Transfers: Make Asterisk set ATTENDEDTRANSFER/BLINDTRANSFER more reliably
[asterisk/asterisk.git] / res / res_pjsip_session.c
1 /*
2 * Asterisk -- An open source telephony toolkit.
3 *
4 * Copyright (C) 2013, Digium, Inc.
5 *
6 * Mark Michelson <mmichelson@digium.com>
7 *
8 * See http://www.asterisk.org for more information about
9 * the Asterisk project. Please do not directly contact
10 * any of the maintainers of this project for assistance;
11 * the project provides a web site, mailing lists and IRC
12 * channels for your use.
13 *
14 * This program is free software, distributed under the terms of
15 * the GNU General Public License Version 2. See the LICENSE file
16 * at the top of the source tree.
17 */
18
19 /*** MODULEINFO
20         <depend>pjproject</depend>
21         <depend>res_pjsip</depend>
22         <support_level>core</support_level>
23  ***/
24
25 #include "asterisk.h"
26
27 #include <pjsip.h>
28 #include <pjsip_ua.h>
29 #include <pjlib.h>
30
31 #include "asterisk/res_pjsip.h"
32 #include "asterisk/res_pjsip_session.h"
33 #include "asterisk/datastore.h"
34 #include "asterisk/module.h"
35 #include "asterisk/logger.h"
36 #include "asterisk/res_pjsip.h"
37 #include "asterisk/astobj2.h"
38 #include "asterisk/lock.h"
39 #include "asterisk/uuid.h"
40 #include "asterisk/pbx.h"
41 #include "asterisk/taskprocessor.h"
42 #include "asterisk/causes.h"
43 #include "asterisk/sdp_srtp.h"
44 #include "asterisk/dsp.h"
45 #include "asterisk/acl.h"
46
47 #define SDP_HANDLER_BUCKETS 11
48
49 #define MOD_DATA_ON_RESPONSE "on_response"
50 #define MOD_DATA_NAT_HOOK "nat_hook"
51
52 /* Hostname used for origin line within SDP */
53 static const pj_str_t *hostname;
54
55 /* Some forward declarations */
56 static void handle_incoming_request(struct ast_sip_session *session, pjsip_rx_data *rdata);
57 static void handle_incoming_response(struct ast_sip_session *session, pjsip_rx_data *rdata);
58 static int handle_incoming(struct ast_sip_session *session, pjsip_rx_data *rdata);
59 static void handle_outgoing_request(struct ast_sip_session *session, pjsip_tx_data *tdata);
60 static void handle_outgoing_response(struct ast_sip_session *session, pjsip_tx_data *tdata);
61 static void handle_outgoing(struct ast_sip_session *session, pjsip_tx_data *tdata);
62
63 /*! \brief NAT hook for modifying outgoing messages with SDP */
64 static struct ast_sip_nat_hook *nat_hook;
65
66 /*!
67  * \brief Registered SDP stream handlers
68  *
69  * This container is keyed on stream types. Each
70  * object in the container is a linked list of
71  * handlers for the stream type.
72  */
73 static struct ao2_container *sdp_handlers;
74
75 /*!
76  * These are the objects in the sdp_handlers container
77  */
78 struct sdp_handler_list {
79         /* The list of handlers to visit */
80         AST_LIST_HEAD_NOLOCK(, ast_sip_session_sdp_handler) list;
81         /* The handlers in this list handle streams of this type */
82         char stream_type[1];
83 };
84
85 static struct pjmedia_sdp_session *create_local_sdp(pjsip_inv_session *inv, struct ast_sip_session *session, const pjmedia_sdp_session *offer);
86
87 static int sdp_handler_list_hash(const void *obj, int flags)
88 {
89         const struct sdp_handler_list *handler_list = obj;
90         const char *stream_type = flags & OBJ_KEY ? obj : handler_list->stream_type;
91
92         return ast_str_hash(stream_type);
93 }
94
95 static int sdp_handler_list_cmp(void *obj, void *arg, int flags)
96 {
97         struct sdp_handler_list *handler_list1 = obj;
98         struct sdp_handler_list *handler_list2 = arg;
99         const char *stream_type2 = flags & OBJ_KEY ? arg : handler_list2->stream_type;
100
101         return strcmp(handler_list1->stream_type, stream_type2) ? 0 : CMP_MATCH | CMP_STOP;
102 }
103
104 static int session_media_hash(const void *obj, int flags)
105 {
106         const struct ast_sip_session_media *session_media = obj;
107         const char *stream_type = flags & OBJ_KEY ? obj : session_media->stream_type;
108
109         return ast_str_hash(stream_type);
110 }
111
112 static int session_media_cmp(void *obj, void *arg, int flags)
113 {
114         struct ast_sip_session_media *session_media1 = obj;
115         struct ast_sip_session_media *session_media2 = arg;
116         const char *stream_type2 = flags & OBJ_KEY ? arg : session_media2->stream_type;
117
118         return strcmp(session_media1->stream_type, stream_type2) ? 0 : CMP_MATCH | CMP_STOP;
119 }
120
121 int ast_sip_session_register_sdp_handler(struct ast_sip_session_sdp_handler *handler, const char *stream_type)
122 {
123         RAII_VAR(struct sdp_handler_list *, handler_list,
124                         ao2_find(sdp_handlers, stream_type, OBJ_KEY), ao2_cleanup);
125         SCOPED_AO2LOCK(lock, sdp_handlers);
126
127         if (handler_list) {
128                 struct ast_sip_session_sdp_handler *iter;
129                 /* Check if this handler is already registered for this stream type */
130                 AST_LIST_TRAVERSE(&handler_list->list, iter, next) {
131                         if (!strcmp(iter->id, handler->id)) {
132                                 ast_log(LOG_WARNING, "Handler '%s' already registered for stream type '%s'.\n", handler->id, stream_type);
133                                 return -1;
134                         }
135                 }
136                 AST_LIST_INSERT_TAIL(&handler_list->list, handler, next);
137                 ast_debug(1, "Registered SDP stream handler '%s' for stream type '%s'\n", handler->id, stream_type);
138                 ast_module_ref(ast_module_info->self);
139                 return 0;
140         }
141
142         /* No stream of this type has been registered yet, so we need to create a new list */
143         handler_list = ao2_alloc(sizeof(*handler_list) + strlen(stream_type), NULL);
144         if (!handler_list) {
145                 return -1;
146         }
147         /* Safe use of strcpy */
148         strcpy(handler_list->stream_type, stream_type);
149         AST_LIST_HEAD_INIT_NOLOCK(&handler_list->list);
150         AST_LIST_INSERT_TAIL(&handler_list->list, handler, next);
151         if (!ao2_link(sdp_handlers, handler_list)) {
152                 return -1;
153         }
154         ast_debug(1, "Registered SDP stream handler '%s' for stream type '%s'\n", handler->id, stream_type);
155         ast_module_ref(ast_module_info->self);
156         return 0;
157 }
158
159 static int remove_handler(void *obj, void *arg, void *data, int flags)
160 {
161         struct sdp_handler_list *handler_list = obj;
162         struct ast_sip_session_sdp_handler *handler = data;
163         struct ast_sip_session_sdp_handler *iter;
164         const char *stream_type = arg;
165
166         AST_LIST_TRAVERSE_SAFE_BEGIN(&handler_list->list, iter, next) {
167                 if (!strcmp(iter->id, handler->id)) {
168                         AST_LIST_REMOVE_CURRENT(next);
169                         ast_debug(1, "Unregistered SDP stream handler '%s' for stream type '%s'\n", handler->id, stream_type);
170                         ast_module_unref(ast_module_info->self);
171                 }
172         }
173         AST_LIST_TRAVERSE_SAFE_END;
174
175         if (AST_LIST_EMPTY(&handler_list->list)) {
176                 ast_debug(3, "No more handlers exist for stream type '%s'\n", stream_type);
177                 return CMP_MATCH;
178         } else {
179                 return CMP_STOP;
180         }
181 }
182
183 void ast_sip_session_unregister_sdp_handler(struct ast_sip_session_sdp_handler *handler, const char *stream_type)
184 {
185         ao2_callback_data(sdp_handlers, OBJ_KEY | OBJ_UNLINK | OBJ_NODATA, remove_handler, (void *)stream_type, handler);
186 }
187
188 static int validate_port_hash(const void *obj, int flags)
189 {
190         const int *port = obj;
191         return *port;
192 }
193
194 static int validate_port_cmp(void *obj, void *arg, int flags)
195 {
196         int *port1 = obj;
197         int *port2 = arg;
198
199         return *port1 == *port2 ? CMP_MATCH | CMP_STOP : 0;
200 }
201
202 struct bundle_assoc {
203         int port;
204         char tag[1];
205 };
206
207 static int bundle_assoc_hash(const void *obj, int flags)
208 {
209         const struct bundle_assoc *assoc = obj;
210         const char *tag = flags & OBJ_KEY ? obj : assoc->tag;
211
212         return ast_str_hash(tag);
213 }
214
215 static int bundle_assoc_cmp(void *obj, void *arg, int flags)
216 {
217         struct bundle_assoc *assoc1 = obj;
218         struct bundle_assoc *assoc2 = arg;
219         const char *tag2 = flags & OBJ_KEY ? arg : assoc2->tag;
220
221         return strcmp(assoc1->tag, tag2) ? 0 : CMP_MATCH | CMP_STOP;
222 }
223
224 /* return must be ast_freed */
225 static pjmedia_sdp_attr *media_get_mid(pjmedia_sdp_media *media)
226 {
227         pjmedia_sdp_attr *attr = pjmedia_sdp_media_find_attr2(media, "mid", NULL);
228         if (!attr) {
229                 return NULL;
230         }
231
232         return attr;
233 }
234
235 static int get_bundle_port(const pjmedia_sdp_session *sdp, const char *mid)
236 {
237         int i;
238         for (i = 0; i < sdp->media_count; ++i) {
239                 pjmedia_sdp_attr *mid_attr = media_get_mid(sdp->media[i]);
240                 if (mid_attr && !pj_strcmp2(&mid_attr->value, mid)) {
241                         return sdp->media[i]->desc.port;
242                 }
243         }
244
245         return -1;
246 }
247
248 static int validate_incoming_sdp(const pjmedia_sdp_session *sdp)
249 {
250         int i;
251         RAII_VAR(struct ao2_container *, portlist, ao2_container_alloc(5, validate_port_hash, validate_port_cmp), ao2_cleanup);
252         RAII_VAR(struct ao2_container *, bundle_assoc_list, ao2_container_alloc(5, bundle_assoc_hash, bundle_assoc_cmp), ao2_cleanup);
253
254         /* check for bundles (for websocket RTP multiplexing, there can be more than one) */
255         for (i = 0; i < sdp->attr_count; ++i) {
256                 char *bundle_list;
257                 int bundle_port = 0;
258                 if (pj_stricmp2(&sdp->attr[i]->name, "group")) {
259                         continue;
260                 }
261
262                 /* check to see if this group is a bundle */
263                 if (7 >= sdp->attr[i]->value.slen || pj_strnicmp2(&sdp->attr[i]->value, "bundle ", 7)) {
264                         continue;
265                 }
266
267                 bundle_list = ast_alloca(sdp->attr[i]->value.slen - 6);
268                 strncpy(bundle_list, sdp->attr[i]->value.ptr + 7, sdp->attr[i]->value.slen - 7);
269                 bundle_list[sdp->attr[i]->value.slen - 7] = '\0';
270                 while (bundle_list) {
271                         char *item;
272                         RAII_VAR(struct bundle_assoc *, assoc, NULL, ao2_cleanup);
273                         item = strsep(&bundle_list, " ,");
274                         if (!bundle_port) {
275                                 RAII_VAR(int *, port, ao2_alloc(sizeof(int), NULL), ao2_cleanup);
276                                 RAII_VAR(int *, port_match, NULL, ao2_cleanup);
277                                 bundle_port = get_bundle_port(sdp, item);
278                                 if (bundle_port < 0) {
279                                         return -1;
280                                 }
281                                 port_match = ao2_find(portlist, &bundle_port, OBJ_KEY);
282                                 if (port_match) {
283                                         /* bundle port aready consumed by a different bundle */
284                                         return -1;
285                                 }
286                                 *port = bundle_port;
287                                 ao2_link(portlist, port);
288                         }
289                         assoc = ao2_alloc(sizeof(*assoc) + strlen(item), NULL);
290                         if (!assoc) {
291                                 return -1;
292                         }
293
294                         /* safe use of strcpy */
295                         strcpy(assoc->tag, item);
296                         assoc->port = bundle_port;
297                         ao2_link(bundle_assoc_list, assoc);
298                 }
299         }
300
301         /* validate all streams */
302         for (i = 0; i < sdp->media_count; ++i) {
303                 RAII_VAR(int *, port, ao2_alloc(sizeof(int), NULL), ao2_cleanup);
304                 RAII_VAR(int *, port_match, NULL, ao2_cleanup);
305                 RAII_VAR(int *, bundle_match, NULL, ao2_cleanup);
306                 *port = sdp->media[i]->desc.port;
307                 port_match = ao2_find(portlist, port, OBJ_KEY);
308                 if (port_match) {
