[asterisk-bugs] [LibPRI 0018653]: Read func CHANNEL() on sip channel without arg will crash asterisk

Asterisk Bug Tracker noreply at bugs.digium.com
Fri Jan 21 01:04:10 CST 2011


The following issue has been SUBMITTED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18653 
====================================================================== 
Reported By:                wuwu
Assigned To:                
====================================================================== 
Project:                    LibPRI
Issue ID:                   18653
Category:                   General
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           1.8.2.2 
JIRA:                        
libpri Version:             SVN 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2011-01-21 01:04 CST
Last Modified:              2011-01-21 01:04 CST
====================================================================== 
Summary:                    Read func CHANNEL() on sip channel without arg will
crash asterisk
Description: 
calling the function CHANNEL() without an argument on a sip channel will
crash asterisk with a segfault.
In sip_acf_channel_read it does parse arguments - and then starts a
strcasecmp on the args.param - but args is invalid / null - because there
are no arguments.

Adding a ast_strlen_zero check at the beginning should resolv the problem
- untested code is at the additional information...
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-01-21 01:04 wuwu           New Issue                                    
2011-01-21 01:04 wuwu           Asterisk Version          => 1.8.2.2         
2011-01-21 01:04 wuwu           libpri Version            => SVN             
2011-01-21 01:04 wuwu           SVN Branch (only for SVN checkouts, not tarball
releases) => N/A             
======================================================================




More information about the asterisk-bugs mailing list