[asterisk-bugs] [Asterisk 0016361]: Asterisk crashes after receiving fax with 'double free'

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=16361 
====================================================================== 
Reported By:                vlad
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   16361
Category:                   Applications/app_fax
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     assigned
Asterisk Version:           1.6.1.11 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-12-01 06:48 CST
Last Modified:              2009-12-28 08:12 CST
====================================================================== 
Summary:                    Asterisk crashes after receiving fax with 'double
free'
Description: 
Version 1.6.1.9 works OK.
Versions 1.6.1.10 and .11 both crashes after receiving fax

Linux 2.6.31.6-134.fc12.i686.PAE https://issues.asterisk.org/view.php?id=1 SMP
Mon Nov 16 20:53:21 EST 2009 i686
i686 i386 GNU/Linux
spandsp-0.0.6-0.1.pre12.fc12.i686

====================================================================== 

---------------------------------------------------------------------- 
 (0115778) avalon73 (reporter) - 2009-12-28 08:12
 https://issues.asterisk.org/view.php?id=16361#c115778 
---------------------------------------------------------------------- 
I'm seeing the same crash at the same time, with the same backtrace, but
only in 1.6.1.12... not in any earlier versions.  Also, it doesn't appear
to happen if T.38 is used.  If I disable T.38 on the ATA, I get a message
from the ReceiveFAX app that negotiation for that protocol was refused, and
then the crash as the call is cleaned up.  If I enable T.38, then the fax
goes through and Asterisk continues to run. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-12-28 08:12 avalon73       Note Added: 0115778                          
======================================================================