309                         RAII_VAR(struct bundle_assoc *, assoc, NULL, ao2_cleanup);
310                         pjmedia_sdp_attr *mid = media_get_mid(sdp->media[i]);
311                         char *mid_val;
312
313                         if (!mid) {
314                                 /* not part of a bundle */
315                                 return -1;
316                         }
317
318                         mid_val = ast_alloca(mid->value.slen + 1);
319                         strncpy(mid_val, mid->value.ptr, mid->value.slen);
320                         mid_val[mid->value.slen] = '\0';
321
322                         assoc = ao2_find(bundle_assoc_list, mid_val, OBJ_KEY);
323                         if (!assoc || assoc->port != *port) {
324                                 /* This port already exists elsewhere in the SDP
325                                  * and is not an appropriate bundle port, fail
326                                  * catastrophically */
327                                 return -1;
328                         }
329                 }
330                 ao2_link(portlist, port);
331         }
332         return 0;
333 }
334
335 static int handle_incoming_sdp(struct ast_sip_session *session, const pjmedia_sdp_session *sdp)
336 {
337         int i;
338         if (validate_incoming_sdp(sdp)) {
339                 return -1;
340         }
341
342         for (i = 0; i < sdp->media_count; ++i) {
343                 /* See if there are registered handlers for this media stream type */
344                 char media[20];
345                 struct ast_sip_session_sdp_handler *handler;
346                 RAII_VAR(struct sdp_handler_list *, handler_list, NULL, ao2_cleanup);
347                 RAII_VAR(struct ast_sip_session_media *, session_media, NULL, ao2_cleanup);
348
349                 /* We need a null-terminated version of the media string */
350                 ast_copy_pj_str(media, &sdp->media[i]->desc.media, sizeof(media));
351
352                 session_media = ao2_find(session->media, media, OBJ_KEY);
353                 if (!session_media) {
354                         /* if the session_media doesn't exist, there weren't
355                          * any handlers at the time of its creation */
356                         continue;
357                 }
358
359                 if (session_media->handler) {
360                         int res;
361                         handler = session_media->handler;
362                         res = handler->negotiate_incoming_sdp_stream(
363                                 session, session_media, sdp, sdp->media[i]);
364                         if (res <= 0) {
365                                 /* Catastrophic failure or ignored by assigned handler. Abort! */
366                                 return -1;
367                         }
368                         if (res > 0) {
369                                 /* Handled by this handler. Move to the next stream */
370                                 continue;
371                         }
372                 }
373
374                 handler_list = ao2_find(sdp_handlers, media, OBJ_KEY);
375                 if (!handler_list) {
376                         ast_debug(1, "No registered SDP handlers for media type '%s'\n", media);
377                         continue;
378                 }
379                 AST_LIST_TRAVERSE(&handler_list->list, handler, next) {
380                         int res;
381                         if (session_media->handler) {
382                                 /* There is only one slot for this stream type and it has already been claimed
383                                  * so it will go unhandled */
384                                 break;
385                         }
386                         res = handler->negotiate_incoming_sdp_stream(session, session_media, sdp, sdp->media[i]);
387                         if (res < 0) {
388                                 /* Catastrophic failure. Abort! */
389                                 return -1;
390                         }
391                         if (res > 0) {
392                                 /* Handled by this handler. Move to the next stream */
393                                 session_media->handler = handler;
394                                 break;
395                         }
396                 }
397         }
398         return 0;
399 }
400
401 struct handle_negotiated_sdp_cb {
402         struct ast_sip_session *session;
403         const pjmedia_sdp_session *local;
404         const pjmedia_sdp_session *remote;
405 };
406
407 static int handle_negotiated_sdp_session_media(void *obj, void *arg, int flags)
408 {
409         struct ast_sip_session_media *session_media = obj;
410         struct handle_negotiated_sdp_cb *callback_data = arg;
411         struct ast_sip_session *session = callback_data->session;
412         const pjmedia_sdp_session *local = callback_data->local;
413         const pjmedia_sdp_session *remote = callback_data->remote;
414         int i;
415
416         for (i = 0; i < local->media_count; ++i) {
417                 /* See if there are registered handlers for this media stream type */
418                 char media[20];
419                 struct ast_sip_session_sdp_handler *handler;
420                 RAII_VAR(struct sdp_handler_list *, handler_list, NULL, ao2_cleanup);
421
422                 if (!remote->media[i]) {
423                         continue;
424                 }
425
426                 /* We need a null-terminated version of the media string */
427                 ast_copy_pj_str(media, &local->media[i]->desc.media, sizeof(media));
428
429                 /* stream type doesn't match the one we're looking to fill */
430                 if (strcasecmp(session_media->stream_type, media)) {
431                         continue;
432                 }
433
434                 handler = session_media->handler;
435                 if (handler) {
436                         int res = handler->apply_negotiated_sdp_stream(session, session_media, local, local->media[i], remote, remote->media[i]);
437                         if (res >= 0) {
438                                 return CMP_MATCH;
439                         }
440                         return 0;
441                 }
442
443                 handler_list = ao2_find(sdp_handlers, media, OBJ_KEY);
444                 if (!handler_list) {
445                         ast_debug(1, "No registered SDP handlers for media type '%s'\n", media);
446                         continue;
447                 }
448                 AST_LIST_TRAVERSE(&handler_list->list, handler, next) {
449                         int res = handler->apply_negotiated_sdp_stream(session, session_media, local, local->media[i], remote, remote->media[i]);
450                         if (res < 0) {
451                                 /* Catastrophic failure. Abort! */
452                                 return 0;
453                         }
454                         if (res > 0) {
455                                 /* Handled by this handler. Move to the next stream */
456                                 session_media->handler = handler;
457                                 return CMP_MATCH;
458                         }
459                 }
460         }
461         return CMP_MATCH;
462 }
463
464 static int handle_negotiated_sdp(struct ast_sip_session *session, const pjmedia_sdp_session *local, const pjmedia_sdp_session *remote)
465 {
466         RAII_VAR(struct ao2_iterator *, successful, NULL, ao2_iterator_cleanup);
467         struct handle_negotiated_sdp_cb callback_data = {
468                 .session = session,
469                 .local = local,
470                 .remote = remote,
471         };
472
473         successful = ao2_callback(session->media, OBJ_MULTIPLE, handle_negotiated_sdp_session_media, &callback_data);
474         if (successful && ao2_container_count(successful->c) == ao2_container_count(session->media)) {
475                 /* Nothing experienced a catastrophic failure */
476                 ast_queue_frame(session->channel, &ast_null_frame);
477                 return 0;
478         }
479         return -1;
480 }
481
482 AST_RWLIST_HEAD_STATIC(session_supplements, ast_sip_session_supplement);
483
484 int ast_sip_session_register_supplement(struct ast_sip_session_supplement *supplement)
485 {
486         struct ast_sip_session_supplement *iter;
487         int inserted = 0;
488         SCOPED_LOCK(lock, &session_supplements, AST_RWLIST_WRLOCK, AST_RWLIST_UNLOCK);
489
490         AST_RWLIST_TRAVERSE_SAFE_BEGIN(&session_supplements, iter, next) {
491                 if (iter->priority > supplement->priority) {
492                         AST_RWLIST_INSERT_BEFORE_CURRENT(supplement, next);
493                         inserted = 1;
494                         break;
495                 }
496         }
497         AST_RWLIST_TRAVERSE_SAFE_END;
498
499         if (!inserted) {
500                 AST_RWLIST_INSERT_TAIL(&session_supplements, supplement, next);
501         }
502         ast_module_ref(ast_module_info->self);
503         return 0;
504 }
505
506 void ast_sip_session_unregister_supplement(struct ast_sip_session_supplement *supplement)
507 {
508         struct ast_sip_session_supplement *iter;
509         SCOPED_LOCK(lock, &session_supplements, AST_RWLIST_WRLOCK, AST_RWLIST_UNLOCK);
510         AST_RWLIST_TRAVERSE_SAFE_BEGIN(&session_supplements, iter, next) {
511                 if (supplement == iter) {
512                         AST_RWLIST_REMOVE_CURRENT(next);
513                         ast_module_unref(ast_module_info->self);
514                         break;
515                 }
516         }
517         AST_RWLIST_TRAVERSE_SAFE_END;
518 }
519
520 static struct ast_sip_session_supplement *supplement_dup(const struct ast_sip_session_supplement *src)
521 {
522         struct ast_sip_session_supplement *dst = ast_calloc(1, sizeof(*dst));
523         if (!dst) {
524                 return NULL;
525         }
526         /* Will need to revisit if shallow copy becomes an issue */
527         *dst = *src;
528         return dst;
529 }
530
531 #define DATASTORE_BUCKETS 53
532 #define MEDIA_BUCKETS 7
533
534 static void session_datastore_destroy(void *obj)
535 {
536         struct ast_datastore *datastore = obj;
537
538         /* Using the destroy function (if present) destroy the data */
539         if (datastore->info->destroy != NULL && datastore->data != NULL) {
540                 datastore->info->destroy(datastore->data);
541                 datastore->data = NULL;
542         }
543
544         ast_free((void *) datastore->uid);
545         datastore->uid = NULL;
546 }
547
548 struct ast_datastore *ast_sip_session_alloc_datastore(const struct ast_datastore_info *info, const char *uid)
549 {
550         RAII_VAR(struct ast_datastore *, datastore, NULL, ao2_cleanup);
551         const char *uid_ptr = uid;
552
553         if (!info) {
554                 return NULL;
555         }
556
557         datastore = ao2_alloc(sizeof(*datastore), session_datastore_destroy);
558         if (!datastore) {
559                 return NULL;
560         }
561
562         datastore->info = info;
563         if (ast_strlen_zero(uid)) {
564                 /* They didn't provide an ID so we'll provide one ourself */
565                 struct ast_uuid *uuid = ast_uuid_generate();
566                 char uuid_buf[AST_UUID_STR_LEN];
567                 if (!uuid) {
568                         return NULL;
569                 }
570                 uid_ptr = ast_uuid_to_str(uuid, uuid_buf, sizeof(uuid_buf));
571                 ast_free(uuid);
572         }
573
574         datastore->uid = ast_strdup(uid_ptr);
575         if (!datastore->uid) {
576                 return NULL;
577         }
578
579         ao2_ref(datastore, +1);
580         return datastore;
581 }
582
583 int ast_sip_session_add_datastore(struct ast_sip_session *session, struct ast_datastore *datastore)
584 {
585         ast_assert(datastore != NULL);
586         ast_assert(datastore->info != NULL);
587         ast_assert(ast_strlen_zero(datastore->uid) == 0);
588
589         if (!ao2_link(session->datastores, datastore)) {
590                 return -1;
591         }
592         return 0;
593 }
594
595 struct ast_datastore *ast_sip_session_get_datastore(struct ast_sip_session *session, const char *name)
596 {
597         return ao2_find(session->datastores, name, OBJ_KEY);
598 }
599
600 void ast_sip_session_remove_datastore(struct ast_sip_session *session, const char *name)
601 {
602         ao2_callback(session->datastores, OBJ_KEY | OBJ_UNLINK | OBJ_NODATA, NULL, (void *) name);
603 }
604
605 /*!
