| Summary: | ASTERISK-26208: pjproject: Use after free when sending packet | ||
| Reporter: | Badalian Vyacheslav (slavon) | Labels: | |
| Date Opened: | 2016-07-18 08:06:32 | Date Closed: | 2020-01-14 11:13:55.000-0600 |
| Priority: | Minor | Regression? | |
| Status: | Closed/Complete | Components: | pjproject/pjsip |
| Versions: | 13.9.1 | Frequency of Occurrence | |
| Related Issues: | |||
| Environment: | Attachments: | ||
| Description: | {code}
==25874==ERROR: AddressSanitizer: heap-use-after-free on address 0x6170018a3404 at pc 0x7fc299b098dd bp 0x7fc27ec1cb20 sp 0x7fc27ec1cb10 READ of size 4 at 0x6170018a3404 thread T65 #0 0x7fc299b098dc in ast_rtp_on_ice_tx_pkt /root/asterisk-13.9.1/res/res_rtp_asterisk.c:1777 #1 0x7fc2b062154e in on_stun_send_msg (/lib/libpjnath.so.2+0x854e) #2 0x7fc2b062d382 in pj_stun_session_send_msg (/lib/libpjnath.so.2+0x14382) #3 0x7fc2b062120b in ice_keep_alive (/lib/libpjnath.so.2+0x820b) #4 0x7fc2b0621f95 in on_timer (/lib/libpjnath.so.2+0x8f95) #5 0x7fc2af3fe4be in pj_timer_heap_poll (/lib/libpj.so.2+0x1e4be) #6 0x7fc299b09025 in timer_worker_thread /root/asterisk-13.9.1/res/res_rtp_asterisk.c:1817 #7 0x7fc2af3ef0d5 in thread_main (/lib/libpj.so.2+0xf0d5) #8 0x7fc2b755edc4 in start_thread (/lib64/libpthread.so.0+0x7dc4) #9 0x7fc2b683e28c in clone (/lib64/libc.so.6+0xf628c) {code} | ||
| Comments: | By: Asterisk Team (asteriskteam) 2016-07-18 08:06:33.337-0500 Thanks for creating a report! The issue has entered the triage process. That means the issue will wait in this status until a Bug Marshal has an opportunity to review the issue. Once the issue has been reviewed you will receive comments regarding the next steps towards resolution. A good first step is for you to review the [Asterisk Issue Guidelines|https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines] if you haven't already. The guidelines detail what is expected from an Asterisk issue report. Then, if you are submitting a patch, please review the [Patch Contribution Process|https://wiki.asterisk.org/wiki/display/AST/Patch+Contribution+Process]. By: Joshua C. Colp (jcolp) 2016-07-18 12:24:28.671-0500 What version of PJSIP was in use here? By: Badalian Vyacheslav (slavon) 2016-07-18 12:46:27.161-0500 2.5.1 By: Joshua C. Colp (jcolp) 2016-07-20 12:01:49.267-0500 Console output would also be useful when this showed up to know what was going on at the time. It's not exactly clear what could have been used after being freed. By: Asterisk Team (asteriskteam) 2016-08-04 12:00:02.094-0500 Suspended due to lack of activity. This issue will be automatically re-opened if the reporter posts a comment. If you are not the reporter and would like this re-opened please create a new issue instead. If the new issue is related to this one a link will be created during the triage process. Further information on issue tracker usage can be found in the Asterisk Issue Guidlines [1]. [1] https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines | ||