 * 1000) {
1189 return CMP_MATCH;
1190 }
1191
1192 return 0;
1193}
1194
1205
1206static int clean_task(const void *data)
1207{
1208 return 0;
1209}
1210
1211static void global_loaded(const char *object_type)
1212{
1213 char *identifier_order;
1214
1215 /* Update using_auth_username */
1216 identifier_order = ast_sip_get_endpoint_identifier_order();
1217 if (identifier_order) {
1218 char *identify_method;
1219 char *io_copy = ast_strdupa(identifier_order);
1220 int new_using = 0;
1221
1222 ast_free(identifier_order);
1223 while ((identify_method = ast_strip(strsep(&io_copy, ",")))) {
1224 if (!strcmp(identify_method, "auth_username")) {
1225 new_using = 1;
1226 break;
1227 }
1228 }
1229 using_auth_username = new_using;
1230 }
1231
1233
1235
1237
1238 /* Clean out the old task, if any */
1240 /* Have to do something with the return value to shut up the stupid compiler. */
1242 return;
1243 }
1244}
1245
1246/*! \brief Observer which is used to update our interval and default_realm when the global setting changes */
1250
1251/*!
1252 * \internal
1253 * \brief Shutdown the serializers in the distributor pool.
1254 * \since 13.10.0
1255 */
1257{
1258 int idx;
1259
1260 for (idx = 0; idx < ARRAY_LEN(distributor_pool); ++idx) {
1262 distributor_pool[idx] = NULL;
1263 }
1264}
1265
1266/*!
1267 * \internal
1268 * \brief Setup the serializers in the distributor pool.
1269 * \since 13.10.0
1270 *
1271 * \retval 0 on success.
1272 * \retval -1 on error.
1273 */
1275{
1276 char tps_name[AST_TASKPROCESSOR_MAX_NAME + 1];
1277 int idx;
1278
1279 for (idx = 0; idx < ARRAY_LEN(distributor_pool); ++idx) {
1280 /* Create name with seq number appended. */
1281 ast_taskprocessor_build_name(tps_name, sizeof(tps_name), "pjsip/distributor");
1282
1284 if (!distributor_pool[idx]) {
1285 return -1;
1286 }
1287 }
1288 return 0;
1289}
1290
1292{
1295 if (!unidentified_requests) {
1296 return -1;
1297 }
1298
1302 if (!dialog_associations) {
1304 return -1;
1305 }
1306
1307 if (distributor_pool_setup()) {
1309 return -1;
1310 }
1311
1313 if (!prune_context) {
1315 return -1;
1316 }
1317
1320 return -1;
1321 }
1322
1325
1328 return -1;
1329 }
1330
1333 return -1;
1334 }
1337 return -1;
1338 }
1341 return -1;
1342 }
1343
1346 if (!unid_formatter) {
1348 ast_log(LOG_ERROR, "Unable to allocate memory for unid_formatter\n");
1349 return -1;
1350 }
1351 unid_formatter->name = "unidentified_request";
1359
1361
1362 return 0;
1363}
1364
Access Control of various sorts.
enum ast_acl_sense ast_apply_acl(struct ast_acl_list *acl_list, const struct ast_sockaddr *addr, const char *purpose)
Apply a set of rules to a given IP address.
Definition acl.c:799
@ AST_SENSE_ALLOW
Definition acl.h:38
int ast_acl_list_is_empty(struct ast_acl_list *acl_list)
Determines if an ACL is empty or if it contains entries.
Definition acl.c:540
void ast_cli_unregister_multiple(void)
Definition ael_main.c:408
const char * str
Definition app_jack.c:150
char * strsep(char **str, const char *delims)
Asterisk main include file. File version handling, generic pbx functions.
#define ast_free(a)
Definition astmm.h:180
#define ast_strdup(str)
A wrapper for strdup()
Definition astmm.h:241
#define ast_strdupa(s)
duplicate a string in memory from the stack
Definition astmm.h:298
#define ast_log
Definition astobj2.c:42
int ao2_container_dup(struct ao2_container *dest, struct ao2_container *src, enum search_flags flags)
Copy all object references in the src container into the dest container.
#define AO2_GLOBAL_OBJ_STATIC(name)
Define a global object holder to be used to hold an ao2 object, statically initialized.
