[asterisk-bugs] [Asterisk 0018225]: [patch] Segfault with new meetme function (count callers in menu8)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18225 
====================================================================== 
Reported By:                kenji
Assigned To:                seanbright
====================================================================== 
Project:                    Asterisk
Issue ID:                   18225
Category:                   Applications/app_meetme
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     ready for testing
Asterisk Version:           SVN 
JIRA:                       SWP-2923 
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-10-28 04:12 CDT
Last Modified:              2011-01-29 11:13 CST
====================================================================== 
Summary:                    [patch] Segfault with new meetme function (count
callers in menu8)
Description: 
Asterisk crash if you use the new count caller function (menu8) by pressing
*81

- compiling under debian lenny amd64
- gcc version 4.3.2 (Debian 4.3.2-1.1)
- [10147793.660069] asterisk[23050]: segfault at 5a ip 7fdbd231c010 sp
4154eed8 error 4 in libc-2.7.so[7fdbd22a1000+14a000]

====================================================================== 

---------------------------------------------------------------------- 
 (0131204) svnbot (reporter) - 2011-01-29 11:13
 https://issues.asterisk.org/view.php?id=18225#c131204 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 304729

U   branches/1.6.2/apps/app_meetme.c

------------------------------------------------------------------------
r304729 | seanbright | 2011-01-29 11:01:51 -0600 (Sat, 29 Jan 2011) | 15
lines

Make sure that we unref the correct object when ejecting the most recent
caller.

Currently, when we kick the last user to enter, we decrement our own
reference
count which results in a crash when we kick another user or when we exit
the
conference ourselves.

This will fix https://issues.asterisk.org/view.php?id=18225 in 1.8 and trunk,
but that particular bug does not
exist in
1.6.2.

(closes issue https://issues.asterisk.org/view.php?id=18225)
Reported by: kenji
Patches:
      issue18225.patch uploaded by seanbright (license 71)
Tested by: seanbright

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=304729 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-01-29 11:13 svnbot         Checkin                                      
2011-01-29 11:13 svnbot         Note Added: 0131204                          
======================================================================