[SR-Users] q_malloc crash

[Juha Heinanen]

there was one more crash during the night caused by the same invite from
attacker.

i reproduced the tel2sip call that my sip proxy runs, but i didn't get the
crash:

    $ru = "tel:00441212792194";
    $avp(from_uri) = "sip:210.125.64.233";
    xlog("L_INFO", "tel2sip $ru, $(avp(from_uri){uri.host}), $ru\n");
    tel2sip("$ru", "$(avp(from_uri){uri.host})", "$ru");

May 15 08:56:23 siika /usr/sbin/sip-proxy[10685]: INFO: tel2sip tel:00441212792194, 210.125.64.233, tel:00441212792194

so i wonder why the crash happens on the attacker invite.  perhaps it is
not caused by tel2sip function by itself.

the line referred to in gdb where is the if line below:

    /* set result pv value and write sip uri to result pv */
    res_val.rs = sip_uri;
    res_val.flags = PV_VAL_STR;
    if (res->setf(_msg, &res->pvp, (int)EQ_T, &res_val) != 0) {
    	LM_ERR("failed to set result pvar\n");
	    pkg_free(sip_uri.s);
	    return -1;
    }

-- juha