[asterisk-bugs] [Asterisk 0015215]: Crash in INVITE with replaces

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15215 
====================================================================== 
Reported By:                loris
Assigned To:                file
====================================================================== 
Project:                    Asterisk
Issue ID:                   15215
Category:                   Channels/chan_sip/General
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     assigned
Asterisk Version:           1.4.25 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-05-28 12:47 CDT
Last Modified:              2009-05-28 13:01 CDT
====================================================================== 
Summary:                    Crash in INVITE with replaces
Description: 
Hi, we are using sip style call pickup with snom phones, and we' ve tried
with the patches that are floating around (like the one in issue 5014) with
good results.

However in one setup, the call pickup produces a segfault in asterisk
almost 75% of the times. We have reproduced the issue with asterisk 1.4.22,
1.4.23, 1.4.24, 1.4.25-rc1 and with three different patches for
implementing call pickup with snom phones.

I have the suspicion that in this setup the sip t1 timer of the phones is
too low, the phone retransmits the "INVITE with replaces", and the
retransmission causes the crash. I'll try to test with a bigger T1 timer to
see if the problems goes away. Yet that won't be an ideal solution because
a slow link between the phone and asterisk or temporary congestion in the
server could still require a retransmit from the phone and could trigger
the crash.

Attached you'll find a backtrace, asterisk log with debug enabled, and the
patches we've used in our tests.
====================================================================== 

---------------------------------------------------------------------- 
 (0105669) loris (reporter) - 2009-05-28 13:01
 https://issues.asterisk.org/view.php?id=15215#c105669 
---------------------------------------------------------------------- 
Ok i couldn't upload the patches because I didn't write them.

FYI, the asterisk used to reproduce the issue has only the patch
referenced in issue 5014 applied:

https://issues.asterisk.org/file_download.php?file_id=20223&type=bug 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-05-28 13:01 loris          Note Added: 0105669                          
======================================================================