[asterisk-bugs] [Asterisk 0016506]: [patch] Segmentation fault using manager http MXML

[Asterisk Bug Tracker]

The following issue is now READY FOR TESTING. 
====================================================================== 
https://issues.asterisk.org/view.php?id=16506 
====================================================================== 
Reported By:                nik600
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   16506
Category:                   Core/ManagerInterface
Reproducibility:            sometimes
Severity:                   crash
Priority:                   normal
Status:                     ready for testing
Asterisk Version:           Older 1.4 - please test a newer version 
JIRA:                       SWP-1191 
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-12-23 04:00 CST
Last Modified:              2010-06-29 19:28 CDT
====================================================================== 
Summary:                    [patch] Segmentation fault using manager http MXML
Description: 
Dear all, i'm experiencing a problem with the manager http MXML interface.

I'm using Asterisk 1.4.26.2 on a slackware 13.0

On a system that recieves about 1000-1200 calls per day this happens with
a frequency of 1 time per day.

These are the HTTP MXML requests used:

action=login
action=queuestatus
action=QueueAdd
action=QueueRemove
action=SipPeers

I'm trying to reproduce the problem, but at the moment i haven't yet
figured it out.

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0015495 [patch] Asterisk runs over end of buffe...
has duplicate       0017053 Asterisk crash - core dump at manager.c...
has duplicate       0017281 Asterisk segfault xml_translate manager...
====================================================================== 

---------------------------------------------------------------------- 
 (0124061) tilghman (administrator) - 2010-06-29 19:28
 https://issues.asterisk.org/view.php?id=16506#c124061 
---------------------------------------------------------------------- 
This is actually a much simpler problem to solve.  It's an off-by-one
error.  The problem only occurs when the file size is exactly a multiple of
the page size, which on most modern architectures is 4096.  In all of the
backtraces here, it occurred when the file size was exactly 4096 or 8192
(in frame https://issues.asterisk.org/view.php?id=1, the value of l, and in
frame https://issues.asterisk.org/view.php?id=0, the value of x). 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-06-29 19:28 tilghman       Note Added: 0124061                          
2010-06-29 19:28 tilghman       Status                   ready for review =>
ready for testing
======================================================================