[Bug 501116] Re: chan_iax2 crashes on nonexistent fr->callno (patch available)

Ryan Finnie ryan at finnie.org
Mon Jan 4 06:09:45 GMT 2010


Thanks Scott.  They have not yet hit the mirrors, but I have downloaded
the .debs from LP and begun testing.  The patch is correct and there
does not appear to be build regressions, but I will continue testing and
post back later.

For anyone else that wants to test, the problem is a race condition, but
I did work out a procedure for triggering it somewhat consistently:

1. Set up 2 asterisk servers, Server A and Server B (the affected server).  Ideally the servers should be far enough away on the network (in my setup, they're 90ms RTT from each other).
2. Register Twinkle with Server A.
3. Set up a dial plan that allows Twinkle to call Server B via Server A with Dial(IAX2/serverb/s,60).  The endpoint on Server B must pick up immediately, for example Answer() and Playback(tt-weasels).
4. Dial the endpoint with Twinkle, then hang up.
5. Rapidly toggle between F12 (redial) and Esc (hang up).
6. Server B should eventually segfault if unpatched, but should not if patched.

-- 
chan_iax2 crashes on nonexistent fr->callno (patch available)
https://bugs.launchpad.net/bugs/501116
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a direct subscriber.



More information about the ubuntu-archive mailing list