[asterisk-bugs] [JIRA] (ASTERISK-24538) SRTP p->tag corruption

[Matt Jordan (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-24538?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=225114#comment-225114 ] 

Matt Jordan commented on ASTERISK-24538:
----------------------------------------

An alternative way of fixing this has just been merged into 11/13 in r432239/r432258. In that particular patch, the {{tag}} field was changed to be an integer. This may prevent this crash. If you can, please test with the lastest from the appropriate branch.

At the same time, if something is writing passed the length of the {{local_key}} buffer - which would be a problem in {{libsrtp}} - then I'd expect some strange behaviour regardless. We would be less likely to crash is all.

> SRTP p->tag corruption
> ----------------------
>
>                 Key: ASTERISK-24538
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24538
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/General
>    Affects Versions: 11.13.1, 11.14.1
>            Reporter: Badalian Vyacheslav
>            Assignee: Badalian Vyacheslav
>            Severity: Critical
>         Attachments: core.m1-asterisk01.tcsbank.ru-2014-11-18T18%3A46%3A15+0300.txt, core.m1-asterisk01.tcsbank.ru-2014-11-18T19%3A27%3A42+0300.txt, core.m1-asterisk01.tcsbank.ru-2014-11-19T13%3A03%3A47+0300.txt
>
>
> Today 3 crashes in one place
> Backtraces will be added bellow



--
This message was sent by Atlassian JIRA
(v6.2#6252)