[asterisk-bugs] [JIRA] (ASTERISK-24131) DTLS Crash Out of libssl

[Matt Jordan (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-24131?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=221060#comment-221060 ] 

Matt Jordan commented on ASTERISK-24131:
----------------------------------------

I took a look at the backtrace, and the crash is originating from a call to {{SSL_read}} in {{res_rtp_asterisk}}:

{code}
		BIO_write(dtls->read_bio, buf, len);

		len = SSL_read(dtls->ssl, buf, len);

		if ((len < 0) && (SSL_get_error(dtls->ssl, len) == SSL_ERROR_SSL)) {
{code}

Looking at your backtrace, the pointers/variables look fine prior to the call to {{SSL_read}}.

For us to have any additional information, you'll need to install a version of OpenSSL with debug symbols and get a backtrace that shows the symbols within OpenSSL. Even with that information, this appears to be a bug in OpenSSL, not Asterisk.

As it is, I'm not sure what else we can do here.

> DTLS Crash Out of libssl
> ------------------------
>
>                 Key: ASTERISK-24131
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24131
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>    Affects Versions: 11.11.0
>            Reporter: JoshE
>         Attachments: dtls_crash.txt
>
>
> I am seeing a fairly consistent crash on 11.11 servers with relatively heavy WebRTC use via DTLS.  The top of the stack always appears in libssl, but in slightly different places. dtls1_send_server_hello or SSL_clear.
> Haven't had a chance to dig into this yet, but curious if anyone else is seeing this.



--
This message was sent by Atlassian JIRA
(v6.2#6252)