[asterisk-bugs] [JIRA] (ASTERISK-24528) res_pjsip_refer: Sending INVITE with Replaces in-dialog with invalid target causes crash

Joshua Colp (JIRA) noreply at issues.asterisk.org
Thu Nov 20 09:49:32 CST 2014


     [ https://issues.asterisk.org/jira/browse/ASTERISK-24528?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joshua Colp updated ASTERISK-24528:
-----------------------------------

    Security:     (was: Reporter, Bug Marshals, and Digium)

> res_pjsip_refer: Sending INVITE with Replaces in-dialog with invalid target causes crash
> ----------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-24528
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24528
>             Project: Asterisk
>          Issue Type: Bug
>          Components: Resources/res_pjsip_refer
>    Affects Versions: 12.7.0, 13.0.0
>            Reporter: Joshua Colp
>            Assignee: Joshua Colp
>              Labels: Security
>
> The INVITE with Replaces handling within res_pjsip_refer does not currently completely handle the case where a channel may already be handled by another thread. If an off nominal case occurs the code will incorrectly hang up the channel causing the other thread handling the channel to be using an already hung up and possibly freed channel.
> Much FRACKING occurs.



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list