]> git.ipfire.org Git - thirdparty/asterisk.git/commit
AST-2014-016: Fix crash when receiving an in-dialog INVITE with Replaces in res_pjsip...
authorJoshua Colp <jcolp@digium.com>
Thu, 20 Nov 2014 14:54:19 +0000 (14:54 +0000)
committerJoshua Colp <jcolp@digium.com>
Thu, 20 Nov 2014 14:54:19 +0000 (14:54 +0000)
commit54ae6eca78e69478b7d9ae3eadaa1315155584b4
tree1d40a0e86cacf82d7007b74c705d6370bcde67bf
parent8974e2dee27ed1668b7f434c0d2e1a5f18525749
AST-2014-016: Fix crash when receiving an in-dialog INVITE with Replaces in res_pjsip_refer.

The implementation of INVITE with Replaces in res_pjsip_refer did not expect them to
occur in-dialog. As a result it would incorrectly attempt to hang up a channel it
thought was under its control. In reality the channel would be under the control of
another thread. When the other thread accessed the channel it would be accessing freed
memory and could crash.

This change makes res_pjsip_refer not act on an in-dialog INVITE with Replaces.

ASTERISK-24528 #close
Reported by: Joshua Colp

git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/12@428304 65c4cc65-6c06-0410-ace0-fbb531ad65f3
res/res_pjsip_refer.c