Reference:Release Notes Firmware

This is the Version 7 firmware roadmap.

The release date of the next Hotfix is planed for the second monday of a month. Please note that this a scheduled and no fix date.

This article is generated automatically. Do not edit! Please see the disclaimer before using the information presented here!

V7 Hotfix 1 (08-70300.06)

Changes included in Version 7 Hotfix2 Definition

IP72: new display driver for LCD NT75451

Status	Closed
Id	33028

Problem: newer phones require another lcd driver

Solution: fixed in code

Products affected: IP72

Risk: None

Trap During TLS Connection Termination

Status	Closed
Id	35603

Problem: Occasional trap while TLS client connection shuts down.

Solution: Fixing state machine

Products affected: All

Risk: none

CFU to Voicemail/Redial

Status	Closed
Id	35634

problem: If you dial a local user and gets his voicemail by CFU, then if you try to redial the number by pressing the redial bottom, the Voicemail name will appear in the display, but it is the correct local number that is dialed.
We are running an IP6000 SR2 Hotfix 9 with Innovaphone voicemail.

solution: send divertingLegInformation1 to caller

products: All PBX products

risk: none

Dect SIP registration to PBX with authentication name

Status	Closed
Id	35680

Problem: Authentication name of the Dect user is not used for SIP registration if 'Name for Authentication' option is enabled.

Solution: If authentication name is set for the user, it is used for SIP registration independent of the 'Name for Authentication' option.

Files: dectmaster.cpp.

Products affected: All Dect devices.

Risk: Minimal.

SOAP LocationUrl return value coding

Status	Closed
Id	35686

Problem: the PBX returns the url in a <loc> tag while it should be a <return> tag according to the WSDL.

Solutions: fix coding or change wsdl.
Files affected: pbx/xml/pbx_xml.cpp
Risk: near to zero. .Net based SOAP clients do not care anyway, stricter implementations have not worked at all before.

SIP debug output to be removed

Status	Closed
Id	35739

Problem: Debug outputs forgotten in SIP stack
Solution: Debug outputs removed
Products affected: All
Risk: None

"Administration/Diagnostics/Events/Save" should be enabled in viewer mode

Status	Closed
Id	35742

Problem: The "Administration/Diagnostics/Events/Save" link is disabled in Viewer mode while "Administration/Diagnostics/Config Show" and other links creating textfiles with support info are not.

Solution: enable the "Save" link in xsl file

Products affected: All

Risk: None

Fix for Session-Expires handling

Status	Closed
Id	35749

Problem: Some SIP endpoints send reINVITE w/o Session-Expires header
on calls established with session refresh. The SIP stack released the call in this case. This prevented interoperation with such SIP equipment

Solution: Restart the timer with the original expires value.

Products affected: All

Risk: Minimal Status: Fix: Session watchdog timer is restarted with original expires value.

Debugging Info for MAX_BUSY_TICKS improved

Status	Closed
Id	35752

Problem: After a trap with MAX_BUSY_TICKS it was not possible to see which event caused the problem

Solution: Debug Information added

Products affected: All

Risk: None, code only executed on a trap

Display Master Id in users list

Status	Closed
Id	35753

Problem: Master Id is unknown by the user administrators.

Solution: Display the Master ID in the create/edit users view (Users->Users), because the user administrators must know the Master Id to be able to log in handsets.

Products affected: IP1201, IP4001

Risk: Minimal

Potential Trap if H.323 Signaling entity deleted when calls active

Status	Closed
Id	35754

Problem: If a H.323 signaling entity (IP-DECT User, Gateway GW definition, ...) was deleted while a call was active a trap could happen

Solution: Wait with cleanup until all calls are cleared

Products affected: All

Risk: Minimal, very isolated fix

Refresh rate of call list gui pages

Status	Closed
Id	35755

Problem: Refresh rate too fast to scroll to the end of the following lists: Master calls, Radio calls and Handover calls.

Solution: Refreshing removed.

Products affected: All Dect devices.

Risk: Minimal.

Short local tone

Status	Closed
Id	35757

Problem: A short local tone is generated before the external tone appears.

Solution: Set in-band-flag in Dect Master.

Products affected: IP1201, IP4001.

Risk: Minimal.

Load balancing for trunks

Status	Closed
Id	35761

Problem: Location registrations don't use load balancing between trunks.
Problems appear with outgoing calls via trunks without location registrations.

Solution: Load balancing for location registrations added.
Make a location registration before every outgoing call.

Products affected: IP1201, IP4001

Risk: Minimal.

Idle display updates if masters are down

Status	Closed
Id	35770

Problem: No idle display update if the connection to masters fails.

Solution: Idle display update added.

Products affected: IP1201, IP4001.

Risk: Minimal.

Forwarded Name Id sometimes corrupted

Status	Closed
Id	35775

Problem: Sometimes to Name Id, which is forwarded (e.g. Name Id forwarded on DECT Master to Radio, or Name Id forwarded in PBX) strange characters are added. strcopy was used instead of memcpy. Name still transmitted on H.450 null-terminated for compatibility

Solution: Use correct method for copy. Don't add null-character in H.450.

Products affected: All products with IP-DECT or PBX

Risk: Minimal, very isolated fix

IP22 running out of sync

Status	Closed
Id	35791

Problem: IP22 initial value for internal PLL set wrong.

Solution: Initial value must be set correctly.

Products affected: ip22

Risk: Minimal, very small change

switching between primary and secondary DNS on request timeout fails sometimes in NAT

Status	Closed
Id	35805

Problem: NATted DNS requests waiting for response are kept in a list which is checked in regular intervals for timed out requests. Each timed out request is removed from list and the dns_primary flag is toggled. Thus for an even number of timed out requests the dns_primary flag keeps it's original value.

Solution: toggle the dns_primary flag only once

Products affected: All

Risk: Minimal

Memory leak in Dect

Status	Closed
Id	35819

Problem: Memory leak in Dect.

Solution: Call clean up function.

Products affected: IP1200.

Risk: Minimal.

Undeleted calls from anonymous handsets.

Status	Closed
Id	35820

Problem: Calls from anonymous handsets aren't deleted. Channel information is also not deleted.

Solution: Deleting corrected.

Products affected: All Dect devices.

Risk: Minimal.

Undeleted call facility object

Status	Closed
Id	35821

Problem: Call facility object isn't deleted if user is unregistered to PBX.

Solution: Deleting corrected.

Products affected: All Dect devices.

Risk: Minimal.

fix for ringback after taking incoming call completion response/ renaming call completion to call completion busy

Status	Closed
Id	35829

problem: If a user dials the call completion feature code, gets the call completion response call and answers it, so that the other side is ringing, no ringback tone was heard.
Additionally, as call completion no response is currently not possible, I would rename call completion to call completion busy.

fix: api_remote_hold on connector after SIG_ALERT

products affected: all pbx devices

risk: minimal

IP-DECT Sporadic Hanging Radio Calls

Status	Closed
Id	35830

Problem: It could happen under special call clearing timing conditions that Radio calls remained in the User interface. The affected endpoints could still be called.

Solution: Improve call clearing to avoid this.

Products affected: All IP-DECT products

Risk: Minimal, very isolated fix.

No Media doing call from IP-DECT to slowstart destination which answers with CONN and Suppl. Services are enabled

Status	Closed
Id	35835

Problem: Media negotiation result was not forwarded to the radio if CONN was first response to the call.

Solution: Forward media negotiation result

Products affected: All IP-DECT

Risk: None

provide OEM specific DHCP Vendor Class Identifier

Status	Closed
Id	35838

Problem: in OEM specific network enviromments it may be necessary to use an OEM specific 'Vendor Class Identifier' in DHCP discover/offer messages.

Solution: 'product_info::vendor_class_identifier' defines the OEM spceific value, kernel::vendor_class_identifier() provides it.

Products affected: All

Risk: Minimal

Unusual memory leaks after closed calls

Status	Closed
Id	35839

Problem: Unusual memory leaks after closed calls.

Solution: Call clean-up function for unused events.

Products affected: All devices.

Risk: Minimal.

join/leave pbx dtmf feature should show all dynamic groups, independent of their current state

Status	Closed
Id	35846

problem: currently, a user, who dials the join code, just gets his groups with dynamic out state. If he has no such group, his call will be rejected.
This might let the user think, that the dtmf object is buggy.

fix: just show all dynamic in/out groups for leave/join. If a user joins a group, where he is already in, nothing will happen and the user gets his \taffirmation tone.

products affected: all pbx devices

risk: minimal

New cause code mapping specification

Status	Closed
Id	35858

Problem: New cause code mapping specification.

Solution: Cause code mapping changed.

Products affected: IP1201, IP4001.

Risk: Minimal.

SIP specific call transfer handling as required by SIP provider ShoreTel

Status	Closed
Id	35872

Problem: Currently the call initiating the transfer is released as soon as the replacement call enters alerting state and also in case of an early release of the replacement call.
In SIP (RFC-3515) the initiating call must not be released before the replacement call enters connected state. In case of an early release of the replacement call (transfer rejected) the initiating call must not be released but a transfer failure has to be reported.

Solution: SIP/H323 specific transfer handling in phonesig.cpp

Products affected: All INCA phones and IP72

Risk: Medium, needs to be retested with all SIP providers

RTP jitterbuffer did not work well for RTP out of sequence

Status	Closed
Id	35880

Problem: Too many packets were dropped when many RTP packets where received out of sequence. In realy life this happens rarely, but it is done with OCS certification tests.

Solution: Jitter buffer fixed, to handle this better.

Products affected: All phones, all IP-DECT, IP800, IP6000

Files: medialib.h, media.cpp

Risk: Moderate. Quite a big change, but still isolated.

Prevent random INCA leak reports in test

Status	Closed
Id	35882

Problem: Tests fail randomly because of a leak reported for the var LAN/LINK created by the inca MAC driver and polled in phone idle state any second

Solution: use vars notify mechanism instead of polling

Products affected: All INCA phones, IP72

Risk: None

Logging of calls in PBX cannot be turned off

Status	Closed
Id	35913

problem: Call logging in PBX is always on. This can be a privacy problem.

solution: Call logging configurable

products: All products with PBX

files: pbx.cpp/h log.xsl

risk: Minmal. Call logging is now off by default, this could be a compatibility issue.

H.323 non-efc: User RoundTripDelayRequest as keep-alive

Status	Closed
Id	35916

problem: For interoperability with some OEM equipment it is required to do the RoundTripDelayRequest keepalive

solution: Implement periodic RoundTripDelayRequest messages

files: h323ch.cpp/h

products: all

risks: Minimal (could be that there is H.323 equipment, which does not understand RoundTripDelayRequest, but very unlikely)

missing details in event log "no route to destination"

Status	Closed
Id	35917

Problem: cause "unknown" is reported if a packet is directed to a specific interface but cannot be sent because the destination address requires a gateway and there is no gateway configured for this interface.

