[sr-dev] [kamailio] http_query causes memory corruption with AVPs (#212)

[scottgrim]

I have found an instance where using an avp or xavp as the response variable for http_query will cause a segfault later in t_relay().  When I change the variable to a $var instead of an avp, there is no segfault.

I can only recreate it with a specific URL. If I try to reproduce it by simply sending a plain text response from a static page, it does not segfault.
The http_query command is as follows:
http_query("http://cnam.dashcs.com/?companyId=XXXXX&password=XXXXXXX&number=$avp(from_phone)", "$avp(cnam)");

version: kamailio 4.3.0 (x86_64/linux) c6aa95
flags: STATS: Off, USE_TCP, USE_TLS, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC, F_MALLOC, DBG_F_MALLOC, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: c6aa95 
compiled on 13:39:06 Jun 10 2015 with gcc 4.8.2



---
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/212
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20150616/d9437527/attachment.html>