[asterisk-bugs] [Asterisk 0017227]: [patch] Segmentation fault with unanswered inbound call via chan_ooh323

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=17227 
====================================================================== 
Reported By:                jin
Assigned To:                may213
====================================================================== 
Project:                    Asterisk
Issue ID:                   17227
Category:                   Addons/chan_ooh323
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           Addons-1.6.2.1 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-04-21 16:39 CDT
Last Modified:              2010-06-07 15:12 CDT
====================================================================== 
Summary:                    [patch] Segmentation fault with unanswered inbound
call via chan_ooh323
Description: 
If i configure a sip phone to hangup a call after 30 seconds of ring time
from a inbound call, the chan_ooh323 module crash and asterisk segfault...
tested using grandstream gxw-4024 gateway and linksys spa921 phone.

attached 4 logs:

the phone is configured to hangup after 60 seconds:
1-ooh323-normal-hangup.txt
2-asterisk-normal-hangup.txt

the phone is configured to hangup after 30 seconds:
3-ooh323-crash-hangup.txt
4-asterisk-crash-hangup.txt

asterisk seem to crash only when the cause of hangup is:
22:01:35:395  Cleaning Call (incoming, ooh323c_2)-
reason:OO_REASON_LOCAL_CONGESTED

if the cause of hangup is the following, asterisk doesn't crash:
21:57:45:129  Cleaning Call (incoming, ooh323c_1)-
reason:OO_REASON_REMOTE_CLEARED

so, if the phone doesn't hangup the call before 60 seconds of ring time,
asterisk doesn't crash.

actual work around: configure all phones to hangup after 60 secs of rings

outgoing calls doesn't have any problems.

====================================================================== 

---------------------------------------------------------------------- 
 (0123082) svnbot (reporter) - 2010-06-07 15:12
 https://issues.asterisk.org/view.php?id=17227#c123082 
---------------------------------------------------------------------- 
Repository: asterisk-addons
Revision: 1115

U   branches/1.6.0/channels/chan_ooh323.c

------------------------------------------------------------------------
r1115 | may | 2010-06-07 15:12:53 -0500 (Mon, 07 Jun 2010) | 13 lines

don't read rtp data from channel without private structure

In some cases asterisk channel can exist but on protocol stack side
channel can
be closed and we must return null frame in reading data functions
instead of reading data from destroyed channel

(issue https://issues.asterisk.org/view.php?id=17227)
Reported by: jin
Patches:
      bug17227.patch uploaded by may213 (license 454)
Tested by: jin


------------------------------------------------------------------------

http://svn.digium.com/view/asterisk-addons?view=rev&revision=1115 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-06-07 15:12 svnbot         Checkin                                      
2010-06-07 15:12 svnbot         Note Added: 0123082                          
======================================================================