[asterisk-bugs] [Asterisk 0012273]: Receiving RTP PDUs crashes Asterisk core

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=12273 
====================================================================== 
Reported By:                qq12345
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   12273
Category:                   Core-General
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases):  trunk 
SVN Revision (number only!): 110540 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             03-21-2008 11:24 CDT
Last Modified:              03-21-2008 15:25 CDT
====================================================================== 
Summary:                    Receiving RTP PDUs crashes Asterisk core
Description: 
I use app_rtsp from fontventa to reproduce this issue.

Since mid of december asterisk crashes regularly when receiving a video
stream.
Crash is independent of the channel: chan_sip, chan_local, chan_misdn
crashing all the core.

It is an issue of asterisk, because the place of the crash changed this
week after the release of the RTP/RTSP security fixes.

Additional hint is the completely different malloc'ed adress in the
crash.

The content of the stream (mpeg-4 video, h263 video, and/or ulaw, AMR) are
out of scope. The crash is always.

After the notification "*** glibc detected *** asterisk: malloc(): memory
corruption: 0x082e8300 ***" the application behaves like dead.

mISDN 1.2 or mISDN 1.1.7 are out of scope.


====================================================================== 

---------------------------------------------------------------------- 
 file - 03-21-08 15:25  
---------------------------------------------------------------------- 
Correct. This has to be reproduced without using app_rtsp.

The memory detection stuff can be disabled by typing export
MALLOC_CHECK_=0 before starting Asterisk. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
03-21-08 15:25  file           Note Added: 0084415                          
======================================================================