[asterisk-bugs] [JIRA] (ASTERISK-29049) Memory Leak caused by fix for ASTERISK-28445

[Bernhard Schmidt (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-29049?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=251812#comment-251812 ] 

Bernhard Schmidt commented on ASTERISK-29049:
---------------------------------------------

Hum, okay ... I had prepared a stable update for Debian with the patches for AST-2019-004, -006, -007, ASTERISK-28854 and ASTERISK-28445. This build is leaking memory heavily. ASTERISK-28445 was the first guess. I'm now running a build with this patch backed out, I will keep searching until I find the exact culprit.

Sorry for the noise.

> Memory Leak caused by fix for ASTERISK-28445
> --------------------------------------------
>
>                 Key: ASTERISK-29049
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29049
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: pjproject/pjsip
>    Affects Versions: 16.2.1
>            Reporter: Bernhard Schmidt
>            Assignee: Bernhard Schmidt
>         Attachments: Screenshot_20200827_152027.png
>
>
> I'm not exactly sure whether this affects recent versions where the patch has been merged upstream as well, I can't test that due to ASTERISK-29017 . But I haven't found any subsequent fixes so I think it is quite likely.
> In ASTERISK-28445 a one-line fix has been proposed and merged to fix a use-after-free in res_pjsip_session. Backporting this to 16.2.1 in Debian  the fix is leaking memory. Since the patch only changes one line to ast_strdupa a variable but doesn't free it anywhere that's probably the root cause.
> https://github.com/asterisk/asterisk/commit/fbc80db350ee006cdebcb113a6daf60f95c8851d#diff-abd0465e5ff1c7907e3b8826ce1dde80



--
This message was sent by Atlassian JIRA
(v6.2#6252)