[Bug 501116] [NEW] chan_iax2 crashes on nonexistent fr->callno (patch available)

[Ryan Finnie]

Public bug reported:

Binary package hint: asterisk

We are getting occasional segfaults on a karmic system
(1:1.6.2.0~rc2-0ubuntu1.1) with heavy iax2 traffic (crashes occur every
few days):

[442046.620342] asterisk[8552]: segfault at 48d ip b6022c71 sp b4ee04a0
error 4 in chan_iax2.so[b5ff2000+48000]

A backtrace reveals:

Core was generated by `/usr/sbin/asterisk -f -p -g -U asterisk -vvvg -c'.
Program terminated with signal 11, Segmentation fault.
#0  0xb6022c71 in socket_process (thread=<value optimized out>) at chan_iax2.c:9451
9451                            if (ast_test_flag(iaxs[fr->callno], IAX_ENCRYPTED)) {
(gdb) bt
#0  0xb6022c71 in socket_process (thread=<value optimized out>) at chan_iax2.c:9451
#1  0xb602bfa1 in iax2_process_thread (data=0xb8fb5748) at chan_iax2.c:11133
#2  0xb76b56b4 in dummy_start (data=0xb8fb1fb0) at utils.c:968
#3  0xb714b80e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#4  0xb735e7ee in clone () from /lib/tls/i686/cmov/libc.so.6

This bug was reported as part of another bug report in the Asterisk
issues system (https://issues.asterisk.org/view.php?id=15609#111024) and
fixed in both the 1.4 and 1.6.2 lines (the patch is the same for both
lines):

http://svnview.digium.com/svn/asterisk/branches/1.6.2/channels/chan_iax2.c?view=patch&r1=219590&r2=219589&pathrev=219590

Please consider applying this patch, as it is causing Asterisk-wide
crashes.  Thank you.

** Affects: asterisk (Ubuntu)
     Importance: Undecided
         Status: New

-- 
chan_iax2 crashes on nonexistent fr->callno (patch available)
https://bugs.launchpad.net/bugs/501116
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs