| Summary: | ASTERISK-11931: Chanspy crash when using spygroup | ||
| Reporter: | Atis Lezdins (atis) | Labels: | |
| Date Opened: | 2008-04-28 05:33:23 | Date Closed: | 2011-06-07 14:01:00 |
| Priority: | Critical | Regression? | No |
| Status: | Closed/Complete | Components: | Applications/app_chanspy |
| Versions: | Frequency of Occurrence | ||
| Related Issues: | |||
| Environment: | Attachments: | ( 0) bt.core.29262.txt ( 1) chanspy_crash.txt | |
| Description: | Log shows two calls. First call has __SPYGROUP set to 4, second uses SIP/90220|g(1:2:3:4:32:33:34:35:36:37:38:39:44:45:46:47:48:49:50:53:54:55:56:57:58:61:62:63:64:65:66:68:69:70:71:73:74:75:76:77:78:79:80:82:83) This always leads to crash. | ||
| Comments: | By: Atis Lezdins (atis) 2008-04-28 08:07:54 Seems like there is no length checking of arguments. Applying patch from ASTERISK-11894 gives exactly same backtrace on this amount of arguments, but changing size of groups and mygroups (after patch) to 255 would work with this amount of arguments. By: Atis Lezdins (atis) 2008-04-29 03:14:30 The same crash happens, when argument list to g is empty: ChanSpy("SIP/90236-08361ee8", "SIP/90086|g()") By: Mark Michelson (mmichelson) 2008-04-29 17:07:08 I took some time to attempt to reproduce this. I absolutely could not do it on the latest SVN checkout. When I reverted to the 1.4.19 tag, I was able to crash it every time. I think this may be something that has since been fixed. If any of you wouldn't mind double checking, it would be much appreciated. Thank you! By: Atis Lezdins (atis) 2008-04-30 08:09:27 True, on 1.4 branch this works, and also backport of patch from ASTERISK-11894 works. By: Joshua C. Colp (jcolp) 2008-06-10 09:18:56 Closed as issue has already been fixed. | ||