THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has a new comment added:
FS#37 - tm clone msg / free_faked_req bug
User who did this - Andrei Pelinescu-Onciul (andrei)
----------
It should be fixed now, could you please re-test?
----------
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=37#comment28
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has been changed. The changes are listed below. For full information about what has changed, visit the URL and click the History tab.
FS#37 - tm clone msg / free_faked_req bug
User who did this: Andrei Pelinescu-Onciul (andrei)
Percent Complete: 50% -> 90%
Status: Assigned -> Requires testing
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=37
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
Module: sip-router
Branch: kamailio_3.0
Commit: 4834519a39a406b73adf5e9c1bca3c6d2fd1e5f8
URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=4834519…
Author: Andrei Pelinescu-Onciul <andrei(a)iptel.org>
Committer: Andrei Pelinescu-Onciul <andrei(a)iptel.org>
Date: Wed Feb 17 20:40:46 2010 +0100
tm: fake_req dst_uri and ruri copy fix
If the uris have 0 len but no 0 value (possible at least for a
manually set dst_uri), set the corresponding fake_req uri to 0,
thus avoiding a potentially disastrous free in free_faked_req().
Should close FS#37.
(cherry picked from commit 583d213cb617e767f5895de18168d7516e51e5e6)
---
modules/tm/t_reply.c | 6 ++++++
1 files changed, 6 insertions(+), 0 deletions(-)
diff --git a/modules/tm/t_reply.c b/modules/tm/t_reply.c
index 9166c18..7c5c78e 100644
--- a/modules/tm/t_reply.c
+++ b/modules/tm/t_reply.c
@@ -784,6 +784,9 @@ int fake_req(struct sip_msg *faked_req,
memcpy( faked_req->dst_uri.s, shmem_msg->dst_uri.s,
faked_req->dst_uri.len);
faked_req->dst_uri.s[faked_req->dst_uri.len]=0;
+ }else{
+ /* in case len==0, but shmem_msg->dst_uri.s!=0 (extra safety) */
+ faked_req->dst_uri.s = 0;
}
/* new_uri can change -- make a private copy */
if (shmem_msg->new_uri.s!=0 && shmem_msg->new_uri.len!=0) {
@@ -796,6 +799,9 @@ int fake_req(struct sip_msg *faked_req,
memcpy( faked_req->new_uri.s, shmem_msg->new_uri.s,
faked_req->new_uri.len);
faked_req->new_uri.s[faked_req->new_uri.len]=0;
+ }else{
+ /* in case len==0, but shmem_msg->new_uri.s!=0 (extra safety)*/
+ faked_req->new_uri.s = 0;
}
if(uac) setbflagsval(0, uac->branch_flags);
else setbflagsval(0, 0);
Module: sip-router
Branch: sr_3.0
Commit: 583d213cb617e767f5895de18168d7516e51e5e6
URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=583d213…
Author: Andrei Pelinescu-Onciul <andrei(a)iptel.org>
Committer: Andrei Pelinescu-Onciul <andrei(a)iptel.org>
Date: Wed Feb 17 20:40:46 2010 +0100
tm: fake_req dst_uri and ruri copy fix
If the uris have 0 len but no 0 value (possible at least for a
manually set dst_uri), set the corresponding fake_req uri to 0,
thus avoiding a potentially disastrous free in free_faked_req().
Should close FS#37.
---
modules/tm/t_reply.c | 6 ++++++
1 files changed, 6 insertions(+), 0 deletions(-)
diff --git a/modules/tm/t_reply.c b/modules/tm/t_reply.c
index 02b03e5..ff89dd4 100644
--- a/modules/tm/t_reply.c
+++ b/modules/tm/t_reply.c
@@ -772,6 +772,9 @@ int fake_req(struct sip_msg *faked_req,
memcpy( faked_req->dst_uri.s, shmem_msg->dst_uri.s,
faked_req->dst_uri.len);
faked_req->dst_uri.s[faked_req->dst_uri.len]=0;
+ }else{
+ /* in case len==0, but shmem_msg->dst_uri.s!=0 (extra safety) */
+ faked_req->dst_uri.s = 0;
}
/* new_uri can change -- make a private copy */
if (shmem_msg->new_uri.s!=0 && shmem_msg->new_uri.len!=0) {
@@ -784,6 +787,9 @@ int fake_req(struct sip_msg *faked_req,
memcpy( faked_req->new_uri.s, shmem_msg->new_uri.s,
faked_req->new_uri.len);
faked_req->new_uri.s[faked_req->new_uri.len]=0;
+ }else{
+ /* in case len==0, but shmem_msg->new_uri.s!=0 (extra safety)*/
+ faked_req->new_uri.s = 0;
}
if(uac) setbflagsval(0, uac->branch_flags);
else setbflagsval(0, 0);
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has been changed. The changes are listed below. For full information about what has changed, visit the URL and click the History tab.
FS#37 - tm clone msg / free_faked_req bug
User who did this: Andrei Pelinescu-Onciul (andrei)
Summary: memory manager bug? -> tm clone msg / free_faked_req bug
Percent Complete: 0% -> 50%
Category: Core -> tm
Due in Version: [-] -> 3.0
Severity: Low -> High
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=37
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.