[asterisk-bugs] [JIRA] (ASTERISK-29610) ARI channels/move command causes segfault if app name is null

Kenny Anderson (JIRA) noreply at issues.asterisk.org
Tue Aug 24 02:38:33 CDT 2021


Kenny Anderson created ASTERISK-29610:
-----------------------------------------

             Summary: ARI channels/move command causes segfault if app name is null
                 Key: ASTERISK-29610
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29610
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Applications/General
    Affects Versions: 16.20.0
         Environment: Asterisk 16.20 (and possibly other version) running on Debian 10
            Reporter: Kenny Anderson


If I (accidentially) send a ARI channel move command (https://wiki.asterisk.org/wiki/display/AST/Asterisk+16+Channels+REST+API#Asterisk16ChannelsRESTAPI-move) where the app name is null, Asterisk segfaults:

kernel: [44537.949162] asterisk[13478]: segfault at 0 ip 00007fb1c4926676 sp 00007fb10716cb38 error 4 in libc-2.24.so[7fb1c48a6000+195000]

Of course, the answer is not to send through a null app name to the move command, but then again ARI should return an HTTP error rather than crash.




--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list