[asterisk-bugs] [JIRA] (ASTERISK-30363) Crash during srtp session

[Joshua C. Colp (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-30363?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=260955#comment-260955 ] 

Joshua C. Colp commented on ASTERISK-30363:
-------------------------------------------

I know, but I remember there being threading changes in PJSIP land involving this as well. I could be wrong of course, but when filing issues in general we really really really prefer it be done on the latest version so we aren't chasing old issues needlessly.

> Crash during srtp session
> -------------------------
>
>                 Key: ASTERISK-30363
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30363
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_rtp_asterisk
>    Affects Versions: 18.10.1
>         Environment: Debian 11
>            Reporter: Vitezslav Novy
>            Assignee: Unassigned
>         Attachments: bt.txt
>
>
> On one of our sites asterisk crashed once with attached backtrace.
> I have core dump available and I noticed that in __rtp_recvfrom() rtp->dtls.ssl is NULL
> It points to some race because there is a test in the function which returns immediately when rtp->dtls.ssl == NULL.  Probably short unlock/lock sequence allowing timer manipulation is the reason. 
> I guess it is a race with ast_rtp_dtls_stop() which destroys ssl and sets ssl to NULL.
> I created a patch for us which checks rtp->dtls,ssl again after unlock/lock sequence. I cannot afford a lawyer so I do not attach it



--
This message was sent by Atlassian JIRA
(v6.2#6252)