rtpengine: bump to 10.5.6.2

Fixes "RTPEngine susceptible to Denial of Service via DTLS Hello packets during call initiation", see [1]. [1] https://www.openwall.com/lists/oss-security/2023/12/15/8 Signed-off-by: Sebastian Kemper <[email protected]>
openwrt · Jan 6, 2024 · f50de04 · f50de04
1 parent 75d8947
commit f50de04
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 8 deletions.
diff --git a/net/rtpengine/Makefile b/net/rtpengine/Makefile
@@ -9,12 +9,12 @@ include $(TOPDIR)/rules.mk
 include $(INCLUDE_DIR)/kernel.mk
 
 PKG_NAME:=rtpengine
-PKG_VERSION:=10.5.2.6
-PKG_RELEASE:=3
+PKG_VERSION:=10.5.6.3
+PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-mr$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://codeload.github.com/sipwise/rtpengine/tar.gz/mr$(PKG_VERSION)?
-PKG_HASH:=6f6d5cc2ebf27b6361ed2bd2f86a0ca74103503fd1a14af69ed423dba8340bc4
+PKG_HASH:=8ca55bf5ce334668ad278c98dbb9a7a49c97485f5708925936a28ffba5f644e4
 
 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-mr$(PKG_VERSION)
 

diff --git a/net/rtpengine/patches/06-fix-compilation-with-iptables-1-8-8.patch b/net/rtpengine/patches/06-fix-compilation-with-iptables-1-8-8.patch
@@ -17,9 +17,9 @@ Signed-off-by: Nick Hainke <[email protected]>
 
 --- a/iptables-extension/libxt_RTPENGINE.c
 +++ b/iptables-extension/libxt_RTPENGINE.c
-@@ -5,6 +5,10 @@
- #include <netinet/in.h>
- #include <arpa/inet.h>
+@@ -9,6 +9,10 @@
+ #define _init __attribute__((constructor)) _INIT
+ #endif
 
 +#ifndef _init
 +#define _init __attribute__((constructor)) _INIT

diff --git a/net/rtpengine/patches/07-always-dynamically-allocate-buffer-for-kernel-mod.patch b/net/rtpengine/patches/07-always-dynamically-allocate-buffer-for-kernel-mod.patch
@@ -1,6 +1,6 @@
 --- a/kernel-module/xt_RTPENGINE.c
 +++ b/kernel-module/xt_RTPENGINE.c
-@@ -3455,14 +3455,11 @@ static inline ssize_t proc_control_read_
+@@ -3457,14 +3457,11 @@ static inline ssize_t proc_control_read_
  	struct inode *inode;
  	uint32_t id;
  	struct rtpengine_table *t;
@@ -15,7 +15,7 @@
  	else { /* > */
  		msg = kmalloc(buflen, GFP_KERNEL);
  		if (!msg)
-@@ -3559,16 +3556,14 @@ static inline ssize_t proc_control_read_
+@@ -3561,16 +3558,14 @@ static inline ssize_t proc_control_read_
  			goto out;
  	}