[asterisk-bugs] [JIRA] (ASTERISK-30034) re_invite rejected with 491 after update of session_media with its SDP

[Asterisk Team (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-30034?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Asterisk Team updated ASTERISK-30034:
-------------------------------------

    Status: Waiting for Feedback  (was: Waiting for Feedback)

> re_invite rejected with 491 after update of session_media with its SDP
> ----------------------------------------------------------------------
>
>                 Key: ASTERISK-30034
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30034
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_pjsip_session
>    Affects Versions: 16.7.0
>            Reporter: schovaers
>            Assignee: Asterisk Team
>            Severity: Major
>
> Asterisk sends INVITE with T38 udptl to A_party
> A_party sends 100 trying to Asterisk
> A_party sends re_invite with audio to Asterisk
> Asterisk handles the incoming sdp by clearing the previous session_media
> (session_media->handler->stream_destroy(session_media);
> so that session_media->udptl = NULL;
> Asterisk (pjilib) sends " 491 Another INVITE transaction in progres"
> Aparty sends 200 OK to the INVITE with T38 udptl 
> Asterisk excutes "t38_reinvite_response_cb"
> then" t38_change_state"
> then ast_udptl_get_far_max_ifp  with a null pointer 
> ==> Program terminated with signal SIGSEGV, Segmentation fault.
> #0  0x000056020ba28ab7 in ast_udptl_get_far_max_ifp (udptl=0x0) at udptl.c:1018
> The re_invite has to be rejected without handling its SDP



--
This message was sent by Atlassian JIRA
(v6.2#6252)