606  * \brief Structure used for sending delayed requests
607  *
608  * Requests are typically delayed because the current transaction
609  * state of an INVITE. Once the pending INVITE transaction terminates,
610  * the delayed request will be sent
611  */
612 struct ast_sip_session_delayed_request {
613         /*! Method of the request */
614         char method[15];
615         /*! Callback to call when the delayed request is created. */
616         ast_sip_session_request_creation_cb on_request_creation;
617         /*! Callback to call when the delayed request SDP is created */
618         ast_sip_session_sdp_creation_cb on_sdp_creation;
619         /*! Callback to call when the delayed request receives a response */
620         ast_sip_session_response_cb on_response;
621         /*! Request to send */
622         pjsip_tx_data *tdata;
623         AST_LIST_ENTRY(ast_sip_session_delayed_request) next;
624 };
625
626 static struct ast_sip_session_delayed_request *delayed_request_alloc(const char *method,
627                 ast_sip_session_request_creation_cb on_request_creation,
628                 ast_sip_session_sdp_creation_cb on_sdp_creation,
629                 ast_sip_session_response_cb on_response,
630                 pjsip_tx_data *tdata)
631 {
632         struct ast_sip_session_delayed_request *delay = ast_calloc(1, sizeof(*delay));
633         if (!delay) {
634                 return NULL;
635         }
636         ast_copy_string(delay->method, method, sizeof(delay->method));
637         delay->on_request_creation = on_request_creation;
638         delay->on_sdp_creation = on_sdp_creation;
639         delay->on_response = on_response;
640         delay->tdata = tdata;
641         return delay;
642 }
643
644 static int send_delayed_request(struct ast_sip_session *session, struct ast_sip_session_delayed_request *delay)
645 {
646         ast_debug(3, "Sending delayed %s request to %s\n", delay->method, ast_sorcery_object_get_id(session->endpoint));
647
648         if (delay->tdata) {
649                 ast_sip_session_send_request_with_cb(session, delay->tdata, delay->on_response);
650                 return 0;
651         }
652
653         if (!strcmp(delay->method, "INVITE")) {
654                 ast_sip_session_refresh(session, delay->on_request_creation,
655                                 delay->on_sdp_creation, delay->on_response, AST_SIP_SESSION_REFRESH_METHOD_INVITE, 1);
656         } else if (!strcmp(delay->method, "UPDATE")) {
657                 ast_sip_session_refresh(session, delay->on_request_creation,
658                                 delay->on_sdp_creation, delay->on_response, AST_SIP_SESSION_REFRESH_METHOD_UPDATE, 1);
659         } else {
660                 ast_log(LOG_WARNING, "Unexpected delayed %s request with no existing request structure\n", delay->method);
661                 return -1;
662         }
663         return 0;
664 }
665
666 static int queued_delayed_request_send(void *data)
667 {
668         RAII_VAR(struct ast_sip_session *, session, data, ao2_cleanup);
669         RAII_VAR(struct ast_sip_session_delayed_request *, delay, NULL, ast_free_ptr);
670
671         delay = AST_LIST_REMOVE_HEAD(&session->delayed_requests, next);
672         if (!delay) {
673                 return 0;
674         }
675
676         return send_delayed_request(session, delay);
677 }
678
679 static void queue_delayed_request(struct ast_sip_session *session)
680 {
681         if (AST_LIST_EMPTY(&session->delayed_requests)) {
682                 /* No delayed request to send, so just return */
683                 return;
684         }
685
686         ast_debug(3, "Queuing delayed request to run for %s\n",
687                         ast_sorcery_object_get_id(session->endpoint));
688
689         ao2_ref(session, +1);
690         ast_sip_push_task(session->serializer, queued_delayed_request_send, session);
691 }
692
693 static int delay_request(struct ast_sip_session *session, ast_sip_session_request_creation_cb on_request,
694                 ast_sip_session_sdp_creation_cb on_sdp_creation, ast_sip_session_response_cb on_response,
695                 const char *method, pjsip_tx_data *tdata)
696 {
697         struct ast_sip_session_delayed_request *delay = delayed_request_alloc(method,
698                         on_request, on_sdp_creation, on_response, tdata);
699
700         if (!delay) {
701                 return -1;
702         }
703
704         AST_LIST_INSERT_TAIL(&session->delayed_requests, delay, next);
705         return 0;
706 }
707
708 static pjmedia_sdp_session *generate_session_refresh_sdp(struct ast_sip_session *session)
709 {
710         pjsip_inv_session *inv_session = session->inv_session;
711         const pjmedia_sdp_session *previous_sdp;
712
713         if (pjmedia_sdp_neg_was_answer_remote(inv_session->neg)) {
714                 pjmedia_sdp_neg_get_active_remote(inv_session->neg, &previous_sdp);
715         } else {
716                 pjmedia_sdp_neg_get_active_local(inv_session->neg, &previous_sdp);
717         }
718         return create_local_sdp(inv_session, session, previous_sdp);
719 }
720
721 int ast_sip_session_refresh(struct ast_sip_session *session,
722                 ast_sip_session_request_creation_cb on_request_creation,
723                 ast_sip_session_sdp_creation_cb on_sdp_creation,
724                 ast_sip_session_response_cb on_response,
725                 enum ast_sip_session_refresh_method method, int generate_new_sdp)
726 {
727         pjsip_inv_session *inv_session = session->inv_session;
728         pjmedia_sdp_session *new_sdp = NULL;
729         pjsip_tx_data *tdata;
730
731         if (inv_session->state == PJSIP_INV_STATE_DISCONNECTED) {
732                 /* Don't try to do anything with a hung-up call */
733                 ast_debug(3, "Not sending reinvite to %s because of disconnected state...\n",
734                                 ast_sorcery_object_get_id(session->endpoint));
735                 return 0;
736         }
737
738         if (method == AST_SIP_SESSION_REFRESH_METHOD_INVITE) {
739                 if (inv_session->invite_tsx) {
740                         /* We can't send a reinvite yet, so delay it */
741                         ast_debug(3, "Delaying sending reinvite to %s because of outstanding transaction...\n",
742                                         ast_sorcery_object_get_id(session->endpoint));
743                         return delay_request(session, on_request_creation, on_sdp_creation, on_response, "INVITE", NULL);
744                 } else if (inv_session->state != PJSIP_INV_STATE_CONFIRMED) {
745                         /* Initial INVITE transaction failed to progress us to a confirmed state
746                          * which means re-invites are not possible
747                          */
748                         ast_debug(3, "Not sending reinvite to %s because not in confirmed state...\n",
749                                         ast_sorcery_object_get_id(session->endpoint));
750                         return 0;
751                 }
752         }
753
754         if (generate_new_sdp) {
755                 new_sdp = generate_session_refresh_sdp(session);
756                 if (!new_sdp) {
757                         ast_log(LOG_ERROR, "Failed to generate session refresh SDP. Not sending session refresh\n");
758                         return -1;
759                 }
760                 if (on_sdp_creation) {
761                         if (on_sdp_creation(session, new_sdp)) {
762                                 return -1;
763                         }
764                 }
765         }
766
767         if (method == AST_SIP_SESSION_REFRESH_METHOD_INVITE) {
768                 if (pjsip_inv_reinvite(inv_session, NULL, new_sdp, &tdata)) {
769                         ast_log(LOG_WARNING, "Failed to create reinvite properly.\n");
770                         return -1;
771                 }
772         } else if (pjsip_inv_update(inv_session, NULL, new_sdp, &tdata)) {
773                 ast_log(LOG_WARNING, "Failed to create UPDATE properly.\n");
774                 return -1;
775         }
776         if (on_request_creation) {
777                 if (on_request_creation(session, tdata)) {
778                         return -1;
779                 }
780         }
781         ast_sip_session_send_request_with_cb(session, tdata, on_response);
782         return 0;
783 }
784
785 void ast_sip_session_send_response(struct ast_sip_session *session, pjsip_tx_data *tdata)
786 {
787         handle_outgoing_response(session, tdata);
788         pjsip_inv_send_msg(session->inv_session, tdata);
789         return;
790 }
791
792 static pj_bool_t session_on_rx_request(pjsip_rx_data *rdata);
793
794 static pjsip_module session_module = {
795         .name = {"Session Module", 14},
796         .priority = PJSIP_MOD_PRIORITY_APPLICATION,
797         .on_rx_request = session_on_rx_request,
798 };
799
800 /*! \brief Determine whether the SDP provided requires deferral of negotiating or not
801  *
802  * \retval 1 re-invite should be deferred and resumed later
803  * \retval 0 re-invite should not be deferred
804  */
805 static int sdp_requires_deferral(struct ast_sip_session *session, const pjmedia_sdp_session *sdp)
806 {
807         int i;
808         if (validate_incoming_sdp(sdp)) {
809                 return 0;
810         }
811
812         for (i = 0; i < sdp->media_count; ++i) {
813                 /* See if there are registered handlers for this media stream type */
814                 char media[20];
815                 struct ast_sip_session_sdp_handler *handler;
816                 RAII_VAR(struct sdp_handler_list *, handler_list, NULL, ao2_cleanup);
817                 RAII_VAR(struct ast_sip_session_media *, session_media, NULL, ao2_cleanup);
818
819                 /* We need a null-terminated version of the media string */
820                 ast_copy_pj_str(media, &sdp->media[i]->desc.media, sizeof(media));
821
822                 session_media = ao2_find(session->media, media, OBJ_KEY);
823                 if (!session_media) {
824                         /* if the session_media doesn't exist, there weren't
825                          * any handlers at the time of its creation */
826                         continue;
827                 }
828
829                 if (session_media->handler && session_media->handler->defer_incoming_sdp_stream) {
830                         int res;
831                         handler = session_media->handler;
832                         res = handler->defer_incoming_sdp_stream(
833                                 session, session_media, sdp, sdp->media[i]);
834                         if (res) {
835                                 return 1;
836                         }
837                 }
838
839                 handler_list = ao2_find(sdp_handlers, media, OBJ_KEY);
840                 if (!handler_list) {
841                         ast_debug(1, "No registered SDP handlers for media type '%s'\n", media);
842                         continue;
843                 }
844                 AST_LIST_TRAVERSE(&handler_list->list, handler, next) {
845                         int res;
846                         if (session_media->handler) {
847                                 /* There is only one slot for this stream type and it has already been claimed
848                                  * so it will go unhandled */
849                                 break;
850                         }
851                         if (!handler->defer_incoming_sdp_stream) {
852                                 continue;
853                         }
854                         res = handler->defer_incoming_sdp_stream(session, session_media, sdp, sdp->media[i]);
855                         if (res) {
856                                 return 1;
857                         }
858                 }
859         }
860         return 0;
861 }
862
863 static pj_bool_t session_reinvite_on_rx_request(pjsip_rx_data *rdata)
864 {
865         pjsip_dialog *dlg;
866         RAII_VAR(struct ast_sip_session *, session, NULL, ao2_cleanup);
867         pjsip_rdata_sdp_info *sdp_info;
868
869         if (rdata->msg_info.msg->line.req.method.id != PJSIP_INVITE_METHOD ||
870                 !(dlg = pjsip_ua_find_dialog(&rdata->msg_info.cid->id, &rdata->msg_info.to->tag, &rdata->msg_info.from->tag, PJ_FALSE)) ||
871                 !(session = ast_sip_dialog_get_session(dlg))) {
872                 return PJ_FALSE;
873         }
874
875         if (session->deferred_reinvite) {