Definition astobj2.h:847
@ CMP_MATCH
Definition astobj2.h:1027
@ AO2_ALLOC_OPT_LOCK_NOLOCK
Definition astobj2.h:367
@ AO2_ALLOC_OPT_LOCK_RWLOCK
Definition astobj2.h:365
#define ao2_wrlock(a)
Definition astobj2.h:719
#define ao2_global_obj_replace_unref(holder, obj)
Replace an ao2 object in the global holder, throwing away any old object.
Definition astobj2.h:901
#define ao2_callback(c, flags, cb_fn, arg)
ao2_callback() is a generic function that applies cb_fn() to all objects in a container,...
Definition astobj2.h:1693
#define ao2_cleanup(obj)
Definition astobj2.h:1934
#define ao2_unlink(container, obj)
Remove an object from a container.
Definition astobj2.h:1578
#define ao2_unlink_flags(container, obj, flags)
Remove an object from a container.
Definition astobj2.h:1600
int() ao2_callback_fn(void *obj, void *arg, int flags)
Type of a generic callback function.
Definition astobj2.h:1226
#define ao2_link_flags(container, obj, flags)
Add an object to a container.
Definition astobj2.h:1554
#define ao2_global_obj_ref(holder)
Get a reference to the object stored in the global holder.
Definition astobj2.h:918
#define ao2_find(container, arg, flags)
Definition astobj2.h:1736
#define ao2_unlock(a)
Definition astobj2.h:729
#define ao2_replace(dst, src)
Replace one object reference with another cleaning up the original.
Definition astobj2.h:501
#define ao2_lock(a)
Definition astobj2.h:717
#define ao2_ref(o, delta)
Reference/unreference an object and return the old refcount.
Definition astobj2.h:459
#define ao2_alloc_options(data_size, destructor_fn, options)
Definition astobj2.h:404
#define ao2_global_obj_release(holder)
Release the ao2 object held in the global holder.
Definition astobj2.h:859
#define ao2_bump(obj)
Bump refcount on an AO2 object by one, returning the object.
Definition astobj2.h:480
@ OBJ_SEARCH_PARTIAL_KEY
The arg parameter is a partial search key similar to OBJ_SEARCH_KEY.
Definition astobj2.h:1116
@ OBJ_SEARCH_OBJECT
The arg parameter is an object of the same type.
Definition astobj2.h:1087
@ OBJ_NOLOCK
Assume that the ao2_container is already locked.
Definition astobj2.h:1063
@ OBJ_NODATA
Definition astobj2.h:1044
@ OBJ_SEARCH_MASK
Search option field mask.
Definition astobj2.h:1072
@ OBJ_MULTIPLE
Definition astobj2.h:1049
@ OBJ_UNLINK
Definition astobj2.h:1039
@ OBJ_SEARCH_KEY
The arg parameter is a search key, but is not an object.
Definition astobj2.h:1101
#define ao2_container_alloc_list(ao2_options, container_options, sort_fn, cmp_fn)
Allocate and initialize a list container.
Definition astobj2.h:1327
#define ao2_alloc(data_size, destructor_fn)
Definition astobj2.h:409
#define ao2_container_alloc_hash(ao2_options, container_options, n_buckets, hash_fn, sort_fn, cmp_fn)
Allocate and initialize a hash container with the desired number of buckets.
Definition astobj2.h:1303
static struct ast_channel * callback(struct ast_channelstorage_instance *driver, ao2_callback_data_fn *cb_fn, void *arg, void *data, int ao2_flags, int rdlock)
#define AST_CLI_DEFINE(fn, txt,...)
Definition cli.h:197
#define ast_cli_register_multiple(e, len)
Register multiple commands.
Definition cli.h:265
enum ast_sip_taskprocessor_overload_trigger ast_sip_get_taskprocessor_overload_trigger(void)
char buf[BUFSIZE]
Definition eagi_proxy.c:66
static const char name[]
Definition format_mp3.c:68
static int regex(struct ast_channel *chan, const char *cmd, char *parse, char *buf, size_t len)
static int len(struct ast_channel *chan, const char *cmd, char *data, char *buf, size_t buflen)
struct ast_sip_endpoint * ast_sip_dialog_get_endpoint(pjsip_dialog *dlg)
Get the endpoint associated with this dialog.
struct ast_taskprocessor * ast_sip_get_distributor_serializer_hash(int hash)
Determine the distributor serializer for a given hash.
struct ast_taskprocessor * ast_sip_get_distributor_serializer(pjsip_rx_data *rdata)
Determine the distributor serializer for the SIP message.
#define ast_sip_push_task(serializer, sip_task, task_data)
Definition res_pjsip.h:2126
struct ast_taskprocessor * ast_sip_create_serializer(const char *name)
Create a new serializer for SIP tasks.
Definition res_pjsip.c:2092
void ast_sip_dialog_set_endpoint(pjsip_dialog *dlg, struct ast_sip_endpoint *endpoint)
Set an endpoint on a SIP dialog so in-dialog requests do not undergo endpoint lookup.
void ast_sip_dialog_set_serializer(pjsip_dialog *dlg, struct ast_taskprocessor *serializer)
Set a serializer on a SIP dialog so requests and responses are automatically serialized.
struct ast_taskprocessor * ast_sip_get_distributor_serializer_dialog(pjsip_dialog *dlg)
Determine the distributor serializer for the SIP dialog.
#define ast_debug(level,...)
Log a DEBUG message.
#define LOG_ERROR
#define LOG_NOTICE
int ast_sockaddr_resolve(struct ast_sockaddr **addrs, const char *str, int flags, int family)
Parses a string with an IPv4 or IPv6 address and place results into an array.
Definition netsock2.c:280
int ast_sockaddr_parse(struct ast_sockaddr *addr, const char *str, int flags)
Parse an IPv4 or IPv6 address string.
Definition netsock2.c:230
@ AST_AF_UNSPEC
Definition netsock2.h:54
#define ast_sockaddr_set_port(addr, port)
Sets the port number of a socket address.
Definition netsock2.h:532
#define AST_SOCKADDR_BUFLEN
Definition netsock2.h:46
#define ast_fully_booted
Definition options.h:127
struct ast_sip_auth * ast_sip_get_artificial_auth(void)
Retrieves a reference to the artificial auth.
static int dialog_associations_hash(const void *obj, int flags)
static int cli_unid_iterate(void *container, ao2_callback_fn callback, void *args)
static int cli_unid_print_header(void *obj, void *arg, int flags)
static struct ast_sorcery_observer global_observer
Observer which is used to update our interval and default_realm when the global setting changes.
static int prune_task(const void *data)
static pjsip_module distributor_mod
static void distributor_pool_shutdown(void)
static int distribute(void *data)
static struct ao2_container * unidentified_requests
static struct ast_cli_entry cli_commands[]
static unsigned int unidentified_prune_interval
static enum ast_sip_taskprocessor_overload_trigger overload_trigger
struct ast_sip_endpoint * ast_sip_get_artificial_endpoint(void)
Retrieves a reference to the artificial endpoint.
static unsigned int unidentified_period
static void global_loaded(const char *object_type)
static pjsip_module auth_mod
#define DIALOG_ASSOCIATIONS_BUCKETS
static int extract_contact_addr(pjsip_contact_hdr *contact, struct ast_sockaddr **addrs)
static int expire_requests(void *object, void *arg, int flags)
static int apply_endpoint_acl(pjsip_rx_data *rdata, struct ast_sip_endpoint *endpoint)
static void check_endpoint(pjsip_rx_data *rdata, struct unidentified_request *unid, const char *name)
static pjsip_module endpoint_mod
static int buf_hash(const char *pos, size_t len)
static int buf_hash_add(const char *pos, size_t len, int hash)
struct ast_sched_context * prune_context
static void apply_acls(pjsip_rx_data *rdata)
static int clean_task(const void *data)
static pj_bool_t endpoint_lookup(pjsip_rx_data *rdata)
static pjsip_dialog * find_dialog(pjsip_rx_data *rdata)
static pj_status_t record_serializer(pjsip_tx_data *tdata)
static struct ao2_container * cli_unid_get_container(const char *regex)
struct ast_sip_endpoint * ast_pjsip_rdata_get_endpoint(pjsip_rx_data *rdata)
Get the looked-up endpoint on an out-of dialog request or response.
