From a8f182dfb50ae669dcbd76fde00ca2eaf37c08bb Mon Sep 17 00:00:00 2001 From: Jeff Peeler Date: Tue, 6 Oct 2009 22:31:41 +0000 Subject: [PATCH] Fix potential crash when entire span request is received. The variable index used in this scenario for accessing the dahdi_pvts was wrong and was most likely copied from the several other places it is used correctly. (closes issue #15998) Reported by: tsearle Patches: dahdi_reset_crash.patch uploaded by tsearle (license 373) git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.6.2@222397 65c4cc65-6c06-0410-ace0-fbb531ad65f3 --- channels/chan_dahdi.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/channels/chan_dahdi.c b/channels/chan_dahdi.c index 588be0d5a0..2874425a0a 100644 --- a/channels/chan_dahdi.c +++ b/channels/chan_dahdi.c @@ -12657,8 +12657,8 @@ static void *pri_dchannel(void *vpri) pri_destroycall(pri->pri, pri->pvts[x]->call); pri->pvts[x]->call = NULL; } - if (pri->pvts[chanpos]->realcall) - pri_hangup_all(pri->pvts[chanpos]->realcall, pri); + if (pri->pvts[x]->realcall) + pri_hangup_all(pri->pvts[x]->realcall, pri); else if (pri->pvts[x]->owner) pri->pvts[x]->owner->_softhangup |= AST_SOFTHANGUP_DEV; ast_mutex_unlock(&pri->pvts[x]->lock);