Summary:ASTERISK-11931: Chanspy crash when using spygroup
Reporter:Atis Lezdins (atis)Labels:
Date Opened:2008-04-28 05:33:23Date Closed:2011-06-07 14:01:00
Versions:Frequency of
Environment:Attachments:( 0) bt.core.29262.txt
( 1) chanspy_crash.txt
Description:Log shows two calls. First call has __SPYGROUP set to 4, second uses SIP/90220|g(1:2:3:4:32:33:34:35:36:37:38:39:44:45:46:47:48:49:50:53:54:55:56:57:58:61:62:63:64:65:66:68:69:70:71:73:74:75:76:77:78:79:80:82:83)

This always leads to crash.
Comments:By: Atis Lezdins (atis) 2008-04-28 08:07:54

Seems like there is no length checking of arguments. Applying patch from ASTERISK-11894 gives exactly same backtrace on this amount of arguments, but changing size of groups and mygroups (after patch) to 255 would work with this amount of arguments.

By: Atis Lezdins (atis) 2008-04-29 03:14:30

The same crash happens, when argument list to g is empty:

ChanSpy("SIP/90236-08361ee8", "SIP/90086|g()")

By: Mark Michelson (mmichelson) 2008-04-29 17:07:08

I took some time to attempt to reproduce this. I absolutely could not do it on the latest SVN checkout. When I reverted to the 1.4.19 tag, I was able to crash it every time. I think this may be something that has since been fixed. If any of you wouldn't mind double checking, it would be much appreciated. Thank you!

By: Atis Lezdins (atis) 2008-04-30 08:09:27

True, on 1.4 branch this works, and also backport of patch from ASTERISK-11894 works.

By: Joshua C. Colp (jcolp) 2008-06-10 09:18:56

Closed as issue has already been fixed.