Changeset 1924 for pjproject/trunk/pjnath/src/pjturn-srv/allocation.c

Timestamp:

Apr 13, 2008 9:48:44 PM (16 years ago)

Author:

bennylp

Message:

More ticket #485: fixed TURN server permission not allowing peer with the same IP to get through, and added option to disable FINGERPRINT verification in TURN server since it is currently broken when TURN is used with ICE (which has a FINGERPRINT in its Binding Request)

File:

• pjproject/trunk/pjnath/src/pjturn-srv/allocation.c (modified) (4 diffs)

pjproject/trunk/pjnath/src/pjturn-srv/allocation.c

@@ -826 +826 @@
     perm->expiry.sec += PJ_TURN_PERM_TIMEOUT;
 
-    /* Register to hash table */
-    pj_hash_set(alloc->pool, alloc->peer_table, &perm->hkey.peer_addr, 
-                pj_sockaddr_get_len(&perm->hkey.peer_addr), 0, perm);
+    /* Register to hash table (only the address part!) */
+    pj_hash_set(alloc->pool, alloc->peer_table, 
+                pj_sockaddr_get_addr(&perm->hkey.peer_addr), 
+                pj_sockaddr_get_addr_len(&perm->hkey.peer_addr), 0, perm);
 
     return perm;
@@ -846 +847 @@
 
     /* Remove from permission hash table */
-    pj_hash_set(NULL, alloc->peer_table, &perm->hkey.peer_addr, 
-                pj_sockaddr_get_len(&perm->hkey.peer_addr), 0, NULL);
+    pj_hash_set(NULL, alloc->peer_table, 
+                pj_sockaddr_get_addr(&perm->hkey.peer_addr), 
+                pj_sockaddr_get_addr_len(&perm->hkey.peer_addr), 0, NULL);
 
     /* Remove from channel hash table, if assigned a channel number */
@@ -866 +868 @@
     pj_turn_permission *perm;
 
+    PJ_UNUSED_ARG(addr_len);
+
     /* Lookup in peer hash table */
-    perm = (pj_turn_permission*) pj_hash_get(alloc->peer_table, peer_addr,
-                                             addr_len, NULL);
+    perm = (pj_turn_permission*) 
+           pj_hash_get(alloc->peer_table, 
+                       pj_sockaddr_get_addr(peer_addr),
+                       pj_sockaddr_get_addr_len(peer_addr), 
+                       NULL);
     return perm ? check_permission_expiry(perm) : NULL;
 }
@@ -921 +928 @@
          * our stun_on_rx_request() or stun_on_rx_indication()
          * callbacks.
+         *
+         * Note: currently it is necessary to specify the 
+         * PJ_STUN_NO_FINGERPRINT_CHECK otherwise the FINGERPRINT
+         * attribute inside STUN Send Indication message will mess up
+         * with fingerprint checking.
          */
-        unsigned options = PJ_STUN_CHECK_PACKET;
+        unsigned options = PJ_STUN_CHECK_PACKET | PJ_STUN_NO_FINGERPRINT_CHECK;
         unsigned parsed_len = 0;