[asterisk-bugs] [JIRA] (ASTERISK-24912) pjsip segmentation fault in pjmedia_sdp_attr_clone(../src/pjmedia/sdp.c:134)

[yaron nahum (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-24912?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

yaron nahum updated ASTERISK-24912:
-----------------------------------

    Attachment: uas_pjsip_reinvite_issue.xml

I managed to reproduce the issue with sipp. I have attached the sipp scenaio.

If you look at the sipp scenario you will see there are 3 re-invites - the first with sdp, the second without and the 3rd with sdp. On the ACK of the second re-invite there should be an SDP. I forgot to add on this ACK the Content-Type : application/sdp header. Once I added this header the crash occured, 

Seems to me that there is something wrong when receiving an SDP on an ACK message and then immidiately receiving another SDP on the re-Invite. 

> pjsip segmentation fault in pjmedia_sdp_attr_clone(../src/pjmedia/sdp.c:134)
> ----------------------------------------------------------------------------
>
>                 Key: ASTERISK-24912
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24912
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: pjproject/pjsip
>    Affects Versions: 13.2.0, 13.3.0
>            Reporter: yaron nahum
>            Severity: Critical
>         Attachments: asteriks_crash_20150326.txt, back_trace_2015-03-26_10-22.txt, sdp.c, uas_pjsip_reinvite_issue.xml
>
>
> When dialing out from the asterisk to a BroadWorks user, the call is answered and transferred to another BroadWorks user with no consultation, asterisk gets the attached segmentation fault. I also attached debug during the crash.
> The scenario on the asterisk is very simple - just receive the call, answer and then dial to the destination through the same peer. It is easily reproduced.
> I am trying to reproduce the issue with sipp, but haven't succeeded yet. If I will manage to do it I will attach the sipp script also.



--
This message was sent by Atlassian JIRA
(v6.2#6252)