[asterisk-bugs] [Asterisk 0015984]: QUEUE_MEMBER and QUEUE_MEMBER_COUNT tries to destroy queue, leading to segmentation fault

[Asterisk Bug Tracker]

The following issue has been SUBMITTED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15984 
====================================================================== 
Reported By:                atis
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   15984
Category:                   Applications/app_queue
Reproducibility:            have not tried
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           SVN 
JIRA:                        
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): 1.6.1 
SVN Revision (number only!): 220631 
Request Review:              
====================================================================== 
Date Submitted:             2009-09-29 10:12 CDT
Last Modified:              2009-09-29 10:12 CDT
====================================================================== 
Summary:                    QUEUE_MEMBER and QUEUE_MEMBER_COUNT tries to destroy
queue, leading to segmentation fault
Description: 
Loops for queue_function_qac and queue_function_qac_dep are identical, so
both those functions should be affected.

Backtrace shows that queue_unref is calling destroy_queue, which however
calls queue_unref again, thus leading to recursion, limited by queue member
count.

Backtrace attached
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-09-29 10:12 atis           New Issue                                    
2009-09-29 10:12 atis           Asterisk Version          => SVN             
2009-09-29 10:12 atis           Regression                => No              
2009-09-29 10:12 atis           SVN Branch (only for SVN checkouts, not tarball
releases) => 1.6.1           
2009-09-29 10:12 atis           SVN Revision (number only!) => 220631          
======================================================================