[asterisk-bugs] [JIRA] (ASTERISK-20856) Segmentation fault in res_rtp_asterisk.so

[Roberto Casas (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-20856?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=201060#comment-201060 ] 

Roberto Casas commented on ASTERISK-20856:
------------------------------------------

It should be a frame of type AST_FRAME_VOICE. The call comes from the dahdi channel, and after some dialplan actions, a SIP account is dialed. I have no idea where the NULL pointer come from, but I've seen some weird things related to network.

I'm going to attache debug and messages log when the segfault occurs.
                
> Segmentation fault in res_rtp_asterisk.so
> -----------------------------------------
>
>                 Key: ASTERISK-20856
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-20856
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>            Reporter: Roberto Casas
>            Assignee: Roberto Casas
>            Severity: Critical
>         Attachments: backtrace.txt, debug.log, messages.log
>
>
> I have this bug in Asterisk 1.8.3.1 but I've inspected trunk version and the code is almost the same.
> The bug is in the function:
> ast_rtp_raw_write
> When we have a remote_address, but frame->data.ptr should be 0 (because substracting hdrlen gives position 0xfffffffffffffff4 to the rtpheader variable)

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira