[asterisk-bugs] [JIRA] (ASTERISK-24528) res_pjsip_refer: Sending INVITE with Replaces in-dialog with invalid target causes crash

[Joshua Colp (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-24528?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joshua Colp updated ASTERISK-24528:
-----------------------------------

    Security:     (was: Reporter, Bug Marshals, and Digium)

> res_pjsip_refer: Sending INVITE with Replaces in-dialog with invalid target causes crash
> ----------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-24528
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24528
>             Project: Asterisk
>          Issue Type: Bug
>          Components: Resources/res_pjsip_refer
>    Affects Versions: 12.7.0, 13.0.0
>            Reporter: Joshua Colp
>            Assignee: Joshua Colp
>              Labels: Security
>
> The INVITE with Replaces handling within res_pjsip_refer does not currently completely handle the case where a channel may already be handled by another thread. If an off nominal case occurs the code will incorrectly hang up the channel causing the other thread handling the channel to be using an already hung up and possibly freed channel.
> Much FRACKING occurs.



--
This message was sent by Atlassian JIRA
(v6.2#6252)