[asterisk-bugs] [Asterisk 0014118]: Asterisk crashes when calling more than a single location

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=14118 
====================================================================== 
Reported By:                blitzrage
Assigned To:                putnopvut
====================================================================== 
Project:                    Asterisk
Issue ID:                   14118
Category:                   Applications/app_dial
Reproducibility:            always
Severity:                   crash
Priority:                   high
Status:                     ready for review
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases): 1.6.1 
SVN Revision (number only!): 165955 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-12-19 14:36 CST
Last Modified:              2008-12-22 10:07 CST
====================================================================== 
Summary:                    Asterisk crashes when calling more than a single
location
Description: 
By doing something like the following, Asterisk crashes for me:

Dial(SIP/leifmadsen_desk&SIP/leifmadsen_laptop&SIP/leifmadsen_cell,30,o)
====================================================================== 

---------------------------------------------------------------------- 
 (0096790) svnbot (reporter) - 2008-12-22 10:07
 http://bugs.digium.com/view.php?id=14118#c96790 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 166267

U   trunk/funcs/func_timeout.c
U   trunk/main/file.c

------------------------------------------------------------------------
r166267 | mmichelson | 2008-12-22 10:07:55 -0600 (Mon, 22 Dec 2008) | 17
lines

Fix a file playback crash and explicitly initialize values in
func_timeout.c

A crash was brought up on the bugtracker. The first run through valgrind
was full of legitimate complaints of uninitialized values in func_timeout
when
setting a response timeout. These were fixed but the crash persisted.

A second run through showed the real problem. The reference counting used
for filestreams was incorrect because there were some missing increments
when a frame was read from a format module.

(closes issue http://bugs.digium.com/view.php?id=14118)
Reported by: blitzrage
Patches:
      14118v2.patch uploaded by putnopvut (license 60)
Tested by: blitzrage


------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=166267 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-12-22 10:07 svnbot         Checkin                                      
2008-12-22 10:07 svnbot         Note Added: 0096790                          
======================================================================