[sr-dev] [kamailio/kamailio] 5.5.1 crash processing INVITE and CANCEL at almost the same time (Issue #3156)

[Daniel-Constantin Mierla]

I am not sure it is the reason for this case, but something is wrong there, because if the global `T` is already set, then there is no `REF` done to `T`, but the function does always to `UNREF` at the end.

It should do first `t = tmb.t_gett();` and then `if(t == NULL || t == T_UNDEFINED)` do `tmb.t_check(msg, &_branch)` and on success retrieve `T` with another `tmb.t_gett()`. If `t_check()` had to be done, then `REF` was done and `UNREF` has to be done at the end.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/3156#issuecomment-1227171208
You are receiving this because you are subscribed to this thread.

Message ID: <kamailio/kamailio/issues/3156/1227171208 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-dev/attachments/20220825/ed7e77ca/attachment.htm>