Attachment 43125 Details for Bug 34048 – Fix for the jingleinfo issue, applicable to 0.8

[patch] Fix for the jingleinfo issue, applicable to 0.8

0001-0.8-Ignore-google-jingleinfo-pushes-from-contacts.patch (text/plain), 2.19 KB, created by Will Thompson on 2011-02-08 11:20:36 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Will Thompson

Created: 2011-02-08 11:20:36 UTC

Size: 2.19 KB

patch

obsolete

>From 797b8d189f2be77bdce55adb5c7b3070af19dce8 Mon Sep 17 00:00:00 2001
>From: Will Thompson <will.thompson@collabora.co.uk>
>Date: Tue, 8 Feb 2011 18:43:21 +0000
>Subject: [PATCH] [0.8] Ignore google:jingleinfo pushes from contacts.
>
>Previously, Gabble would erroneously process google:jingleinfo updates
>sent by anybody, rather than only paying attention to those sent by the
>user's server. This may theoretically allow an attacker to trick Gabble
>into relaying streamed media through a server of the attacker's
>choosing, enabling them to intercept, obstruct or modify the user's
>audio and video calls.
>
>This patch addresses this flaw, following the same pattern as the
>corresponding check in the roster code.
>
>Note that even without this flaw, no security guarantees on media in
>calls can be provided in the presence of malicious network admins or
>insecure networks: an attacker who can eavesdrop the network traffic
>still has the ability to intercept the content of the call, as the media
>is transmitted unencrypted.
>
>Signed-off-by: Will Thompson <will.thompson@collabora.co.uk>
>---
> src/jingle-factory.c |   16 ++++++++++++++++
> 1 files changed, 16 insertions(+), 0 deletions(-)
>
>diff --git a/src/jingle-factory.c b/src/jingle-factory.c
>index 217c8ab..3571246 100644
>--- a/src/jingle-factory.c
>+++ b/src/jingle-factory.c
>@@ -245,6 +245,22 @@ got_jingle_info_stanza (GabbleJingleFactory *fac,
>   GabbleJingleFactoryPrivate *priv = fac->priv;
>   LmMessageSubType sub_type;
>   LmMessageNode *query_node, *node;
>+  const gchar *from = lm_message_node_get_attribute (message->node, "from");
>+
>+  if (from != NULL)
>+    {
>+      TpBaseConnection *base_conn = TP_BASE_CONNECTION (priv->conn);
>+      TpHandleRepoIface *contact_repo = tp_base_connection_get_handles (
>+          base_conn, TP_HANDLE_TYPE_CONTACT);
>+      TpHandle sender = tp_handle_lookup (contact_repo, from, NULL, NULL);
>+
>+      if (sender != base_conn->self_handle)
>+        {
>+          DEBUG ("ignoring jingleinfo from '%s', not ourself nor the server",
>+              from);
>+          return LM_HANDLER_RESULT_ALLOW_MORE_HANDLERS;
>+        }
>+    }
> 
>   query_node = lm_message_node_get_child_with_namespace (message->node,
>       "query", NS_GOOGLE_JINGLE_INFO);
>-- 
>1.7.2.3
>

Actions: View | Splinter Review

Attachments on bug 34048: 43124 | 43125 | 43369

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.