[asterisk-bugs] [Asterisk 0018988]: Skinny to Skinny transfer crash

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18988 
====================================================================== 
Reported By:                kobaz
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18988
Category:                   Channels/chan_skinny
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           1.8.3.2 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2011-03-17 16:42 CDT
Last Modified:              2011-03-21 09:50 CDT
====================================================================== 
Summary:                    Skinny to Skinny transfer crash
Description: 
Transferring from a skinny phone to another skinny phone will seg fault.


Sip phone calls skinny phone
skinny phone attended transfers to another skinny phone
====================================================================== 

---------------------------------------------------------------------- 
 (0133036) kobaz (developer) - 2011-03-21 09:50
 https://issues.asterisk.org/view.php?id=18988#c133036 
---------------------------------------------------------------------- 
Heres without debug

########### 2609 calls 2610, 2610 answers
*CLI>   == Using SIP RTP CoS mark 5
    -- Executing [2610 at cos_internal+local+ld+intl:1]
Goto("SIP/2609-00000001", "_cos_internal+local+ld+intl,2610,1") in new
stack
    -- Goto (_cos_internal+local+ld+intl,2610,1)
    -- Executing [2610 at _cos_internal+local+ld+intl:1]
Dial("SIP/2609-00000001", "Skinny/2610") in new stack
    -- skinny_request(2610)
    -- Called 2610
    -- SIP/2609-00000001 calling Skinny/2610 at SEP0014A9239820-3 (callee is
ringing)
    -- Skinny/2610 at SEP0014A9239820-3 answered SIP/2609-00000001

*CLI>
*CLI>
*CLI>
########### 2610 calls 2611
*CLI>     -- Started music on hold, class 'default', on channel
'SIP/2609-00000001'
    -- Starting simple switch on '2610 at SEP0014A9239820'
    -- Executing [2611 at cos_internal+local+ld+intl:1]
Goto("Skinny/2610 at SEP0014A9239820-4", "_cos_internal+local+ld+intl,2611,1")
in new stack
    -- Goto (_cos_internal+local+ld+intl,2611,1)
    -- Executing [2611 at _cos_internal+local+ld+intl:1]
Dial("Skinny/2610 at SEP0014A9239820-4", "Skinny/2611") in new stack
    -- skinny_request(2611)
    -- Called 2611
    -- Skinny/2610 at SEP0014A9239820-4 calling Skinny/2611 at SEP001121D89A42-5
(callee is ringing)

*CLI>
*CLI>
*CLI>
########### 2611 answers
*CLI>
*CLI>
*CLI>     -- Skinny/2611 at SEP001121D89A42-5 answered
Skinny/2610 at SEP0014A9239820-4
    -- Locally bridging Skinny/2610 at SEP0014A9239820-4 and
Skinny/2611 at SEP001121D89A42-5

*CLI>

########### complete transfer from 2610 to 2610
*CLI>
*CLI>
*CLI> [2011-03-21 10:43:27] NOTICE[6932]: chan_skinny.c:4195 skinny_fixup:
skinny_fixup(Skinny/2611 at SEP001121D89A42-5,
Skinny/2611 at SEP001121D89A42-5<MASQ>)
       > Killing inactive sub 3

Segmentation fault (core dumped)
demo2 {/apps} root# 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-03-21 09:50 kobaz          Note Added: 0133036                          
======================================================================