From 4fb20c329164ea711f2836a6505d7533b0a9f305 Mon Sep 17 00:00:00 2001 From: Russell Bryant Date: Wed, 16 Jul 2008 20:47:53 +0000 Subject: [PATCH] Always ensure that the channel's tech_pvt reference is NULL after calling the destroy callback. (closes issue #13060) Reported by: jpgrayson Patches: chan_iax2_tech_pvt_crash.patch uploaded by jpgrayson (license 492) git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.4@131421 65c4cc65-6c06-0410-ace0-fbb531ad65f3 --- channels/chan_iax2.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/channels/chan_iax2.c b/channels/chan_iax2.c index db0a72ed82..ef90e17ad9 100644 --- a/channels/chan_iax2.c +++ b/channels/chan_iax2.c @@ -3431,6 +3431,12 @@ static int iax2_hangup(struct ast_channel *c) ast_log(LOG_DEBUG, "Really destroying %s now...\n", c->name); iax2_destroy(callno); } + } else if (c->tech_pvt) { + /* If this call no longer exists, but the channel still + * references it we need to set the channel's tech_pvt to null + * to avoid ast_channel_free() trying to free it. + */ + c->tech_pvt = NULL; } ast_mutex_unlock(&iaxsl[callno]); if (option_verbose > 2)