[asterisk-bugs] [JIRA] (ASTERISK-27568) PJSIP: Crash during SIP attended transfer.

[Friendly Automation (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-27568?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=242407#comment-242407 ] 

Friendly Automation commented on ASTERISK-27568:
------------------------------------------------

Change 8377 merged by Jenkins2:
res_pjsip_refer.c: Fix attended transfer race condition crash.

[https://gerrit.asterisk.org/8377|https://gerrit.asterisk.org/8377]

> PJSIP: Crash during SIP attended transfer.
> ------------------------------------------
>
>                 Key: ASTERISK-27568
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27568
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_pjsip, Resources/res_pjsip_refer
>    Affects Versions: 13.18.5
>            Reporter: Bryan Walters
>            Assignee: Richard Mudgett
>              Labels: pjsip
>         Attachments: backtrace.txt
>
>
> We've had reports from users of Asterisk 13.18.5 where asterisk will core dump pretty frequently when using chan_pjsip. Reviewing this with our team, it appears that that chan_pjsip_session_end checks session->channel for validity and later calls ast_channel_hangupcause(session->channel). However, between the time of the check and the call to ast_channel_hangupcause, something is setting session->channel to null, thus causing Asterisk to core dump.



--
This message was sent by Atlassian JIRA
(v6.2#6252)