[asterisk-bugs] [LibPRI 0017968]: [patch] Libpri crashes when receiving Message Type (100)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=17968 
====================================================================== 
Reported By:                gelo
Assigned To:                rmudgett
====================================================================== 
Project:                    LibPRI
Issue ID:                   17968
Category:                   General
Reproducibility:            sometimes
Severity:                   crash
Priority:                   normal
Status:                     closed
Asterisk Version:           1.4.35 
JIRA:                        
libpri Version:             1.4.11.3 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
Resolution:                 fixed
Fixed in Version:           
====================================================================== 
Date Submitted:             2010-09-08 10:33 CDT
Last Modified:              2010-11-17 15:28 CST
====================================================================== 
Summary:                    [patch] Libpri crashes when receiving Message Type
(100)
Description: 
Production system, with a 2 PRI card.

Installed last week, we have had two segfaults, same symptoms:

syslog:
Sep  7 11:13:13 gwensa kernel: [15316.468308] asterisk[2716]: segfault at
30 ip b7a5ed82 sp b7a4e1f0 error 4 in libpri.so.1.4[b7a50000+47000]

messages:
[Sep  7 11:13:13] ERROR[2716] chan_dahdi.c: !! Don't know how to
pre-handle message type Unknown Message Type (100)
[Sep  7 11:13:13] ERROR[2716] chan_dahdi.c: !! Don't know how to
post-handle message type Unknown Message Type (100)

After the latter messages, Asterisk crashes.
====================================================================== 

---------------------------------------------------------------------- 
 (0128934) svnbot (reporter) - 2010-11-17 15:28
 https://issues.asterisk.org/view.php?id=17968#c128934 
---------------------------------------------------------------------- 
Repository: libpri
Revision: 2137

U   tags/1.4.11.5/q931.c

------------------------------------------------------------------------
r2137 | rmudgett | 2010-11-17 15:28:12 -0600 (Wed, 17 Nov 2010) | 18 lines

Merged revision 2021 from
https://origsvn.digium.com/svn/libpri/branches/1.4

..........
  r2021 | rmudgett | 2010-10-14 13:35:48 -0500 (Thu, 14 Oct 2010) | 10
lines

  Crash when receiving an unknown/unsupported message type.

  Fix double free of a call record and the subsequent continued use of the
  freed call record when receiving an unsupported/unknown message type.

  (closes issue https://issues.asterisk.org/view.php?id=17968)
  Reported by: gelo
  Patches:
	issue_17968_v1.4.patch uploaded by rmudgett (license 664)
	issue_17968_v1.4.11.4.patch uploaded by rmudgett (license 664)
..........

------------------------------------------------------------------------

http://svn.digium.com/view/libpri?view=rev&revision=2137 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-11-17 15:28 svnbot         Checkin                                      
2010-11-17 15:28 svnbot         Note Added: 0128934                          
======================================================================