[asterisk-bugs] [Asterisk 0011878]: segfault, ast_slinfactory_read(), connected with DTMF sending?

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=11878 
====================================================================== 
Reported By:                stuarth
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   11878
Category:                   Core-General
Reproducibility:            random
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases):  1.4  
SVN Revision (number only!): 100973 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             01-30-2008 05:17 CST
Last Modified:              01-30-2008 05:22 CST
====================================================================== 
Summary:                    segfault, ast_slinfactory_read(), connected with
DTMF sending?
Description: 
segfault with the included debug log, apparently connected with DTMF
sending.  looks like it's trying to memcpy out of bounds.

140         frame_data, remain * sizeof(*offset));
(gdb) print remain
$2 = 4294967256

I'll attach a thread apply all bt full.
====================================================================== 

---------------------------------------------------------------------- 
 stuarth - 01-30-08 05:22  
---------------------------------------------------------------------- 
the "140 frame_data, remain * sizeof(*offset));" was garbled by mantis;
should have looked like this (s/_/greaterthan/)

140     memcpy(sf-_hold, frame_data, remain * sizeof(*offset)); 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
01-30-08 05:22  stuarth        Note Added: 0081398                          
======================================================================