dect
/
asterisk
Archived
13
0
Fork 0
Code Releases Activity

Merged revisions 238411 via svnmerge from 

https://origsvn.digium.com/svn/asterisk/branches/1.4

........
  r238411 | dvossel | 2010-01-07 14:14:25 -0600 (Thu, 07 Jan 2010) | 10 lines
  
  fixes crash in "scheduled_destroy" in chan_iax
  
  A signed short was used to represent a callnumber.  This is makes
  it possible to attempt to access the iaxs array with a negative
  index.
  
  (closes issue #16565)
  Reported by: jensvb
........


git-svn-id: http://svn.digium.com/svn/asterisk/trunk@238412 f38db490-d61c-443f-a65b-d21fe96a405b
This commit is contained in:
dvossel 2010-01-07 20:15:27 +00:00
parent af5b16851a
commit 8545cbd83f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
channels/chan_iax2.c
View File

@ -1700,7 +1700,7 @@ static void iax2_frame_free(struct iax_frame *fr)
static int scheduled_destroy(const void *vid)
{
short callno = PTR_TO_CALLNO(vid);
unsigned short callno = PTR_TO_CALLNO(vid);
ast_mutex_lock(&iaxsl[callno]);
if (iaxs[callno]) {
if (option_debug) {