[asterisk-bugs] [Asterisk 0013047]: new added function queue_transfer_fixup crashes asterisk

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13047 
====================================================================== 
Reported By:                festr
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   13047
Category:                   Applications/app_queue
Reproducibility:            have not tried
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases):  1.4  
SVN Revision (number only!): 129502 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             07-10-2008 07:17 CDT
Last Modified:              07-15-2008 08:40 CDT
====================================================================== 
Summary:                    new added function queue_transfer_fixup crashes
asterisk
Description: 
i've not enough time to try to reproduce it but on one productino system
after upgrade to 1.4.21 asterisk crashed several times per day. (they use
queues and agents with local channels) See attached backtrace bt.txt
====================================================================== 

---------------------------------------------------------------------- 
 festr - 07-15-08 08:40  
---------------------------------------------------------------------- 
I'm able to reproduce it now on clean asterisk version

asterisk  -rx'show version': Asterisk SVN-branch-1.4-r130889 built by root
@ virtual1 on a i686 running Linux on 2008-07-15 11:07:36 UTC

Scenario how to reproduce:

three SIP phones (A,B,C)
queue with member Local/510 at mytest where [mytest] exten =>
510,1,Dial(SIP/B,,tT)

call from SIP to app_queue -> Local/510 at mytest -> SIP(A). answer(A) -> do
SIP bling transfer (or builtin transfer #) to SIP/B and answer B, next do
built-in attendand transfer *2 on SIP/B to SIP/C and hangup SIP/B before
SIP/C answer -> Core dump. See bt2.txt (in the backtrace SIP/a217 equels to
SIP/A, SIP/test eq. to SIP/B and SIP/a217 eq. to SIP/C

I'm not able to reproduce it when using only blind transfers or only
attendand trasfers. It crashes everytime when I do blind trasnfer from
queue to another phone and from here do attendand transfer to another phone
(but you have to hangup during attendand (ringing) before the other end
answer). 

I've also reduce dialplan to minimal. Using only two applications, Queue
and Dial. 

Hope, that this help. I'll keep this virtual box for testing. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
07-15-08 08:40  festr          Note Added: 0090281                          
======================================================================