[asterisk-bugs] [Asterisk 0013800]: crash after transfer

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13800 
====================================================================== 
Reported By:                dwagner
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   13800
Category:                   Channels/chan_sip/Transfers
Reproducibility:            sometimes
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           1.4.22 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-10-29 12:52 CDT
Last Modified:              2008-12-03 04:01 CST
====================================================================== 
Summary:                    crash after transfer
Description: 
sometimes asterisk crashes after a transfer

side info:
it should be mentioned that i use this snom pickup patch:
http://ipefon.at/downloads/1.4/asterisk-1.4.21-pickup-by-call-id.patch
may you can tell me if this patch can produce this error.
is there an official pickup solution for snom / asterisk?
the *8 feature is nice but it does not show the caller-number.

thanx
====================================================================== 

---------------------------------------------------------------------- 
 (0095710) tweety (reporter) - 2008-12-03 04:01
 http://bugs.digium.com/view.php?id=13800#c95710 
---------------------------------------------------------------------- 
Without the patch, some Asterisk installations crashed
http://bugs.digium.com/view.php?id=5#c1 Week (doing call
pickups). With applied patch, the uptime of these installations are now > 1
month.

If you'd take a look at the code, you see, there's a check, if
"p->refer->refer_call->owner" is valid. But there's no check before calling
 ast_channel_unlock(p->refer->refer_call->owner)! 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-12-03 04:01 tweety         Note Added: 0095710                          
======================================================================