[asterisk-bugs] [JIRA] (ASTERISK-29002) asterisk 17.x crash

[Mark Murawski (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-29002?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=252730#comment-252730 ] 

Mark Murawski commented on ASTERISK-29002:
------------------------------------------

Also exists in  16.14.1

I've reproduced this problem by using TLS and SRTP while sending DTMF from an endpoint to asterisk

> asterisk 17.x crash
> -------------------
>
>                 Key: ASTERISK-29002
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29002
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: .Release/Targets
>    Affects Versions: 17.2.0, 17.6.0
>         Environment: Ubuntu 20.04
>            Reporter: Attila Zsiros
>            Severity: Critical
>
> Random crash the asterisgdb output:
> [Thread debugging using libthread_db enabled]
> Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
> Core was generated by `/usr/sbin/asterisk -g -f -B -U asterisk'.
> Program terminated with signal SIGSEGV, Segmentation fault.
> #0  ast_timer_set_rate (handle=0x0, rate=50) at timing.c:168
> 168             return handle->holder->iface->timer_set_rate(handle->data, rate);
> [Current thread is 1 (Thread 0x7ff0bfdc1700 (LWP 7183))]
> (gdb) bt
> #0  ast_timer_set_rate (handle=0x0, rate=50) at timing.c:168
> #1  0x00005605d4c8a1a4 in __ast_read (chan=0x7ff0e8029ff0, dropaudio=dropaudio at entry=0, dropnondefault=dropnondefault at entry=0) at channel.c:3944
> #2  0x00005605d4c8bc99 in ast_read_stream (chan=<optimized out>) at channel.c:4255
> #3  0x00005605d4c5ef75 in bridge_handle_trip (bridge_channel=0x7ff0e804b6b0) at bridge_channel.c:2570
> #4  bridge_channel_wait (bridge_channel=0x7ff0e804b6b0) at bridge_channel.c:2785
> #5  bridge_channel_internal_join (bridge_channel=bridge_channel at entry=0x7ff0e804b6b0) at bridge_channel.c:2936
> #6  0x00005605d4c41783 in bridge_channel_ind_thread (data=data at entry=0x7ff0e804b6b0) at bridge.c:1793
> #7  0x00005605d4dada6f in dummy_start (data=<optimized out>) at utils.c:1249
> #8  0x00007ff11603a6db in start_thread (arg=0x7ff0bfdc1700) at pthread_create.c:463
> #9  0x00007ff11557388f in gnu_dev_makedev (__major=<optimized out>, __minor=<optimized out>) at makedev.c:30
> #10 0x0000000000000000 in ?? ()
> (gdb) quit



--
This message was sent by Atlassian JIRA
(v6.2#6252)