PJSIP FAX: Fix T.38 automatic reject timer NULL channel pointer dereferences.
authorRichard Mudgett <rmudgett@digium.com>
Fri, 26 Jun 2015 15:36:19 +0000 (10:36 -0500)
committerRichard Mudgett <rmudgett@digium.com>
Mon, 6 Jul 2015 21:15:12 +0000 (16:15 -0500)
commit792ed7ce93205fc700b3923640fa023b34eff5cb
tree20ea15d2431c4b3de1e414c33fd07ce375044113
parent3cdbe696a3f98f345cdeb739cb738f41cb830c15
PJSIP FAX: Fix T.38 automatic reject timer NULL channel pointer dereferences.

When a caller calls a FAX number and then hangs up right after the call is
answered then the T.38 re-INVITE automatic reject timer may still be
running after the channel goes away.

* Added session NULL channel checks on the code paths that get executed by
t38_automatic_reject() to prevent a crash when the T.38 re-INVITE
automatic reject timer expires.

ASTERISK-25168
Reported by: Carl Fortin

Change-Id: I07b6cd23815aedce5044f8f32543779e2f7a2403
res/res_pjsip_session.c
res/res_pjsip_t38.c