[asterisk-bugs] [LibPRI 0017968]: [patch] Libpri crashes when receiving Message Type (100)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=17968 
====================================================================== 
Reported By:                gelo
Assigned To:                
====================================================================== 
Project:                    LibPRI
Issue ID:                   17968
Category:                   General
Reproducibility:            sometimes
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           1.4.35 
JIRA:                        
libpri Version:             1.4.11.3 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2010-09-08 10:33 CDT
Last Modified:              2010-10-14 13:35 CDT
====================================================================== 
Summary:                    [patch] Libpri crashes when receiving Message Type
(100)
Description: 
Production system, with a 2 PRI card.

Installed last week, we have had two segfaults, same symptoms:

syslog:
Sep  7 11:13:13 gwensa kernel: [15316.468308] asterisk[2716]: segfault at
30 ip b7a5ed82 sp b7a4e1f0 error 4 in libpri.so.1.4[b7a50000+47000]

messages:
[Sep  7 11:13:13] ERROR[2716] chan_dahdi.c: !! Don't know how to
pre-handle message type Unknown Message Type (100)
[Sep  7 11:13:13] ERROR[2716] chan_dahdi.c: !! Don't know how to
post-handle message type Unknown Message Type (100)

After the latter messages, Asterisk crashes.
====================================================================== 

---------------------------------------------------------------------- 
 (0128043) svnbot (reporter) - 2010-10-14 13:35
 https://issues.asterisk.org/view.php?id=17968#c128043 
---------------------------------------------------------------------- 
Repository: libpri
Revision: 2021

U   branches/1.4/q931.c

------------------------------------------------------------------------
r2021 | rmudgett | 2010-10-14 13:35:49 -0500 (Thu, 14 Oct 2010) | 10 lines

Crash when receiving an unknown/unsupported message type.

Fix double free of a call record and the subsequent continued use of the
freed call record when receiving an unsupported/unknown message type.

(closes issue https://issues.asterisk.org/view.php?id=17968)
Reported by: gelo
Patches:
      issue_17968_v1.4.patch uploaded by rmudgett (license 664)

------------------------------------------------------------------------

http://svn.digium.com/view/libpri?view=rev&revision=2021 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-10-14 13:35 svnbot         Checkin                                      
2010-10-14 13:35 svnbot         Note Added: 0128043                          
======================================================================