[asterisk-bugs] [Asterisk 0012538]: Chanspy crash when using spygroup

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=12538 
====================================================================== 
Reported By:                atis
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   12538
Category:                   Applications/app_chanspy
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           1.4.19 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             04-28-2008 05:33 CDT
Last Modified:              04-28-2008 08:07 CDT
====================================================================== 
Summary:                    Chanspy crash when using spygroup
Description: 
Log shows two calls. First call has __SPYGROUP set to 4, second uses
SIP/90220|g(1:2:3:4:32:33:34:35:36:37:38:39:44:45:46:47:48:49:50:53:54:55:56:57:58:61:62:63:64:65:66:68:69:70:71:73:74:75:76:77:78:79:80:82:83)

This always leads to crash.

====================================================================== 

---------------------------------------------------------------------- 
 atis - 04-28-08 08:07  
---------------------------------------------------------------------- 
Seems like there is no length checking of arguments. Applying patch from
http://bugs.digium.com/view.php?id=12497 gives exactly same backtrace on this
amount of arguments, but
changing size of groups and mygroups (after patch) to 255 would work with
this amount of arguments. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
04-28-08 08:07  atis           Note Added: 0086086                          
======================================================================