[asterisk-bugs] [Asterisk 0018225]: [patch] Segfault with new meetme function (count callers in menu8)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18225 
====================================================================== 
Reported By:                kenji
Assigned To:                seanbright
====================================================================== 
Project:                    Asterisk
Issue ID:                   18225
Category:                   Applications/app_meetme
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     closed
Asterisk Version:           SVN 
JIRA:                       SWP-2923 
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
Resolution:                 fixed
Fixed in Version:           
====================================================================== 
Date Submitted:             2010-10-28 04:12 CDT
Last Modified:              2011-01-29 11:15 CST
====================================================================== 
Summary:                    [patch] Segfault with new meetme function (count
callers in menu8)
Description: 
Asterisk crash if you use the new count caller function (menu8) by pressing
*81

- compiling under debian lenny amd64
- gcc version 4.3.2 (Debian 4.3.2-1.1)
- [10147793.660069] asterisk[23050]: segfault at 5a ip 7fdbd231c010 sp
4154eed8 error 4 in libc-2.7.so[7fdbd22a1000+14a000]

====================================================================== 

---------------------------------------------------------------------- 
 (0131205) svnbot (reporter) - 2011-01-29 11:15
 https://issues.asterisk.org/view.php?id=18225#c131205 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 304730

_U  branches/1.8/
U   branches/1.8/apps/app_meetme.c

------------------------------------------------------------------------
r304730 | seanbright | 2011-01-29 11:15:28 -0600 (Sat, 29 Jan 2011) | 22
lines

Merged revisions 304729 via svnmerge from 
https://origsvn.digium.com/svn/asterisk/branches/1.6.2

........
  r304729 | seanbright | 2011-01-29 12:01:51 -0500 (Sat, 29 Jan 2011) | 15
lines
  
  Make sure that we unref the correct object when ejecting the most recent
caller.
  
  Currently, when we kick the last user to enter, we decrement our own
reference
  count which results in a crash when we kick another user or when we exit
the
  conference ourselves.
  
  This will fix https://issues.asterisk.org/view.php?id=18225 in 1.8 and trunk,
but that particular bug does not
exist in
  1.6.2.
  
  (closes issue https://issues.asterisk.org/view.php?id=18225)
  Reported by: kenji
  Patches:
        issue18225.patch uploaded by seanbright (license 71)
  Tested by: seanbright
........

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=304730 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-01-29 11:15 svnbot         Checkin                                      
2011-01-29 11:15 svnbot         Note Added: 0131205                          
======================================================================