int ast_sip_initialize_distributor(void)
static int pjstr_hash_add(pj_str_t *str, int hash)
#define DISTRIBUTOR_POOL_SIZE
static int cli_unid_print_body(void *obj, void *arg, int flags)
static int suspects_hash(const void *obj, int flags)
static struct ast_sip_endpoint * artificial_endpoint
static int apply_endpoint_contact_acl(pjsip_rx_data *rdata, struct ast_sip_endpoint *endpoint)
static void * cli_unid_retrieve_by_id(const char *id)
static int suspects_compare(void *obj, void *arg, int flags)
static int suspects_sort(const void *obj, const void *arg, int flags)
static pj_bool_t authenticate(pjsip_rx_data *rdata)
static int create_artificial_endpoint(void)
static int dialog_associations_cmp(void *obj, void *arg, int flags)
void ast_sip_destroy_distributor(void)
static void log_failed_request(pjsip_rx_data *rdata, char *msg, unsigned int count, unsigned int period)
static int create_artificial_auth(void)
static const char * cli_unid_get_id(const void *obj)
struct ast_sip_cli_formatter_entry * unid_formatter
static pj_bool_t distributor(pjsip_rx_data *rdata)
static int pjstr_hash(pj_str_t *str)
static int using_auth_username
static unsigned int unidentified_count
static struct ast_sip_auth * alloc_artificial_auth(char *default_realm, char *default_algos_uac, char *default_algos_uas)
static struct ast_taskprocessor * distributor_pool[DISTRIBUTOR_POOL_SIZE]
static struct ast_taskprocessor * find_request_serializer(pjsip_rx_data *rdata)
static int distributor_pool_setup(void)
#define DEFAULT_SUSPECTS_BUCKETS
static struct ao2_container * dialog_associations
struct ao2_container * container
Definition res_fax.c:603
const pj_str_t * ast_sip_pjsip_uri_get_username(pjsip_uri *uri)
Get the user portion of the pjsip_uri.
Definition res_pjsip.c:3452
void ast_sip_unregister_service(pjsip_module *module)
Definition res_pjsip.c:127
char * ast_sip_get_endpoint_identifier_order(void)
Retrieve the global endpoint_identifier_order setting.
int ast_sip_requires_authentication(struct ast_sip_endpoint *endpoint, pjsip_rx_data *rdata)
Determine if an incoming request requires authentication.
Definition res_pjsip.c:157
void ast_sip_report_auth_success(struct ast_sip_endpoint *endpoint, pjsip_rx_data *rdata)
Send a security event notification for when authentication succeeds.
int ast_sip_register_service(pjsip_module *module)
Register a SIP service in Asterisk.
Definition res_pjsip.c:111
int ast_sip_is_allowed_uri(pjsip_uri *uri)
Check whether a pjsip_uri is allowed or not.
Definition res_pjsip.c:3447
void ast_sip_report_auth_challenge_sent(struct ast_sip_endpoint *endpoint, pjsip_rx_data *rdata, pjsip_tx_data *tdata)
Send a security event notification for when an authentication challenge is sent.
int ast_sip_auth_digest_algorithms_vector_init(const char *id, struct pjsip_auth_algorithm_type_vector *algorithms, const char *agent_type, const char *value)
Populate a vector of algorithm types from a string.
enum ast_sip_check_auth_result ast_sip_check_authentication(struct ast_sip_endpoint *endpoint, pjsip_rx_data *rdata, pjsip_tx_data *tdata)
Method to determine authentication status of an incoming request.
Definition res_pjsip.c:173
pjsip_endpoint * ast_sip_get_pjsip_endpoint(void)
Get a pointer to the PJSIP endpoint.
Definition res_pjsip.c:518
void ast_copy_pj_str(char *dest, const pj_str_t *src, size_t size)
Copy a pj_str_t into a standard character buffer.
Definition res_pjsip.c:2176
struct ast_sip_endpoint * ast_sip_identify_endpoint(pjsip_rx_data *rdata)
Determine the endpoint that has sent a SIP message.
Definition res_pjsip.c:324
void ast_sip_report_invalid_endpoint(const char *name, pjsip_rx_data *rdata)
Send a security event notification for when an invalid endpoint is requested.
void ast_sip_get_default_realm(char *realm, size_t size)
Retrieve the global default realm.
#define AST_SIP_AUTH_MAX_REALM_LENGTH
Definition res_pjsip.h:74
@ AST_SIP_AUTH_TYPE_ARTIFICIAL
Definition res_pjsip.h:587
#define AST_SIP_AUTH_MAX_SUPPORTED_ALGORITHMS_LENGTH
Definition res_pjsip.h:75
void ast_sip_report_auth_failed_challenge_response(struct ast_sip_endpoint *endpoint, pjsip_rx_data *rdata)
Send a security event notification for when a challenge response has failed.
