[MMUSIC] Comments on ABNF in draft-petithuguenin-mmusic-ice-sip-sdp-01

Magnus Westerlund <magnus.westerlund@ericsson.com> Wed, 22 January 2014 09:36 UTC

Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98C861A03FA for <mmusic@ietfa.amsl.com>; Wed, 22 Jan 2014 01:36:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.551
X-Spam-Level:
X-Spam-Status: No, score=-3.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R1O1ywQ3tNFo for <mmusic@ietfa.amsl.com>; Wed, 22 Jan 2014 01:36:16 -0800 (PST)
Received: from mailgw2.ericsson.se (mailgw2.ericsson.se [193.180.251.37]) by ietfa.amsl.com (Postfix) with ESMTP id 98A711A0416 for <mmusic@ietf.org>; Wed, 22 Jan 2014 01:36:15 -0800 (PST)
X-AuditID: c1b4fb25-b7f038e000005d01-01-52df91075b9c
Received: from ESESSHC016.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw2.ericsson.se (Symantec Mail Security) with SMTP id 64.22.23809.7019FD25; Wed, 22 Jan 2014 10:36:07 +0100 (CET)
Received: from [127.0.0.1] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.68) with Microsoft SMTP Server id 14.2.347.0; Wed, 22 Jan 2014 10:36:07 +0100
Message-ID: <52DF90E9.2070902@ericsson.com>
Date: Wed, 22 Jan 2014 10:35:37 +0100
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
MIME-Version: 1.0
To: "mmusic (E-mail)" <mmusic@ietf.org>, Marc Petit-Huguenin <petithug@acm.org>, Ari Keränen <ari.keranen@ericsson.com>
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrDJMWRmVeSWpSXmKPExsUyM+JvjS7fxPtBBgtOy1pMXf6YxeLCmrtM Dkwel694eyxZ8pMpgCmKyyYlNSezLLVI3y6BK2PnnCVsBQ+FK9Yd2MzcwNjC28XIySEhYCLx /Ws7K4QtJnHh3nq2LkYuDiGBQ4wSN07sZIdwljNKfNiwEKyKV0Bb4n73ZEYQm0VAVeLTj89M IDabgIXEzR+NbCC2qECwxK1pD9gh6gUlTs58wgIySESgh1FiwfV7YAlhATeJ38+nMHcxcgCt FpfoaQwCCTML6ElMudrCCGHLSzRvnc0MYgsB7W1o6mCdwMg/C8nYWUhaZiFpWcDIvIqRPTcx Mye93GgTIzDEDm75rbqD8c45kUOM0hwsSuK8H946BwkJpCeWpGanphakFsUXleakFh9iZOLg lGpgLFOW1t77aLvu7klSX4Qmqnq9kPI29v6Zv2R3RsWO20Fh/lNE1f+2b1JVXa907s//FSlb rfhlbJ/+s70/K3G1iJmZCpeaRVopt9a9A4usVK2rfmyc+HPy8sn8Ad3xnhdmnJTMnJy4ai3j sZjFdbO3bPv4cIvBqu6lhlczzxesfFiaNcE3d+1nLyWW4oxEQy3mouJEABBWzxH/AQAA
Subject: [MMUSIC] Comments on ABNF in draft-petithuguenin-mmusic-ice-sip-sdp-01
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Jan 2014 09:36:17 -0000

Hi,

As part of the RTSP for NAT work I actually noticed an issue with the
ABNF that is defined for ICE in SDP.

>From Section 8.1:

   candidate-attribute   = "candidate" ":" foundation SP component-id SP
                           transport SP
                           priority SP
                           connection-address SP     ;from RFC 4566
                           port         ;port from RFC 4566
                           SP cand-type
                           [SP rel-addr]
                           [SP rel-port]
                           *(SP extension-att-name SP
                                extension-att-value)

   foundation            = 1*32ice-char
   component-id          = 1*5DIGIT
   transport             = "UDP" / transport-extension
   transport-extension   = token              ; from RFC 3261
   priority              = 1*10DIGIT
   cand-type             = "typ" SP candidate-types



Petit-Huguenin & KeranenExpires August 29, 2013                 [Page 9]

Internet-Draft             ICE SIP/SDP Usage               February 2013


   candidate-types       = "host" / "srflx" / "prflx" / "relay" / token
   rel-addr              = "raddr" SP connection-address
   rel-port              = "rport" SP port
   extension-att-name    = byte-string    ;from RFC 4566
   extension-att-value   = byte-string
   ice-char              = ALPHA / DIGIT / "+" / "/"

The issue is what is allowed in extension-att-name and
extension-att-value. They are listed here as byte-string. That is an
extremely wide allowance in what values to be included.

First of all it includes SP the character used for delimiting the
-att-name against the -att-value and the next set of name and value. I
can't see that one can allow that, and if one have values that includes
space, then they must be escaped.

Further I wonder if it wise to include the non-visible values from the
below 128 range of the byte. It might be okay, but some thought needs to
be put into this.

Cheers

Magnus Westerlund

----------------------------------------------------------------------
Services, Media and Network features, Ericsson Research EAB/TXM
----------------------------------------------------------------------
Ericsson AB                 | Phone  +46 10 7148287
Färögatan 6                 | Mobile +46 73 0949079
SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com
----------------------------------------------------------------------