From: Joshua Colp <jcolp@digium.com>
Date: Thu, 23 May 2013 20:25:48 +0000 (+0000)
Subject: Fix a crash due to the INVITE session being destroyed before the session.
X-Git-Tag: 13.0.0-beta1~1771
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=814fa7fe114cdab78d8e8a163ea5658b97d97caf;p=thirdparty%2Fasterisk.git

Fix a crash due to the INVITE session being destroyed before the session.

This change ensures that the INVITE session remains valid for the lifetime
of the session object itself by increasing the session count on the dialog that
the INVITE session is allocated from. Once this reaches zero (normally as a result
of decrementing it within the session destructor) the dialog, and INVITE session,
are destroyed.


git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@389609 65c4cc65-6c06-0410-ace0-fbb531ad65f3
---

diff --git a/res/res_sip_session.c b/res/res_sip_session.c
index 4629cf0a97..5613078b9e 100644
--- a/res/res_sip_session.c
+++ b/res/res_sip_session.c
@@ -887,6 +887,10 @@ static void session_destructor(void *obj)
 	ast_party_id_free(&session->id);
 	ao2_cleanup(session->endpoint);
 	ast_format_cap_destroy(session->req_caps);
+
+	if (session->inv_session) {
+		pjsip_dlg_dec_session(session->inv_session->dlg, &session_module);
+	}
 }
 
 static int add_supplements(struct ast_sip_session *session)
@@ -945,6 +949,7 @@ struct ast_sip_session *ast_sip_session_alloc(struct ast_sip_endpoint *endpoint,
 	}
 	ast_sip_dialog_set_serializer(inv_session->dlg, session->serializer);
 	ast_sip_dialog_set_endpoint(inv_session->dlg, endpoint);
+	pjsip_dlg_inc_session(inv_session->dlg, &session_module);
 	ao2_ref(endpoint, +1);
 	inv_session->mod_data[session_module.id] = session;
 	session->endpoint = endpoint;