876                 pj_str_t key, deferred_key;
877                 pjsip_tx_data *tdata;
878
879                 /* We use memory from the new request on purpose so the deferred reinvite pool does not grow uncontrollably */
880                 pjsip_tsx_create_key(rdata->tp_info.pool, &key, PJSIP_ROLE_UAS, &rdata->msg_info.cseq->method, rdata);
881                 pjsip_tsx_create_key(rdata->tp_info.pool, &deferred_key, PJSIP_ROLE_UAS, &session->deferred_reinvite->msg_info.cseq->method,
882                         session->deferred_reinvite);
883
884                 /* If this is a retransmission ignore it */
885                 if (!pj_strcmp(&key, &deferred_key)) {
886                         return PJ_TRUE;
887                 }
888
889                 /* Otherwise this is a new re-invite, so reject it */
890                 if (pjsip_dlg_create_response(dlg, rdata, 491, NULL, &tdata) == PJ_SUCCESS) {
891                         pjsip_endpt_send_response2(ast_sip_get_pjsip_endpoint(), rdata, tdata, NULL, NULL);
892                 }
893
894                 return PJ_TRUE;
895         }
896
897         if (!(sdp_info = pjsip_rdata_get_sdp_info(rdata)) ||
898                 (sdp_info->sdp_err != PJ_SUCCESS) ||
899                 !sdp_info->sdp ||
900                 !sdp_requires_deferral(session, sdp_info->sdp)) {
901                 return PJ_FALSE;
902         }
903
904         pjsip_rx_data_clone(rdata, 0, &session->deferred_reinvite);
905
906         return PJ_TRUE;
907 }
908
909 void ast_sip_session_resume_reinvite(struct ast_sip_session *session)
910 {
911         if (!session->deferred_reinvite) {
912                 return;
913         }
914
915         pjsip_endpt_process_rx_data(ast_sip_get_pjsip_endpoint(), session->deferred_reinvite, NULL, NULL);
916         pjsip_rx_data_free_cloned(session->deferred_reinvite);
917         session->deferred_reinvite = NULL;
918 }
919
920 static pjsip_module session_reinvite_module = {
921         .name = { "Session Re-Invite Module", 24 },
922         .priority = PJSIP_MOD_PRIORITY_UA_PROXY_LAYER - 1,
923         .on_rx_request = session_reinvite_on_rx_request,
924 };
925
926 void ast_sip_session_send_request_with_cb(struct ast_sip_session *session, pjsip_tx_data *tdata,
927                 ast_sip_session_response_cb on_response)
928 {
929         pjsip_inv_session *inv_session = session->inv_session;
930
931         if (inv_session->state == PJSIP_INV_STATE_DISCONNECTED) {
932                 /* Don't try to do anything with a hung-up call */
933                 return;
934         }
935
936         ast_sip_mod_data_set(tdata->pool, tdata->mod_data, session_module.id,
937                              MOD_DATA_ON_RESPONSE, on_response);
938
939         if (!ast_strlen_zero(session->endpoint->fromuser) ||
940                 !ast_strlen_zero(session->endpoint->fromdomain)) {
941                 pjsip_fromto_hdr *from = pjsip_msg_find_hdr(tdata->msg, PJSIP_H_FROM, tdata->msg->hdr.next);
942                 pjsip_sip_uri *uri = pjsip_uri_get_uri(from->uri);
943
944                 if (!ast_strlen_zero(session->endpoint->fromuser)) {
945                         pj_strdup2(tdata->pool, &uri->user, session->endpoint->fromuser);
946                 }
947                 if (!ast_strlen_zero(session->endpoint->fromdomain)) {
948                         pj_strdup2(tdata->pool, &uri->host, session->endpoint->fromdomain);
949                 }
950         }
951
952         handle_outgoing_request(session, tdata);
953         pjsip_inv_send_msg(session->inv_session, tdata);
954         return;
955 }
956
957 void ast_sip_session_send_request(struct ast_sip_session *session, pjsip_tx_data *tdata)
958 {
959         ast_sip_session_send_request_with_cb(session, tdata, NULL);
960 }
961
962 int ast_sip_session_create_invite(struct ast_sip_session *session, pjsip_tx_data **tdata)
963 {
964         pjmedia_sdp_session *offer;
965
966         if (!(offer = create_local_sdp(session->inv_session, session, NULL))) {
967                 pjsip_inv_terminate(session->inv_session, 500, PJ_FALSE);
968                 return -1;
969         }
970
971         pjsip_inv_set_local_sdp(session->inv_session, offer);
972         pjmedia_sdp_neg_set_prefer_remote_codec_order(session->inv_session->neg, PJ_FALSE);
973 #ifdef PJMEDIA_SDP_NEG_ANSWER_MULTIPLE_CODECS
974         pjmedia_sdp_neg_set_answer_multiple_codecs(session->inv_session->neg, PJ_TRUE);
975 #endif
976         if (pjsip_inv_invite(session->inv_session, tdata) != PJ_SUCCESS) {
977                 return -1;
978         }
979         return 0;
980 }
981
982 static int datastore_hash(const void *obj, int flags)
983 {
984         const struct ast_datastore *datastore = obj;
985         const char *uid = flags & OBJ_KEY ? obj : datastore->uid;
986
987         ast_assert(uid != NULL);
988
989         return ast_str_hash(uid);
990 }
991
992 static int datastore_cmp(void *obj, void *arg, int flags)
993 {
994         const struct ast_datastore *datastore1 = obj;
995         const struct ast_datastore *datastore2 = arg;
996         const char *uid2 = flags & OBJ_KEY ? arg : datastore2->uid;
997
998         ast_assert(datastore1->uid != NULL);
999         ast_assert(uid2 != NULL);
1000
1001         return strcmp(datastore1->uid, uid2) ? 0 : CMP_MATCH | CMP_STOP;
1002 }
1003
1004 static void session_media_dtor(void *obj)
1005 {
1006         struct ast_sip_session_media *session_media = obj;
1007         if (session_media->handler) {
1008                 session_media->handler->stream_destroy(session_media);
1009         }
1010         if (session_media->srtp) {
1011                 ast_sdp_srtp_destroy(session_media->srtp);
1012         }
1013 }
1014
1015 static void session_destructor(void *obj)
1016 {
1017         struct ast_sip_session *session = obj;
1018         struct ast_sip_session_supplement *supplement;
1019         struct ast_sip_session_delayed_request *delay;
1020
1021         ast_debug(3, "Destroying SIP session with endpoint %s\n",
1022                         ast_sorcery_object_get_id(session->endpoint));
1023
1024         while ((supplement = AST_LIST_REMOVE_HEAD(&session->supplements, next))) {
1025                 if (supplement->session_destroy) {
1026                         supplement->session_destroy(session);
1027                 }
1028                 ast_free(supplement);
1029         }
1030
1031         ast_taskprocessor_unreference(session->serializer);
1032         ao2_cleanup(session->datastores);
1033         ao2_cleanup(session->media);
1034
1035         AST_LIST_HEAD_DESTROY(&session->supplements);
1036         while ((delay = AST_LIST_REMOVE_HEAD(&session->delayed_requests, next))) {
1037                 ast_free(delay);
1038         }
1039         ast_party_id_free(&session->id);
1040         ao2_cleanup(session->endpoint);
1041         ast_format_cap_destroy(session->req_caps);
1042         ast_format_cap_destroy(session->direct_media_cap);
1043
1044         if (session->dsp) {
1045                 ast_dsp_free(session->dsp);
1046         }
1047
1048         if (session->inv_session) {
1049                 pjsip_dlg_dec_session(session->inv_session->dlg, &session_module);
1050         }
1051 }
1052
1053 static int add_supplements(struct ast_sip_session *session)
1054 {
1055         struct ast_sip_session_supplement *iter;
1056         SCOPED_LOCK(lock, &session_supplements, AST_RWLIST_RDLOCK, AST_RWLIST_UNLOCK);
1057
1058         AST_RWLIST_TRAVERSE(&session_supplements, iter, next) {
1059                 struct ast_sip_session_supplement *copy = supplement_dup(iter);
1060                 if (!copy) {
1061                         return -1;
1062                 }
1063                 AST_LIST_INSERT_TAIL(&session->supplements, copy, next);
1064         }
1065         return 0;
1066 }
1067
1068 static int add_session_media(void *obj, void *arg, int flags)
1069 {
1070         struct sdp_handler_list *handler_list = obj;
1071         struct ast_sip_session * session = arg;
1072         RAII_VAR(struct ast_sip_session_media *, session_media, NULL, ao2_cleanup);
1073         session_media = ao2_alloc(sizeof(*session_media) + strlen(handler_list->stream_type), session_media_dtor);
1074         if (!session_media) {
1075                 return CMP_STOP;
1076         }
1077         /* Safe use of strcpy */
1078         strcpy(session_media->stream_type, handler_list->stream_type);
1079         ao2_link(session->media, session_media);
1080         return 0;
1081 }
1082
1083 /*! \brief Destructor for SIP channel */
1084 static void sip_channel_destroy(void *obj)
1085 {
1086         struct ast_sip_channel_pvt *channel = obj;
1087
1088         ao2_cleanup(channel->pvt);
1089         ao2_cleanup(channel->session);
1090 }
1091
1092 struct ast_sip_channel_pvt *ast_sip_channel_pvt_alloc(void *pvt, struct ast_sip_session *session)
1093 {
1094         struct ast_sip_channel_pvt *channel = ao2_alloc(sizeof(*channel), sip_channel_destroy);
1095
1096         if (!channel) {
1097                 return NULL;
1098         }
1099
1100         ao2_ref(pvt, +1);
1101         channel->pvt = pvt;
1102         ao2_ref(session, +1);
1103         channel->session = session;
1104
1105         return channel;
1106 }
1107
1108 struct ast_sip_session *ast_sip_session_alloc(struct ast_sip_endpoint *endpoint, pjsip_inv_session *inv_session)
1109 {
1110         RAII_VAR(struct ast_sip_session *, session, ao2_alloc(sizeof(*session), session_destructor), ao2_cleanup);
1111         struct ast_sip_session_supplement *iter;
1112         int dsp_features = 0;
1113         if (!session) {
1114                 return NULL;
1115         }
1116         AST_LIST_HEAD_INIT(&session->supplements);
1117         session->datastores = ao2_container_alloc(DATASTORE_BUCKETS, datastore_hash, datastore_cmp);
1118         if (!session->datastores) {
1119                 return NULL;
1120         }
1121
1122         session->media = ao2_container_alloc(MEDIA_BUCKETS, session_media_hash, session_media_cmp);
1123         if (!session->media) {
1124                 return NULL;
1125         }
1126         /* fill session->media with available types */
1127         ao2_callback(sdp_handlers, OBJ_NODATA, add_session_media, session);
1128
1129         session->serializer = ast_sip_create_serializer();
1130         if (!session->serializer) {
1131                 return NULL;
1132         }
1133         ast_sip_dialog_set_serializer(inv_session->dlg, session->serializer);
1134         ast_sip_dialog_set_endpoint(inv_session->dlg, endpoint);
1135         pjsip_dlg_inc_session(inv_session->dlg, &session_module);
1136         ao2_ref(session, +1);
1137         inv_session->mod_data[session_module.id] = session;
1138         ao2_ref(endpoint, +1);
1139         session->endpoint = endpoint;
1140         session->inv_session = inv_session;
1141         session->req_caps = ast_format_cap_alloc(AST_FORMAT_CAP_FLAG_NOLOCK);
1142
1143         if (endpoint->dtmf == AST_SIP_DTMF_INBAND) {
1144                 dsp_features |= DSP_FEATURE_DIGIT_DETECT;
1145         }
1146
1147         if (endpoint->faxdetect) {
1148                 dsp_features |= DSP_FEATURE_FAX_DETECT;
1149         }
1150
1151         if (dsp_features) {
1152                 if (!(session->dsp = ast_dsp_new())) {
1153                         ao2_ref(session, -1);
1154                         return NULL;
1155                 }
1156
1157                 ast_dsp_set_features(session->dsp, dsp_features);
1158         }
1159
1160         if (add_supplements(session)) {
1161                 ao2_ref(session, -1);
1162                 return NULL;
1163         }
1164         AST_LIST_TRAVERSE(&session->supplements, iter, next) {
1165                 if (iter->session_begin) {
1166                         iter->session_begin(session);
1167                 }
1168         }
1169         session->direct_media_cap = ast_format_cap_alloc(AST_FORMAT_CAP_FLAG_NOLOCK);
1170         AST_LIST_HEAD_INIT_NOLOCK(&session->delayed_requests);
1171         ast_party_id_init(&session->id);
1172         ao2_ref(session, +1);
1173         return session;
1174 }
1175
1176 static int session_outbound_auth(pjsip_dialog *dlg, pjsip_tx_data *tdata, void *user_data)
1177 {
1178         pjsip_inv_session *inv = pjsip_dlg_get_inv_session(dlg);
1179         struct ast_sip_session *session = inv->mod_data[session_module.id];
1180
1181         if (inv->state < PJSIP_INV_STATE_CONFIRMED && tdata->msg->line.req.method.id == PJSIP_INVITE_METHOD) {
1182                 pjsip_inv_uac_restart(inv, PJ_TRUE);
1183         }
1184         ast_sip_session_send_request(session, tdata);
