[asterisk-bugs] [JIRA] (ASTERISK-22788) [patch] main/translate.c: access to variable f after free in ast_translate()

[Corey Farrell (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-22788?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=211364#comment-211364 ] 

Corey Farrell commented on ASTERISK-22788:
------------------------------------------

I forgot to mention this test was done with frame cache disabled.  With frame cache enabled valgrind would not have reported the error.
                
> [patch] main/translate.c: access to variable f after free in ast_translate()
> ----------------------------------------------------------------------------
>
>                 Key: ASTERISK-22788
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-22788
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Core/General
>    Affects Versions: SVN, 1.8.24.0, 11.6.0, 12.0.0-beta1
>            Reporter: Corey Farrell
>            Severity: Minor
>         Attachments: translate-access-after-free-11up.patch, translate-access-after-free-1.8.patch, valgrind-access-error.txt
>
>
> If consume != 0 then "f" is free'd.  It is later accessed if out != NULL and !ast_tvzero(delivery).
> This can be reproduced by sending a single call into ConfBridge in asterisk 11.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira