[asterisk-bugs] [Asterisk 0015041]: Crash on attended transfer

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15041 
====================================================================== 
Reported By:                maxnuv
Assigned To:                russell
====================================================================== 
Project:                    Asterisk
Issue ID:                   15041
Category:                   Addons/format_mp3
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     closed
Asterisk Version:           1.4.24 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
Resolution:                 fixed
Fixed in Version:           
====================================================================== 
Date Submitted:             2009-05-06 04:47 CDT
Last Modified:              2009-09-01 15:40 CDT
====================================================================== 
Summary:                    Crash on attended transfer
Description: 
Call incoming, first transfer (all ok), second transfer: call, the called
respond, the trasferer hangup, SEGFAULT (before playng beep).

Two backtrace available, one old and one new.

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0015109 [patch] Abort by memory allocator, poss...
====================================================================== 

---------------------------------------------------------------------- 
 (0109920) svnbot (reporter) - 2009-09-01 15:40
 https://issues.asterisk.org/view.php?id=15041#c109920 
---------------------------------------------------------------------- 
Repository: asterisk-addons
Revision: 1024

U   branches/1.6.0/formats/format_mp3.c

------------------------------------------------------------------------
r1024 | russell | 2009-09-01 15:40:16 -0500 (Tue, 01 Sep 2009) | 45 lines

Fix memory corruption caused by format_mp3.

format_mp3 claimed that it provided AST_FRIENDLY_OFFSET in frames returned
by
read().  However, it lied.  This means that other parts of the code that
attempted to make use of the offset buffer would end up corrupting the
fields
in the ast_filestream structure.  This resulted in quite a few crashes due
to
unexpected values for fields in ast_filestream.

This patch closes out quite a few bugs.  However, some of these bugs have
been
open for a while and have been an area where more than one bug has been
discussed.  So with that said, anyone that is following one of the issues
closed here, if you still have a problem, please open a new bug report for
the
specific problem you are still having.  If you do, please ensure that the
bug
report is based on the newest version of Asterisk, and that this patch is
applied if format_mp3 is in use.  Thanks!

(closes issue https://issues.asterisk.org/view.php?id=15109)
Reported by: jvandal
Tested by: aragon, russell, zerohalo, marhbere, rgj

(closes issue https://issues.asterisk.org/view.php?id=14958)
Reported by: aragon

(closes issue https://issues.asterisk.org/view.php?id=15123)
Reported by: axisinternet

(closes issue https://issues.asterisk.org/view.php?id=15041)
Reported by: maxnuv

(closes issue https://issues.asterisk.org/view.php?id=15396)
Reported by: aragon

(closes issue https://issues.asterisk.org/view.php?id=15195)
Reported by: amorsen
Tested by: amorsen

(closes issue https://issues.asterisk.org/view.php?id=15781)
Reported by: jensvb

(closes issue https://issues.asterisk.org/view.php?id=15735)
Reported by: thom4fun

(closes issue https://issues.asterisk.org/view.php?id=15460)
Reported by: marhbere

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk-addons?view=rev&revision=1024 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-09-01 15:40 svnbot         Checkin                                      
2009-09-01 15:40 svnbot         Note Added: 0109920                          
======================================================================