[asterisk-bugs] [Asterisk 0018035]: Asterisk crashes on local_ast_moh_start (Segmentation Fault)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18035 
====================================================================== 
Reported By:                valen22br
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18035
Category:                   Channels/General
Reproducibility:            sometimes
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           1.6.2.13 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-09-23 07:27 CDT
Last Modified:              2010-09-24 15:50 CDT
====================================================================== 
Summary:                    Asterisk crashes on local_ast_moh_start
(Segmentation Fault)
Description: 
Scenario: Asterisk(A) connect to Asterisk(B) through IAX2 trunk.
Using res_timing_dahdi as timing source.

Call comes from PSTN to Asterisk(A), with DID to a SIP extension that have
an follow me configured to a external route (using IAX2 trunk) that point
to another SIP extension on Asterisk(B).

In this scenario I have two segmentations faults on Asterisk(A), 1000
calls per day.
Today I changed the IAX2 trunk between Asterisk(A) and Asterisk(B) to a
SIP trunk and until now, I do not have an segmentation fault.

I am suspecting that the problem is with IAX2 trunk.
====================================================================== 

---------------------------------------------------------------------- 
 (0127383) schmidts (developer) - 2010-09-24 15:50
 https://issues.asterisk.org/view.php?id=18035#c127383 
---------------------------------------------------------------------- 
ast_strlen_zero checks if mclass would be a null pointer or an empty string
= '\0'
but as i see in the backtrace and also in your debug it looks more like an
unitialised string.

like its in your backtrace oumclass=0x8c1e6350 <Address 0x8c1e6350 out of
bounds> 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-09-24 15:50 schmidts       Note Added: 0127383                          
======================================================================