Joshua C. Colp

It caused an actual failure in dialplan execution for @creslin287 which is testable through the testsuite, so if that situation can be identified then a test can be written for...

An effort should be put forth to include test coverage for 21 and master. If not possible then an explanation of why not and what would be required to actually...

This is something that we've all become lax on, to the detriment of the project. We should not brush off writing tests if they're hard. We should put forth any...

Channels are channels, executing dialplan is executing dialplan. Doing it as a unit test is likely possible. I don't know the full requirements or constraints so I can't say otherwise.

The issue has been triaged, accepted, and is in queue. Unless you are familiar with Asterisk itself, I wouldn't recommend making changes because fundamentally altering behavior (such as not allowing...

This is the first time you have mentioned at all that you have identified an actual exploitable method based on the security information and practices you've been talking about. Please...

@dovi5988 Yes, there are options and possibilities.

No, there is no update. Any updates will be posted on here, and any PRs referencing this will be linked here.

I assume you actually meant authenticated INVITE there, not authenticated NOTIFY.

I am unable to reproduce this issue. Using the provided transport I send an INVITE to a public SIP server, get challenged, resend the INVITE with authentication credentials, and in...