[asterisk-bugs] [Asterisk 0019055]: asterisk crashes on unattended transfer

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=19055 
====================================================================== 
Reported By:                jamhed
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   19055
Category:                   PBX/pbx_lua
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           1.6.2.17.2 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2011-04-02 17:39 CDT
Last Modified:              2011-04-05 15:38 CDT
====================================================================== 
Summary:                    asterisk crashes on unattended transfer
Description: 
A,B,C are sip peers.

A calls B, then A do a blind transfer (dtmf sequence or sip refer) to C,
and then asterisk (1.6.2.17) dumps core.

If B do a blind transfer then it works.
If A do an attended transfer then it works.

If I replace the context for sip peers to use pbx_config switch,
it works. Here is how it looks:

[ncom]
exten => _24XX,1,DIAL(SIP/${EXTEN},30,tT)
exten => _24XX,n,Hangup

It seems to me that the problem is related to ast_async_goto() because
I see "AsyncGoto/SIP/2401-0000000d<ZOMBIE>" in app.log() while trying to
do a transfer.
Also I've noticed that even that "AsyncGoto" strings disappears in
app.log() output if
I do a one second sleep and then continue execution of lua script.

But when I use pbx_config switch, then it shows a proper channel name
like SIP/2401-00000003, without these AsyncGoto and ZOMBIE.

I think there should be a difference between pbx_config and pbx_lua
behaviour,
but I cannot figure out what it is and where to look for.

I guess that lua script somehow executed on a wrong (dying) channel.

Here is my extensions.lua for this case, it's quite simple:

function simple_switch(ctx, number)
   app.log("VERBOSE", "simple switch: " .. number)
   app.dial("SIP/" .. number, 30, "tT")
end

extensions["ncomlua"] = {
   ["_."] = simple_switch
}
====================================================================== 

---------------------------------------------------------------------- 
 (0133396) mnicholson (administrator) - 2011-04-05 15:38
 https://issues.asterisk.org/view.php?id=19055#c133396 
---------------------------------------------------------------------- 
I think I know what the problem may be.  Please upload a backtrace. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-04-05 15:38 mnicholson     Note Added: 0133396                          
======================================================================