[asterisk-bugs] [Asterisk 0018035]: Asterisk crashes on local_ast_moh_start (Segmentation Fault)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18035 
====================================================================== 
Reported By:                valen22br
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18035
Category:                   Channels/General
Reproducibility:            sometimes
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           1.6.2.13 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-09-23 07:27 CDT
Last Modified:              2010-09-24 14:20 CDT
====================================================================== 
Summary:                    Asterisk crashes on local_ast_moh_start
(Segmentation Fault)
Description: 
Scenario: Asterisk(A) connect to Asterisk(B) through IAX2 trunk.
Using res_timing_dahdi as timing source.

Call comes from PSTN to Asterisk(A), with DID to a SIP extension that have
an follow me configured to a external route (using IAX2 trunk) that point
to another SIP extension on Asterisk(B).

In this scenario I have two segmentations faults on Asterisk(A), 1000
calls per day.
Today I changed the IAX2 trunk between Asterisk(A) and Asterisk(B) to a
SIP trunk and until now, I do not have an segmentation fault.

I am suspecting that the problem is with IAX2 trunk.
====================================================================== 

---------------------------------------------------------------------- 
 (0127380) valen22br (reporter) - 2010-09-24 14:20
 https://issues.asterisk.org/view.php?id=18035#c127380 
---------------------------------------------------------------------- 
It's look like the problem ocurred in ast_strlen_zero(mclass parameter), it
was called in local_ast_moh_start, and it appears to be broken.

We think when mclass is wrong but has a '\0' (terminator string) we got
the following logs:
54326:[Sep 24 13:58:49] VERBOSE[5985] loader.c:  res_musiconhold.so =>
(Music On Hold Resource)                                                   
          
55151:[Sep 24 13:59:46] DEBUG[6346] res_musiconhold.c: Music on Hold class
'h;t???B???5?9?)P??' not found in memory

On the other hand, when mclass has not a '\0' (terminator string) we got
an Asterisk crash. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-09-24 14:20 valen22br      Note Added: 0127380                          
======================================================================