Solution: fix code

Products affected: All

Risk: None

Wrong display information on phone, if a call is forwarded to Waiting

Status	Closed
Id	35925

problem: If a object is called which has a CFU set to a waiting queue, no information is sent back to the caller that a call-forward has happened, but a name-id from the waiting queue is sent. So the phone associates this name-id with the number dialed.

solution: Send diverting leg1 info in this case

files: pbx_wait.cpp

products: All products with PBX

risks: minimal. Isolated to forwarded calls to waiting.

croatian translation corrections

Status	Closed
Id	35935

Problem: parts of croatian translation needed corrections

Solution: corrected

Products affected: All phones

Risk: None

Sending NOTIFY(sipfrag) with error code reflecting error on transfer call

Status	Closed
Id	35938

problem: failed transfer call was not correctly indicated on original call

solution: sending of NOTIFY(sipfrag) with error code

products: All products

files: sip.cpp

risk: minmal

Trap if no PBX line in OEM specific state

Status	Closed
Id	35942

Problem: Trap if no PBX line in OEM specific state.

Solution: PBX line check added.

Files: dectmaster.cpp

Products affected: IP1201, IP4001.

Risk: Minimal.

IP72: default backlight off

Status	Closed
Id	35948

Problem: with factory defaults, backlight level set to 0 (disabled)

Solution: fixed code to activate backlight (level 9)

Products affected: IP72

Risk: None

IP72: fix default contrast settings for phones with hw-id F2

Status	Closed
Id	35950

Problem: with factory defaults, LCD contrast may not be satisfying

Solution: added contrast adjust on phone ui (phone-settings menu)

Products affected: IP72

Risk: None

Waiting-Queue: No Disconnect-Tone to Caller if external Transfer Call failed

Status	Closed
Id	35957

problem: failed external transfer call did not caused a disconnect tone to be played to the calling party

solution: do not kill the webmedia channel when the external transfer call is started

products: All PBX products

files: pbx_wait.cpp

risk: minmal

Phone Registration 1 SIP Interop Tweaks - checkmarks cannot be cleared

Status	Closed
Id	35958

Problem: The checkmarks under "Configuration/Registration 1/Registration/SIP Interop Tweaks" can be set but not cleared via WEB interface.

Solution: fix evaluation of boolean options

Files: phonesig.cpp

Products affected: all INCA phones, IP72

Risk: None

Need to Support STATUS_INQ/STATUS procedure in H.323 for OEM

Status	Closed
Id	36022

problem: For an OEM product we need the H.323 STATUS_INQ/STATUS procedure to supervice the link state

solution: STATUS_INQ/STATUS in H.323 stack implemented

files: signal.cpp, signal.h, h323sig.cpp, h323sig.h, h323_tbl.tbl

products: all

risk: Moderate, functionality only used in OEM product. Should not have any influence if not used

Need to set H.323 terminal_type for OEM

Status	Closed
Id	36032

problem: For interop reasons the terminal-type must be set to 50 even for a VOIP_GW type interface

solution: terminal_type configurable

files: voip.h, h323sig.cpp, h323sig.h

products: all

risks: Minimal. Functionality not used in innovaphone products

Hold state indication not cleared on a call transfer requested via direct signalling

Status	Closed
Id	36041

Problem: the call on which the transfer is requested is set on hold by remote party before. the hold state was not cleared after release of this call.

Solution: clear hold state when the replacement call is set up.

Products affected: All INCA phones and IP72

Files: phonesig.cpp, phonesig.h, forms_phone_impl.cpp (test support)

Risk: Low, direct signalling not used in innovaphone environment Status: Test with GnuGk provided by TAC in phone/transfer OK

Pickup from executive not possible, if the call was transfered to executive

Status	Closed
Id	36061

problem: A secretary receives a call for the executive, initiates a consulation call to the executive and hangs up. In this situation the secretary cannot pickup the call from the executive again.

solution: Handle a transfer to the executive

files: pbx_exec.cpp, pbx_exec.h

products: all with PBX

risks: Minimal, very isolated fix

Make H.245 keepalive with RoundTripDelay messages configurable

Status	Closed
Id	36067

problem: RoundTripDelay messages cause additional load, so it should be done only if required for interop reasons

solution: Make it configurable in the stack, so it can be turned on for OEMs

files: voip.h, h323.h, h323sig.cpp, h323ch.cpp

products: all

risks: None, in fact it reduces the risk of the change to put in the RoundTripDelay messages

Firmware stall with MAX_BUSY_TICKS and Watchdog

Status	Closed
Id	36099

problem: Firmware produces unpredictable stalls which results from a permanent occuring interrupt from the si3241 chip. This interrupt is accidently enabled but never occured in the past.

solution: disable this interrupt

files: si3241.cpp

products: ip28

risks: minimal, very isolated fix

H.323 reuse TCP did not work for call-independetnt messages

Status	Closed
Id	36102

problem: The reuse TCP option is required for OEM trunk interfaces not only for calls but also for call-independent messages. A new TCP socket was opened in this case for each message, which was never closed.

solution: Use existing TCP socket for these messages

files: h323sig.cpp

products: all

risks: Minimal, code only executed if reuse_tcp set, which happens only for special OEM cases

OEM specific trunk busy handling

Status	Closed
Id	36103

Problem: New OEM specific trunk busy handling.

Solution: Handling changed.

Files: dectmaster.cpp, dectdisplay_if.h, dectdisplay.h (oem)

Products affected: IP1201, IP4001.

Risk: Minimal.

OEM specific pre-dial support

Status	Closed
Id	36105

Problem: New OEM specific pre-dial support.

Solution: Pre-dial support for OEM added.

Files: dectmaster.cpp

Products affected: IP1201, IP4001.

Risk: Minimal.

OEM specific location handling during handover

Status	Closed
Id	36107

Problem: New OEM specific location handling during handover.

Solution: OEM specific location handling changed.

Files: dectmaster.cpp, dectradio.h, dectradio.cpp.

Products affected: IP1201, IP4001.

Risk: Minimal.

OEM specific trunk redundancy feature

Status	Closed
Id	36111

Problem: OEM specific trunk redundancy feature.

Solution: Feature implemented.

Files: dectmaster.h, dectmaster.cpp, dectmaster.xsl (oem).

Products affected: IP1201, IP4001.

Risk: Minimal.

OEM specific change of PBX registration configuration for coder selection

Status	Closed
Id	36115

Problem: Coder is rejected (OEM specific).

Solution: Registration configuration changed.

Files: dectmaster.cpp.

Products affected: IP1201, IP4001.

Risk: Minimal.

Changed keep alive configuration for oem interoperability

Status	Closed
Id	36118

Problem: Keep alive is required for OEM.

Solution: Keep alive is enabled for OEM.

Files: dectmaster.cpp.

Products affected: IP1201, IP4001.

Risk: Minimal. OEM specific.

OEM specific call status support

Status	Closed
Id	36120

Problem: OEM specific call status support required.

Solution: Call status support implemented. OEM specific enabled.

Files: dectmaster.h, dectmaster.cpp.

Products affected: IP1201, IP4001.

Risk: Minimal. OEM specific.

Prevent high Dect-Master CPU load

Status	Closed
Id	36121

Problem: CPU load in Dect Master device too high.

Solution: Reuse of radio-master TCP connection.

Files: dectmaster.cpp, dectradio.cpp.

Products affected: IP1200.

Risk: Minimal. Tested in previous version.

DSP channel of transfer initiating call lost when call is released by the party requesting the transfer

Status	Closed
Id	36122

Problem: If the call on which the transfer is requested is released by the remote party before the replacement call reaches alerting/connected state the DSP channel assigned to the initiating call is not freed and lost until reboot. first seen in direct signalling tests but may happen with gk-routed signalling too.

Solution: free DSP channel.

Products affected: All INCA phones and IP72

Files: phonesig.cpp, phonesig.h

Risk: Low, very unlikely to happen in innovaphone environment

OEM specific unused feature codes

Status	Closed
Id	36123

Problem: Unused feature codes.

Solution: Unused feature codes disabled.

Files: dectfty.xsl (oem), config.h (oem).

Products affected: IP1201, IP4001.

Risk: Minimal.

automagic URL filename expansion in update 'bmc' command wrong

Status	Closed
Id	36124

Problem: the file name appended to the '/' terminated URL od a 'bmc' command is "ccfp1200" but not "ccfp1200.bin" as documented in wiki and used for the delivered file.

Solution: fix name in update.cpp, add note to wiki

Products affected: IP1200

Files: update.cpp

Risk: Low, most probably most customers did not use this feature

Dect MWI message center number configurable to user number

Status	Closed
Id	36161

Problem: No possibility to configure a message center number with user number.

Solution: Implementation of this new feature: if MWI is enabled and no fix message number is configured the user's number is called as message center number.

Files: dectfty.h, dectfty.cpp, dectfty.xsl (oem), dtmffty.h, dtmffty.cpp.

Products affected: All Dect devices.

Risk: Minimal.

MWI not updated at PP power up

Status	Closed
Id	36162

Problem: MWI not updated at PP power up.

Solution: Sending mwi state after receiving power up event.

Files: dect.h, dect.cpp (oem).

Products affected: IP1200.

Risk: Minimal.

OEM specific Dect ras connection up event

Status	Closed
Id	36163

Problem: OEM specific Dect ras connection up event specification changed.

Solution: Ras connection up event handling changed.

Files: dectradio.h, dectradio.cpp.

Products affected: IP1201, IP4001.

Risk: Minimal.

OEM specific location state for disconnected radio connections

Status	Closed
Id	36164

Problem: OEM specific location state for disconnected radio connections is not changed.

Solution: Implementation of location state handling changed.

Files: dectmaster.h, dectmaster.cpp.

Products affected: IP1201, IP4001.

Risk: Minimal.

OEM specific trunk configuration option

Status	Closed
Id	36165

Problem: OEM specific trunk configuration option is not needed.

Solution: Option removed.

Files: dectmaster.h, dectmaster.cpp, dectmaster.xsl (oem).

Products affected: IP1201, IP4001.

Risk: Minimal.

Not possible to disable option "Allow DTMF through RTP"

Status	Closed
Id	36196

Problem: Not possible to disable option "Allow DTMF through RTP".

Solution: Fixed.

Files: dectmaster.cpp, dectmaster.xsl (oem).

Products affected: IP1200.

Risk: Minimal.

IP800: Lost trace after trap to minifirmware and load to DRAM

Status	Closed
Id	36197

Problem: Stack was initialized

Solution: Stack init removed

Files: ip800.cpp

Products affected: IP800

Message Waiting Indications from a PBX Message Waiting Object are not visible in a special work¡ng environment

Status	Closed
Id	36201

Problem: To receive Message Waiting Indications for a certain number on from a PBX Message Waiting Object on multiple phones each phone uses a separate registration to this Object. A MWI received on a registration triggers only a MWI-key defined for this registration. Because the registration to the Message Waiting Object is not the active registration neither the global led nor the key led (if any) is triggered.

Solution: a 'global' flag is added to the MWI-key. If the flag is set a MWI matching this key is broadcasted to all registrations at the same PBX. Two MWI-keys need to be defined: one with the 'global' flag for the registration to the Message Waiting Object and one for the user registration.

