[asterisk-bugs] [JIRA] (ASTERISK-26978) Crash introduced in commit 5561 pthread_rwlock_unlock ()

[Richard Mudgett (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-26978?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=236849#comment-236849 ] 

Richard Mudgett commented on ASTERISK-26978:
--------------------------------------------

The crash is not even in the function changed by gerrit review 5561.  The review changed ast_rtp_codecs_payloads_copy() while the crash is in ast_rtp_codecs_payload_code().  The crash appears to be because of a stale bridged RTP instance pointer pointing to freed memory.  Using MALLOC_DEBUG could confirm this.  How it could happen is not readily apparent in the attached backtrace nor in the private fuller backtraces.

> Crash introduced in commit 5561 pthread_rwlock_unlock ()
> --------------------------------------------------------
>
>                 Key: ASTERISK-26978
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26978
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Core/RTP
>    Affects Versions: GIT
>         Environment: Fedora 23
>            Reporter: Ross Beer
>         Attachments: backtrace_20170502_clean.txt
>
>
> A crash has been introduced in a recent GIT commit:
> [5561] rtp_engine.c: Fix deadlock potential copying RTP payload maps.
> Please see attached backtrace, if required I can provide an unredacted trace.



--
This message was sent by Atlassian JIRA
(v6.2#6252)