[asterisk-bugs] [Asterisk 0017636]: Manager GetVar on unset variable causes segfault

[Asterisk Bug Tracker]

The following issue has been SUBMITTED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=17636 
====================================================================== 
Reported By:                bklang
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   17636
Category:                   Core/ManagerInterface
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           SVN 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): 1.6.2 
SVN Revision (number only!): 275996 
Request Review:              
====================================================================== 
Date Submitted:             2010-07-13 13:02 CDT
Last Modified:              2010-07-13 13:02 CDT
====================================================================== 
Summary:                    Manager GetVar on unset variable causes segfault
Description: 
This appears to be the same type of bug as reported by me previously.

GetVar on a channel variable that is not set causes a vsnprintf() with a
null argument in a string field.  On OpenSolaris, this causes a segfault.

(gdb) bt
https://issues.asterisk.org/view.php?id=0  0xce8a47a0 in countbytes () from
/usr/lib/libc.so.1
https://issues.asterisk.org/view.php?id=1  0xce8f0793 in _ndoprnt () from
/usr/lib/libc.so.1
https://issues.asterisk.org/view.php?id=2  0xce8f31bd in vsnprintf () from
/usr/lib/libc.so.1
https://issues.asterisk.org/view.php?id=3  0x0813639d in __ast_str_helper
(buf=0xca74d13c, max_len=0, append=0, 
    fmt=0x817897c "Variable: %s\r\nValue: %s\r\n\r\n", ap=0xca74d15c
"Z####)
    at strings.c:72
https://issues.asterisk.org/view.php?id=4  0x080eab0c in astman_append
(s=0xca74df64, 
    fmt=0x817897c "Variable: %s\r\nValue: %s\r\n\r\n") at strings.h:767
https://issues.asterisk.org/view.php?id=5  0x080ed302 in action_getvar
(s=0xca74df64, m=0xca74dd24) at
manager.c:1925
https://issues.asterisk.org/view.php?id=6  0x080f0be6 in process_message
(s=0xca74df64, m=0xca74dd24)
    at manager.c:3069
https://issues.asterisk.org/view.php?id=7  0x080f11c4 in do_message
(s=0xca74df64) at manager.c:3189
https://issues.asterisk.org/view.php?id=8  0x080f13fc in session_do
(data=0x88544c8) at manager.c:3261
https://issues.asterisk.org/view.php?id=9  0x08141535 in dummy_start (data=0x0)
at utils.c:968
https://issues.asterisk.org/view.php?id=10 0xce92cd66 in _thrp_setup () from
/usr/lib/libc.so.1
https://issues.asterisk.org/view.php?id=11 0xce92cff0 in __csigsetjmp () from
/usr/lib/libc.so.1
https://issues.asterisk.org/view.php?id=12 0x00000000 in ?? ()
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-07-13 13:02 bklang         New Issue                                    
2010-07-13 13:02 bklang         Asterisk Version          => SVN             
2010-07-13 13:02 bklang         Regression                => No              
2010-07-13 13:02 bklang         SVN Branch (only for SVN checkouts, not tarball
releases) => 1.6.2           
2010-07-13 13:02 bklang         SVN Revision (number only!) => 275996          
======================================================================