Products affected: All INCA phones and IP72

Risk: Low, only applied if 'global' flag is set

An incoming transfer on a call which was initiator of a rejected transfer before did not work (direct signalling)

Status	Closed
Id	36210

Problem: the call on which a transfer is requested is not restored to the correct signalling state after the transfer has been rejected. The new incoming transfer request is accepted but fails after setup of replacement call because of the wrong signalling state.

Solution: save signalling state before setup of replacement call and restore when replacement call fails.

Products affected: All INCA phones and IP72

Files: phonesig.cpp, phonesig.h

Risk: Minimal, direct signalling not used in innovaphone environment

Frequency band support for Brazil (Subset of South America)

Status	Closed
Id	36216

Problem: Frequency band support for Brazil (Subset of South America).

Solution: New Dect Radio BMC firmware.

Files: New BMC firmware version PCS 05Ae, dect.h (oem), dect.cpp (oem), dect.xsl (oem).

Products affected: IP1200.

Risk: Normal.

Unclosed announcement calls in conference

Status	Closed
Id	36219

Problem: Unclosed announcement calls in conference.

Solution: Fixed.

Files: pbx_bc_conf.cpp.

Products affected: All devices with PBX.

Risk: Minimal, only Broadcast Conference PBX Object.

XPARENT coder in selection list, but cannot be selected

Status	Closed
Id	36230

problem: The XPARENT coder is used automatically and is not configurable, but is still shown in the list

solution: Remove XPARENT from list

files: channel.h

products: all

risk: none

Restart because of Trap in PBX together with transfer/pickup/call-intrusion and Waiting, Voicemail, MWI

Status	Closed
Id	36235

problem: Under spedial rare conditions a restart could happen on transfer/pickup/call-intrusion together with calls to pseudo objects like Waiting, Voicemail or MWI, because of an invalid cast.

solution: Invalid cast fixed

files: pbx.cpp

products: All products with PBX

risks: Minimal

mapping of "600 Busy Everywhere" to cause #17 (User Busy)

Status	Closed
Id	36238

Problem: "600 Busy Everywhere" is mapped to cause #21 (Call rejected)

Solution: Map to cause #17 (User Busy)

Files: sip.cpp

Products affected: All devices

Risk: No risk

Factory reset with V7 bootcode clears linear firmware

Status	Closed
Id	36251

Problem: factory reset didnt check for linear firmware

Solution: check added

Files: flash_firmware.c

Products affected: ipxxx with V7 bootcode ( all except IP3000 and IP72 )

Risk: general bootcode update risk

Support for IP111

Status	Closed
Id	36255

problem: lcd/forms support for upcoming phone model IP111

solution: changed code

files: lcd_ip111.cpp

products: all phone-inca phones

risks: none

No DISC signaling with INFO(application/qsig) if not supported by remote side

Status	Closed
Id	36259

Problem: INFO(application/qsig) might not be supported; don't try if not supported

Solution: detection of 415/488 reject for INFO(application/qsig)

Files: sip.cpp

Products affected: All devices

Risk: Missing inband info, since call is released if disc cannot be signaled

URI parameter "epid" in AOR

Status	Closed
Id	36260

Problem: Microsoft OCS rejects registration if no "epid" parameter is present

Solution: Adding "epid" parameter to AOR in From header in REGSTER,INVITE,SUBSCRIBE

Files: sip.cpp, sip.h

Products affected: All devices

Risk: Minimal, since unknown parameters are to be ignored (handled transparently) by specification

Avoid endless authentication re-trying

Status	Closed
Id	36261

Problem: Endless authentication re-trying if the auth request does not contain a nonce (e.g. NTLM auth)

Solution: Don't take 'no nonce' as 'changed nonce'

Files: sip.cpp

Products affected: All devices

Risk: No risk

V7 Bootcode shows always 999 after firmware downgrade to V6

Status	Closed
Id	36264

Problem: Bootcode version was defined in each startup file. That version number identifies only to the primary boot for V6 firmware.With V7 the bootcode version is part of the minifirmware.

Solution: global define for bootcode version number to 1000 added. Bootcode numbering from the build system would cause bootcode update more frequently than needed.

Files: boot.h startup_*.S

Products affected: ipxxx with V7 bootcode ( all except IP3000 and IP72 )

Risk: low

Memory leak when executing call-completion on IP-DECT

Status	Closed
Id	36265

problem: When executing call-completion packets containing faststart elements are not deleted

solution: Free the packets

files: dtmffty.cpp

products: All IP-DECT

risks: Almost no risk

OEM specific disabling of the feature to change admin login

Status	Closed
Id	36274

problem: For an OEM the feature to be able to change login caused undesirable behaviour with IE

solution: Disable the change login feature for OEM

files: command.cpp command.h

products: all, but change should change behaviour only for OEM products

risk: Only for OEM products

Fix for internal test module for Dect

Status	Closed
Id	36283

Problem: Memory leak and trap in dummysig module.

Solution: Fixed.

Files: dummysig.h, dummysig.cpp.

Products affected: All Dect devices in test mode.

Risk: No risk; module only used for internal tests.

OEM specific GUI view

Status	Closed
Id	36285

Problem: New OEM specific GUI.

Solution: Files changed.

Files: dect_edit_user.xsl (oem), dect_edit_users_right.xsl (oem).

Products affected: IP1201, IP4001.

Risk: No risk; oem specific, only GUI.

IP150 - Right hand part of OEM specific WEB interface is not displayed

Status	Closed
Id	36312

Problem: An IP150 with OEM id 9 (FHF) does not display the right hand part WEB interface

Solution: add login-menu template to fxf.xsl (OEM replacement for inno.xsl)

Products affected: IP150

Files: fxf.xsl

Risk: None

Trap because of buffer overrun when logging a login reject

Status	Closed
Id	36323

problem: If a login reject was logged, depending of the length of the user name a stack buffer was overrun, which could cause a trap

solution: fix buffer size

files: command.cpp

products: all

risks: none

SIPS missing in phone UI in protocol list

Status	Closed
Id	36346

problem: SIPS missing in phone UI in protocol list

solution: fixed in code

files:

products: phone_inca, ip72

risks: none

Trap if too many licenses installed and slave obtains license from master

Status	Closed
Id	36347

problem: If many licenses are installed on a master (e.g. all test licenses), the master traps as soon as a slave tries to read the licenses, because of buffer overrun.

solution: Increase buffer size, better check for buffer overrun.

files: inno_lic.cpp

products: All products with PBX

risks: No risk

Fix for trap in HTTP client

Status	Closed
Id	36357

problem: trap in HTTP client (deleted packet to user)

solution: fixed in code

files: httpclient_i.cpp

products: all products

risks: no risk

mwi function key configuration in the phone-ui was not complete

Status	Closed
Id	36360

problem: mwi function key configuration in the phone-ui was not complete

solution: fixed in code, added "global" and "append own number" flags

files:

products: phone_inca, ip72

risks: none

Clear all sockets if registration changes

Status	Closed
Id	36361

problem: In case of the reuse_tcp option, old socket where used even if registration changed. Fallback from IP-DECT Standby to Master did not work because of that.

solution: cleanup all sockets if registration changes

files: h323.h h323sig.cpp

products: IP1200

risks: limited to IP1200

OEM specific registration handling if a trunk goes down

Status	Closed
Id	36385

Problem: Reregistration is missed if a trunk goes down.

Solution: Reregistration of users registered to this trunk before added.

Files: dectmaster.h, dectmaster.cpp.

Products affected: IP4001, IP1201.

Risk: Minimal.

IP72: use production settings variable to det default contrast

Status	Closed
Id	36386

problem: IP72: use production settings variable (if available) to det default contrast

solution: read vars1, set accordingly

files: lcd_ip22x.cpp

products: IP72

risks: none

PBX routing fails, because access to deleted buffer

Status	Closed
Id	36429

problem: When doing call routing in the PBX in a very short interval the called party number is read from a already deleted buffer. If the buffer is recycled during this period the routing fails.

solution: Delete buffer after call routing

files: pbx.cpp

products: All with PBX

risks: Small risk of collateral damage doing call routing in PBX

V7 Hotfix 8 (09-70300.19)

Changes included in Version 7 hotfix8 Definition

PBX-SOAP: Number update missing for overlap dialing

Status	Closed
Id	42116

problem: On overlap dialing no update was sent to the monitoring application but only later with e.g. Alert. This way the application could not get the original dialed number if a call-forwarding was executed

solution: Send update with each dialed digit (as it was in v6)

files: pbx.cpp

products: all with PBX

risks: None

Suppress Name/Number update after transfer for endpoints calling with CLIR

Status	Closed
Id	42117

problem: On PBX internal calls with CLIR, the number was presented to the remote party after a call transfer

solution: Suppress ct_complete for CLIR numbers

files: pbx.cpp, pbx.h

products: All with PBX

risks: Small risk of collateral damage

PBX: Direct call from secretary to exec on slave did not work if call routed thru master

Status	Closed
Id	42142

problem: On a exec configured on a slave PBX a call from a scretary to the exec could be routed thru the master. This could happen for example if the physical location of the secretary was in fact somewhere else. In this case the call from secretary to master was not allowed.

solution: Check to determin if call is in fact from the secretary fixed

files: pbx_exec.cpp

products: All with PBX

risks: Almost none

Problems with Number display in PBX config with escapes

Status	Closed
Id	42189

problem: If escapes are configured numbers displayed for the picking up endpoint, the diverted-to endpoint (leg1) and for a number configured with "Send Number" contained escapes, which were not correct

solution: Handle escapes better

files: pbx.cpp

products: All with PBX

risks: Some risk that other numbers are not displayed correctly

PBX: External calls to users with 'Reject external Calls' should be rejeceted with 'Unassigned Number'

Status	Closed
Id	42195

problem: External calls to PBX objects with 'Reject external calls' were rejected with cause 'Call Rejected' which reveals that the number exists, which may be more then wanted. On the other hand with 'Unassigned Number', the invalid number destination can be used in the trunk object.

solution: Use 'Unassigned Number'

files: pbx.cpp

products: All with PBX

risks: Could be that somebody needs 'Call Rejected' for some reason

v7hf7: ringing frequency 50Hz instead of 25Hz

Status	Closed
Id	42273

problem: All analogue gateways unse 50Hz AC fpr ringing signaling. 50Hz is common with conservative FXS designs using relays and AC derived from mains. Nevertheless the correct frequency is 25Hz.

solution: switch over to 25Hz ringing

files: si3210_drv.cpp, si3241_drv.cpp

products: ip22, ip24, ip25, ip302, ip28

risk:

IP-DECT OEM trap with locations reference

Status	Closed
Id	42280

Problem: Trap with usage of OEM locations.

Solution: Function changed.

Files: dectmaster_if.h, dectusers.cpp.

Products affected: All OEM DECT devices.

Risk: No risk of collateral damage. OEM devices only.

