Details
-
Type:
Bug
-
Status: Closed
-
Severity:
Critical
-
Resolution: Fixed
-
Affects Version/s: None
-
Target Release Version/s: None
-
Component/s: Channels/chan_sip/T.38
-
Labels:None
-
Mantis ID:16634
-
Regression:No
Description
[general]
t38pt_udptl=yes
#next three lines makes no changes
t38pt_rtp=yes
t38pt_usertpsource=yes
faxdetect = yes
[provider]
type=peer
host=sip.provider.com
fromdomain=sip.provider.com
context=incoming-from-prov
port=5065
defaultuser=user
secret=password
fromuser=user
call-limit=10
canreinvite=yes
insecure=invite,port
nat=no
disallow=all
allow=ulaw
allow=alaw
dtmfmode=rfc2833
[IntUser]
type=friend
host=dynamic
context=office-internal
defaultuser=intuser
secret=password
callgroup=3
pickupgroup=3
callerid=103 User
canreinvite=yes
qualify=30000
call-limit=2
t38pt_udptl=yes
disallow=all
allow=ulaw
allow=alaw
t38pt_udptl=yes
faxdetect=yes
dtmfmode=rfc2833
nat=no
IntUser - ATA Linksys SPA2102 with fax attached
T.38 with reinvite, vad disabled, external non-firewalled ip
Messages before crash:
WARNING[11356]: udptl.c:766 calculate_far_max_ifp: (no tag): Cannot calculate far_max_ifp before far_max_datagram has been set.
WARNING[11389]: udptl.c:725 calculate_local_max_datagram: (no tag): Cannot calculate local_max_datagram before local_max_ifp has been set.
WARNING[11389]: udptl.c:766 calculate_far_max_ifp: (SIP/xxxxxxxxxxxxxx): Cannot calculate far_max_ifp before far_max_datagram has been set.
Also in 1.6.1.13.
Linksys ATA on one side calling a T.38 compatible gateway on the other side.. Upon T.38 negotiation, asterisk crashes.
Program terminated with signal 11, Segmentation fault.
...
#0 0x0814947a in ast_udptl_write (s=0xffffffff, f=0xffffffff) at udptl.c:1067
1067 if (len > 0 && s->them.sin_port && s->them.sin_addr.s_addr) {
(gdb)
(gdb) bt full
#0 0x0814947a in ast_udptl_write (s=0xffffffff, f=0xffffffff) at udptl.c:1067
seq = 0
len = 165
res = 0
buf = 0xc0ff <Address 0xc0ff out of bounds>
_PRETTY_FUNCTION_ = "ast_udptl_write"