#define SIP_SORCERY_AUTH_TYPE
Definition res_pjsip.h:599
struct ast_sorcery * ast_sip_get_sorcery(void)
Get a pointer to the SIP sorcery structure.
@ AST_SIP_AUTHENTICATION_CHALLENGE
Definition res_pjsip.h:1341
@ AST_SIP_AUTHENTICATION_ERROR
Definition res_pjsip.h:1347
@ AST_SIP_AUTHENTICATION_SUCCESS
Definition res_pjsip.h:1343
@ AST_SIP_AUTHENTICATION_FAILED
Definition res_pjsip.h:1345
void ast_sip_get_default_auth_algorithms_uac(char *default_auth_algorithms_uac, size_t size)
Retrieve the global auth algorithms for UAC.
void ast_sip_get_default_auth_algorithms_uas(char *default_auth_algorithms_uas, size_t size)
Retrieve the global auth algorithms for UAS.
void ast_sip_report_failed_acl(struct ast_sip_endpoint *endpoint, pjsip_rx_data *rdata, const char *name)
Send a security event notification for when an ACL check fails.
void ast_sip_get_unidentified_request_thresholds(unsigned int *count, unsigned int *period, unsigned int *prune_interval)
Retrieve the unidentified request security event thresholds.
static char default_realm[AST_SIP_AUTH_MAX_REALM_LENGTH+1]
int ast_sip_unregister_cli_formatter(struct ast_sip_cli_formatter_entry *formatter)
Unregisters a CLI formatter.
Definition pjsip_cli.c:326
#define CLI_HEADER_FILLER
#define CLI_LAST_TABSTOP
char * ast_sip_cli_traverse_objects(struct ast_cli_entry *e, int cmd, struct ast_cli_args *a)
Definition pjsip_cli.c:109
#define CLI_INDENT_TO_SPACES(x)
int ast_sip_register_cli_formatter(struct ast_sip_cli_formatter_entry *formatter)
Registers a CLI formatter.
Definition pjsip_cli.c:310
ast_sip_taskprocessor_overload_trigger
@ TASKPROCESSOR_OVERLOAD_TRIGGER_GLOBAL
@ TASKPROCESSOR_OVERLOAD_TRIGGER_PJSIP_ONLY
static struct @522 args
#define NULL
Definition resample.c:96
void ast_sched_clean_by_callback(struct ast_sched_context *con, ast_sched_cb match, ast_sched_cb cleanup_cb)
Clean all scheduled events with matching callback.
Definition sched.c:409
void ast_sched_context_destroy(struct ast_sched_context *c)
destroys a schedule context
Definition sched.c:271
int ast_sched_start_thread(struct ast_sched_context *con)
Start a thread for processing scheduler entries.
Definition sched.c:197
int ast_sched_add_variable(struct ast_sched_context *con, int when, ast_sched_cb callback, const void *data, int variable) attribute_warn_unused_result
Adds a scheduled event with rescheduling support.
Definition sched.c:526
struct ast_sched_context * ast_sched_context_create(void)
Create a scheduler context.
Definition sched.c:238
const char * ast_sorcery_object_get_id(const void *object)
Get the unique identifier of a sorcery object.
Definition sorcery.c:2381
void ast_sorcery_observer_remove(const struct ast_sorcery *sorcery, const char *type, const struct ast_sorcery_observer *callbacks)
Remove an observer from a specific object type.
Definition sorcery.c:2487
int ast_sorcery_observer_add(const struct ast_sorcery *sorcery, const char *type, const struct ast_sorcery_observer *callbacks)
Add an observer to a specific object type.
Definition sorcery.c:2455
void * ast_sorcery_alloc(const struct ast_sorcery *sorcery, const char *type, const char *id)
Allocate an object.
Definition sorcery.c:1808
void ast_sorcery_reload_object(const struct ast_sorcery *sorcery, const char *type)
Inform any wizards of a specific object type to reload persistent objects.
Definition sorcery.c:1506
#define ast_string_field_set(x, field, data)
Set a field to a simple string value.
int ast_str_append(struct ast_str **buf, ssize_t max_len, const char *fmt,...)
Append to a thread local dynamic string.
