[asterisk-bugs] [Asterisk 0016475]: Option C in Queue() app crashes Asterisk

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=16475 
====================================================================== 
Reported By:                okrief
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   16475
Category:                   Applications/app_queue
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           1.6.2.0 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-12-20 10:59 CST
Last Modified:              2009-12-20 14:25 CST
====================================================================== 
Summary:                    Option C in Queue() app crashes Asterisk
Description: 
In extension.ael, this line works OK :
    Queue(techsupport);
Adding option C crashes Asterisk as soon queue member is answering the
call :
    Queue(techsupport,C);
SIP debug traces are included in additional information section.
In this section SIP/462 in the queue member answering the call and SIP/461
is the caller.
I'm not sure the SIP hardphones I used for this test support SIP "Answered
Elsewhere" option (I think they do support it but I didn't configure it)
but this shouldn't crash Asterisk.


====================================================================== 

---------------------------------------------------------------------- 
 (0115481) junky (manager) - 2009-12-20 14:25
 https://issues.asterisk.org/view.php?id=16475#c115481 
---------------------------------------------------------------------- 
ive been able to reproduce this bug (see attachment)
I've no clue what is the option C, can someone give me more details?

But i've been able to see that we are calling ast_bridge_call() with an
invalid *peer, this is because we are calling hangupcalls() and we hangup
the channel.

Really not sure about this fix, but it prevent segfault. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-12-20 14:25 junky          Note Added: 0115481                          
======================================================================