Take 200 response w/o Contact header for REGISTER as reject

Status	Closed
Id	42414

problem: Some SIP server reject a failed authorization with "200 Auth Failed" w/o Contact header. This was interpreted as successful registration.

solution: Take it as 'rejected'.

files: sip.cpp

products: All with SIP

risks: No risk.

Group Indications should show changed remote number

Status	Closed
Id	42420

problem: New Feature needed: Partner key should not only show the connected number but should also update this number if remote number changes, because of transfer.

solution: Group Indications for the update sent

files: pbx_api.h, pbx.cpp, pbx_gi.cpp, pbx_gi.h, pbx_xml.cpp, pbx_xml.h

products: all with PBX

risks: Risk of collateral damage in the area of Group Indications and SOAP

IP72: alarms originating from IP72 carry wrong &amp; uninitialized netbios address IP72-00-00-00

Status	Closed
Id	42483

problem: alarms originating from IP72 carry wrong & uninitialized netbios address IP72-00-00-00

solution: fixed module start order (init_parameters before mac used)

files: config/platform.h

products: IP72

risks: none

In the Terminal Capability Set coder g711A shall preceede g711u

Status	Closed
Id	42503

problem: If a device providing only g711A and g711u (in that sequence) in its TCS connects to our devices the negotiated coder may be either A-law or u-law. In Europe A-law always should be the preferred coder

solution: reorder the coder tables returned by DSP drivers on a get_caps() request.

files: ac_dsp.cpp, ac_dsp2.cpp, ac_dsp3.cpp, omap_dsp.cpp, inca_dsp.cpp

products: all

risks: Minimal
Status: checked in to 8.00,7.00,08-70300

Pending Recalls are included only in combined call list but not in inbound call list

Status	Closed
Id	42571

problem: the source of pending recalls indicated on the idle screen could not be determined by simply pressing the R-key and checking the inbound call list.

solution: fix the list item selection mask in R-key handler and call lists menu

files: app_ctl.cpp, phone_list_ui.cpp

products: all phones

risks: None
Status: checked in to 8.00,7.00, 08-70300

Pickup key disappears when a "Short Name (H323ID)" longer than a display line should be displayed

Status	Closed
Id	42597

problem: if "Administration/Phone/Preferences/Display Name on Pickup/Partner Key" is checked, the configured "Short Name (H323ID)" is displayed instead of the Number. a name longer than than a display line was truncated to 0 and thus the key label was not displayed.

solution: truncate names to size of display line.

files: app_disp.cpp

products: all phones

risks: None
Status: checked in to 8.00,7.00,08-70300

IP-DECT New Radio BMC firmware version PCS05Ag

Status	Closed
Id	42626

Problem: Newer Radio BMC firmware.

Solution: BMC firmware update.

Files: fp_1g8_ip_1200.bin.

Products affected: All OEM DECT devices.

Risk: Third party firmware.

reverse name resolution via external LDAP server fails if the number attribute list is terminated by a comma

Status	Closed
Id	42640

problem: if "Configuration/Registration x/Directories/External LDAP Server/Number Attributes" is configured for example as "telephoneNumber:T,mobile:C,", the trailing comma results in a search pattern whithout an attribute name (=0049...) which confuses the server.

solution: fix in code

files: phone_dir.cpp

products: all phones

risks: None
checked in to 8.00,7.00,08-70300 Status: checked in to 8.00,7.00,08-70300

memory leak after flash upload of invalid firmware files

Status	Closed
Id	42669

problem: flash upload of a firmware file < 1000 byte or a larger file with an invalid header left back the complete file in memory.

solution: fix in code

files: flashman.cpp

products: all

risks: Small risc of collateral damage Status: checked in to 8.00,7.00,08-70300

IP-DECT display update after fast blind call transfer

Status	Closed
Id	42672

Problem: Handset display is not updated after blind call transfer in early call state.

Solution: Event handling for early call state added.

Files: dectfty.h, dectfty.cpp, dectmaster.cpp.

Products affected: All DECT devices.

Risk: Low risk of collateral damage.

Firmware upload fails in ip1201 and ip4001 if a second brower instance gets the info screen.

Status	Closed
Id	42684

Problem: Flash access conflict, Firmware upload fails in ip1201 and ip4001 if a second brower instance reads the production_data (e.g. from the info screen).

Solution: use a copy of the production_data

Files: box.cpp.

Products affected: ip4001 ip1201.

Risk: Low risk of collateral damage.

SOAP UserInfo: User was sometimes displayed as busy, even if free (Collateral damage from #40268)

Status	Closed
Id	42789

problem: SOAP Applications (e.g. innovaphone switchboard) displayed users as busy even after all calls cleared

solution: Send missing status update again

files: pbx.cpp

products: all with PBX

risks: Very low risk of collateral damage

H.323 media reneg. from SRTP-EFC to non-EFC does not work

Status	Closed
Id	42856

problem: An EFC-SRTP endpoint calls an object with two registrations, first another SRTP-EFC endpoint and second a non-EFC endpoint. With the first endpoint SRTP is negotiated during alert. When the second endpoint answers the call non-SRTP is negotiated, but the calling endpoint still sends SRTP -> no media

solution: Turn off SRTP if renegotiation to non-SRTP happens

files: h323ch.cpp

products: all

risks: None

SIP: From tag changes when re-trying REGISTER with authorization

Status	Closed
Id	42876

problem: Authorization did not work on "sipXecs/4.0.0 sipXecs/registry (Linux)".

solution: Reuse From tag when resending REGISTER with authorization.

files: sip.cpp/h

products: All with SIP

risks: No risk.

Redirection from alternate PBX (standby) should not be used to determine physical location

Status	Closed
Id	42916

problem: If primary PBX is not available and Registration is redirected from alternate, this should not be used as physical location

solution: Do not use alternate reditrection as physical location

files: h323sig.cpp

products: All

risks: Low risk of collateral damage

IP-DECT OEM trunk facility messages

Status	Closed
Id	42931

Problem: Different TCP sessions are needed for different OEM message types.

Solution: Additional trunk signaling object added. Function calls changed.

Files: dtmffty.h, dtmffty.cpp, dectmaster_if.h, dectmaster.h, dectmaster.cpp, dectfty.h, dectfty,cpp.

Products affected: All OEM DECT devices.

Risk: Minimal risk of collateral damage. OEM devices only.

Failed t38 negotiation in SIP

Status	Closed
Id	43056

problem: Inbound SIP call. Switch-over to t38 from internal to external. After 200/OK with t38 answer from external, the call was terminated with Reason code 88 "Incompatible destination".

solution: Fix handling of CHANNEL_INIT.

files: sip.cpp

products: All with SIP

risks: Damage of other scenarios of media negotiation.

PBX obtaining licenses from master, wrong counting

Status	Closed
Id	43093

problem: If a PBX object was changed, which was used by a slave which obtained licenses from the master, the usage of this slave was added again to the total usage

solution: Do correct cleanup when changing the configuration of a PBX object

files: pbx.cpp, inno_lic.cpp

products: all with PBX

risks: very low risk of collateral damage

PBX use cause "outgoing calls barred" for calls rejected because of a filter

Status	Closed
Id	43095

problem: The cause "no route to destination" was used for calls rejected because of filters. This did not express very well what was going on.

solution: Use "outgoing calls barred" instead

files: pbx.cpp

products: all with pbx

risks: None

Incoming INVITE is rejected with "603 Decline"

Status	Closed
Id	43121

problem: SIP stack rejects incoming INVITE with "603 Decline" without telling Gateway application (no LOGs).

solution: On interface selection ignore interfaces not listening.

files: siptrans.cpp

products: All with SIP interfaces without registration

risks: No risk.

Toggling between active and held call with the R-R (or R-2) key sequence does not work sometimes

Status	Closed
Id	43124

problem: if a phone receives message waiting indications for call completion requests pending for this phone and a call completion is cancelled, the phone thereafter may misinterpret the role of active and held call and thus for example the R-R key sequence toggling between those calls is ignored.

solution: fix in code

files: app_reg.cpp, app_call.cpp

products: all phones

risks: None Status: checked in to 8.00,7.00,08-70300

Problem configuring public compact flash access

Status	Closed
Id	43274

problem: Lots of entries or long paths are truncated.

solution: More buffer space.

files: http.cpp

products: All devices with CF card.

risks: No risk.

IP3000 Wizard removes /nt config for PRI2

Status	Closed
Id	43292

problem: On the IP3000 PRI2 interface is preconfigured for NT. By excuting the wizard this configuration is lost

solution: Conserve /nt config on PRI2-L1

files: ip3000/config_wizard.txt

products: IP3000

risks: None

A registered SIP IF gets CDPN from To-URI (not Request-URI)

Status	Closed
Id	43324

problem: A registered SIP interface gets CDPN from To-URI. Not from Request-URI since Request-URI is always the called UA's Contact-URI used in REGISTER. (But not at provider "voip.planetel.biz")

solution: Config file option "/get-cdpn-from-request-uri".

files: sip.cpp/h

products: All with SIP

risks: No risk.

Trailing slash not honored when processing unauthorized access list

Status	Closed
Id	43342

problem: A trailing slash at an entry in "Public compact flash access" was not honored. Entries with a trailing slash shall grant access to the complete sub-tree. Entries without a trailing slash shall not.

solution: Honor trailing slash when checking for unauthorized access.

files: http.cpp

products: All devices with CF card

risks: Damage of CF access.

src-url not forwarded in pbx and gateway

Status	Closed
Id	43355

problem: A src-url received as part of the source address was not forwarded by the pbx or the gateway. This caused problems with billing.

solution: forward src-url

files: pbx.cpp, relay.cpp, relay.h

products: all

risks: Minimal

cf card recognized, but partion table ignored

Status	Closed
Id	43386

problem: boot sector of a cf card was recognized, but partion table ignored.

solution: firstly check partion table existance and try to validate it

files: fat32.cpp

products: all products with cf card

risks: small chance of unusual boot sectors, which could cause a false cf card recognition

GWn Interfaces could not be selected as source for automatic generated routes

Status	Closed
Id	43428

problem: For physical interfaces which are registered, routes are generated automatically. These routes can be modified, e.g. additional source interfaces can be configured. GWx interfaces were excluded from this

solution: Allow GWx interfaces as source as well

files: relay_edit_route.xsl

products: All with Gateway

risks: None

ISDN interop problem with Cisco Router with unrestricted digital information calls

Status	Closed
Id	43445

problem: With ISDN calls from an interface in NT mode a Progress Indicator was sent indicating 'Originating Address is non-ISDN'. This caused a Cisco Router to reject UDI calls (after sending CALL-PROC and ALERT!?)

solution: Do not send this PI in case of UDI calls

files: q931.cpp

products: All with ISDN

risks: Minimal

Tunneled H.245 not handled while waiting for response to AdmissionRequest

Status	Closed
Id	43509

problem: If tunneled H.245 where received while the Admission was still pending, no media was negotiated, because these H.245 messages where ignored.

solition: Handle Tunneled H.245 in this state

files: h323_tbl.tbl

products: all

risks: minor risk of collateral damage

"phys" attribute ignored for partial replication to slave

Status	Closed
Id	43623

problem: LDAP objects with attribute "phys" and content "[pbx]", where "[pbx]" equals Configuration/LDAP/Replicator/PBX-Name, weren't replicated to the slave.

solution: Internally derived LDAP filter now contains a term for the "phys" attribute.

files: ldaprep.cpp

products: all PBX products

risks: none

SOAP UserConnect to a phone with a held and an alerting call does not retrieve the held call but opens the call completion menu

Status	Closed
Id	43797

problem:
- A calls B, B answers the call
- A presses the R-key and calls C, C does not answer.
- a UserConnect directed to the held call (A to B) disconnects the alerting call (A to C) but instead to retrieve the held call the call completion menu is openend.

solution: fix in code

files: app_ctl.cpp

products: all phones

risks: None
Status: checked in to 8.00,7.00,08-70300,08-60900

tftp access with httpclient fails on some tftp servers if the file path starts with a /

Status	Closed
Id	43830

Problem: tftp access with httpclient fails on some tftp servers if the file path starts with a /

Solution: remove starting /

Files: httpclient_i.cpp.

