[asterisk-bugs] [Asterisk 0017919]: schedule_delivery calls ast_bridged_channel() on an unlocked channel
Asterisk Bug Tracker
noreply at bugs.digium.com
Thu Sep 16 13:01:04 CDT 2010
The following issue has been ASSIGNED.
======================================================================
https://issues.asterisk.org/view.php?id=17919
======================================================================
Reported By: rain
Assigned To: rmudgett
======================================================================
Project: Asterisk
Issue ID: 17919
Category: Channels/chan_iax2
Reproducibility: random
Severity: crash
Priority: normal
Status: assigned
Asterisk Version: Older 1.6.2 - please test a newer version
JIRA: SWP-2133
Regression: No
Reviewboard Link:
SVN Branch (only for SVN checkouts, not tarball releases): N/A
SVN Revision (number only!):
Request Review:
======================================================================
Date Submitted: 2010-08-27 15:11 CDT
Last Modified: 2010-09-16 13:01 CDT
======================================================================
Summary: schedule_delivery calls ast_bridged_channel() on an
unlocked channel
Description:
Near the beginning of schedule_delivery(), ast_bridged_channel() is called
on iaxs[fr->callno]->owner; however, that channel is not locked, which can
result in ast_bridged_channel() crashing should owner->tech change to a
technology that doesn't implement bridged_channel. I spoke with briefly
with russellb on IRC who agreed that this usage is unsafe.
======================================================================
Relationships ID Summary
----------------------------------------------------------------------
has duplicate 0017920 schedule_delivery calls ast_bridged_cha...
======================================================================
Issue History
Date Modified Username Field Change
======================================================================
2010-09-16 13:01 rmudgett Status acknowledged =>
assigned
2010-09-16 13:01 rmudgett Assigned To => rmudgett
======================================================================
More information about the asterisk-bugs
mailing list