Hi,

There is a segfault bug in HEAD opensips (and probably earlier versions)
related to the msg_cb feature and failure route processing by tm. When a
message is cloned into shared memory, the msg_cb field is not zeroed. If a
failure branch adds more branches (as in 302 redirect handling), then the
msg_cb list is traversed again. Since this happens in different process
than original request process, the pointers are bogus and yield segfault.

Fix (including more things) are uploaded as part of patch 3047314

Regards,
Kennard
_______________________________________________
Devel mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel

Reply via email to