[asterisk-bugs] [Asterisk 0016430]: Asterisk crashes on dtmf detection on channel with 2 bluetooth cellphone

[Asterisk Bug Tracker]

The following issue has been SUBMITTED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=16430 
====================================================================== 
Reported By:                azbest
Assigned To:                mnicholson
====================================================================== 
Project:                    Asterisk
Issue ID:                   16430
Category:                   Addons/chan_mobile
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     assigned
Asterisk Version:           SVN 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): 1.6.2 
SVN Revision (number only!): 1074 
Request Review:              
====================================================================== 
Date Submitted:             2009-12-11 08:04 CST
Last Modified:              2009-12-11 08:04 CST
====================================================================== 
Summary:                    Asterisk crashes on dtmf detection on channel with 2
bluetooth cellphone
Description: 
When 2 cellular phones connected to a channel dtmf signals will make
asterisk to crash: double free.

sip->gsm and gsm->sip connection works fine, but gsm->gsm connection is
problematic.

Removing these lines from chan_mobile.c will prevent crashing, but dtmf
detection is tured off:
4014 	ast_dsp_set_features(pvt->dsp, DSP_FEATURE_DIGIT_DETECT);
4015 	ast_dsp_set_digitmode(pvt->dsp, DSP_DIGITMODE_DTMF |
DSP_DIGITMODE_RELAXDTMF); 

_My guess_ is that asterisk dsp detects the same dtmf signal on input and
output side too and uses the same memory area to store informations about
that. Finally it tries to free this memory area twice. 
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-12-11 08:04 azbest         New Issue                                    
2009-12-11 08:04 azbest         Status                   new => assigned     
2009-12-11 08:04 azbest         Assigned To               => mnicholson      
2009-12-11 08:04 azbest         Asterisk Version          => SVN             
2009-12-11 08:04 azbest         Regression                => No              
2009-12-11 08:04 azbest         SVN Branch (only for SVN checkouts, not tarball
releases) => 1.6.2           
2009-12-11 08:04 azbest         SVN Revision (number only!) => 1074            
======================================================================