[asterisk-bugs] [JIRA] (ASTERISK-30034) re_invite rejected with 491 after update of session_media with its SDP

[schovaers (JIRA)]

schovaers created ASTERISK-30034:
------------------------------------

             Summary: re_invite rejected with 491 after update of session_media with its SDP
                 Key: ASTERISK-30034
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30034
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Resources/res_pjsip_session
    Affects Versions: 16.7.0
            Reporter: schovaers
            Severity: Major


Asterisk sends INVITE with T38 udptl to A_party
A_party sends 100 trying to Asterisk
A_party sends re_invite with audio to Asterisk
Asterisk handles the incoming sdp by clearing the previous session_media
(session_media->handler->stream_destroy(session_media);
so that session_media->udptl = NULL;
Asterisk (pjilib) sends " 491 Another INVITE transaction in progres"

Aparty sends 200 OK to the INVITE with T38 udptl 
Asterisk excutes "t38_reinvite_response_cb"
then" t38_change_state"
then ast_udptl_get_far_max_ifp  with a null pointer 
==> Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x000056020ba28ab7 in ast_udptl_get_far_max_ifp (udptl=0x0) at udptl.c:1018

The re_invite has to be rejected without handling its SDP



--
This message was sent by Atlassian JIRA
(v6.2#6252)