|Summary:||ASTERISK-11931: Chanspy crash when using spygroup|
|Reporter:||Atis Lezdins (atis)||Labels:|
|Date Opened:||2008-04-28 05:33:23||Date Closed:||2011-06-07 14:01:00|
|Environment:||Attachments:||( 0) bt.core.29262.txt|
( 1) chanspy_crash.txt
|Description:||Log shows two calls. First call has __SPYGROUP set to 4, second uses SIP/90220|g(1:2:3:4:32:33:34:35:36:37:38:39:44:45:46:47:48:49:50:53:54:55:56:57:58:61:62:63:64:65:66:68:69:70:71:73:74:75:76:77:78:79:80:82:83)|
This always leads to crash.
|Comments:||By: Atis Lezdins (atis) 2008-04-28 08:07:54|
Seems like there is no length checking of arguments. Applying patch from ASTERISK-11894 gives exactly same backtrace on this amount of arguments, but changing size of groups and mygroups (after patch) to 255 would work with this amount of arguments.
By: Atis Lezdins (atis) 2008-04-29 03:14:30
The same crash happens, when argument list to g is empty:
By: Mark Michelson (mmichelson) 2008-04-29 17:07:08
I took some time to attempt to reproduce this. I absolutely could not do it on the latest SVN checkout. When I reverted to the 1.4.19 tag, I was able to crash it every time. I think this may be something that has since been fixed. If any of you wouldn't mind double checking, it would be much appreciated. Thank you!
By: Atis Lezdins (atis) 2008-04-30 08:09:27
True, on 1.4 branch this works, and also backport of patch from ASTERISK-11894 works.
By: Joshua C. Colp (jcolp) 2008-06-10 09:18:56
Closed as issue has already been fixed.