[asterisk-bugs] [Asterisk 0014157]: Asterisk revision 166901 segfault during park using Aastra SPRE function to park extension

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=14157 
====================================================================== 
Reported By:                aragon
Assigned To:                murf
====================================================================== 
Project:                    Asterisk
Issue ID:                   14157
Category:                   Features/Parking
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     acknowledged
Asterisk Version:           1.4.23-rc3 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!): 166901 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-12-31 16:32 CST
Last Modified:              2009-01-09 14:34 CST
====================================================================== 
Summary:                    Asterisk revision 166901 segfault during park using
Aastra SPRE function to park extension
Description: 
features.conf
parkext=700

Aastra programmable key configured as spre:700

Aastra phone answers incoming call from another SIP extension.
Aastra user presses PFK to send caller to park orbit.
Aastra phone automatically grabs line 2 key puts line 1 on hold and plays
back park extension 701 on line 2.
Asterisk segfaults
Line 1 remains on hold and blinking on Aastra phone for a short time.




Asterisk segfaults


====================================================================== 

---------------------------------------------------------------------- 
 (0097368) murf (administrator) - 2009-01-09 14:34
 http://bugs.digium.com/view.php?id=14157#c97368 
---------------------------------------------------------------------- 
I've attached a small patch to see what 'f' (a frame ptr) is set to...
please download it (14157.experiment), use it to patch your asterisk
source,
make, make install, and see what console messages you get. 

In general, it looks very much like the channel has already been freed.
Trying to free it a second time seems to prove fatal.

What kind of Aastra phone do you have? I have a 53i... I don't remember
that feature, but it's been a long time since I played with it.

One more thing; If you could do a "sip debug" or better yet, a wireshark
type capture of the traffic between asterisk and the phone up to the point
of the crash, that would be most invaluable. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-01-09 14:34 murf           Note Added: 0097368                          
======================================================================