[asterisk-bugs] [Asterisk 0012273]: Receiving RTP PDUs crashes Asterisk core

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=12273 
====================================================================== 
Reported By:                qq12345
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   12273
Category:                   Core-General
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases):  trunk 
SVN Revision (number only!): 110540 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             03-21-2008 11:24 CDT
Last Modified:              03-21-2008 15:13 CDT
====================================================================== 
Summary:                    Receiving RTP PDUs crashes Asterisk core
Description: 
I use app_rtsp from fontventa to reproduce this issue.

Since mid of december asterisk crashes regularly when receiving a video
stream.
Crash is independent of the channel: chan_sip, chan_local, chan_misdn
crashing all the core.

It is an issue of asterisk, because the place of the crash changed this
week after the release of the RTP/RTSP security fixes.

Additional hint is the completely different malloc'ed adress in the
crash.

The content of the stream (mpeg-4 video, h263 video, and/or ulaw, AMR) are
out of scope. The crash is always.

After the notification "*** glibc detected *** asterisk: malloc(): memory
corruption: 0x082e8300 ***" the application behaves like dead.

mISDN 1.2 or mISDN 1.1.7 are out of scope.


====================================================================== 

---------------------------------------------------------------------- 
 qq12345 - 03-21-08 15:13  
---------------------------------------------------------------------- 
Hi Experts,
may I stupid Developer kindly ask, what do you mean with in-tree modules?
Modules in the svn/asterisk branch only?

May I ask You, how can I force turning the message:
"*** glibc detected *** asterisk: malloc(): memory corruption: 0x082e8300
***"
into a core dump?

Currently the message looks for me, that GCC's internal stack and heap
checks throw this message. Can I enforce GCC to dump a core instead of
proceeding?

Thanks for any response,
Michael 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
03-21-08 15:13  qq12345        Note Added: 0084414                          
======================================================================