[asterisk-bugs] [JIRA] Commented: (ASTERISK-19762) Segfault in ast_frdup when invalid data length specified in duplicated frame

[Kinsey Moore (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-19762?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=194913#comment-194913 ] 

Kinsey Moore commented on ASTERISK-19762:
-----------------------------------------

Hello Benjamin,
Is this segfault reproducable with the tiff file you mentioned?  Could you provide a console debug log to go along with the crash?  Unfortunately, the backtrace is of limited usefulness since it does not capture where the frame is generated, but I have a lead to follow in udptl.c.

Kinsey

> Segfault in ast_frdup when invalid data length specified in duplicated frame
> ----------------------------------------------------------------------------
>
>                 Key: ASTERISK-19762
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-19762
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_fax
>    Affects Versions: 1.8.11.0
>         Environment: Linux version 2.6.32-5-amd64 (Debian 2.6.32-41squeeze2)
>            Reporter: Benjamin
>            Assignee: Kinsey Moore
>            Severity: Critical
>         Attachments: bt 2.txt, bt full 2.txt, bt full.txt, bt.txt
>
>
> Hi,
> Asterisk crashes with segfault. I can not reproduce it. I suppose it comes from faxing with T.38 (bt.txt and bt full.txt)
> There were about 8 segfault in the past 4 days...
> Any suggestions!?
> regards,
> Benjamin

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira