[asterisk-bugs] [Asterisk 0013700]: [patch] peer outboundproxy-ptr is copied to dialog and then freed

Asterisk Bug Tracker noreply at bugs.digium.com
Wed Oct 15 15:45:17 CDT 2008


A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13700 
====================================================================== 
Reported By:                fnordian
Assigned To:                putnopvut
====================================================================== 
Project:                    Asterisk
Issue ID:                   13700
Category:                   Channels/chan_sip/General
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     ready for testing
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases): 1.6.1 
SVN Revision (number only!): 149483 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-10-15 07:51 CDT
Last Modified:              2008-10-15 15:45 CDT
====================================================================== 
Summary:                    [patch] peer outboundproxy-ptr is copied to dialog
and then freed
Description: 
Hi,
create_addr() refs a peer (by using find_peer), copies the peer's
outboundproxy ptr to the dialog (create_addr_from_peer -> obproxy_get) and
then unrefs the peer.

While freeing the peer, the outboundproxy gets freed too, so as a result
the ptr in the dialog shows to unallocated memory. This results in
outboundproxy configured by peer not working.
====================================================================== 

---------------------------------------------------------------------- 
 (0093761) svnbot (reporter) - 2008-10-15 15:45
 http://bugs.digium.com/view.php?id=13700#c93761 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 149802

U   trunk/channels/chan_sip.c

------------------------------------------------------------------------
r149802 | mmichelson | 2008-10-15 15:45:16 -0500 (Wed, 15 Oct 2008) | 12
lines

Make the sip_proxy struct reference counted. This is
necessary to allow for a sip_pvt to maintain a reference
to a sip_peer's outboundproxy even after the peer has
been freed.

(closes issue http://bugs.digium.com/view.php?id=13700)
Reported by: fnordian
Patches:
      13700.patch uploaded by putnopvut (license 60)
Tested by: fnordian


------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=149802 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-10-15 15:45 svnbot         Checkin                                      
2008-10-15 15:45 svnbot         Note Added: 0093761                          
======================================================================




More information about the asterisk-bugs mailing list