[asterisk-bugs] [JIRA] (ASTERISK-22794) [patch] main/translate.c: access to variable f after free in ast_translate()

[Rusty Newton (JIRA)]

Rusty Newton created ASTERISK-22794:
---------------------------------------

             Summary: [patch] main/translate.c: access to variable f after free in ast_translate()
                 Key: ASTERISK-22794
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-22794
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Core/General
    Affects Versions: SVN, 1.8.24.0, 11.6.0, 12.0.0-beta1
            Reporter: Corey Farrell
            Severity: Minor


If consume != 0 then "f" is free'd.  It is later accessed if out != NULL and !ast_tvzero(delivery).

This can be reproduced by sending a single call into ConfBridge in asterisk 11.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira