[asterisk-bugs] [Asterisk 0018658]: [patch] [regression] crash while looking up realtime presence hint

[Asterisk Bug Tracker]

The following issue is now READY FOR TESTING. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18658 
====================================================================== 
Reported By:                byronclark
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18658
Category:                   Channels/chan_sip/Subscriptions
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     ready for testing
Asterisk Version:           1.6.2.16.1 
JIRA:                       SWP-2957 
Regression:                 Yes 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2011-01-21 11:57 CST
Last Modified:              2011-05-16 08:22 CDT
====================================================================== 
Summary:                    [patch] [regression] crash while looking up realtime
presence hint
Description: 
After upgrading from 1.6.2.11 to 1.6.2.16.1, I'm seeing a crash as soon as
the first Subscription request for presence arrives.

It appears the crash is caused by ast_autoservice_start being called on
the mostly empty channel created main/pbx.c:ast_add_extension2_lockopt():

	/* If we are adding a hint evalulate in variables and global variables */
	if (priority == PRIORITY_HINT && strstr(application, "${") &&
!strstr(extension, "_")) {
		struct ast_channel c = {0, };

		ast_copy_string(c.exten, extension, sizeof(c.exten));
		ast_copy_string(c.context, con->name, sizeof(c.context));
		pbx_substitute_variables_helper(&c, application, expand_buf,
sizeof(expand_buf));
		application = expand_buf;
	}


====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-05-16 08:22 lmadsen        Status                   acknowledged => ready
for testing
======================================================================