Fix a deadlock relating to channel locks and autoservice

It has been discovered that if a channel is locked prior
to a call to ast_autoservice_stop, then it is likely that
a deadlock will occur. The reason is that the call to
ast_autoservice_stop has a check built into it to be sure
that the thread running autoservice is not currently trying
to manipulate the channel we are about to pull out of
autoservice.

The autoservice thread, however, cannot advance beyond where
it currently is, though, because it is trying to acquire
the lock of the channel for which autoservice is attempting
to be stopped.

The gist of all this is that a channel MUST NOT be locked
when attempting to stop autoservice on the channel.

In this particular case, the channel was locked by a call
to ast_read. A call to ast_exists_extension led to autoservice
being started and stopped due to the existence of dialplan
switches.

It may be that there are future commits which handle the same
symptoms but in a different location, but based on my looks through
the code, it is very rare to see a construct such as this one.

(closes issue #14057)
Reported by: rtrauntvein
Patches:
      14057v3.patch uploaded by putnopvut (license 60)
Tested by: rtrauntvein

Review: http://reviewboard.digium.com/r/107/

git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.4@166380 65c4cc65-6c06-0410-ace0-fbb531ad65f3

diff --git a/channels/chan_dahdi.c b/channels/chan_dahdi.c
index ee1f136d5e3b2fcf117dc682deb1649b652992f9..81498b3726701556608f6e45708b51d27d5a683f 100644 (file)
--- a/channels/chan_dahdi.c
+++ b/channels/chan_dahdi.c
@@ -3727,15 +3727,26 @@ static void dahdi_handle_dtmfup(struct ast_channel *ast, int index, struct ast_f
                        if (strcmp(ast->exten, "fax")) {
                                const char *target_context = S_OR(ast->macrocontext, ast->context);
 
+                               /* We need to unlock 'ast' here because ast_exists_extension has the
+                                * potential to start autoservice on the channel. Such action is prone
+                                * to deadlock.
+                                */
+                               ast_mutex_unlock(&p->lock);
+                               ast_channel_unlock(ast);
                                if (ast_exists_extension(ast, target_context, "fax", 1, ast->cid.cid_num)) {
+                                       ast_channel_lock(ast);
+                                       ast_mutex_lock(&p->lock);
                                        if (option_verbose > 2)
                                                ast_verbose(VERBOSE_PREFIX_3 "Redirecting %s to fax extension\n", ast->name);
                                        /* Save the DID/DNIS when we transfer the fax call to a "fax" extension */
                                        pbx_builtin_setvar_helper(ast, "FAXEXTEN", ast->exten);
                                        if (ast_async_goto(ast, target_context, "fax", 1))
                                                ast_log(LOG_WARNING, "Failed to async goto '%s' into fax of '%s'\n", ast->name, target_context);
-                               } else
+                               } else {
+                                       ast_channel_lock(ast);
+                                       ast_mutex_lock(&p->lock);
                                        ast_log(LOG_NOTICE, "Fax detected, but no fax extension\n");
+                               }
                        } else if (option_debug)
                                ast_log(LOG_DEBUG, "Already in a fax extension, not redirecting\n");
                } else if (option_debug)