Products affected: all.

Risk: Low risk of collateral damage, starting / has no functio with tftp

Permanent reboot after hardware reset with fixed IP address due to Watchdog Timer.

Status	Closed
Id	43953

Timer registers are null after a hardware reset and the Watchdog Timer runs out. The problem is that the interrupts are enabled just before the timers
are set. Some interrupts arrive and to serve them takes longer than 2 seconds.
When DHCP is used the PBX will be started later and not during this critical period and after a software reset the timer registers are not resetted and therefore the watchdog timer is triggered.

Solution: Init the Timer Registers before the Interrupts are enabled.

files: ip6000.cpp

IP-DECT option check called party number in Dectmaster

Status	Closed
Id	44074

problem: For some system configurations it is necessary to reject calls if the called party number doesn't match with the number of the assigned user of the used PBX registration.

solution: New option to check the called party number for OEM devices.

files: dectmaster.h, dectmaster.cpp.

products affected: All OEM DECT devices.

risk: No risk of collateral damage. OEM devices only.

fine grained locking bits for phone-settings and user-list-actions

Status	Closed
Id	42595

problem: fine grained locking bits for phone-settings and user-list-actions added. now following functions from phone menu can be disabled:
1) Menu -> Phone Setup -> Lock Phone
Menu -> Phone Setup -> Change PIN
Menu -> Phone Setup -> Direct Dial
2) Menu -> User List -> User(1-6) -> Activate
Menu -> user List -> User (1-6) Function Keys

solution: implemented PHONE_LOCK_PHONE_SETUP and PHONE_LOCK_USER_LIST bits (see wiki Reference7:Fine_grained_function_locking)

files: phone/phone_config.h phone/app/app_gui.cpp phone/user/phone_user_ui.cpp

products: all telephones

risks: none

V7 Hotfix16 (70300.28)

Changes included in Version 7 hotfix16 Definition

SIP: Problem with Thomson ST2030 SIP Phone as member of broadcast group

Status	Closed
Id	52199

Problem: The ST2030 calls for PRACK when sending 180 with SDP offer. PBX cannot provide SDP answer in PRACK. PBX does not send any PRACK here.

Solution: Send PRACK without SDP in this case.

Files: sip.cpp

Products affected: PBX serving SIP endpoints

Risk: No risk.

SIP: Trap when using TCP as transport

Status	Closed
Id	52210

Problem: Trap when trying to cleanup idle/unused TCP connections.

Solution: Check connection state before initiating connection shutdown.

Files: siptrans.cpp

Products affected: SIP devices doing SIP over TCP

Risk: No risk.

Trap if T.38 timer expiry during closing of T.38 session

Status	Closed
Id	52215

problem: If a T.38 timer expired right within the fraction of a ms which it takes to close the T.38 session, a trap happened

solution: Stop timer before closing session

files: media.cpp

products: all

risks: None

SIP: Direction attribute in dialog-info was wrong in some cases

Status	Closed
Id	52228

Problem: Direction attribute in dialog-info was wrong in some cases.

Solution: Add direction attribute to GI to fix direction attribute in dialog-info.

Files: fty.cpp/h pbx_gi.cpp/h sip.cpp sipfty.cpp

Products affected: PBXs serving SIP endpoints

Risk: Low risk of collateral damage

PBX: Potential Trap if changing groups

Status	Closed
Id	52313

problem: If group memberships are changed esspecially at Waiting Queues or Waiting Queue operators a trap could happen, because PBX internal information could get inconsistent.

solution: Fixed update of internal information

files: pbx.cpp

products: all with PBX

risks: Other traps, complex operations, so it is possibly still wrong

socket bind/connect sometimes failed because of duplicate assignment of local wildcard port

Status	Closed
Id	52342

problem: a local wildcard port could be assigned twice in case a socket using this port did exist over a period where all port numbers above and below this number had been assigned once.

solution: fix in code

files: tcp.cpp, tcp.h

products: all

riscs: none
Status: checked in to 7.00

SIP: Trap when performing call transfer on ARM based hardware

Status	Closed
Id	52357

Problem: Trap due to alignment error.

Solution: Fix alignment of data.

Files: sip.cpp

Products affected: ARM based devices talking SIP

Risk: No risk.

H.323 local-media renegotiation with SRTP results in one-way media

Status	Closed
Id	52431

problem: Wrong key was used after media renegotiation

solution: Make sure the right key is used

files: h323ch.cpp

products: all

risks: None, same fix is used for a long time in v8

IP-DECT OEM protocol memory leaks

Status	Closed
Id	52467

problem: There are memory leaks if Skinny protocol is used.

solution: Cleanup fixed.

files: skinny.h, skinny.cpp, skinny_signaling.cpp, skinny_translation.cpp.

products affected: All DECT devices.

risk: Minimal risk of collateral damage.

PBX: Presentation restricted name was sent with group indication

Status	Closed
Id	52507

problem: Even if a caller had presentation restricted set, the name was sent in group indications, so it was displayed on pickup keys

solution: Don't send presentation restricted names in group indications

files: pbx.cpp, pbx.h

products: all with PBX

risks: Minimal risk of collateral damage

H.323 Signal IE when sent once during a call, was then sent with each subsequent message

Status	Closed
Id	52518

problem: A Signal IE sent with one message was repeated with all the messages. This could cause the a Signal IE indicating Ringback sent with Alert was repeated with Disc, so that no busy tone was played with Disc, but Ringback

solution: Send Signal IE once only

files: h323sig.cpp

products: all

risks: Minimal risk of collateral damage

PBX: Diverting Info not preserved with SOAP::UserRedirect if diverted on another PBX

Status	Closed
Id	52532

problem: Normaly a call, which was already forwarded (CFU, CFB, CFNR) and then redirected with UserRedirect, shows the original diverting number. This did not work if the call was forwarded on another PBX

solution: Preserve diverting info

files: pbx.cpp

products: all with PBX

risks: None

Call Intrusion across PBXs did not work

Status	Closed
Id	52578

problem: If a call was to be intruded with the destination of the intrusion (which is one of the endpoints of the call to be intruded call) on a different PBX the intrusion failed in a strange way, because the intrusion facilities were not correctly forwarded between the PBXs

solution: Fix forwarding of intrusion facilities

files: pbx.cpp

products: all with PBX

risks: Small risk of collateral damage with intrusion

SIP: Problems parsing exotic SIP URIs

Status	Closed
Id	52631

Problem: Failed to decode destination port from a redirect URI like this: <sip:2204;phone-context=cdp.udp@livio.nl:16618;maddr=10.2.10.3;transport=udp;x-nt-redirect=redirect-server>

Solution: Fix URI parsing.

Files: sipmsg.cpp

Products affected: All SIP devices

Risk: No risk

directory entries displayed duplicate when using delayed input with slow LDAP-servers

Status	Closed
Id	52877

problem: with delayed keyboard input the number of queries sent to the LDAP server when typing a name is reduced. The first query is sent after the number of characters configured by 'delay-count' or the timeout configured by 'delay-ticks'. If another character was typed before the response arrived a new search was started but the previous search results were not cleared.

solution: fix in code

files: phone_dir_ui.cpp

products: all phones

riscs: none
Status: checked in to 7.00,8.00,9.00

Option added to configure DTMF detection sensitivy

Status	Closed
Id	52879

problem: sporadic false DTMF detect

solution: Option added to configure DTMF detection sensitivy. Use
config change AC-DSP0 /dtmf-threshold <val>
config write
reset
to change the sensitivity.
0 selects -38dBm ( default),
1 selects -28dBm,
2 selects -33dBm,
3 selects -43dBm,
4 selects -48dBm
During boot a non-default sensitivity is shown in the trace

files: ac_dsp2.cpp/h ac48xlo.c ac48xdef.h

products: ip800 ip6000

report result of call triggered by a Dial function key with "Send as Control Call\t" checked

Status	Closed
Id	52974

problem: feedback for the keystroke was missing

solution: report result via a popup message on display

files: phonesig_if.h, phonesig.cpp, phonesig.h, app_reg.cpp, app_fkey.cpp, app_ctl.h

products: all phones

riscs: none
Status: checked in to 7.00,8.00,9.00

HTTP memory leak

Status	Closed
Id	52982

problem: There are memory leaks in http.

solution: Packet deleted.

files: http.cpp.

products affected: All devices.

risk: No risk of collateral damage.

Transferring VM calls could trap

Status	Closed
Id	53064

problem: Transferring VM calls could trap

solution: Add NULL pointer access check

files: pbx_vm.cpp

products: all with PBX

risks: none

Reject TLS sessions if the server uses an expired certificate

Status	Closed
Id	53102

TLS connections were not closed on the client side if the server used an expired certificate. This was treated as a warning but not as a fatal error.

Files: tls.cpp

unset "don't fragment bit" in dummy ip header for rpcap

Status	Closed
Id	53104

The "Don't fragment bit" of the dummy IP header for rpcap was set, which can cause some confusion, if one does not know, that this header is just a dummy header when reading the innovaphone wireshark trace.
This flag is now off. Status: debug.cpp

PBX Waiting: 'CFU disables operator' was not taken into account for 'Max Call/Operator(%)'

Status	Closed
Id	53123

If the CFU disables operator option is used, an operator with a configured CFU should be treated as if it was not in the operator group. It was still counted as operator for the Max Call/Operator feature. Status: pbx_wait.cpp

v7 merge fehlt

H.323 RAS registration more robust

Status	Closed
Id	53194

On wireless or congested networks registrations were lost easily if only a few packets were lost. Esspecially if a call signal failed the registration was assumed lost right away. Now this triggers only a keep-alive cycle. Status: h323.h, h323ras.cpp, h323sig.cpp

v7 merge fehlt

H.323 coding fixed, Wireshark indicated error

Status	Closed
Id	53208

The mandatory field 'maintainConnection' was missing in the Setup message. This usually does not create problems, because it is an extension, so that the message can be decoded even if the field is missing.

