[asterisk-bugs] [Asterisk 0011878]: segfault, ast_slinfactory_read(), connected with DTMF sending?

[noreply at bugs.digium.com]

The following issue has been ASSIGNED. 
====================================================================== 
http://bugs.digium.com/view.php?id=11878 
====================================================================== 
Reported By:                stuarth
Assigned To:                file
====================================================================== 
Project:                    Asterisk
Issue ID:                   11878
Category:                   Core-General
Reproducibility:            random
Severity:                   crash
Priority:                   normal
Status:                     assigned
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases):  1.4  
SVN Revision (number only!): 100973 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             01-30-2008 05:17 CST
Last Modified:              01-30-2008 08:59 CST
====================================================================== 
Summary:                    segfault, ast_slinfactory_read(), connected with
DTMF sending?
Description: 
segfault with the included debug log, apparently connected with DTMF
sending.  looks like it's trying to memcpy out of bounds.

140         frame_data, remain * sizeof(*offset));
(gdb) print remain
$2 = 4294967256

I'll attach a thread apply all bt full.
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
has duplicate       0011876 Crash. Can't get more info
====================================================================== 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
01-30-08 08:59  file           Status                   new => assigned     
01-30-08 08:59  file           Assigned To               => file            
======================================================================