[asterisk-bugs] [JIRA] (ASTERISK-26764) chan_pjsip: Crash looking up PJSIP call-id on hungup channel.

[Richard Mudgett (JIRA)]

Richard Mudgett created ASTERISK-26764:
------------------------------------------

             Summary: chan_pjsip: Crash looking up PJSIP call-id on hungup channel.
                 Key: ASTERISK-26764
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26764
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Channels/chan_pjsip
    Affects Versions: 13.13.1
         Environment: kubuntu 10.04 32-bit
            Reporter: Richard Mudgett


Got a crash during testsuite test:
channels/pjsip/transfers/blind_transfer/caller_refer_only

res_hep_rtcp was processing a stasis bus message and trying to lookup the PJSIP channel's call-id in assign_uuid().  This is a third-party thread trying to get the call-id of a channel that may get hung up while trying to get the information.  The dialplan function CHANNEL(pjsip,call-id) calls pjsip_acf_channel_read() which indirectly calls read_pjsip() in another thread.  read_pjsip() then calls channel_read_pjsip() which can crash if the channel is hungup by the time execution gets to channel_read_pjsip().



--
This message was sent by Atlassian JIRA
(v6.2#6252)