[asterisk-bugs] [JIRA] (ASTERISK-27886) Crash Asterisk 13.21.0 during SRTP

[Richard Mudgett (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-27886?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=243612#comment-243612 ] 

Richard Mudgett edited comment on ASTERISK-27886 at 5/31/18 7:09 AM:
---------------------------------------------------------------------

Is this patch not compatible? I don't know anything about it, was using someone's instructions. Do you know what Jira number is it from?
Update.
1. Found patch source ASTERISK-26190
2. Upon logs examination I found out that patch did not apply cleanly, one hunk failed.
Question: is there an updated version of this patch?


was (Author: qtlin):
Is this patch not compatible? I don't know anything about it, was using someone's instructions. Do you know what Jira number is it from?
Update.
1. Found patch source https://issues.asterisk.org/jira/browse/ASTERISK-26190
2. Upon logs examination I found out that patch did not apply cleanly, one hunk failed.
Question: is there an updated version of this patch?

> Crash Asterisk 13.21.0 during SRTP
> ----------------------------------
>
>                 Key: ASTERISK-27886
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27886
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/SRTP
>    Affects Versions: 13.21.0
>         Environment: CentOS7 x86_64
>            Reporter: Eugene Kanter
>            Assignee: Unassigned
>
> Using BRIA for iOS, enable TLS and SRTP. Without SRTP works fine.
> coredump is not created, so I attached gdb before SRTP connection.
> {code:title=backtrace|borderStyle=solid}
> (gdb) where
> #0  0x00007fd762085191 in _IO_vfscanf_internal (s=s at entry=0x7fd702de27a0, 
>     format=format at entry=0x60d3c3 "%30d", argptr=argptr at entry=0x7fd702de28c8, errp=errp at entry=0x0)
>     at vfscanf.c:1826
> #1  0x00007fd76209a367 in _IO_vsscanf (string=0x7fd702de29c0 "1", format=0x60d3c3 "%30d", 
>     args=args at entry=0x7fd702de28c8) at iovsscanf.c:44
> #2  0x00007fd7620942d7 in __sscanf (s=s at entry=0x7fd702de29c0 "1", format=format at entry=0x60d3c3 "%30d")
>     at sscanf.c:33
> #3  0x00000000005b44c3 in ast_sdp_crypto_process (rtp=rtp at entry=0x7fd738018760, srtp=0x7fd73801a180, 
>     attr=attr at entry=0x7fd738012de8 "1 AES_CM_128_HMAC_SHA1_80 inline:vlqMl3M+fo6KqSI1rasByiZtzHrMRaMwa15Uw6ZE") at sdp_srtp.c:263
> #4  0x00007fd721fdcaca in process_crypto (p=p at entry=0x7fd73801daf0, rtp=0x7fd738018760, 
>     srtp=srtp at entry=0x7fd73801eef8, 
>     a=0x7fd738012de8 "1 AES_CM_128_HMAC_SHA1_80 inline:vlqMl3M+fo6KqSI1rasByiZtzHrMRaMwa15Uw6ZE", 
>     a at entry=0x7fd738012de1 "crypto:1 AES_CM_128_HMAC_SHA1_80 inline:vlqMl3M+fo6KqSI1rasByiZtzHrMRaMwa15Uw6ZE", secure_transport=secure_transport at entry=1) at chan_sip.c:33988
> #5  0x00007fd721ff7a79 in process_sdp (p=p at entry=0x7fd73801daf0, req=req at entry=0x7fd702de5600, 
>     t38action=t38action at entry=1) at chan_sip.c:10749
> #6  0x00007fd722055b2e in handle_request_invite (p=p at entry=0x7fd73801daf0, req=req at entry=0x7fd702de5600, 
>     addr=addr at entry=0x7fd754004150, seqno=<optimized out>, recount=recount at entry=0x7fd702de5080, 
>     e=e at entry=0x7fd738012a0f "sip:xxxxxxxxxx at xxx.xxx.xxxx", nounlock=nounlock at entry=0x7fd702de50a0)
>     at chan_sip.c:26397
> #7  0x00007fd72205b35d in handle_incoming (p=p at entry=0x7fd73801daf0, req=req at entry=0x7fd702de5600, 
>     addr=addr at entry=0x7fd754004150, recount=recount at entry=0x7fd702de5080, 
>     nounlock=nounlock at entry=0x7fd702de50a0) at chan_sip.c:28940
> #8  0x00007fd72205d9db in handle_request_do (req=req at entry=0x7fd702de5600, addr=addr at entry=0x7fd754004150)
>     at chan_sip.c:29149
> #9  0x00007fd72205e469 in _sip_tcp_helper_thread (tcptls_session=0x7fd754004130) at chan_sip.c:3086
> #10 0x00000000005db42d in handle_tcptls_connection (data=data at entry=0x7fd754004130) at tcptls.c:793
> #11 0x00000000005e9f2a in dummy_start (data=<optimized out>) at utils.c:1239
> #12 0x00007fd762d84e25 in start_thread (arg=0x7fd702de8700) at pthread_create.c:308
> #13 0x00007fd762127bad in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
> (gdb)
> {code}



--
This message was sent by Atlassian JIRA
(v6.2#6252)