Skip to content

Actions: ryanmurf/rustisk

Actions

Evaluate Issue for Copilot

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
evaluate-issue.yml
57 workflow runs
57 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
ARI: non-constant-time password/API-key comparison + default asterisk/asterisk credentials Evaluate Issue for Copilot #57: Issue #131 opened by ryanmurf
18s
18s
AMI: auth_timeout & auth_limit are configured but never enforced; no login rate-limit/backoff Evaluate Issue for Copilot #56: Issue #130 opened by ryanmurf
13s
13s
SIP: unconditional eprintln! debug spew logs Authorization header + caller PII on every INVITE Evaluate Issue for Copilot #55: Issue #129 opened by ryanmurf
14s
14s
SIP digest auth: nonce is never validated as server-issued or single-use — REGISTER/INVITE Authorization replay Evaluate Issue for Copilot #54: Issue #128 opened by ryanmurf
15s
15s
AMI: manager.conf read=/write= permissions are ignored — every user is granted ALL read+write (fail-open default) Evaluate Issue for Copilot #53: Issue #127 opened by ryanmurf
16s
16s
AMI: write-permission (write_perm) is never enforced — any authenticated user can Originate / run CLI Command / write config Evaluate Issue for Copilot #52: Issue #126 opened by ryanmurf
14s
14s
TaskProcessor uses an unbounded queue with no backpressure (latent soak leak) Evaluate Issue for Copilot #51: Issue #124 opened by ryanmurf
17s
17s
Channel hangup/answer callback registries leak one closure per call (unbounded memory + O(n²) fire) Evaluate Issue for Copilot #50: Issue #121 opened by ryanmurf
13s
13s
Latent: MuxedRtpSession::recv_muxed ignores packet source and fails-closed on malformed input Evaluate Issue for Copilot #49: Issue #117 opened by ryanmurf
16s
16s
Fuzz coverage gap: fuzz_sip_parse targets a standalone reimplementation, not the real SIP parser Evaluate Issue for Copilot #48: Issue #116 opened by ryanmurf
14s
14s
DoS: TCP transport buffers Content-Length bytes with no upper bound (memory exhaustion) Evaluate Issue for Copilot #47: Issue #115 opened by ryanmurf
13s
13s
DoS: extract_uri panics on a From/To/Contact header with '>' before '<' (reversed byte range) Evaluate Issue for Copilot #46: Issue #114 opened by ryanmurf
15s
15s
DoS: SIP parser panics on Content-Length that splits a UTF-8 character (single UDP packet kills the stack) Evaluate Issue for Copilot #45: Issue #112 opened by ryanmurf
13s
13s
SIP TCP framing: unbounded Content-Length buffering + add overflow in read_from_stream Evaluate Issue for Copilot #44: Issue #111 opened by ryanmurf
13s
13s
AMI: unbounded pre-auth read buffer (memory-exhaustion DoS) Evaluate Issue for Copilot #43: Issue #110 opened by ryanmurf
15s
15s
SIP DoS: panic on reversed angle-bracket range in header URI extraction (extract_uri, extract_user_from_header) Evaluate Issue for Copilot #42: Issue #109 opened by ryanmurf
14s
14s
SIP DoS: panic slicing message body on non-char-boundary Content-Length Evaluate Issue for Copilot #41: Issue #108 opened by ryanmurf
18s
18s
Add offline FreeSWITCH PIN-gate acceptance harness Evaluate Issue for Copilot #40: Issue #80 opened by ryanmurf
13s
13s
Expose per-call RTP voice and DTMF proof counters through AMI Evaluate Issue for Copilot #39: Issue #78 opened by ryanmurf
15s
15s
Playback: decode 8 kHz PCM WAV and encode negotiated G.711 Evaluate Issue for Copilot #38: Issue #76 opened by ryanmurf
14s
14s
Implement Read() media DTMF collection for PIN gate Evaluate Issue for Copilot #37: Issue #74 opened by ryanmurf
13s
13s
Install negotiated telephone-event payload type in RTP sessions Evaluate Issue for Copilot #36: Issue #72 opened by ryanmurf
14s
14s
SIP call paths allocate RTP from unbounded kernel-ephemeral ports Evaluate Issue for Copilot #35: Issue #70 opened by ryanmurf
17s
17s
PJSIP source identify rules do not reject unmatched INVITEs Evaluate Issue for Copilot #34: Issue #68 opened by ryanmurf
16s
16s
AMI missing configuration exposes admin/admin on every interface Evaluate Issue for Copilot #33: Issue #66 opened by ryanmurf
13s
13s