[asterisk-bugs] [JIRA] (ASTERISK-29097) res_pjsip_config_wizard: Crash when freeing string when failing to add extension

[Richard Mudgett (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-29097?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=252261#comment-252261 ] 

Richard Mudgett edited comment on ASTERISK-29097 at 9/27/20 9:10 AM:
---------------------------------------------------------------------

My previous observation is true but not enough.

To reproduce the problem you also need:
 
pjsip_wizard.conf
{noformat}
[webrtc_defaults](!)
type = wizard
transport = transport-wss
accepts_registrations = yes
sends_registrations = no
accepts_auth = yes
sends_auth = no
has_hint = yes
hint_context = default
hint_application = Gosub(default,${EXTEN},1(${HINT}))
endpoint/context = default
endpoint/dtls_auto_generate_cert = yes
endpoint/webrtc = yes
endpoint/allow_subscribe = yes
endpoint/allow = !all,alaw,ulaw,opus,gsm,g722,vp8,h264
endpoint/direct_media = yes
; endpoint/max_audio_streams = 10
; endpoint/max_video_streams = 10
endpoint/message_context=textmessages
endpoint/force_rport = yes
endpoint/disable_direct_media_on_nat = yes
endpoint/direct_media_method = invite
; endpoint/ice_support = yes
endpoint/moh_suggest = default
endpoint/send_rpid = yes
endpoint/rewrite_contact = yes
endpoint/send_pai = yes
endpoint/allow_transfer = yes
endpoint/trust_id_inbound = yes
endpoint/device_state_busy_at = 1
endpoint/trust_id_outbound = yes
endpoint/send_diversion = yes
endpoint/rtp_symmetric = yes
aor/qualify_frequency = 30
aor/authenticate_qualify = no
aor/max_contacts = 1
aor/remove_existing = yes
aor/minimum_expiration = 30
aor/support_path = yes

[1001](webrtc_defaults)
hint_exten = 1001
inbound_auth/username = 1001
inbound_auth/password = whatever
endpoint/callerid = Guest 1 <1001>
aor/max_contacts = 200
{noformat}
The line 'hint_exten = 1001' is the one producing the crash.

Removing it solves the issue.

Doing the same for 4000, 5000, etc., instead of 1001 does not produce a crash.



was (Author: vieridipaola):
My previous observation is true but not enough.

To reproduce the problem you also need:
 
pjsip_wizard.conf

[webrtc_defaults](!)
type = wizard
transport = transport-wss
accepts_registrations = yes
sends_registrations = no
accepts_auth = yes
sends_auth = no
has_hint = yes
hint_context = default
hint_application = Gosub(default,${EXTEN},1(${HINT}))
endpoint/context = default
endpoint/dtls_auto_generate_cert = yes
endpoint/webrtc = yes
endpoint/allow_subscribe = yes
endpoint/allow = !all,alaw,ulaw,opus,gsm,g722,vp8,h264
endpoint/direct_media = yes
; endpoint/max_audio_streams = 10
; endpoint/max_video_streams = 10
endpoint/message_context=textmessages
endpoint/force_rport = yes
endpoint/disable_direct_media_on_nat = yes
endpoint/direct_media_method = invite
; endpoint/ice_support = yes
endpoint/moh_suggest = default
endpoint/send_rpid = yes
endpoint/rewrite_contact = yes
endpoint/send_pai = yes
endpoint/allow_transfer = yes
endpoint/trust_id_inbound = yes
endpoint/device_state_busy_at = 1
endpoint/trust_id_outbound = yes
endpoint/send_diversion = yes
endpoint/rtp_symmetric = yes
aor/qualify_frequency = 30
aor/authenticate_qualify = no
aor/max_contacts = 1
aor/remove_existing = yes
aor/minimum_expiration = 30
aor/support_path = yes

[1001](webrtc_defaults)
hint_exten = 1001
inbound_auth/username = 1001
inbound_auth/password = whatever
endpoint/callerid = Guest 1 <1001>
aor/max_contacts = 200

The line 'hint_exten = 1001' is the one producing the crash.

Removing it solves the issue.

Doing the same for 4000, 5000, etc., instead of 1001 does not produce a crash.


> res_pjsip_config_wizard: Crash when freeing string when failing to add extension
> --------------------------------------------------------------------------------
>
>                 Key: ASTERISK-29097
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29097
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_pjsip_config_wizard
>    Affects Versions: 16.13.0
>         Environment: Gentoo Linux - official asterisk ebuild with "debug" use flag
>            Reporter: Vieri
>            Assignee: Unassigned
>         Attachments: backtrace.txt, btfull.txt, bt.txt
>
>
> Asterisk exits each time I issue:
> asterisk -rx "module reload res_pjsip.so"
> Tried pjproject v. 2.9 and 2.10.
> Asterisk exits with:
> Reloading module 'res_pjsip.so' (Basic SIP resource)
> double free or corruption (fasttop)
> Aborted



--
This message was sent by Atlassian JIRA
(v6.2#6252)