[asterisk-bugs] [JIRA] (ASTERISK-24538) Crash in SDP sprintf

[Badalian Vyacheslav (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-24538?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=223753#comment-223753 ] 

Badalian Vyacheslav commented on ASTERISK-24538:
------------------------------------------------

if {{p-tag != NULL}} next part of code does not work

{code}
        if (!p->tag) {
                ast_debug(1, "Accepting crypto tag %s\n", tag);
                p->tag = ast_strdup(tag);
                if (!p->tag) {
                        ast_log(LOG_ERROR, "Could not allocate memory for tag\n");
                        return -1;
                }
        }

{code}

it can be if allocated memory for {{p}} added to exist part of memory and {{p->tag}} may have not NULL value

> Crash in SDP sprintf
> --------------------
>
>                 Key: ASTERISK-24538
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24538
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/General
>    Affects Versions: 11.13.1
>            Reporter: Badalian Vyacheslav
>            Assignee: Badalian Vyacheslav
>            Severity: Critical
>         Attachments: core.m1-asterisk01.tcsbank.ru-2014-11-18T18%3A46%3A15+0300.txt, core.m1-asterisk01.tcsbank.ru-2014-11-18T19%3A27%3A42+0300.txt, core.m1-asterisk01.tcsbank.ru-2014-11-19T13%3A03%3A47+0300.txt
>
>
> Today 3 crashes in one place
> Backtraces will be added bellow



--
This message was sent by Atlassian JIRA
(v6.2#6252)