[asterisk-bugs] [Asterisk 0014619]: Asterisk crashes when Dial() to a sip channel terminates

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=14619 
====================================================================== 
Reported By:                mapelletier
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   14619
Category:                   Applications/app_dial
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           SVN 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): 1.6.0 
SVN Revision (number only!): 180677 
Request Review:              
====================================================================== 
Date Submitted:             2009-03-07 14:24 CST
Last Modified:              2009-03-08 18:42 CDT
====================================================================== 
Summary:                    Asterisk crashes when Dial() to a sip channel
terminates
Description: 
Inside Dial(), when either endpoint hangs up, the application crashes (gdb
backtrace included).  Problem does not occur on calls going through
Queue().
====================================================================== 

---------------------------------------------------------------------- 
 (0101343) mapelletier (reporter) - 2009-03-08 18:42
 http://bugs.digium.com/view.php?id=14619#c101343 
---------------------------------------------------------------------- 
It's actually a little odder than first seems:  at frame
http://bugs.digium.com/view.php?id=1 above, in
features.c

        if (config->end_bridge_callback) {
               
config->end_bridge_callback(config->end_bridge_callback_data);
        }

but config is:

$2 = {features_caller = {flags = 118}, features_callee = {flags = 0},
  start_time = {tv_sec = 1236555591, tv_usec = 462557}, nexteventts = {
    tv_sec = 0, tv_usec = 0}, feature_timer = 0, timelimit = 0,
  play_warning = 0, warning_freq = 0, warning_sound = 0x0, end_sound =
0x0,
  start_sound = 0x0, firstpass = 0, flags = 1,
  end_bridge_callback = 0xb7799240 <end_bridge_callback_data_fixup>,
  end_bridge_callback_data = 0x816916b,
  end_bridge_callback_data_fixup = 0x988a005}

... note how ->end_bridge_callback points to
end_bridge_callback_data_fixup
! 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-03-08 18:42 mapelletier    Note Added: 0101343                          
======================================================================