[asterisk-bugs] [JIRA] (ASTERISK-29049) Memory Leak caused by fix for ASTERISK-28445

[Asterisk Team (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-29049?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Asterisk Team updated ASTERISK-29049:
-------------------------------------

    Assignee: Asterisk Team  (was: Bernhard Schmidt)
      Status: Triage  (was: Waiting for Feedback)

> Memory Leak caused by fix for ASTERISK-28445
> --------------------------------------------
>
>                 Key: ASTERISK-29049
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29049
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: pjproject/pjsip
>    Affects Versions: 16.2.1
>            Reporter: Bernhard Schmidt
>            Assignee: Asterisk Team
>         Attachments: Screenshot_20200827_152027.png
>
>
> I'm not exactly sure whether this affects recent versions where the patch has been merged upstream as well, I can't test that due to ASTERISK-29017 . But I haven't found any subsequent fixes so I think it is quite likely.
> In ASTERISK-28445 a one-line fix has been proposed and merged to fix a use-after-free in res_pjsip_session. Backporting this to 16.2.1 in Debian  the fix is leaking memory. Since the patch only changes one line to ast_strdupa a variable but doesn't free it anywhere that's probably the root cause.
> https://github.com/asterisk/asterisk/commit/fbc80db350ee006cdebcb113a6daf60f95c8851d#diff-abd0465e5ff1c7907e3b8826ce1dde80



--
This message was sent by Atlassian JIRA
(v6.2#6252)