[asterisk-bugs] [JIRA] (ASTERISK-24498) Segmentation fault in res_hep_rtcp on attended transfer

[Matt Jordan (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-24498?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=223375#comment-223375 ] 

Matt Jordan commented on ASTERISK-24498:
----------------------------------------

Well, {{i}} really shouldn't be {{1}} unless something sent us more report blocks then we can handle... which is possible. We wouldn't know for sure without looking at a pcap of the RTCP message traffic.

I've attached a patch here that should prevent this from happening. Before applying it, can you verify one last value in {{gdb}}:

{noformat}
# print payload->report->reception_report_count
{noformat}

Thanks!

> Segmentation fault in res_hep_rtcp on attended transfer
> -------------------------------------------------------
>
>                 Key: ASTERISK-24498
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24498
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_hep_rtcp
>    Affects Versions: 13.0.0
>         Environment: Asterisk 13.0.0 on CentOS 6.5 
> extension 601 - SNOM 710
> extension 602 - yealink T46
> extension 603 - Jitsi
>            Reporter: Beppo mazzucato
>            Assignee: Beppo mazzucato
>         Attachments: ASTERISK-24498-13.diff, backtrace.txt, log.txt
>
>
> Asterisk crash trying to perform an attended transfer 
> ext 602 call ext 601
> ext 601 put the call on hold
> ext 601 call extension 603
> when ext 603 answers asterisk crashes
> Unattended transfer works properly
> If the attended transfer is made by the yealink phone (in other words echanging the roles of ext 601 and ext 602 above) it works properly
> Same scenario doesn't crash with asterisk 11.13.1
> I'm attaching log and backtrace



--
This message was sent by Atlassian JIRA
(v6.2#6252)