[asterisk-bugs] [JIRA] (ASTERISK-24528) res_pjsip_refer: Sending INVITE with Replaces in-dialog with invalid target causes crash

[Asterisk Team (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-24528?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Asterisk Team updated ASTERISK-24528:
-------------------------------------

    Target Release Version/s: 14.0.0

> res_pjsip_refer: Sending INVITE with Replaces in-dialog with invalid target causes crash
> ----------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-24528
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24528
>             Project: Asterisk
>          Issue Type: Bug
>          Components: Resources/res_pjsip_refer
>    Affects Versions: 12.7.0, 13.0.0
>            Reporter: Joshua Colp
>            Assignee: Joshua Colp
>              Labels: Security
>      Target Release: 12.8.0, 13.1.0, 14.0.0
>
>
> The INVITE with Replaces handling within res_pjsip_refer does not currently completely handle the case where a channel may already be handled by another thread. If an off nominal case occurs the code will incorrectly hang up the channel causing the other thread handling the channel to be using an already hung up and possibly freed channel.
> Much FRACKING occurs.



--
This message was sent by Atlassian JIRA
(v6.2#6252)