[asterisk-bugs] [Asterisk 0016242]: Comfort noise frame with f->data NULL but f->datalen 160

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=16242 
====================================================================== 
Reported By:                amorsen
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   16242
Category:                   Channels/General
Reproducibility:            unable to reproduce
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           Older 1.6.0 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-11-13 09:46 CST
Last Modified:              2009-11-14 08:15 CST
====================================================================== 
Summary:                    Comfort noise frame with f->data NULL but f->datalen
160
Description: 
Asterisk crashed, and the last message was:
[Nov 13 11:19:11] NOTICE[31951] rtp.c: Comfort noise support incomplete in
Asterisk (RFC 3389). Please turn off on client if possible. Client IP:
10.6.11.241

====================================================================== 

---------------------------------------------------------------------- 
 (0113826) amorsen (reporter) - 2009-11-14 08:15
 https://issues.asterisk.org/view.php?id=16242#c113826 
---------------------------------------------------------------------- 
It happened again, and I had a tcpdump running. Here's what tethereal
says:

Frame 14 (215 bytes on wire, 215 bytes captured)
    Arrival Time: Nov 14, 2009 14:35:49.524087000
    [Time delta from previous captured frame: 0.061153000 seconds]
    [Time delta from previous displayed frame: 53.283817000 seconds]
    [Time since reference or first frame: 53.283817000 seconds]
    Frame Number: 14
    Frame Length: 215 bytes
    Capture Length: 215 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:rtp]
Ethernet II, Src: HewlettP_28:02:85 (00:1e:0b:28:02:85), Dst:
HewlettP_a9:a9:84 (00:24:81:a9:a9:84)
    Destination: HewlettP_a9:a9:84 (00:24:81:a9:a9:84)
        Address: HewlettP_a9:a9:84 (00:24:81:a9:a9:84)
        .... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address
(factory default)
    Source: HewlettP_28:02:85 (00:1e:0b:28:02:85)
        Address: HewlettP_28:02:85 (00:1e:0b:28:02:85)
        .... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address
(factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.6.11.247 (10.6.11.247), Dst: 10.10.42.132
(10.10.42.132)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xb8 (DSCP 0x2e: Expedited Forwarding;
ECN: 0x00)
        1011 10.. = Differentiated Services Codepoint: Expedited
Forwarding (0x2e)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 201
    Identification: 0x5f7f (24447)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 66
    Protocol: UDP (0x11)
    Header checksum: 0xcd62 [correct]
        [Good: True]
        [Bad : False]
    Source: 10.6.11.247 (10.6.11.247)
    Destination: 10.10.42.132 (10.10.42.132)
User Datagram Protocol, Src Port: 49152 (49152), Dst Port: 14876 (14876)
    Source port: 49152 (49152)
    Destination port: 14876 (14876)
    Length: 181
    Checksum: 0x79ee [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Real-Time Transport Protocol
    [Stream setup by SDP (frame 12)]
        [Setup frame: 12]
        [Setup Method: SDP]
    10.. .... = Version: RFC 1889 Version (2)
    ..0. .... = Padding: False
    ...0 .... = Extension: False
    .... 0000 = Contributing source identifiers count: 0
    0... .... = Marker: False
    Payload type: Comfort noise (13)
    Sequence number: 22521
    [Extended sequence number: 88057]
    Timestamp: 1801621036
    Synchronization Source identifier: 0x5bac0eac (1538002604)
    Payload: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF... 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-11-14 08:15 amorsen        Note Added: 0113826                          
======================================================================