[asterisk-bugs] [JIRA] (ASTERISK-24538) Crash in SDP sprintf

[Badalian Vyacheslav (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-24538?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=223641#comment-223641 ] 

Badalian Vyacheslav commented on ASTERISK-24538:
------------------------------------------------

Another core

{code}
(gdb) frame 3
#3  0x00007f6f86133b5a in sdp_crypto_offer (p=0x7f6f1566d8e0, taglen=80) at sip/sdp_crypto.c:304
304             if (ast_asprintf(&p->a_crypto, "a=crypto:%s AES_CM_128_HMAC_SHA1_%i inline:%s\r\n",
(gdb) print *p
$1 = {a_crypto = 0x0, local_key = "#\203\v\022\016\t\rI#_\251\276\217\201\257\337\306\366\377\363Չy\236\320i=\320,\202", tag = 0xd87 <Address 0xd87 out of bounds>, local_key64 = "I4MLEg4JDUkjX6m+j4Gv38b2//PViXme0Gk90CyC",
  remote_key = '\000' <repeats 29 times>}
(gdb) print p->tag
$2 = 0xd87 <Address 0xd87 out of bounds>
(gdb) print p->local_key64
$3 = "I4MLEg4JDUkjX6m+j4Gv38b2//PViXme0Gk90CyC"
{code}

> Crash in SDP sprintf
> --------------------
>
>                 Key: ASTERISK-24538
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24538
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/General
>    Affects Versions: 11.13.1
>            Reporter: Badalian Vyacheslav
>            Assignee: Badalian Vyacheslav
>            Severity: Critical
>         Attachments: core.m1-asterisk01.tcsbank.ru-2014-11-18T18%3A46%3A15+0300.txt, core.m1-asterisk01.tcsbank.ru-2014-11-18T19%3A27%3A42+0300.txt, core.m1-asterisk01.tcsbank.ru-2014-11-19T13%3A03%3A47+0300.txt
>
>
> Today 3 crashes in one place
> Backtraces will be added bellow



--
This message was sent by Atlassian JIRA
(v6.2#6252)