sysmocom
/
asterisk
11
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

AST-2021-006 - res_pjsip_t38.c: Check for session_media on reinvite. 

When Asterisk sends a reinvite negotiating T38 faxing, it's possible a
crash can occur if the response contains a m=image and zero port. The
reinvite callback code now checks session_media to see if it is null or
not before trying to access the udptl variable on it.

ASTERISK-29305

Change-Id: I1dfc51c5fa586e38579ede4bc228edee213ccaa9
This commit is contained in:
Ben Ford 2021-02-25 13:50:47 -06:00 committed by George Joseph
parent 0323293142
commit 77328142b4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
res/res_pjsip_t38.c
View File

@ -325,7 +325,7 @@ static int t38_reinvite_response_cb(struct ast_sip_session *session, pjsip_rx_da
* If there is a session_media object, but no udptl object available
* then it's assumed the stream was declined.
*/
if (!session_media->udptl) {
if (session_media && !session_media->udptl) {
session_media = NULL;
}