NULL element 'symmetricOperationRequired' was coded with length 0. According to the standard it should be a byte with all 0 bits and length 1. Status: h323sig.cpp, asn1_per.cpp

PBX-SOAP: UserClear could not be used to cancel UserCall

Status	Closed
Id	53222

If the local phone was still ringing because of a UserCall, the UserClear could not be used to cancel this call. Status: pbx_xml.cpp

log records to a SYSLOG (UDP) server were sent delayed

Status	Closed
Id	53224

log records passed to the logging module before the transport layer is up are saved in a queue. in case of SYSLOG (UDP) this queue was not flushed correctly and sending of a record was triggered only by the following record with the effect that one or more of the latest records were always pending in queue.

formatting of small cf cards didn't work

Status	Closed
Id	53381

The formatting of small cf cards (<512 MB) didn't work, as the cluster size was calculated too high.
Smaller cluster sizes are used now.

formatting of an unknown first partition broke this partition

Status	Closed
Id	53382

If a cf card has partitions and the first partition wasn't recognized, the formatting of this partition broke the first partition, as the wrong boot sector was used.

Vulnerability with open UDP sockets used to send RTP from fixed port

Status	Closed
Id	53412

If data was received on these ports it created a memory leak. Status: media.cpp

PBX Gateway object with Prefix checkmark set, did not remove prefix on retry

Status	Closed
Id	53414

On a Gateway object multiple gateways can be registered. These gateways are used in a round robin fashion. If a gateway call fails because of resources unavailable the next gateway is tried. The prefix was not removed on this retry as it should be with the Prefix checkmark set Status: pbx_gw.cpp

PPTP connection failed because of packet reordering by certain DSL providers/equipment

Status	Closed
Id	53429

dial out PPTP connections to a central innovaphone IPxxx failed when tried from certain remote locations but succeeded from other locations.
The reason for the failure was that packets sent by the central IPxxx were reordered by some network equipment and this case was not handled correctly in the connection setup phase.

Trap when sending PRACK for provisional SIP response

Status	Closed
Id	53459

Problem: Trap when trying to send PRACK for a provisional response for an obsolete INVITE.

Solution: Check state of INVITE transaction before handling provisional response.

Files: sip.cpp

Products affected: All SIP devices

Risk: No risk.

PBX: More then one registration was accepted for a Slave PBX. Caused problems with Standby switchover

Status	Closed
Id	53496

The normal rules were applied for registrations as Slave PBX. This meant if authentication was used multiple registrations were accepted. This caused the address to which registrations should be redirected to be set wrong. After a switchover to a standby slave and a switchback it could happen that on the Master registrations were not correctly redirected to the slave Status: pbx.cpp

IP-DECT OEM protocol release reasons

Status	Closed
Id	53118

IP-DECT Release reasons for OEM protocol are changed. Status: dectmaster.cpp

Change packet creator information for debugging

Status	Closed
Id	53192

Packet's creator is changed to destination module by the OS if trace is enabled for source or destination module. For debugging. Status: debug.cpp

V7 Hotfix19 (70300.31)

Changes included in Version 7 hotfix19 Definition

XML attribute "href" in PROPFIND response was not URL encoded

Status	Closed
Id	53390

Problem: XML attribute "href" in PROPFIND response was not URL encoded.

Solution: URL-encode XML attribute "href" in PROPFIND response.

Files: servlet_webdav.cpp

Products affected: All gateways with CF card

Risk: No risk.

SIP: Outgoing call (early, not connected) was not canceled (sometimes) on ISDN interworking scenario

Status	Closed
Id	55277

An incoming DISCONNECT with progress indicator did not caused the outgoing SIP call to be canceled. Status: sip.cpp

Gateway: divertingLeg2 was not passed in some cases

Status	Closed
Id	55310

divertingLeg2 got lost during re-routing in Gateway.
E.g. routing each call over TONE caused the divertingLeg2 to disappear.

PBX Waiting: 'CFU disables operator' was not taken into account for 'Max Call/Operator(%)' - Update

Status	Closed
Id	55313

If the CFU disables operator option is used, an operator with a configured CFU should be treated as if it was not in the operator group. It was still counted as operator for the Max Call/Operator feature. Status: pbx_wait.cpp

TEL interface: '#11' not callable if feature codes enabled

Status	Closed
Id	55537

If feature codes are enabled for a TEL interface, the number '#11' without anything else can not be dialled.
To fix please submit gateway's general page with the OK button or do a factory reset. Status: config.h, relay_general.xsl

flash variables may get lost after reboot (because of an earlier trap in the critical phase of flash garbage collection)

Status	Closed
Id	55797

Two valid segments bearing the same data are left back when a fragmented segment is compacted into a new one and the box traps after the new segment has been validated but before the old segment has been marked invalid.
Because of a wrong comparison this situation was not resolved after reboot. Instead of deleting one of the segments the new segment was used until completely filled. Therafter all further allocations failed. This situation could only be cleared by a reset to factory defaults.
Now, if the flash user is permitted to use only one segment (for example VARS on most boxes) the old segment is invalidated and the new compacted segment remains. If the flash user is permitted to use more segments (for example LDAP) the new segment is invalidated because it's not known which of the old segments was compacted.

PBX potential trap when parsing SOAP XML

Status	Closed
Id	55812

No child element found in SOAP XML

some Compactflash cards not working with innovaphone cardslots

Status	Closed
Id	55903

There are compactflash cards that don't respond 848Ah as General Configuration word to Identify Device Command.

DTMF feature call completion can be also used for no response

Status	Closed
Id	55309

The feature is not only usable after a busy call, but also after a call with no response.

Update client option for short URL

Status	Closed
Id	55324

For OEM http server the update client should not append additional options to the update server URL. Status: update.h, update.cpp

SIP: Hide product information in reject responses

Status	Closed
Id	55620

Don't be kind to SIP scan tools. Status: siptrans.cpp

V7 Hotfix20 (70300.32)

Changes included in Version 7 hotfix20 Definition

Possible buffer overrun when reading/writing fat volumn id

Status	Closed
Id	55858

There was a possible buffer overrun when reading/writing the fat volumn id.

Gateway: Trap if Name Out or other fields with very long content

Status	Closed
Id	55941

A buffer overrun could happen if very long strings were used as input values Status: gk.cpp

IP2x IP30x: Missing tones on BRI interface with SIP implementations that send RTP prior to coder negotiation

Status	Closed
Id	56010

This is the problematic scenario:
The IP302 BRI interface is registered on a SIP proxy.
An outgoing call is placed, the SIP proxy sends a STATUS 180 Ringing without SDP information.
The remote side sends RTP data (with inband information) to the IP302.
This switches off the IP302 generated tone, but the remote tone is cannot be used since the SDP is missing in the STATUS 180 message.

Now we ignore RTP with unknown coder for switching off the tone. Status: ac_dsp3.cpp

SIP: Switch to fax did not work in some cases

Status	Closed
Id	56076

Sometimes switch to audio occured immediately after switch to t.38 Status: sip.cpp

SIP: Distinctive ring tones

Status	Closed
Id	55948

Handling of "Alert-Info: internal".
Triggers special ring tone. Status: sip.cpp

V7 Hotfix21 (70300.33)

Changes included in Version 7 hotfix21 Definition

PBX: Trap if duplicate "Long Name" in Database

Status	Closed
Id	56774

It may happen that on a replicated PBX temporarily multiple objects with the same Long Name (cn) exist. In the case the PBX restarted. Status: pbx.cpp

PBX: CFNR configured at Waiting not executed correctly on transfer to Waiting

Status	Closed
Id	56775

under some circumstances not executed at all and sometime without waiting for No Response Timeout Status: pbx.cpp

IP24, IP28: Trap if doing a tranfer for a pickup call

Status	Closed
Id	56780

If a pickup was done (*0#) from an analog phone connected to a IP24, IP28 and this call was transfered afterward (R), a trap happened as soon as the transfer was executed either by R-4 or by hanging up Status: relay.cpp

Disconnect from DTMF/ICP/Directory search object didn't work with mobility

Status	Closed
Id	56883

The disconnect from the DTMF, ICP and Directory search objects didn't work with mobility, as it was wrongly called.

Protect TLS socket against collision of SOCKET_RECV and SOCKET_SHUTDOWN

Status	Closed
Id	57130

It was possible that a collision of SOCKET_RECV from the application and SOCKET_SHUTDOWN from the TLS socket occured. This could lead to a trap because the application was already deleted when the SOCKET_RECV_RESULT was sent. Status: tls.cpp

Upgrade V7 TLS

Status	Closed
Id	57272

Multiple fixes that have been done in V8 before are now integrated into the V7 firmware. Status: tls.cpp
tls.h

v9 Replication Compliance

Status	Closed
Id	57274

Fixes addressing UTF-8 conversions

IP800 Bootcode: Start normal firmware if alternate bootcode runs

Status	Closed
Id	57345

The minifirmware was started in this case, but this makes no sense in V7.
(In earlier versions this was a way show that there is a problem with the bootcode, but on V7 and later the bootcode/altbootcode is checksumed and restored if the checksum is bad). Status: boot.c

SIP: SDP attribut annexb=no was missing

Status	Closed
Id	57533

If G.729 Annex B was disabled it must be explicitely announced,
because no mentioning annexb is interpreted as annexb=yes.

PBX did not send REMOTE_HOLD/RETRIEVE_RESULT

Status	Closed
Id	57599

This causes problems with some third party equipment, which expects these messages Status: pbx.cpp

SNMP, ifSpeed wrong

Status	Closed
Id	57610

SNMP, ifSpeed wrong

automatic or manual recording cannot be stopped if the recorded call is not the currently active call

Status	Closed
Id	57685

Automatic or manual recording could not be stopped if the recorded call was not the currently active call.
If the Redial-key is used to toggle recording this is intended behaviour because otherwise the Redial-key could not be used to transfer the non-recorded active call.
If a 'Recording' function key is used to toggle recording there is no need for this restriction.

Now a 'Recording' function key stops automatically or manual started recording any case.

PBX: Only 8 IP Filters possible, no indication if maximum reached

Status	Closed
Id	56764

Number increased to 32. If 32 Filters are configured no field to enter a new one is displayed Status: pbx.cpp, pbx.h, pbx_api.h, pbx_admin.cpp, pbx_global.xsl

Gateway: If Moh Mode is configured set 'exclusive coder' checkmark as well on UI

Status	Closed
Id	57654

The MOH Mode implies that exclusive coders are used Status: relay_edit_phys.xsl

V7 Hotfix22 (08-70300.34)

Changes included in Version 7 hotfix22 Definition

T.38 doesnt work if the call is transferred from a IP-Phone to a fax device

Status	Closed
Id	55569

Affects IP2x IP30x fax gateways, the ipphone needs no update Status: ac_dsp3.cpp
v7:
ac494004.h
ac498004.h

Invalid duplicate DTMF object caused the PBX to trap

Status	Closed
Id	58514

A false config with an invalid DTMF object (name like DTMF#pickup_group) caused the PBX to trap.
Such an object will be ignored now.

trap on late CHANNEL_INIT to relay_media_relay::serial_event()

Status	Closed
Id	58524

A null pointer was referenced when a CHANNEL_INIT was passed to an object in closing state

AD-replicator: xml-show-namingcontexts leaks memory

Status	Closed
Id	58564

a memory leak occurred every time when clicked on Configuration/LDAP/Replicator(AD)/DN/"Show Options"

Do not disconnect calls to directory search object from master/slave user

Status	Closed
Id	58587

Calls from a master/slave user where disconnected by the directory search object.
These calls are allowed now.

