AST-2014-016: Fix crash when receiving an in-dialog INVITE with Replaces in res_pjsip...
authorJoshua Colp <jcolp@digium.com>
Thu, 20 Nov 2014 14:56:24 +0000 (14:56 +0000)
committerJoshua Colp <jcolp@digium.com>
Thu, 20 Nov 2014 14:56:24 +0000 (14:56 +0000)
commit1c88ca9d31b34f68fa2a9f800c1464ab58613bea
tree36971652652d1dea477741ff70fc7565612b1f02
parentd25eda5fb232b4cd68a4c1252ba6e70ed5e89ee9
AST-2014-016: Fix crash when receiving an in-dialog INVITE with Replaces in res_pjsip_refer.

The implementation of INVITE with Replaces in res_pjsip_refer did not expect them to
occur in-dialog. As a result it would incorrectly attempt to hang up a channel it
thought was under its control. In reality the channel would be under the control of
another thread. When the other thread accessed the channel it would be accessing freed
memory and could crash.

This change makes res_pjsip_refer not act on an in-dialog INVITE with Replaces.

ASTERISK-24528 #close
Reported by: Joshua Colp
........

Merged revisions 428304 from http://svn.asterisk.org/svn/asterisk/branches/12
........

Merged revisions 428305 from http://svn.asterisk.org/svn/asterisk/branches/13

git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@428306 65c4cc65-6c06-0410-ace0-fbb531ad65f3
res/res_pjsip_refer.c