annotate files/pkg-message.in @ 13:c7cf16351c81

Apply patches for proper STUN message validation: 1. Validate the size of an attribute before returning it to the caller. Previously this was being done in stun_attr_get_next_str() to check that the previous attribute didn't exceed the size of the underlying buffer, however by that point any maliciously crafted attributes would have already had their chance to attack the caller. commit 9b8baa805582ae66d2a1ed68483609f90fcfb4d0 2. Validate the size of the buffer in stun_get_command_message_len_str(). Without this the caller could read off the end of the underlying buffer if it receives a maliciously crafted packet with an invalid header size. commit 14cb1c94e7be98869f45678ba195a26796a797c4 3. Changed type from int to size_t to avoid warning. warning: comparison between signed and unsigned integer expressions commit 4722697645cf033de8cf4f34e4214af750746365 See also: https://github.com/coturn/coturn/pull/472
author Franz Glasner <fzglas.hg@dom66.de>
date Sat, 28 Mar 2020 15:44:52 +0100
parents 1a06bf451a04
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
1 [
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
2 { type: install
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
3 message: <<EOM
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
4 1) You can start and stop the turnserver manually. But, if you want
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
5 to enable turnserver as an automatically started system service,
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
6 you have to:
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
7
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
8 a) Create and edit %%PREFIX%%/etc/turnserver.conf file.
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
9 Use %%PREFIX%%/etc/turnserver.conf.default as an example.
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
10
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
11 b) For user accounts settings: set up SQLite or PostgreSQL or
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
12 MySQL or Redis database for user accounts.
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
13 Use %%DATADIR%%/schema.sql as an SQL database schema,
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
14 or use %%DATADIR%%/schema*redis as Redis database description.
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
15
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
16 If SQLite is used, then %%PREFIX%%/var/db/turndb is the default database
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
17 location.
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
18
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
19 d) add line turnserver_enable="YES" to /etc/rc.conf.
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
20
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
21 e) If you are using a non-default PREFIX (other than /usr/local),
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
22 then edit /usr/local/etc/rc.d/turnserver file, according to
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
23 your system settings.
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
24
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
25 f) Restart the system or run the command:
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
26 $ %%PREFIX%%/etc/rc.d/turnserver start
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
27
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
28 2) If you do not want the turnserver to be a system service,
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
29 then you can start/stop it "manually", using the "turnserver"
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
30 executable with appropriate options (see the documentation).
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
31
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
32 3) To create database schema, use schema in file %%DATADIR%%/schema.sql.
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
33 The TURN Server supports (optionally) SQLite, MySQL, PostgreSQL, Redis.
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
34
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
35 4) For additional information, run:
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
36
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
37 $ man turnserver
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
38 $ man turnadmin
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
39 $ man turnutils
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
40 EOM
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
41 }
1a06bf451a04 ADD: net/turnserver: the original upstream version 4.5.1.1_2 from the ports tree as of 2020-03-26
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
42 ]