Opened 16 years ago

Closed 16 years ago

#845 closed defect (fixed)

Crash in 100rel after CANCEL is received and 487 is sent (thanks Gang Liu for the report)

Reported by: bennylp Owned by: bennylp
Priority: normal Milestone: release-1.3
Component: pjsip Version: trunk
Keywords: Cc:
Backport to 1.x milestone: Backported:

Description (last modified by bennylp)

Scenario:

UAC --> INVITE --> UAS     # UAC support 100rel and UAS required
    <-- 100    <--
    <-- 180    <--  # require 100rel

    --> CANCEL -->  
    <-- 200    <--   
    <-- 487    <--
    --> PRACK  -->
    <-- 500    <--
 
    --> ACK    -->

Above will crash the UAS because inv tsx was destroyed but 100rel retransmit timer still there.

Thanks Gang Liu for the report!

The corresponding ticket for 1.0 branch is ticket #846.

Change History (2)

comment:1 Changed 16 years ago by bennylp

  • Description modified (diff)

comment:2 Changed 16 years ago by bennylp

  • Resolution set to fixed
  • Status changed from new to closed

Fixed in r2697

Note: See TracTickets for help on using tickets.