[asterisk-bugs] [Asterisk 0017743]: [patch] Asterisk 1.8 beta2 crash with configured MGCP/NCS when option wcardep = aaln/* is used

[Asterisk Bug Tracker]

The following issue has been ASSIGNED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=17743 
====================================================================== 
Reported By:                tgruenberg
Assigned To:                tilghman
====================================================================== 
Project:                    Asterisk
Issue ID:                   17743
Category:                   Channels/chan_mgcp
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     assigned
Asterisk Version:           1.8.0-beta2 
JIRA:                       SWP-1977 
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-07-29 02:03 CDT
Last Modified:              2010-08-04 09:04 CDT
====================================================================== 
Summary:                    [patch] Asterisk 1.8 beta2 crash with configured
MGCP/NCS when option wcardep = aaln/* is used
Description: 
If I use the option "wcardep = aaln/*" in mgcp.conf asterisk will crash
with an fragmentation error. This is reproduceable if there is an active
MGCP endpoint which needs aaln/*, like a cable modem with eMTA
PacketCable1.5 from Kathrein (DCV300).

In the moment the MGCP channel driver audits the endpoint hook state the
fragmentation error occures.

This issue is reproduceable on startup or on reloading mgcp channel
driver, but only if there is an endpoint reachable. If there is no endpoint
reachable asterisk does not crash.
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
has duplicate       0017775 [patch] chan_mgcp  crash Adtran 624  as...
====================================================================== 

---------------------------------------------------------------------- 
 (0125524) svnbot (reporter) - 2010-08-04 09:04
 https://issues.asterisk.org/view.php?id=17743#c125524 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 280879

U   branches/1.8/channels/chan_mgcp.c

------------------------------------------------------------------------
r280879 | tilghman | 2010-08-04 09:04:05 -0500 (Wed, 04 Aug 2010) | 14
lines

Check cur value before attempting a deref.

(closes issue https://issues.asterisk.org/view.php?id=17775)
 Reported by: svinson
 Patches: 
       20100804__issue17775.diff.txt uploaded by tilghman (license 14)
 Tested by: svinson

(closes issue https://issues.asterisk.org/view.php?id=17743)
 Reported by: tgruenberg
 Patches: 
       20100804__issue17775.diff.txt uploaded by tilghman (license 14)
 Tested by: tgruenberg

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=280879 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-08-04 09:04 svnbot         Checkin                                      
2010-08-04 09:04 svnbot         Note Added: 0125524                          
2010-08-04 09:04 svnbot         Status                   ready for testing =>
assigned
2010-08-04 09:04 svnbot         Assigned To               => tilghman        
======================================================================