[ http://tracker.iptel.org/browse/SER-433?page=all ]
Michal Matyska updated SER-433:
-------------------------------
Attachment: udp_mtu.patch
The problem in the code is, that the lumps are applied with the already changed
send_info, so the record_route function generates the double record route
header and thus the new request is larger than the computed and allocated
buffer. This means that the end of the buffer is overwritten and when pkg_free
is called it is catched (if QM_DEBUG is enabled) or SEGFAULTed....
Attached patch solves the problem - it prepares new dest_info for the
via_builder call, but calls apply lumps with the original send_info (so the
lump delta lenght is correct), and after that rewrites the send_info with the
new proto and socket.
> If udp_mtu_try_proto is used with record_route SER crashes
> ----------------------------------------------------------
>
> Key: SER-433
> URL: http://tracker.iptel.org/browse/SER-433
> Project: SER
> Issue Type: Bug
> Components: core
> Affects Versions: Ipteldorf
> Environment: current CVS HEAD
> Reporter: Michal Matyska
> Attachments: udp_mtu.patch
>
>
> route ...
> udp_mtu_try_proto=TCP;
> record_route();
> forward(....);
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://tracker.iptel.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
Serdev mailing list
[email protected]
http://lists.iptel.org/mailman/listinfo/serdev
