On Tue, Sep 23, 2008 at 08:34:07AM +0200, Karsten Keil wrote:
No really needed, normally the timers deleted long time before running out
or never so it should never see such a race, maybe if the application is
aborted and cleanup all timers this could happen but also this should be no
normal case, since usually you do not kill a PBX if any connections are
active.
Yes it could be used to do some deny on service kind of attack, so it should
be fixed at all.
All these timers are completely user controller and non-prviliegued. So
this _is_ a serious issue. In fact I think we should just rip out this
whole module, it's a really useless duplicate timer interface.
Gotta love merging unreviewed code.