[asterisk-bugs] [Asterisk 0018328]: Segfault in handle_response_invite - chan_sip

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18328 
====================================================================== 
Reported By:                mpiazzatnetbug
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18328
Category:                   Channels/chan_sip/General
Reproducibility:            unable to reproduce
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           Older 1.4 - please test a newer version 
JIRA:                       SWP-2627 
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-11-17 16:52 CST
Last Modified:              2010-12-29 03:22 CST
====================================================================== 
Summary:                    Segfault in handle_response_invite - chan_sip
Description: 
In one of my asterisk server running 1.4.26.3 I had a crash.
As attachment you will find the gdb output of the core file.

Program terminated with signal 11, Segmentation fault.
https://issues.asterisk.org/view.php?id=0  0x00002aaaabd86ffe in
handle_response_invite (p=0x2aaab127e960,
resp=200, rest=0x40459ff4 "Ok", req=0x40459bc0, seqno=103) at
chan_sip.c:12691
12691	
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0018327 Segfault in sip_get_codec -  chan_sip
====================================================================== 

---------------------------------------------------------------------- 
 (0130025) mpiazzatnetbug (reporter) - 2010-12-29 03:22
 https://issues.asterisk.org/view.php?id=18328#c130025 
---------------------------------------------------------------------- 
Hi, 

These are the code line involved in the segfault

12659 if (bridgepeer->tech == &sip_tech || bridgepeer->tech ==
&sip_tech_info) {
12690 	bridgepvt = (struct sip_pvt*)(bridgepeer->tech_pvt);
12691 	if (bridgepvt->udptl) { 

from the debug we can see:
bridgepvt = (struct sip_pvt *) 0x0
bridgepeer = (struct ast_channel *) 0xa214d0

I not undestand where is the starting point of the issue. I checked the
code of 1.4.39-rc1 but for what I can see there is no difference in the
code, at least for two/three step before this function into the code. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-12-29 03:22 mpiazzatnetbug Note Added: 0130025                          
======================================================================