1185         return 0;
1186 }
1187
1188 struct ast_sip_session *ast_sip_session_create_outgoing(struct ast_sip_endpoint *endpoint, const char *location, const char *request_user, struct ast_format_cap *req_caps)
1189 {
1190         const char *uri = NULL;
1191         RAII_VAR(struct ast_sip_contact *, contact, NULL, ao2_cleanup);
1192         pjsip_timer_setting timer;
1193         pjsip_dialog *dlg;
1194         struct pjsip_inv_session *inv_session;
1195         RAII_VAR(struct ast_sip_session *, session, NULL, ao2_cleanup);
1196
1197         /* If no location has been provided use the AOR list from the endpoint itself */
1198         location = S_OR(location, endpoint->aors);
1199
1200         contact = ast_sip_location_retrieve_contact_from_aor_list(location);
1201         if (!contact || ast_strlen_zero(contact->uri)) {
1202                 uri = location;
1203         } else {
1204                 uri = contact->uri;
1205         }
1206
1207         /* If we still have no URI to dial fail to create the session */
1208         if (ast_strlen_zero(uri)) {
1209                 return NULL;
1210         }
1211
1212         if (!(dlg = ast_sip_create_dialog_uac(endpoint, uri, request_user))) {
1213                 return NULL;
1214         }
1215
1216         if (ast_sip_dialog_setup_outbound_authentication(dlg, endpoint, session_outbound_auth, NULL)) {
1217                 pjsip_dlg_terminate(dlg);
1218                 return NULL;
1219         }
1220
1221         if (pjsip_inv_create_uac(dlg, NULL, endpoint->extensions.flags, &inv_session) != PJ_SUCCESS) {
1222                 pjsip_dlg_terminate(dlg);
1223                 return NULL;
1224         }
1225 #if defined(HAVE_PJSIP_REPLACE_MEDIA_STREAM) || defined(PJMEDIA_SDP_NEG_ALLOW_MEDIA_CHANGE)
1226         inv_session->sdp_neg_flags = PJMEDIA_SDP_NEG_ALLOW_MEDIA_CHANGE;
1227 #endif
1228
1229         pjsip_timer_setting_default(&timer);
1230         timer.min_se = endpoint->extensions.timer.min_se;
1231         timer.sess_expires = endpoint->extensions.timer.sess_expires;
1232         pjsip_timer_init_session(inv_session, &timer);
1233
1234         if (!(session = ast_sip_session_alloc(endpoint, inv_session))) {
1235                 pjsip_inv_terminate(inv_session, 500, PJ_FALSE);
1236                 return NULL;
1237         }
1238
1239         ast_format_cap_copy(session->req_caps, req_caps);
1240         if ((pjsip_dlg_add_usage(dlg, &session_module, NULL) != PJ_SUCCESS)) {
1241                 pjsip_inv_terminate(inv_session, 500, PJ_FALSE);
1242                 /* Since we are not notifying ourselves that the INVITE session is being terminated
1243                  * we need to manually drop its reference to session
1244                  */
1245                 ao2_ref(session, -1);
1246                 return NULL;
1247         }
1248
1249         ao2_ref(session, +1);
1250         return session;
1251 }
1252
1253 static int session_termination_task(void *data)
1254 {
1255         RAII_VAR(struct ast_sip_session *, session, data, ao2_cleanup);
1256         pjsip_tx_data *packet = NULL;
1257
1258         if (!session->inv_session) {
1259                 return 0;
1260         }
1261
1262         if (pjsip_inv_end_session(session->inv_session, 603, NULL, &packet) == PJ_SUCCESS) {
1263                 ast_sip_session_send_request(session, packet);
1264         }
1265
1266         return 0;
1267 }
1268
1269 static void session_termination_cb(pj_timer_heap_t *timer_heap, struct pj_timer_entry *entry)
1270 {
1271         struct ast_sip_session *session = entry->user_data;
1272
1273         if (ast_sip_push_task(session->serializer, session_termination_task, session)) {
1274                 ao2_cleanup(session);
1275         }
1276 }
1277
1278 void ast_sip_session_defer_termination(struct ast_sip_session *session)
1279 {
1280         pj_time_val delay = { .sec = 60, };
1281
1282         session->defer_terminate = 1;
1283
1284         session->scheduled_termination.id = 0;
1285         ao2_ref(session, +1);
1286         session->scheduled_termination.user_data = session;
1287         session->scheduled_termination.cb = session_termination_cb;
1288
1289         if (pjsip_endpt_schedule_timer(ast_sip_get_pjsip_endpoint(), &session->scheduled_termination, &delay) != PJ_SUCCESS) {
1290                 ao2_ref(session, -1);
1291         }
1292 }
1293
1294 struct ast_sip_session *ast_sip_dialog_get_session(pjsip_dialog *dlg)
1295 {
1296         pjsip_inv_session *inv_session = pjsip_dlg_get_inv_session(dlg);
1297         struct ast_sip_session *session;
1298
1299         if (!inv_session ||
1300                 !(session = inv_session->mod_data[session_module.id])) {
1301                 return NULL;
1302         }
1303
1304         ao2_ref(session, +1);
1305
1306         return session;
1307 }
1308
1309 enum sip_get_destination_result {
1310         /*! The extension was successfully found */
1311         SIP_GET_DEST_EXTEN_FOUND,
1312         /*! The extension specified in the RURI was not found */
1313         SIP_GET_DEST_EXTEN_NOT_FOUND,
1314         /*! The extension specified in the RURI was a partial match */
1315         SIP_GET_DEST_EXTEN_PARTIAL,
1316         /*! The RURI is of an unsupported scheme */
1317         SIP_GET_DEST_UNSUPPORTED_URI,
1318 };
1319
1320 /*!
1321  * \brief Determine where in the dialplan a call should go
1322  *
1323  * This uses the username in the request URI to try to match
1324  * an extension in the endpoint's configured context in order
1325  * to route the call.
1326  *
1327  * \param session The inbound SIP session
1328  * \param rdata The SIP INVITE
1329  */
1330 static enum sip_get_destination_result get_destination(struct ast_sip_session *session, pjsip_rx_data *rdata)
1331 {
1332         pjsip_uri *ruri = rdata->msg_info.msg->line.req.uri;
1333         pjsip_sip_uri *sip_ruri;
1334         if (!PJSIP_URI_SCHEME_IS_SIP(ruri) && !PJSIP_URI_SCHEME_IS_SIPS(ruri)) {
1335                 return SIP_GET_DEST_UNSUPPORTED_URI;
1336         }
1337         sip_ruri = pjsip_uri_get_uri(ruri);
1338         ast_copy_pj_str(session->exten, &sip_ruri->user, sizeof(session->exten));
1339         if (ast_exists_extension(NULL, session->endpoint->context, session->exten, 1, NULL)) {
1340                 return SIP_GET_DEST_EXTEN_FOUND;
1341         }
1342         /* XXX In reality, we'll likely have further options so that partial matches
1343          * can be indicated here, but for getting something up and running, we're going
1344          * to return a "not exists" error here.
1345          */
1346         return SIP_GET_DEST_EXTEN_NOT_FOUND;
1347 }
1348
1349 static pjsip_inv_session *pre_session_setup(pjsip_rx_data *rdata, const struct ast_sip_endpoint *endpoint)
1350 {
1351         pjsip_tx_data *tdata;
1352         pjsip_dialog *dlg;
1353         pjsip_inv_session *inv_session;
1354         unsigned int options = endpoint->extensions.flags;
1355
1356         if (pjsip_inv_verify_request(rdata, &options, NULL, NULL, ast_sip_get_pjsip_endpoint(), &tdata) != PJ_SUCCESS) {
1357                 if (tdata) {
1358                         pjsip_endpt_send_response2(ast_sip_get_pjsip_endpoint(), rdata, tdata, NULL, NULL);
1359                 } else {
1360                         pjsip_endpt_respond_stateless(ast_sip_get_pjsip_endpoint(), rdata, 500, NULL, NULL, NULL);
1361                 }
1362                 return NULL;
1363         }
1364         dlg = ast_sip_create_dialog_uas(endpoint, rdata);
1365         if (!dlg) {
1366                 pjsip_endpt_respond_stateless(ast_sip_get_pjsip_endpoint(), rdata, 500, NULL, NULL, NULL);
1367                 return NULL;
1368         }
1369         if (pjsip_inv_create_uas(dlg, rdata, NULL, 0, &inv_session) != PJ_SUCCESS) {
1370                 pjsip_endpt_respond_stateless(ast_sip_get_pjsip_endpoint(), rdata, 500, NULL, NULL, NULL);
1371                 pjsip_dlg_terminate(dlg);
1372                 return NULL;
1373         }
1374
1375 #if defined(HAVE_PJSIP_REPLACE_MEDIA_STREAM) || defined(PJMEDIA_SDP_NEG_ALLOW_MEDIA_CHANGE)
1376         inv_session->sdp_neg_flags = PJMEDIA_SDP_NEG_ALLOW_MEDIA_CHANGE;
1377 #endif
1378         if (pjsip_dlg_add_usage(dlg, &session_module, NULL) != PJ_SUCCESS) {
1379                 if (pjsip_inv_initial_answer(inv_session, rdata, 500, NULL, NULL, &tdata) != PJ_SUCCESS) {
1380                         pjsip_inv_terminate(inv_session, 500, PJ_FALSE);
1381                 }
1382                 pjsip_inv_send_msg(inv_session, tdata);
1383                 return NULL;
1384         }
1385         return inv_session;
1386 }
1387
1388 struct new_invite {
1389         /*! \brief Session created for the new INVITE */
1390         struct ast_sip_session *session;
1391
1392         /*! \brief INVITE request itself */
1393         pjsip_rx_data *rdata;
1394 };
1395
1396 static void new_invite_destroy(void *obj)
1397 {
1398         struct new_invite *invite = obj;
1399
1400         ao2_cleanup(invite->session);
1401
1402         if (invite->rdata) {
1403                 pjsip_rx_data_free_cloned(invite->rdata);
1404         }
1405 }
1406
1407 static struct new_invite *new_invite_alloc(struct ast_sip_session *session, pjsip_rx_data *rdata)
1408 {
1409         struct new_invite *invite = ao2_alloc(sizeof(*invite), new_invite_destroy);
1410
1411         if (!invite) {
1412                 return NULL;
1413         }
1414
1415         ao2_ref(session, +1);
1416         invite->session = session;
1417
1418         if (pjsip_rx_data_clone(rdata, 0, &invite->rdata) != PJ_SUCCESS) {
1419                 ao2_ref(invite, -1);
1420                 return NULL;
1421         }
1422
1423         return invite;
1424 }
1425
1426 static int new_invite(void *data)
1427 {
1428         RAII_VAR(struct new_invite *, invite, data, ao2_cleanup);
1429         pjsip_tx_data *tdata = NULL;
1430         pjsip_timer_setting timer;
1431         pjsip_rdata_sdp_info *sdp_info;
1432         pjmedia_sdp_session *local = NULL;
1433
1434         /* From this point on, any calls to pjsip_inv_terminate have the last argument as PJ_TRUE
1435          * so that we will be notified so we can destroy the session properly
1436          */
1437
1438         switch (get_destination(invite->session, invite->rdata)) {
1439         case SIP_GET_DEST_EXTEN_FOUND:
1440                 /* Things worked. Keep going */
1441                 break;
1442         case SIP_GET_DEST_UNSUPPORTED_URI:
1443                 if (pjsip_inv_initial_answer(invite->session->inv_session, invite->rdata, 416, NULL, NULL, &tdata) == PJ_SUCCESS) {
1444                         ast_sip_session_send_response(invite->session, tdata);
1445                 } else  {
1446                         pjsip_inv_terminate(invite->session->inv_session, 416, PJ_TRUE);
1447                 }
1448                 return 0;
1449         case SIP_GET_DEST_EXTEN_NOT_FOUND:
1450         case SIP_GET_DEST_EXTEN_PARTIAL:
1451         default:
1452                 ast_log(LOG_NOTICE, "Call from '%s' (%s:%s:%d) to extension '%s' rejected because extension not found in context '%s'.\n",
1453                         ast_sorcery_object_get_id(invite->session->endpoint), invite->rdata->tp_info.transport->type_name, invite->rdata->pkt_info.src_name,
1454                         invite->rdata->pkt_info.src_port, invite->session->exten, invite->session->endpoint->context);
1455
1456                 if (pjsip_inv_initial_answer(invite->session->inv_session, invite->rdata, 404, NULL, NULL, &tdata) == PJ_SUCCESS) {
1457                         ast_sip_session_send_response(invite->session, tdata);
1458                 } else  {
1459                         pjsip_inv_terminate(invite->session->inv_session, 404, PJ_TRUE);
1460                 }
1461                 return 0;
1462         };
1463
1464         if ((sdp_info = pjsip_rdata_get_sdp_info(invite->rdata)) && (sdp_info->sdp_err == PJ_SUCCESS) && sdp_info->sdp) {
1465                 if (handle_incoming_sdp(invite->session, sdp_info->sdp)) {
1466                         if (pjsip_inv_initial_answer(invite->session->inv_session, invite->rdata, 488, NULL, NULL, &tdata) == PJ_SUCCESS) {
1467                                 ast_sip_session_send_response(invite->session, tdata);
1468                         } else  {
1469                                 pjsip_inv_terminate(invite->session->inv_session, 488, PJ_TRUE);
1470                         }
1471                         return 0;
1472                 }
1473                 /* We are creating a local SDP which is an answer to their offer */
1474                 local = create_local_sdp(invite->session->inv_session, invite->session, sdp_info->sdp);
1475         } else {
1476                 /* We are creating a local SDP which is an offer */
1477                 local = create_local_sdp(invite->session->inv_session, invite->session, NULL);
1478         }
1479
1480         /* If we were unable to create a local SDP terminate the session early, it won't go anywhere */
1481         if (!local) {
1482                 if (pjsip_inv_initial_answer(invite->session->inv_session, invite->rdata, 500, NULL, NULL, &tdata) == PJ_SUCCESS) {
1483                         ast_sip_session_send_response(invite->session, tdata);
1484                 } else  {
1485                         pjsip_inv_terminate(invite->session->inv_session, 500, PJ_TRUE);
1486                 }
1487                 return 0;
1488         } else {
1489                 pjsip_inv_set_local_sdp(invite->session->inv_session, local);
1490                 pjmedia_sdp_neg_set_prefer_remote_codec_order(invite->session->inv_session->neg, PJ_FALSE);
1491 #ifdef PJMEDIA_SDP_NEG_ANSWER_MULTIPLE_CODECS
1492                 pjmedia_sdp_neg_set_answer_multiple_codecs(invite->session->inv_session->neg, PJ_TRUE);
1493 #endif
1494         }
1495
1496         pjsip_timer_setting_default(&timer);
1497         timer.min_se = invite->session->endpoint->extensions.timer.min_se;
1498         timer.sess_expires = invite->session->endpoint->extensions.timer.sess_expires;
1499         pjsip_timer_init_session(invite->session->inv_session, &timer);
1500
1501         /* At this point, we've verified what we can, so let's go ahead and send a 100 Trying out */
1502         if (pjsip_inv_initial_answer(invite->session->inv_session, invite->rdata, 100, NULL, NULL, &tdata) != PJ_SUCCESS) {
1503                 pjsip_inv_terminate(invite->session->inv_session, 500, PJ_TRUE);
1504                 return 0;
1505         }
1506         ast_sip_session_send_response(invite->session, tdata);
1507
1508         handle_incoming_request(invite->session, invite->rdata);
1509
1510         return 0;
1511 }
1512
1513 static void handle_new_invite_request(pjsip_rx_data *rdata)
1514 {
1515         RAII_VAR(struct ast_sip_endpoint *, endpoint,
1516                         ast_pjsip_rdata_get_endpoint(rdata), ao2_cleanup);
1517         pjsip_tx_data *tdata = NULL;
1518         pjsip_inv_session *inv_session = NULL;
1519         RAII_VAR(struct ast_sip_session *, session, NULL, ao2_cleanup);
1520         struct new_invite *invite;
1521
1522         ast_assert(endpoint != NULL);
1523
1524         inv_session = pre_session_setup(rdata, endpoint);
1525         if (!inv_session) {
1526                 /* pre_session_setup() returns a response on failure */
1527                 return;
1528         }
1529
1530         session = ast_sip_session_alloc(endpoint, inv_session);
1531         if (!session) {
1532                 if (pjsip_inv_initial_answer(inv_session, rdata, 500, NULL, NULL, &tdata) == PJ_SUCCESS) {
1533                         pjsip_inv_terminate(inv_session, 500, PJ_FALSE);
1534                 } else {
1535                         pjsip_inv_send_msg(inv_session, tdata);
1536                 }
1537                 return;
1538         }
1539
1540         invite = new_invite_alloc(session, rdata);
1541         if (!invite || ast_sip_push_task(session->serializer, new_invite, invite)) {
1542                 if (pjsip_inv_initial_answer(inv_session, rdata, 500, NULL, NULL, &tdata) == PJ_SUCCESS) {
1543                         pjsip_inv_terminate(inv_session, 500, PJ_FALSE);
1544                 } else {
1545                         pjsip_inv_send_msg(inv_session, tdata);
1546                 }
1547                 ao2_ref(session, -1);
1548                 ao2_cleanup(invite);
1549                 return;
1550         }
1551 }
1552
1553 static pj_bool_t does_method_match(const pj_str_t *message_method, const char *supplement_method)
1554 {
1555         pj_str_t method;
1556
1557         if (ast_strlen_zero(supplement_method)) {
1558                 return PJ_TRUE;
1559         }
1560
1561         pj_cstr(&method, supplement_method);
1562
1563         return pj_stristr(&method, message_method) ? PJ_TRUE : PJ_FALSE;
1564 }
1565
1566 static pj_bool_t has_supplement(const struct ast_sip_session *session, const pjsip_rx_data *rdata)
1567 {
1568         struct ast_sip_session_supplement *supplement;
1569         struct pjsip_method *method = &rdata->msg_info.msg->line.req.method;
1570
1571         if (!session) {
1572                 return PJ_FALSE;
1573         }
1574
1575         AST_LIST_TRAVERSE(&session->supplements, supplement, next) {
1576                 if (does_method_match(&method->name, supplement->method)) {
1577                         return PJ_TRUE;
1578                 }
1579         }
1580         return PJ_FALSE;
1581 }
1582 /*!
1583  * \brief Called when a new SIP request comes into PJSIP
1584  *
1585  * This function is called under two circumstances
1586  * 1) An out-of-dialog request is received by PJSIP
1587  * 2) An in-dialog request that the inv_session layer does not
1588  *    handle is received (such as an in-dialog INFO)
1589  *
1590  * In all cases, there is very little we actually do in this function
1591  * 1) For requests we don't handle, we return PJ_FALSE
1592  * 2) For new INVITEs, throw the work into the SIP threadpool to be done
1593  *    there to free up the thread(s) handling incoming requests
1594  * 3) For in-dialog requests we handle, we defer handling them until the
1595  *    on_inv_state_change() callback instead (where we will end up putting
1596  *    them into the threadpool).
1597  */
1598 static pj_bool_t session_on_rx_request(pjsip_rx_data *rdata)
1599 {
1600         pj_status_t handled = PJ_FALSE;
1601         pjsip_dialog *dlg = pjsip_rdata_get_dlg(rdata);
1602         pjsip_inv_session *inv_session;
1603
1604         switch (rdata->msg_info.msg->line.req.method.id) {
1605         case PJSIP_INVITE_METHOD:
1606                 if (dlg) {
1607                         ast_log(LOG_WARNING, "on_rx_request called for INVITE in mid-dialog?\n");
1608                         break;
1609                 }
1610                 handled = PJ_TRUE;
1611                 handle_new_invite_request(rdata);
1612                 break;
1613         default:
1614                 /* Handle other in-dialog methods if their supplements have been registered */
1615                 handled = dlg && (inv_session = pjsip_dlg_get_inv_session(dlg)) &&
1616                         has_supplement(inv_session->mod_data[session_module.id], rdata);
1617                 break;
1618         }
1619
1620         return handled;
1621 }
1622
1623 struct reschedule_reinvite_data {
1624         struct ast_sip_session *session;
1625         struct ast_sip_session_delayed_request *delay;
1626 };
1627
1628 static struct reschedule_reinvite_data *reschedule_reinvite_data_alloc(
1629                 struct ast_sip_session *session, struct ast_sip_session_delayed_request *delay)
1630 {
1631         struct reschedule_reinvite_data *rrd = ast_malloc(sizeof(*rrd));
1632         if (!rrd) {
1633                 return NULL;
1634         }
1635         ao2_ref(session, +1);
1636         rrd->session = session;
1637         rrd->delay = delay;
1638         return rrd;
1639 }
1640
1641 static void reschedule_reinvite_data_destroy(struct reschedule_reinvite_data *rrd)
1642 {
1643         ao2_cleanup(rrd->session);
1644         ast_free(rrd->delay);
1645         ast_free(rrd);
1646 }
1647
1648 static int really_resend_reinvite(void *data)
1649 {
1650         RAII_VAR(struct reschedule_reinvite_data *, rrd, data, reschedule_reinvite_data_destroy);
1651
1652         return send_delayed_request(rrd->session, rrd->delay);
1653 }
1654
1655 static void resend_reinvite(pj_timer_heap_t *timer, pj_timer_entry *entry)
1656 {
1657         struct reschedule_reinvite_data *rrd = entry->user_data;
1658
1659         ast_sip_push_task(rrd->session->serializer, really_resend_reinvite, entry->user_data);
1660 }
1661
1662 static void reschedule_reinvite(struct ast_sip_session *session, ast_sip_session_response_cb on_response, pjsip_tx_data *tdata)
1663 {
1664         struct ast_sip_session_delayed_request *delay = delayed_request_alloc("INVITE",
1665                         NULL, NULL, on_response, tdata);
1666         pjsip_inv_session *inv = session->inv_session;
1667         struct reschedule_reinvite_data *rrd = reschedule_reinvite_data_alloc(session, delay);
1668         pj_time_val tv;
1669
1670         if (!rrd || !delay) {
1671                 return;
1672         }
1673
1674         tv.sec = 0;
1675         if (inv->role == PJSIP_ROLE_UAC) {
1676                 tv.msec = 2100 + ast_random() % 2000;
1677         } else {
1678                 tv.msec = ast_random() % 2000;
1679         }
1680
1681         pj_timer_entry_init(&session->rescheduled_reinvite, 0, rrd, resend_reinvite);
1682
1683         pjsip_endpt_schedule_timer(ast_sip_get_pjsip_endpoint(), &session->rescheduled_reinvite, &tv);
1684 }
1685
1686 static void __print_debug_details(const char *function, pjsip_inv_session *inv, pjsip_transaction *tsx, pjsip_event *e)
1687 {
1688         struct ast_sip_session *session;
1689         ast_debug(5, "Function %s called on event %s\n", function, pjsip_event_str(e->type));
1690         if (!inv) {
1691                 ast_debug(5, "Transaction %p does not belong to an inv_session?\n", tsx);
1692                 ast_debug(5, "The transaction state is %s\n", pjsip_tsx_state_str(tsx->state));
1693                 return;
1694         }
1695         session = inv->mod_data[session_module.id];
1696         if (!session) {
1697                 ast_debug(5, "inv_session %p has no ast session\n", inv);
1698         } else {
1699                 ast_debug(5, "The state change pertains to the session with %s\n",
1700                                 ast_sorcery_object_get_id(session->endpoint));
1701         }
1702         if (inv->invite_tsx) {
1703                 ast_debug(5, "The inv session still has an invite_tsx (%p)\n", inv->invite_tsx);
1704         } else {
1705                 ast_debug(5, "The inv session does NOT have an invite_tsx\n");
1706         }
1707         if (tsx) {
1708                 ast_debug(5, "The transaction involved in this state change is %p\n", tsx);
1709                 ast_debug(5, "The current transaction state is %s\n", pjsip_tsx_state_str(tsx->state));
1710                 ast_debug(5, "The transaction state change event is %s\n", pjsip_event_str(e->body.tsx_state.type));
1711         } else {
1712                 ast_debug(5, "There is no transaction involved in this state change\n");
1713         }
1714         ast_debug(5, "The current inv state is %s\n", pjsip_inv_state_name(inv->state));
1715 }
1716
1717 #define print_debug_details(inv, tsx, e) __print_debug_details(__PRETTY_FUNCTION__, (inv), (tsx), (e))
1718
1719 static void handle_incoming_request(struct ast_sip_session *session, pjsip_rx_data *rdata)
1720 {
1721         struct ast_sip_session_supplement *supplement;
1722         struct pjsip_request_line req = rdata->msg_info.msg->line.req;
1723
1724         ast_debug(3, "Method is %.*s\n", (int) pj_strlen(&req.method.name), pj_strbuf(&req.method.name));
1725         AST_LIST_TRAVERSE(&session->supplements, supplement, next) {
1726                 if (supplement->incoming_request && does_method_match(&req.method.name, supplement->method)) {
1727                         if (supplement->incoming_request(session, rdata)) {
1728                                 break;
1729                         }
1730                 }
1731         }
1732 }
1733
1734 static void handle_incoming_response(struct ast_sip_session *session, pjsip_rx_data *rdata)
1735 {
1736         struct ast_sip_session_supplement *supplement;
1737         struct pjsip_status_line status = rdata->msg_info.msg->line.status;
1738
1739         ast_debug(3, "Response is %d %.*s\n", status.code, (int) pj_strlen(&status.reason),
1740                         pj_strbuf(&status.reason));
1741
1742         AST_LIST_TRAVERSE(&session->supplements, supplement, next) {
1743                 if (supplement->incoming_response && does_method_match(&rdata->msg_info.cseq->method.name, supplement->method)) {
1744                         supplement->incoming_response(session, rdata);
1745                 }
1746         }
1747 }
1748
1749 static int handle_incoming(struct ast_sip_session *session, pjsip_rx_data *rdata)
1750 {
1751         ast_debug(3, "Received %s\n", rdata->msg_info.msg->type == PJSIP_REQUEST_MSG ?
1752                         "request" : "response");
1753
1754         if (rdata->msg_info.msg->type == PJSIP_REQUEST_MSG) {
1755                 handle_incoming_request(session, rdata);
1756         } else {
1757                 handle_incoming_response(session, rdata);
1758         }
1759
1760         return 0;
1761 }
1762
1763 static void handle_outgoing_request(struct ast_sip_session *session, pjsip_tx_data *tdata)
1764 {
1765         struct ast_sip_session_supplement *supplement;
1766         struct pjsip_request_line req = tdata->msg->line.req;
1767
1768         ast_debug(3, "Method is %.*s\n", (int) pj_strlen(&req.method.name), pj_strbuf(&req.method.name));
1769         AST_LIST_TRAVERSE(&session->supplements, supplement, next) {
1770                 if (supplement->outgoing_request && does_method_match(&req.method.name, supplement->method)) {
1771                         supplement->outgoing_request(session, tdata);
1772                 }
1773         }
1774 }
1775
1776 static void handle_outgoing_response(struct ast_sip_session *session, pjsip_tx_data *tdata)
1777 {
1778         struct ast_sip_session_supplement *supplement;
1779         struct pjsip_status_line status = tdata->msg->line.status;
1780         pjsip_cseq_hdr *cseq = pjsip_msg_find_hdr(tdata->msg, PJSIP_H_CSEQ, NULL);
1781         ast_debug(3, "Method is %.*s, Response is %d %.*s\n", (int) pj_strlen(&cseq->method.name),
1782                 pj_strbuf(&cseq->method.name), status.code, (int) pj_strlen(&status.reason),
1783                 pj_strbuf(&status.reason));
1784
1785         AST_LIST_TRAVERSE(&session->supplements, supplement, next) {
1786                 if (supplement->outgoing_response && does_method_match(&cseq->method.name, supplement->method)) {
1787                         supplement->outgoing_response(session, tdata);
1788                 }
1789         }
1790 }
1791
1792 static void handle_outgoing(struct ast_sip_session *session, pjsip_tx_data *tdata)
1793 {
1794         ast_debug(3, "Sending %s\n", tdata->msg->type == PJSIP_REQUEST_MSG ?
1795                         "request" : "response");
1796         if (tdata->msg->type == PJSIP_REQUEST_MSG) {
1797                 handle_outgoing_request(session, tdata);
1798         } else {
1799                 handle_outgoing_response(session, tdata);
1800         }
1801 }
1802
1803 static int session_end(struct ast_sip_session *session)
1804 {
1805         struct ast_sip_session_supplement *iter;
1806
1807         /* Stop the scheduled termination */
1808         if (pj_timer_heap_cancel(pjsip_endpt_get_timer_heap(ast_sip_get_pjsip_endpoint()), &session->scheduled_termination)) {
1809                 ao2_ref(session, -1);
1810         }
1811
1812         /* Session is dead. Let's get rid of the reference to the session */
1813         AST_LIST_TRAVERSE(&session->supplements, iter, next) {
1814                 if (iter->session_end) {
1815                         iter->session_end(session);
1816                 }
1817         }
1818
1819         session->inv_session->mod_data[session_module.id] = NULL;
1820         ast_sip_dialog_set_serializer(session->inv_session->dlg, NULL);
1821         ast_sip_dialog_set_endpoint(session->inv_session->dlg, NULL);
1822         ao2_cleanup(session);
1823         return 0;
1824 }
1825
1826 static void session_inv_on_state_changed(pjsip_inv_session *inv, pjsip_event *e)
1827 {
1828         struct ast_sip_session *session = inv->mod_data[session_module.id];
1829
1830         print_debug_details(inv, NULL, e);
1831
1832         if (!session) {
1833                 return;
1834         }
1835
1836         switch(e->type) {
1837         case PJSIP_EVENT_TX_MSG:
1838                 handle_outgoing(session, e->body.tx_msg.tdata);
1839                 break;
1840         case PJSIP_EVENT_RX_MSG:
1841                 handle_incoming(session, e->body.rx_msg.rdata);
1842                 break;
1843         case PJSIP_EVENT_TSX_STATE:
1844                 ast_debug(3, "Source of transaction state change is %s\n", pjsip_event_str(e->body.tsx_state.type));
1845                 /* Transaction state changes are prompted by some other underlying event. */
1846                 switch(e->body.tsx_state.type) {
1847                 case PJSIP_EVENT_TX_MSG:
1848                         handle_outgoing(session, e->body.tsx_state.src.tdata);
1849                         break;
1850                 case PJSIP_EVENT_RX_MSG:
1851                         handle_incoming(session, e->body.tsx_state.src.rdata);
1852                         break;
1853                 case PJSIP_EVENT_TRANSPORT_ERROR:
1854                 case PJSIP_EVENT_TIMER:
1855                 case PJSIP_EVENT_USER:
1856                 case PJSIP_EVENT_UNKNOWN:
1857                 case PJSIP_EVENT_TSX_STATE:
1858                         /* Inception? */
1859                         break;
1860                 }
1861                 break;
1862         case PJSIP_EVENT_TRANSPORT_ERROR:
1863         case PJSIP_EVENT_TIMER:
1864         case PJSIP_EVENT_UNKNOWN:
1865         case PJSIP_EVENT_USER:
1866         default:
1867                 break;
1868         }
1869
1870         if (inv->state == PJSIP_INV_STATE_DISCONNECTED) {
1871                 session_end(session);
1872         }
1873 }
1874
1875 static void session_inv_on_new_session(pjsip_inv_session *inv, pjsip_event *e)
1876 {
1877         /* XXX STUB */
1878 }
1879
1880 static void session_inv_on_tsx_state_changed(pjsip_inv_session *inv, pjsip_transaction *tsx, pjsip_event *e)
1881 {
1882         ast_sip_session_response_cb cb;
1883         struct ast_sip_session *session = inv->mod_data[session_module.id];
1884         print_debug_details(inv, tsx, e);
1885         if (!session) {
1886                 /* Transaction likely timed out after the call was hung up. Just
1887                  * ignore such transaction changes
1888                  */
1889                 return;
1890         }
1891         switch (e->body.tsx_state.type) {
1892         case PJSIP_EVENT_TX_MSG:
1893                 /* When we create an outgoing request, we do not have access to the transaction that
1894                  * is created. Instead, We have to place transaction-specific data in the tdata. Here,
1895                  * we transfer the data into the transaction. This way, when we receive a response, we
1896                  * can dig this data out again
1897                  */
1898                 tsx->mod_data[session_module.id] = e->body.tsx_state.src.tdata->mod_data[session_module.id];
1899                 break;
1900         case PJSIP_EVENT_RX_MSG:
1901                 if (tsx->method.id == PJSIP_INVITE_METHOD) {
1902                         if (tsx->role == PJSIP_ROLE_UAC) {
1903                                 if (tsx->state == PJSIP_TSX_STATE_COMPLETED) {
1904                                         /* This means we got a non 2XX final response to our outgoing INVITE */
1905                                         if (tsx->status_code == PJSIP_SC_REQUEST_PENDING) {
1906                                                 reschedule_reinvite(session, tsx->mod_data[session_module.id], tsx->last_tx);
1907                                                 return;
1908                                         } else if (inv->state == PJSIP_INV_STATE_CONFIRMED &&
1909                                                    tsx->status_code != 488) {
1910                                                 /* Other reinvite failures (except 488) result in destroying the session. */
1911                                                 pjsip_tx_data *tdata;
1912                                                 if (pjsip_inv_end_session(inv, 500, NULL, &tdata) == PJ_SUCCESS) {
1913                                                         ast_sip_session_send_request(session, tdata);
1914                                                 }
1915                                         }
1916                                 } else if (tsx->state == PJSIP_TSX_STATE_TERMINATED) {
1917                                         if (inv->cancelling && tsx->status_code == PJSIP_SC_OK) {
1918                                                 /* This is a race condition detailed in RFC 5407 section 3.1.2.
1919                                                  * We sent a CANCEL at the same time that the UAS sent us a 200 OK for
1920                                                  * the original INVITE. As a result, we have now received a 200 OK for
1921                                                  * a cancelled call. Our role is to immediately send a BYE to end the
1922                                                  * dialog.
1923                                                  */
1924                                                 pjsip_tx_data *tdata;
1925
1926                                                 if (pjsip_inv_end_session(inv, 500, NULL, &tdata) == PJ_SUCCESS) {
1927                                                         ast_sip_session_send_request(session, tdata);
1928                                                 }
1929                                         }
1930                                 }
1931                         }
1932                 } else {
1933                         if (tsx->role == PJSIP_ROLE_UAS && tsx->state == PJSIP_TSX_STATE_TRYING) {
1934                                 handle_incoming_request(session, e->body.tsx_state.src.rdata);
1935                         }
1936                 }
1937                 if ((cb = ast_sip_mod_data_get(tsx->mod_data, session_module.id,
1938                                                MOD_DATA_ON_RESPONSE))) {
1939                         cb(session, e->body.tsx_state.src.rdata);
1940                 }
1941         case PJSIP_EVENT_TRANSPORT_ERROR:
1942         case PJSIP_EVENT_TIMER:
1943         case PJSIP_EVENT_USER:
1944         case PJSIP_EVENT_UNKNOWN:
1945         case PJSIP_EVENT_TSX_STATE:
1946                 /* Inception? */
1947                 break;
1948         }
1949
1950         /* Terminated INVITE transactions always should result in queuing delayed requests,
1951          * no matter what event caused the transaction to terminate
1952          */
1953         if (tsx->method.id == PJSIP_INVITE_METHOD && tsx->state == PJSIP_TSX_STATE_TERMINATED) {
1954                 queue_delayed_request(session);
1955         }
1956 }
1957
1958 static int add_sdp_streams(void *obj, void *arg, void *data, int flags)
1959 {
1960         struct ast_sip_session_media *session_media = obj;
1961         pjmedia_sdp_session *answer = arg;
1962         struct ast_sip_session *session = data;
1963         struct ast_sip_session_sdp_handler *handler = session_media->handler;
1964         RAII_VAR(struct sdp_handler_list *, handler_list, NULL, ao2_cleanup);
1965
1966         if (handler) {
1967                 /* if an already assigned handler does not handle the session_media or reports a catastrophic error, fail */
1968                 if (handler->create_outgoing_sdp_stream(session, session_media, answer) <= 0) {
1969                         return 0;
1970                 }
1971                 return CMP_MATCH;
1972         }
1973
1974         handler_list = ao2_find(sdp_handlers, session_media->stream_type, OBJ_KEY);
1975         if (!handler_list) {
1976                 return CMP_MATCH;
1977         }
1978
1979         /* no handler for this stream type and we have a list to search */
1980         AST_LIST_TRAVERSE(&handler_list->list, handler, next) {
1981                 int res = handler->create_outgoing_sdp_stream(session, session_media, answer);
1982                 if (res < 0) {
1983                         /* catastrophic error */
1984                         return 0;
1985                 }
1986                 if (res > 0) {
1987                         /* handled */
1988                         return CMP_MATCH;
1989                 }
1990         }
1991
1992         /* streams that weren't handled won't be included in generated outbound SDP */
1993         return CMP_MATCH;
1994 }
1995
1996 static struct pjmedia_sdp_session *create_local_sdp(pjsip_inv_session *inv, struct ast_sip_session *session, const pjmedia_sdp_session *offer)
1997 {
1998         RAII_VAR(struct ao2_iterator *, successful, NULL, ao2_iterator_cleanup);
1999         static const pj_str_t STR_IN = { "IN", 2 };
2000         static const pj_str_t STR_IP4 = { "IP4", 3 };
2001         static const pj_str_t STR_IP6 = { "IP6", 3 };
2002         pjmedia_sdp_session *local;
2003
2004         if (!(local = PJ_POOL_ZALLOC_T(inv->pool_prov, pjmedia_sdp_session))) {
2005                 return NULL;
2006         }
2007
2008         if (!offer) {
2009                 local->origin.version = local->origin.id = (pj_uint32_t)(ast_random());
2010         } else {
2011                 local->origin.version = offer->origin.version + 1;
2012                 local->origin.id = offer->origin.id;
2013         }
2014
2015         pj_strdup2(inv->pool, &local->origin.user, session->endpoint->media.sdpowner);
2016         local->origin.net_type = STR_IN;
2017         local->origin.addr_type = session->endpoint->media.rtp.ipv6 ? STR_IP6 : STR_IP4;
2018         local->origin.addr = *hostname;
2019         pj_strdup2(inv->pool, &local->name, session->endpoint->media.sdpsession);
2020
2021         /* Now let the handlers add streams of various types, pjmedia will automatically reorder the media streams for us */
2022         successful = ao2_callback_data(session->media, OBJ_MULTIPLE, add_sdp_streams, local, session);
2023         if (!successful || ao2_container_count(successful->c) != ao2_container_count(session->media)) {
2024                 /* Something experienced a catastrophic failure */
2025                 return NULL;
2026         }
2027
2028         /* Use the connection details of the first media stream if possible for SDP level */
2029         if (local->media_count) {
2030                 local->conn = local->media[0]->conn;
2031         }
2032
2033         return local;
2034 }
2035
2036 static void session_inv_on_rx_offer(pjsip_inv_session *inv, const pjmedia_sdp_session *offer)
2037 {
2038         struct ast_sip_session *session = inv->mod_data[session_module.id];
2039         pjmedia_sdp_session *answer;
2040
2041         if (handle_incoming_sdp(session, offer)) {
2042                 return;
2043         }
2044
2045         if ((answer = create_local_sdp(inv, session, offer))) {
2046                 pjsip_inv_set_sdp_answer(inv, answer);
2047         }
2048 }
2049
2050 #if 0
2051 static void session_inv_on_create_offer(pjsip_inv_session *inv, pjmedia_sdp_session **p_offer)
2052 {
2053         /* XXX STUB */
2054 }
2055 #endif
2056
2057 static void session_inv_on_media_update(pjsip_inv_session *inv, pj_status_t status)
2058 {
2059         struct ast_sip_session *session = inv->mod_data[session_module.id];
2060         const pjmedia_sdp_session *local, *remote;
2061
2062         if (!session->channel) {
2063                 /* If we don't have a channel. We really don't care about media updates.
2064                  * Just ignore
2065                  */
2066                 return;
2067         }
2068
2069         if ((status != PJ_SUCCESS) || (pjmedia_sdp_neg_get_active_local(inv->neg, &local) != PJ_SUCCESS) ||
2070                 (pjmedia_sdp_neg_get_active_remote(inv->neg, &remote) != PJ_SUCCESS)) {
2071                 ast_channel_hangupcause_set(session->channel, AST_CAUSE_BEARERCAPABILITY_NOTAVAIL);
2072                 ast_queue_hangup(session->channel);
2073                 return;
2074         }
2075
2076         handle_negotiated_sdp(session, local, remote);
2077 }
2078
2079 static pjsip_redirect_op session_inv_on_redirected(pjsip_inv_session *inv, const pjsip_uri *target, const pjsip_event *e)
2080 {
2081         struct ast_sip_session *session = inv->mod_data[session_module.id];
2082         const pjsip_sip_uri *uri;
2083
2084         if (session->endpoint->redirect_method == AST_SIP_REDIRECT_URI_PJSIP) {
2085                 return PJSIP_REDIRECT_ACCEPT;
2086         }
2087
2088         if (!PJSIP_URI_SCHEME_IS_SIP(target) && !PJSIP_URI_SCHEME_IS_SIPS(target)) {
2089                 return PJSIP_REDIRECT_STOP;
2090         }
2091
2092         uri = pjsip_uri_get_uri(target);
2093
2094         if (session->endpoint->redirect_method == AST_SIP_REDIRECT_USER) {
2095                 char exten[AST_MAX_EXTENSION];
2096
2097                 ast_copy_pj_str(exten, &uri->user, sizeof(exten));
2098                 ast_channel_call_forward_set(session->channel, exten);
2099         } else if (session->endpoint->redirect_method == AST_SIP_REDIRECT_URI_CORE) {
2100                 char target_uri[PJSIP_MAX_URL_SIZE];
2101                 /* PJSIP/ + endpoint length + / + max URL size */
2102                 char forward[8 + strlen(ast_sorcery_object_get_id(session->endpoint)) + PJSIP_MAX_URL_SIZE];
2103
2104                 pjsip_uri_print(PJSIP_URI_IN_REQ_URI, uri, target_uri, sizeof(target_uri));
2105                 sprintf(forward, "PJSIP/%s/%s", ast_sorcery_object_get_id(session->endpoint), target_uri);
2106                 ast_channel_call_forward_set(session->channel, forward);
2107         }
2108
2109         return PJSIP_REDIRECT_STOP;
2110 }
2111
2112 static pjsip_inv_callback inv_callback = {
2113         .on_state_changed = session_inv_on_state_changed,
2114         .on_new_session = session_inv_on_new_session,
2115         .on_tsx_state_changed = session_inv_on_tsx_state_changed,
2116         .on_rx_offer = session_inv_on_rx_offer,
2117         .on_media_update = session_inv_on_media_update,
2118         .on_redirected = session_inv_on_redirected,
2119 };
2120
2121 /*! \brief Hook for modifying outgoing messages with SDP to contain the proper address information */
2122 static void session_outgoing_nat_hook(pjsip_tx_data *tdata, struct ast_sip_transport *transport)
2123 {
2124         struct ast_sip_nat_hook *hook = ast_sip_mod_data_get(
2125                 tdata->mod_data, session_module.id, MOD_DATA_NAT_HOOK);
2126         struct pjmedia_sdp_session *sdp;
2127         int stream;
2128
2129         /* SDP produced by us directly will never be multipart */
2130         if (hook || !tdata->msg->body || pj_stricmp2(&tdata->msg->body->content_type.type, "application") ||
2131                 pj_stricmp2(&tdata->msg->body->content_type.subtype, "sdp") || ast_strlen_zero(transport->external_media_address)) {
2132                 return;
2133         }
2134
2135         sdp = tdata->msg->body->data;
2136
2137         if (sdp->conn) {
2138                 char host[NI_MAXHOST];
2139                 struct ast_sockaddr addr = { { 0, } };
2140
2141                 ast_copy_pj_str(host, &sdp->conn->addr, sizeof(host));
2142                 ast_sockaddr_parse(&addr, host, PARSE_PORT_FORBID);
2143
2144                 if (ast_apply_ha(transport->localnet, &addr) != AST_SENSE_ALLOW) {
2145                         pj_strdup2(tdata->pool, &sdp->conn->addr, transport->external_media_address);
2146                 }
2147         }
2148
2149         for (stream = 0; stream < sdp->media_count; ++stream) {
2150                 /* See if there are registered handlers for this media stream type */
2151                 char media[20];
2152                 struct ast_sip_session_sdp_handler *handler;
2153                 RAII_VAR(struct sdp_handler_list *, handler_list, NULL, ao2_cleanup);
2154
2155                 /* We need a null-terminated version of the media string */
2156                 ast_copy_pj_str(media, &sdp->media[stream]->desc.media, sizeof(media));
2157
2158                 handler_list = ao2_find(sdp_handlers, media, OBJ_KEY);
2159                 if (!handler_list) {
2160                         ast_debug(1, "No registered SDP handlers for media type '%s'\n", media);
2161                         continue;
2162                 }
2163                 AST_LIST_TRAVERSE(&handler_list->list, handler, next) {
2164                         if (handler->change_outgoing_sdp_stream_media_address) {
2165                                 handler->change_outgoing_sdp_stream_media_address(tdata, sdp->media[stream], transport);
2166                         }
2167                 }
2168         }
2169
2170         /* We purposely do this so that the hook will not be invoked multiple times, ie: if a retransmit occurs */
2171         ast_sip_mod_data_set(tdata->pool, tdata->mod_data, session_module.id, MOD_DATA_NAT_HOOK, nat_hook);
2172 }
2173
2174 static int load_module(void)
2175 {
2176         pjsip_endpoint *endpt;
2177         if (!ast_sip_get_sorcery() || !ast_sip_get_pjsip_endpoint()) {
2178                 return AST_MODULE_LOAD_DECLINE;
2179         }
2180         if (!(nat_hook = ast_sorcery_alloc(ast_sip_get_sorcery(), "nat_hook", NULL))) {
2181                 return AST_MODULE_LOAD_DECLINE;
2182         }
2183         nat_hook->outgoing_external_message = session_outgoing_nat_hook;
2184         ast_sorcery_create(ast_sip_get_sorcery(), nat_hook);
2185         sdp_handlers = ao2_container_alloc(SDP_HANDLER_BUCKETS,
2186                         sdp_handler_list_hash, sdp_handler_list_cmp);
2187         if (!sdp_handlers) {
2188                 return AST_MODULE_LOAD_DECLINE;
2189         }
2190         endpt = ast_sip_get_pjsip_endpoint();
2191         pjsip_inv_usage_init(endpt, &inv_callback);
2192         pjsip_100rel_init_module(endpt);
2193         pjsip_timer_init_module(endpt);
2194         hostname = pj_gethostname();
2195         if (ast_sip_register_service(&session_module)) {
2196                 return AST_MODULE_LOAD_DECLINE;
2197         }
2198         ast_sip_register_service(&session_reinvite_module);
2199
2200         ast_module_ref(ast_module_info->self);
2201
2202         return AST_MODULE_LOAD_SUCCESS;
2203 }
2204
2205 static int unload_module(void)
2206 {
2207         /* This will never get called as this module can't be unloaded */
2208         return 0;
2209 }
2210
2211 AST_MODULE_INFO(ASTERISK_GPL_KEY, AST_MODFLAG_GLOBAL_SYMBOLS | AST_MODFLAG_LOAD_ORDER, "PJSIP Session resource",
2212                 .load = load_module,
2213                 .unload = unload_module,
2214                 .load_pri = AST_MODPRI_APP_DEPEND,
2215                );