[asterisk-bugs] [Asterisk 0018726]: crash when transport not set

[Asterisk Bug Tracker]

The following issue has been UPDATED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18726 
====================================================================== 
Reported By:                cmaj
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18726
Category:                   Channels/chan_sip/T.38
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           1.8.2.3 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2011-02-01 18:16 CST
Last Modified:              2011-02-07 13:57 CST
====================================================================== 
Summary:                    crash when transport not set
Description: 
Asterisk is listening on port 5060 both UDP & TCP on same IP address. A
peer registers and tries to send a fax via t38. Asterisk crashes on call to
ReceiveFAX().

Fix is to add "transport=udp" to peer definition. Crash only occurs when
transport is not defined. Here's a quick back trace:

(gdb) bt
https://issues.asterisk.org/view.php?id=0  0x00007fac2d3570b0 in strlen () from
/lib/libc.so.6
https://issues.asterisk.org/view.php?id=1  0x00000000004e4035 in
ast_sockaddr_resolve (addrs=0x40ce4a90, str=0xc8
<Address 0xc8 out of bounds>, flags=0, family=0) at netsock2.c:235
https://issues.asterisk.org/view.php?id=2  0x00007fabfe9f9a69 in
__set_address_from_contact (fullcontact=0x82e926
"", addr=0x7fabf8100cb0, tcp=<value optimized out>) at chan_sip.c:28095
https://issues.asterisk.org/view.php?id=3  0x00007fabfea512dc in
handle_response_invite (p=0x7fabf8100868,
resp=200, rest=<value optimized out>, req=0x40ce64f0, seqno=102) at
chan_sip.c:12958
https://issues.asterisk.org/view.php?id=4  0x00007fabfea545c1 in handle_response
(p=0x7fabf8100868, resp=200,
rest=0x7fabf80f33a4 "OK", req=0x40ce64f0, seqno=102) at chan_sip.c:19743
https://issues.asterisk.org/view.php?id=5  0x00007fabfea5a52e in handle_incoming
(p=0x7fabf8100868,
req=0x40ce64f0, addr=0x40ce6f50, recount=0x40ce64a4, nounlock=0x40ce64a0)
at chan_sip.c:23610
https://issues.asterisk.org/view.php?id=6  0x00007fabfea5c0b6 in
handle_request_do (req=0x40ce64f0,
addr=0x40ce6f50) at chan_sip.c:24022
https://issues.asterisk.org/view.php?id=7  0x00007fabfea5d173 in sipsock_read
(id=<value optimized out>,
fd=<value optimized out>, events=<value optimized out>, ignore=<value
optimized out>)
    at chan_sip.c:23920
https://issues.asterisk.org/view.php?id=8  0x00000000004c5a7f in ast_io_wait
(ioc=0x6ec81c0, howlong=<value
optimized out>) at io.c:288
https://issues.asterisk.org/view.php?id=9  0x00007fabfea4ad2c in do_monitor
(data=<value optimized out>) at
chan_sip.c:24437
https://issues.asterisk.org/view.php?id=10 0x00000000005370bc in dummy_start
(data=<value optimized out>) at
utils.c:970
https://issues.asterisk.org/view.php?id=11 0x00007fac2cb66fc7 in start_thread ()
from /lib/libpthread.so.0
https://issues.asterisk.org/view.php?id=12 0x00007fac2d3ab64d in clone () from
/lib/libc.so.6
https://issues.asterisk.org/view.php?id=13 0x0000000000000000 in ?? ()

====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-02-07 13:57 lmadsen        Description Updated                          
======================================================================