Definition strings.h:1139
static force_inline int attribute_pure ast_str_hash(const char *str)
Compute a hash value on a string.
Definition strings.h:1259
static force_inline int attribute_pure ast_strlen_zero(const char *s)
Definition strings.h:65
static force_inline int attribute_pure ast_str_hash_restrict(unsigned int hash)
Restrict hash value range.
Definition strings.h:1246
char * ast_strip(char *s)
Strip leading/trailing whitespace from a string.
Definition strings.h:223
Generic container type.
descriptor for a cli entry.
Definition cli.h:171
char * command
Definition cli.h:186
struct pjsip_auth_algorithm_type_vector supported_algorithms_uac
Definition res_pjsip.h:689
const ast_string_field realm
Definition res_pjsip.h:683
const ast_string_field auth_user
Definition res_pjsip.h:683
struct pjsip_auth_algorithm_type_vector supported_algorithms_uas
Definition res_pjsip.h:691
const ast_string_field auth_pass
Definition res_pjsip.h:683
enum ast_sip_auth_type type
Definition res_pjsip.h:687
CLI Formatter Context passed to all formatters.
CLI Formatter Registry Entry.
int(* iterate)(void *container, ao2_callback_fn callback, void *args)
ao2_callback_fn * print_header
void *(* retrieve_by_id)(const char *id)
const char *(* get_id)(const void *obj)
const char * name
ao2_callback_fn * print_body
struct ao2_container *(* get_container)(const char *regex)
An entity with which Asterisk communicates.
Definition res_pjsip.h:1067
struct ast_sip_auth_vector inbound_auths
Definition res_pjsip.h:1112
struct ast_acl_list * contact_acl
Definition res_pjsip.h:1144
struct ast_acl_list * acl
Definition res_pjsip.h:1142
Socket address structure.
Definition netsock2.h:97
Interface for a sorcery object type observer.
Definition sorcery.h:332
void(* loaded)(const char *object_type)
Callback for when an object type is loaded/reloaded.
Definition sorcery.h:343
A ast_taskprocessor structure is a singleton by name.
struct ast_sip_endpoint * endpoint
struct ast_taskprocessor * serializer
struct timeval first_seen
struct ast_taskprocessor * ast_taskpool_serializer_get_current(void)
Get the taskpool serializer currently associated with this thread.
Definition taskpool.c:842
An API for managing task processing threads that can be shared across modules.
struct ast_taskprocessor * ast_taskprocessor_get(const char *name, enum ast_tps_options create)
Get a reference to a taskprocessor with the specified name and create the taskprocessor if necessary.
void * ast_taskprocessor_unreference(struct ast_taskprocessor *tps)
Unreference the specified taskprocessor and its reference count will decrement.
@ TPS_REF_IF_EXISTS
return a reference to a taskprocessor ONLY if it already exists
unsigned int ast_taskprocessor_alert_get(void)
Get the current taskprocessor high water alert count.
unsigned int ast_taskprocessor_get_subsystem_alert(const char *subsystem)
Get the current taskprocessor high water alert count by subsystem.
void ast_taskprocessor_build_name(char *buf, unsigned int size, const char *format,...)
Build a taskprocessor name with a sequence number on the end.
const char * ast_taskprocessor_name(struct ast_taskprocessor *tps)
Return the name of the taskprocessor singleton.
#define AST_TASKPROCESSOR_MAX_NAME
Suggested maximum taskprocessor name length (less null terminator).
int64_t ast_tvdiff_ms(struct timeval end, struct timeval start)
Computes the difference (in milliseconds) between two struct timeval instances.
Definition time.h:107
struct timeval ast_tvnow(void)
Returns current timeval. Meant to replace calls to gettimeofday().
Definition time.h:159
char * usage
Definition utils/frame.c:37
#define RAII_VAR(vartype, varname, initval, dtor)
Declare a variable that will call a destructor function when it goes out of scope.
Definition utils.h:981
#define ast_assert(a)
Definition utils.h:779
#define ARRAY_LEN(a)
Definition utils.h:706
#define AST_UUID_STR_LEN
Definition uuid.h:27
#define AST_VECTOR_INIT(vec, size)
Initialize a vector.
Definition vector.h:124
#define AST_VECTOR_APPEND(vec, elem)
Append an element to a vector, growing the vector if needed.
Definition vector.h:267