[asterisk-bugs] [JIRA] (ASTERISK-24131) DTLS Crash Out of libssl

[JoshE (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-24131?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=221063#comment-221063 ] 

JoshE commented on ASTERISK-24131:
----------------------------------

I am running OpenSSL 1.0.1e-fips 11 Feb 2013.  This is the default version in patched CentOS 6 and 7 installations.

Also, as a further note, this bug seems to reproduce when you have multiple WebRTC clients sitting in an incoming queue with Ring All set on it.  Something with the concurrent incoming calls to multiple WebRTC clients seems to cause the issue relatively reliably.

> DTLS Crash Out of libssl
> ------------------------
>
>                 Key: ASTERISK-24131
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24131
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_rtp_asterisk
>    Affects Versions: 11.11.0
>            Reporter: JoshE
>            Assignee: JoshE
>         Attachments: dtls_crash.txt
>
>
> I am seeing a fairly consistent crash on 11.11 servers with relatively heavy WebRTC use via DTLS.  The top of the stack always appears in libssl, but in slightly different places. dtls1_send_server_hello or SSL_clear.
> Haven't had a chance to dig into this yet, but curious if anyone else is seeing this.



--
This message was sent by Atlassian JIRA
(v6.2#6252)