Call Intrusion across PBXs did not work (intrude call at slave from master)

Status	Closed
Id	58710

There was a fix already for this, but this covered only intrude at master from slave. Status: pbx.cpp
pbx.h

DRAM /Firmware upload stops sometimes

Status	Closed
Id	58769

Depending on the timing the upload hangs.
Seen with the innovaphone test program and minifirmware Status: servlet_post_file.cpp

send PROGRESS after CALL-PROC to stop 10s T310

Status	Closed
Id	58839

sometimes too short to forward a call

Trap on CF remove while files are deleted

Status	Closed
Id	58984

When files are deleted from the CF card and the card is removed or has an error, the box could trap.

Potential trap if routes with DTMF output combined with pause chars (',') are used for calls without channel or out-of-channels

Status	Closed
Id	59012

In this situation pause digits are passed to a channel, which does not exits. This causes the trap.
Could also be dialed pause characters on a call-independent signaling. Status: relay.cpp

SIP: Suppress Annex B of G.729 if "Silence Compression" is not enabled at the interface

Status	Closed
Id	57540

Suppress Annex B of G.729 if "Silence Compression" is not enabled at the interface

PBX dtmf group feature marks dynamic in groups

Status	Closed
Id	58536

As the PBX dtmf group feature shows all dynamic in and out groups, the displayed name of dynamic in groups will be preceeded with '* ' now.

PBX: Don't apply Send Number to Recording calls

Status	Closed
Id	58878

For recording it is usually needed to know the real number Status: pbx.cpp

V7 Hotfix23

Changes included in Version 7 hotfix23 Definition

Interworked Control-Calls without Facilities Shall Stop in Relay

Status	Closed
Id	59009

Interworked Control-Calls without Facilities Shall Stop in Relay

H.323: Don't send a call-independent-signaling call without facilities

Status	Closed
Id	59088

This could happen if a QSIG call was interworked, with facilities we do not support Status: h323_tbl.tbl
h323sig.cpp
h323sig.h
phonesig.cpp

send PROGRESS after CALL-PROC to stop 10s T310 - in ISDN Stack not PBX

Status	Closed
Id	59195

sending PROGRESS in the PBX could have some unwanted side effects, like a Cisco Callmanager believing that there is actual in-band media available Status: pbx.cpp
q931.cpp
q931.h
te_tbl.tbl
nt_tbl.tbl
isdn_interop.xsl

H.323 slowstart avoid sending duplicate TerminalCapabilitySet messages

Status	Closed
Id	59203

If a media re-negotiation happened on a remote system at a time the local H.245 channel was not even established, it could happen that a sequence of TCS, TCS0 and TCS again was sent to a calling system. This irritated especially a Cisco Call Manager.

This happened for example, if a call was received from the call manager on one PBX, which was routed to another PBX on which a CFNR was configured. Status: h323ch.cpp

H.323 Slowstart media renegotiation did not work if TCS was not yet received

Status	Closed
Id	59248

This caused a CFNR not being executed (call was cleared on the original called endpoint, but was not sent to new destination) for calls from Cisco Call Manager Status: h323ch.cpp

SNMP, ifSpeed wrong

Status	Closed
Id	59504

SNMP, ifSpeed wrong

SIP: Media negotiation problem in some early media scenarios

Status	Closed
Id	59711

SIP/H323 interworking problem.
Call was terminated with "504 Server Time-out" and "Recovery on timer expiry (102)" Status: sip.cpp

Phone IP150 - dialling numbers containing asterisks '*' does not work

Status	Closed
Id	59768

if in offhook mode the asterisk key is pressed for a short time the key is ignored, if it is pressed longer it is evaluated as mute key.

PBX: Call was possible from registration as standby PBX

Status	Closed
Id	59844

A standby PBX registers at the active PBX to check if it is alive. This registration could be misused for calls. It could be done with H.323 and SIP. This fix prohibits calls from this registration and allows registration with H.323 only Status: pbx.cpp

Qsig, apply interface maps to ccRequest.numberA, ccRequest.numberB

Status	Closed
Id	59407

Qsig, apply interface maps to ccRequest.numberA, ccRequest.numberB

H.323-Q.931-Interworking - display text provided in the Display Information Element of an ISDN Information Message on phone

Status	Closed
Id	59506

The text provided in the Display Information Element of an ISDN Information Message was silently discarded. Now it is displayed in the phone status line.

V7 Hotfix24

Changes included in Version 7 hotfix24 Definition

PBX: Slave license update period too short

Status	Closed
Id	60390

was 100s (v8) or 10s (v7) should be 10min Status: pbx.h

Gateway: Trap on early RELEASE from calling side

Status	Closed
Id	60400

Trap when Notification Indicator is received with ALERT while peer call is released already.

possible trap with enabled trace flag on CF checkdisc

Status	Closed
Id	60513

The box could trap while checking the card, if the trace flag for CF0 was enabled.

V7 Hotfix25 (70300.37)

Changes included in Version 7 hotfix25 Definition

SIP: Trap when receicing provisional response for obsolete INVITE

Status	Closed
Id	61035

In overlap dialing scenarios overlapping INVITE client transactions are used.
Same Call-ID, different CSeq and different To-URI.

SIP: Read PAI/PPI header when receiving MESSAGE request

Status	Closed
Id	61086

Read PAI/PPI header when receiving MESSAGE request in order to get calling party identity

Phone: Memory leak when deleting SIP registration

Status	Closed
Id	61132

Failed to delete registration, but only if trying to delete during state "rgistration failed due to no response from server".

SIP: Bug in handling of re-direct responses

Status	Closed
Id	61264

New remote port was not respected when maddr parameter was present in redirection URI.
E.g.

sip:662@10.0.77.46:4432;user=phone;transport=Tcp;maddr=10.0.77.46;x-mss-call-id=a515c882e909d311874700903306177f%4010.0.77.70

Calls redialled from call list were not set up with CLIR although CLIR was active for the original call

Status	Closed
Id	61321

The CLIR setting of the original call was saved in the call list but not applied when the call was redialled from list.

SIP: No overlap sending if 'sending complete' was declared

Status	Closed
Id	61472

Do not start overlapping INVITE transaction for new dialing digit if 'sending complete' was indicated for the call.

Qsig Leg2 Info decoding could fail

Status	Closed
Id	61860

Qsig Leg2 Info decoding could fail

V7 Hotfix26 (08-70300.38)

Changes included in Version 7 hotfix26 Definition

General btree library problem: Potential Trap if many outgoing registrations need to be retried

Status	Closed
Id	62428

Actually the problem is in the commonly used btree library, but there are not that many cases in which the libray is used in a way that create the problem Status: btree.cpp

PBX Waiting: Limited DTMF targets could be added using Internet Exporer

Status	Closed
Id	62432

URL size limitiation of IE -> use POST instead Status: pbx_edit_waiting.xsl

SIP: Media negotiation failed when interworking with H.323

Status	Closed
Id	62439

When calling from H323 to a user with multiple registrations
and the called user accepts on one of its (SIP type) secondary registration,
the media negotiation can fail.

Possible trap on certain compact flash operations

Status	Closed
Id	62703

There has been the possibility of a trap on certain compact flash file operations.
This trap has been fixed.

Diagnostic/Tracing on IP6000: Trace flag on TEL could not be cleared

Status	Closed
Id	62914

once set, it could only be cleared with a !config change command Status: tracing.xsl

RPCAP uses system time instead of uptime now

Status	Closed
Id	62745

A wireshark capture with RPCAP will now receive packet timestamps with the system time and not the uptime anymore.

V7 Hotfix27 (70300.46)

Changes included in Version 7 hotfix27 Definition

H.323: Don't send a call-independent-signaling call without facilities and user-user information

Status	Closed
Id	62961

This fix is related to the fix #59088.
A call-independent-signaling call without facilities should not be sent, but if it has got a user-user information, it should be sent.
This fixes the DECT messaging problem on the IP1200. Status: h323sig.cpp

TCP: Ack was not sent under special conditions with re-transmissions

Status	Closed
Id	62965

This could cause the breaking of a TCP connection in case of packet loss, even if the packet loss was not too bad Status: tcp.cpp

Trap when processing webdav requests

Status	Closed
Id	62980

Trap when webdav request session were terminated irregularly.

HTTP-Server: Closing connection after transaction causes trouble with Webdav client

Status	Closed
Id	63045

NetDrive client fails when uploading files Status: http.cpp

Webdav: Bug when handling GET with Range header

Status	Closed
Id	63131

When applied on a zero length file this response was returned:

\tHTTP/1.1 206 Partial Content
\tDate: Tue, 12 Apr 2011 14:52:23 GMT
\tServer: innovaphone Virtual Appliance / 9.00 dvl [xxx/1000/0]
\tAccept-Ranges: bytes
\tContent-Type: application/octet-stream
\tContent-Length: 0
\tContent-Range: bytes 0-4294967295/0

Error response "416 Requested Range Not Satisfiable" must be returned instead.

Webdav: Don't keep zero-length files open on server side

Status	Closed
Id	63133

In case of large files, NetDrive performes GET operation between PUT0 and PUT.
The actual PUT was rejected with 500 error resonse then.

SIP: Trap when session timer is used

Status	Closed
Id	63271

Trap on collision of session timer and call release

HTTP-Client: Bad encoding of uri parameter in digest authentication

Status	Closed
Id	63469

Uri parameter in digest authentication was not URL encoded

SIP: Message buffer too small for REGISTER request for re-try with authentication

Status	Closed
Id	63539

On some installations a change-of-nonce at server side may cause volatile "Registration down error" on client side.

SIP: Allocated message size to small for INVITE redirect response (Avaya)

Status	Closed
Id	63829

Memory allocation is a bit to tight to fit the message due to many Via headers.

INVITE sip:3003@192.168.150.140:2059;transport=UDP SIP/2.0
Record-Route: <sip:5793d7f@192.168.150.115;transport=udp;lr>
Record-Route: <sip:192.168.150.114:15060;lr;sap=315810451*1*016asm-callprocessing.sar1905633216~1304428214402~-1054885358~1>
Via: SIP/2.0/UDP 192.168.150.115;rport;branch=z9hG4bKC0A896726E7526620194612-AP;ft=192.168.150.115~13c4
Via: SIP/2.0/UDP 192.168.150.114:15070;branch=z9hG4bKC0A896726E7526620194612
Via: SIP/2.0/UDP 192.168.150.114:15070;branch=z9hG4bKC0A896726E7526621194610
Via: SIP/2.0/UDP 192.168.150.114:15070;branch=z9hG4bKC0A896726E7526621194609
Via: SIP/2.0/TCP 192.168.150.115;branch=z9hG4bK0e2106b7388e016424db9a29200-AP;ft=11786
Via: SIP/2.0/TCP 192.168.150.118;branch=z9hG4bK0e2106b7388e016424db9a29200;avaya-cm-term-reaction=shortcut
Via: SIP/2.0/TCP 192.168.150.115;branch=z9hG4bKC0A896726E7526620194608-AP;ft=12651
Via: SIP/2.0/TCP 192.168.150.114:15070;branch=z9hG4bKC0A896726E7526620194608
Via: SIP/2.0/TCP 192.168.150.114:15070;branch=z9hG4bKC0A896726E7526621194606
Via: SIP/2.0/TCP 192.168.150.114:15070;branch=z9hG4bKC0A896726E7526621194605
Via: SIP/2.0/TCP 192.168.150.115;branch=z9hG4bK0e2106b7388e018424db9a29200-AP;ft=11786
Via: SIP/2.0/TCP 192.168.150.118;branch=z9hG4bK0e2106b7388e018424db9a29200
Via: SIP/2.0/TCP 192.168.150.84;branch=z9hG4bK200_f1774512c29cc2e5cd78966_I2371
User-Agent: Avaya one-X Deskphone AVAYA-SM-6.1.1.0.611023 Avaya CM/R016x.00.1.510.1
Record-Route: <sip:5793d7f@192.168.150.115;transport=tcp;lr>
Record-Route: <sip:192.168.150.114:15060;transport=tcp;lr;sap=315810451*1*016asm-callprocessing.sar1905633216~1304428214355~-1054885362~1>
Record-Route: <sip:5793d7f@192.168.150.115;transport=tcp;lr>
Record-Route: <sip:192.168.150.118;transport=tcp;lr>
Session-Expires: 1800;refresher=uac
Content-Type: application/sdp
Content-Length: 215
...

SNMP, innoColdStart Trap to be sent only after sw failure or button reset

Status	Closed
Id	63160

Settlement of a feature request to have the innoColdStart SNMP trap indicate severe reboot reasons only.

DECT: GUI password input limit info

Status	Closed
Id	63349

The user password is truncated to 15 signs. Now the input field is limited and an info is shown.

DECT: Radio firmware for new handsets

Status	Closed
Id	63577

The new radio firmware PCS05Ah accepts new handsets with the new IPEI number range.

V7 Hotfix29

Changes included in Version 7 hotfix29 Definition

Incorrect rpcap timestamp after TRACE LOST messages

Status	Closed
Id	64915

The RPCAP timestamp (Wireshark) after a TRACE LOST message was incorrect, as the TRACE LOST message contained an incorrect timestamp.

VM, Project script didn't run for endpoints having "Send Number" configured

Status	Closed
Id	65456

VM, Project script didn't run for endpoints having "Send Number" configured

Message Waiting Interrogation: Result message coding wrong

Status	Closed
Id	65912

a malformed message was displayed in wireshark Status: h450.cpp
h450asn1.h

SIP: Set CLIR if display string of From-URI contains "Anonymous"

Status	Closed
Id	65925

Not only if userpart of From-URI contains "anonymous".

phone: Hexadecimal values instead of descriptive texts were displayed for some rare disconnect causes

Status	Closed
Id	66343

"0x57 - unknow cause" was displayed instead of "user not a CUG member". Mainly german descriptive texts were missing.

New flash S29GL256P90/S29GL128P90 on IP1200

Status	Closed
Id	58643

This flash is used on new IP1200 devices.
Bootcode downgrade to older bootcode is disabled.
If the bootcode is downgraded the bootcode version is shown as 1013.

phone: disable call intrusion via partner key when recording is active

Status	Closed
Id	65918

Call intrusion cannot be performed while recording is active:
- recording establishes a 3party conference between local party, remote party and recorder.
- call intrusion establishes a 3party conference between local party and the two remote parties
- recording and call intrusion at the same time would require a 4party conference which cannot be set up because the phone has only 2 DSP coder channels.

Now if any kind of recording is configured call intrusion is neither offered in 'recall' menu nor performed via partner key.

V7 Hotfix30 (70300.49)

Changes included in Version 7 hotfix30 Definition

Gateway: Trap in case of collision of hold and clearing from remote

Status	Closed
Id	66642

This could happen on gateways with analog interfaces if the R-Key was pressed right when the other side hung up

V7 Hotfix31 (70300.50)

Changes included in Version 7 hotfix31 Definition

H.323: A name_id of length 0 resulted in invalid H.450 coding

Status	Closed
Id	67796

An empty name identification received was forwarded in H.323 as invalid H.450. Such a name is now forwarded as 'name not available'.

H.323 Malformed packet

Status	Closed
Id	67803

The ASN.1 encoder had a bug under one special condition: For a constrained character string with a maximum length of more or equal to 16bits, with an effective length of zero, the padding for octett alignment was missing for the zero length bitfield containing the string.

In H.323 this only happens for the CallIdentity used for H.450 call transfer message in case of blind transfer without consultation.

This fix breaks compatibility with earlier versions, for this reason this fix is available for version 9,8,7 and 6.

If phones and PBX with versions containing and not containing this fix are mixed the following problems will occur:
- A blind transfer without consultation (initiated with the redial key) is not possible
- A call which was transfered without consultation is not displayed at the transfered-to phone as transfered

phone: intrusion call started in handset mode is not terminated when going on hook when TAPI or operator run on PBX

Status	Closed
Id	68249

With TAPI or operator running on the PBX the the signaling of a busy condition is changed such that a disconnect instead of a release is sent. The disconnect was not handled correctly, the hookswitch state was lost and the next on-hook signal was ignored. TThus teh call could be terminated with the disc-key only.

V7 Hotfix32 (70300.51)

Changes included in Version 7 hotfix32 Definition

Phone: Changing config option /sip-hold does not call for reset

Status	Closed
Id	68691

Reset is required and 'reset required" must be displayed.

H.450: Bad encoding of DivertingLegInformation4 arguments

Status	Closed
Id	68868

DivertingLegInformation4 content coding was wrong.
Wireshark displayed it as malformed.

Note:
This fix causes interoperability problem with phones with older (non-fixed) firmware versions!
Phones also require an updated firmware if PBX is updated.

SIP: NOTIFY sent after 302 moved temporarily

Status	Closed
Id	69282

After processing "302 moved temporarily" on an outbound call a NOTIFY (sipfrag) was sent.

PBX: Reject calls without media, if no known facility

Status	Closed
Id	69477

Fixes compatibility issues between versions. For example presence subscription sessions from v8 phones being forwarded to voicemail

SIP: Trap when handling NOTIFY(application/qsig)

Status	Closed
Id	69771

Traps if no progress indicator present in tunneled DISCONNECT message.

ISDN interop issue with SecuGATE LI 30 from Sirrix

Status	Closed
Id	69168

The SecuGATE LI30 is sending/receiving ISDN INFO messages in Call Proceeding State (State 3 and state 9), which was not supported

V7 Hotfix33 (70300.52)

Changes included in Version 7 hotfix33 Definition

H.323: Call Intrusion H.450 facility coding error

Status	Closed
Id	71456

generated interop problem with v8 and higher

phone: display info provided by SETUP or CONNECT was ignored

Status	Closed
Id	71727

only the display info provided by an INFO event was handled

Gateway: Forward Display Info received from ISDN Setup to H.323

Status	Closed
Id	70562

needed for compatibility with SecuGATE LI30

V7 Hotfix34 (70300.53)

Changes included in Version 7 hotfix34 Definition

TCP: Roundtrip measurement wrong in case of packet loss

Status	Closed
Id	71985

In case of packet loss, way to high round trip values were measured. If the packet-loss was to high, this could result in a constantly increasing re-transmission timeout value.

Scheduling improved to avoid processes not being scheduled during long flashman operations

Status	Closed
Id	72243

In version 7 it could happen, that IP and other processes were not scheduled any more during periods of long flashman operations (e.g. bootcode update or reorganizing flash).

In version 8 and higher there was already a fix for this problem, but this included special handling of the flashman priority level, which was not a good solution even if it worked.

update - scfg command could hang when the HTTP session was broken or prematurely closed by the server

Status	Closed
Id	72708

in consequence update script processing was stopped until reboot

PBX: Forward original received ISDN display element to picking up or forwarded call

Status	Closed
Id	73278

In the display element from ISDN there could be vital information from equipment like crypto gateways. This should be available also if the call was picked or forwarded.

V7 Hotfix35 (70300.54)

Changes included in Version 7 hotfix34 Definition

TLS: Flow control for incoming data

Status	Closed
Id	75004

The TLS socket has to wait for the application to process incoming data before sending the next RECV.

VM: <pbx-upd-obj type="cfu"..> without effect when invoked multiple times

Status	Closed
Id	75121

Statement <pbx-upd-obj type="cfu"..> failed to work properly after being used for diversion manipulation multiple times within a single script session.

TLS: Duplicate alert message on malformed ClientHelloV2

Status	Closed
Id	75509

Only one alert should be sent per session.

TLS: Improved negotiation of protocol version

Status	Closed
Id	75510

TLS server unnecessarily rejected ClientHello messages with TLS 1.1 and higher. Instead of rejecting it should tell the client that it wants to use TLS 1.0.

TLS: Skip empty records

Status	Closed
Id	75511

TLS record layer should ignore records with zero length without doing anything.

Gateway: Conference interface, no voice

Status	Closed
Id	76419

The ADSP firmware is changed to version 122. This fixes a bug in the conference interface of IP6000/IP6010/... which results in conference calls without voice in one direction for a single member.

V7 Hotfix36 (70300.55)

Changes included in Version 7 hotfix36 Definition

Avoid Snmp decode error trace outputs

Status	Closed
Id	76435

Avoid Snmp decode error trace outputs when receiving requests > SNMPv1

IPVA, IP800, IP6000, IP6010: Typo RT30 instead of RT40

Status	Closed
Id	77027

The routing table entry RT30 was duplicate and RT40 was missing. This causes config changes to be lost if more then 29 routes are configured

V7 Hotfix37 (70300.56)

Changes included in Version 7 hotfix37 Definition

TLS flow control damaged in versions 7 and 8

Status	Closed
Id	78377

The following fix was not good:
#75004: TLS: Flow control for incoming data

Therefore TLS did not work correctly in the following releases:
v7hotfix35 and v7hotfix36
v8hotfix23 and v8hotfix24

No problem in version 9.

V7 Hotfix38 (70607)

Changes included in Version 7 hotfix38 Definition

IP6000/IP800: New DSP code to solve fax interop issue

Status	Closed
Id	79785

Update to DSP code 600.04 and the dsp driver/headerfiles as in version 8