[asterisk-bugs] [JIRA] (ASTERISK-30034) re_invite rejected with 491 after update of session_media with its SDP
Asterisk Team (JIRA)
noreply at issues.asterisk.org
Wed May 11 12:00:40 CDT 2022
[ https://issues.asterisk.org/jira/browse/ASTERISK-30034?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=259135#comment-259135 ]
Asterisk Team commented on ASTERISK-30034:
------------------------------------------
Suspended due to lack of activity. This issue will be automatically re-opened if the reporter posts a comment. If you are not the reporter and would like this re-opened please create a new issue instead. If the new issue is related to this one a link will be created during the triage process. Further information on issue tracker usage can be found in the Asterisk Issue Guidlines [1].
[1] https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines
> re_invite rejected with 491 after update of session_media with its SDP
> ----------------------------------------------------------------------
>
> Key: ASTERISK-30034
> URL: https://issues.asterisk.org/jira/browse/ASTERISK-30034
> Project: Asterisk
> Issue Type: Bug
> Security Level: None
> Components: Resources/res_pjsip_session
> Affects Versions: 16.7.0
> Reporter: schovaers
> Assignee: schovaers
> Severity: Major
>
> Asterisk sends INVITE with T38 udptl to A_party
> A_party sends 100 trying to Asterisk
> A_party sends re_invite with audio to Asterisk
> Asterisk handles the incoming sdp by clearing the previous session_media
> (session_media->handler->stream_destroy(session_media);
> so that session_media->udptl = NULL;
> Asterisk (pjilib) sends " 491 Another INVITE transaction in progres"
> Aparty sends 200 OK to the INVITE with T38 udptl
> Asterisk excutes "t38_reinvite_response_cb"
> then" t38_change_state"
> then ast_udptl_get_far_max_ifp with a null pointer
> ==> Program terminated with signal SIGSEGV, Segmentation fault.
> #0 0x000056020ba28ab7 in ast_udptl_get_far_max_ifp (udptl=0x0) at udptl.c:1018
> The re_invite has to be rejected without handling its SDP
--
This message was sent by Atlassian JIRA
(v6.2#6252)
More information about the asterisk-bugs
mailing list