[asterisk-bugs] [Asterisk 0013854]: Crash after attended transfer and call park

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13854 
====================================================================== 
Reported By:                Adam Lee
Assigned To:                otherwiseguy
====================================================================== 
Project:                    Asterisk
Issue ID:                   13854
Category:                   Channels/chan_sip/Transfers
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     assigned
Asterisk Version:           1.4.22 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-11-06 22:32 CST
Last Modified:              2008-12-02 17:04 CST
====================================================================== 
Summary:                    Crash after attended transfer and call park
Description: 
Hi all,

I found a crash case after attend transfer and call-park usages.

Here is my scenario:
Phone 1: 1001
Phone 2: 1002
Phone 3: 1003

Step 1: 1001 calls 1002, and 1002 answers the call.
Step 2: 1001 makes an attended transfer to 1003, and 1003 answers the
call.
Step 3: 1001 hangups the call with 1003, and then 1002 communicates with
1003.
Step 4: 1002 makes a call-park to Asterisk. After Asterisk repeats the
parking lot numbers to 1002, Asterisk disconnects the call with 1003
strangely.
Step 5: 1001 calls 1002 once again, and Asterisk crashes.

I verified the case on 1.4.22 and 1.4.20, and the crash situation happened
on both versions. I doubt that Asterisk did not handle transferee well, and
if transferee wants to do call transfer or call park, it would fail.
====================================================================== 

---------------------------------------------------------------------- 
 (0095693) svnbot (reporter) - 2008-12-02 17:04
 http://bugs.digium.com/view.php?id=13854#c95693 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 160390

U   branches/1.4/res/res_features.c

------------------------------------------------------------------------
r160390 | twilson | 2008-12-02 17:04:18 -0600 (Tue, 02 Dec 2008) | 6 lines

A situation like A calls B, A builtin_atxfers B to C, C parks B would lead
to a crash.  Thanks to file for telling me how to fix it!

(closes issue http://bugs.digium.com/view.php?id=13854)
Reported by: Adam Lee
Tested by: otherwiseguy

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=160390 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-12-02 17:04 svnbot         Checkin                                      
2008-12-02 17:04 svnbot         Note Added: 0095693                          
======================================================================