[asterisk-bugs] [JIRA] (ASTERISK-28426) Address out of bounds in ast_str_hash

[Ross Beer (JIRA)]

Ross Beer created ASTERISK-28426:
------------------------------------

             Summary: Address out of bounds in ast_str_hash
                 Key: ASTERISK-28426
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-28426
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Resources/res_pjsip
    Affects Versions: 13.26.0, GIT
         Environment: CentOS 7
            Reporter: Ross Beer


Asterisk segfaults with 'address out of bounds' when in ast_str_hash:

{noformat}
Thread 1 (Thread 0x7f5f3ca28700 (LWP 113932)):
#0  0x00007f605572d4ac in ast_str_hash (str=0x7f5ec234d248 <Address 0x7f5ec234d248 out of bounds>) at /usr/src/asterisk/asterisk-13-trunk/include/asterisk/strings.h:1202
        hash = 5381
#1  0x00007f605572d512 in transport_monitor_hash_fn (obj=0x7f5ec234d248, flags=64) at res_pjsip/pjsip_transport_events.c:69
        object = 0x7f5ec234d248
        key = 0x7f5ec234d248 <Address 0x7f5ec234d248 out of bounds>
#2  0x000000000045df8e in hash_ao2_find_first (self=0x2e673a8, flags=80, arg=0x7f5ec234d248, state=0x7f5f3ca276a0) at astobj2_hash.c:390
        node = 0x2e673a8
        bucket_cur = 32607
        cmp = 1017280128
#3  0x000000000045c491 in internal_ao2_traverse (self=0x2e673a8, flags=80, cb_fn=0x7f605572d514 <transport_monitor_cmp_fn>, arg=0x7f5ec234d248, data=0x0, type=AO2_CALLBACK_DEFAULT, tag=0x0, file=0x0, line=0, func=0x0) at astobj2_container.c:344
        ret = 0x0
        cb_default = 0x7f605572d514 <transport_monitor_cmp_fn>
        cb_withdata = 0x0
        node = 0x7f5f3ca277e0
        traversal_state = 0x7f5f3ca276a0
        orig_lock = AO2_LOCK_REQ_MUTEX
        multi_container = 0x0
        multi_iterator = 0x0
        __PRETTY_FUNCTION__ = "internal_ao2_traverse"
{noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)