[asterisk-bugs] [JIRA] (ASTERISK-26291) res_pjsip_session: segfault on already disconnected session

[Alexei Gradinari (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-26291?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alexei Gradinari updated ASTERISK-26291:
----------------------------------------

    Description: 
On heavy loaded system the TCP/TLS incoming calls could be
disconnected by pjproject while these calls are being
processed by asterisk which could use the session's memory pools.
If the session in the disconnected state then the session memory
pools were already freed, so we get segfault.


  was:
The function create_local_sdp tries to allocate memory on already disconnected session.
If session in disconnected state then session memory pools were already freed, so we get segfault.

The function handle_incoming_sdp calls negotiate_incoming_sdp_stream on already disconnected session.
segfault in libpjmedia because of allocating memory from memory pools already freed.



> res_pjsip_session: segfault on already disconnected session
> -----------------------------------------------------------
>
>                 Key: ASTERISK-26291
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26291
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_pjsip_session
>    Affects Versions: 13.10.0
>            Reporter: Alexei Gradinari
>            Assignee: Unassigned
>         Attachments: bt_20160812.txt, bt_full_208160811.txt, pjproject_log.txt
>
>
> On heavy loaded system the TCP/TLS incoming calls could be
> disconnected by pjproject while these calls are being
> processed by asterisk which could use the session's memory pools.
> If the session in the disconnected state then the session memory
> pools were already freed, so we get segfault.



--
This message was sent by Atlassian JIRA
(v6.2#6252)