mirror of
https://github.com/asterisk/asterisk.git
synced 2025-09-04 20:04:50 +00:00
336cae73cc
Channel masquerading had a conflict with autochannel locking. When locking autochannel->channel, the channel is fetched from the autochannel and then locked. During the fetch, the autochannel -- which has no locks itself -- can be modified by someone who owns the channel lock. That means that the value of autochan->channel cannot be trusted until you hold the lock. In practice, this caused problems with Local channels getting masqueraded away while the ChanSpy attempted to get info from that channel. The old channel which was about to get removed got locked, but the new (replaced) channel got unlocked (no-op). Because the replaced channel was now locked (and would never get unlocked), it couldn't get removed from the channel list in a timely manner, and would now cause deadlocks when iterating over the channel list. This change checks the autochannel after locking the channel for changes to the autochannel. If the channel had been changed, the lock is reobtained on the new channel. In theory it seems possible that after this fix, the lock attempt on the old (wrong) channel can be on an already destroyed lock, maybe causing a crash. But that hasn't been observed in the wild and is harder induce than the current deadlock. Thanks go to Filip Frank for suggesting a fix similar to this and especially to IRC user hexanol for pointing out why this deadlock was possible and testing this fix. And to Richard for catching my rookie while loop mistake ;) ASTERISK-25321 #close Change-Id: I293ae0014e531cd0e675c3f02d1d118a98683def
99 lines
2.6 KiB
C
99 lines
2.6 KiB
C
/*
|
|
* Asterisk -- An open source telephony toolkit.
|
|
*
|
|
* Copyright (C) 2009, Digium, Inc.
|
|
*
|
|
* Mark Michelson <mmichelson@digium.com>
|
|
*
|
|
* See http://www.asterisk.org for more information about
|
|
* the Asterisk project. Please do not directly contact
|
|
* any of the maintainers of this project for assistance;
|
|
* the project provides a web site, mailing lists and IRC
|
|
* channels for your use.
|
|
*
|
|
* This program is free software, distributed under the terms of
|
|
* the GNU General Public License Version 2. See the LICENSE file
|
|
* at the top of the source tree.
|
|
*/
|
|
|
|
/*!
|
|
* \file
|
|
* \brief "smart" channels
|
|
*
|
|
* \author Mark Michelson <mmichelson@digium.com>
|
|
*/
|
|
|
|
/*** MODULEINFO
|
|
<support_level>core</support_level>
|
|
***/
|
|
|
|
#include "asterisk.h"
|
|
|
|
ASTERISK_FILE_VERSION(__FILE__, "$Revision$")
|
|
|
|
#include "asterisk/autochan.h"
|
|
#include "asterisk/utils.h"
|
|
#include "asterisk/linkedlists.h"
|
|
#include "asterisk/options.h"
|
|
#include "asterisk/channel.h"
|
|
|
|
struct ast_autochan *ast_autochan_setup(struct ast_channel *chan)
|
|
{
|
|
struct ast_autochan *autochan;
|
|
|
|
if (!chan) {
|
|
return NULL;
|
|
}
|
|
|
|
if (!(autochan = ast_calloc(1, sizeof(*autochan)))) {
|
|
return NULL;
|
|
}
|
|
|
|
autochan->chan = ast_channel_ref(chan);
|
|
|
|
ast_channel_lock(autochan->chan); /* autochan is still private, no need for ast_autochan_channel_lock() */
|
|
AST_LIST_INSERT_TAIL(ast_channel_autochans(autochan->chan), autochan, list);
|
|
ast_channel_unlock(autochan->chan);
|
|
|
|
ast_debug(1, "Created autochan %p to hold channel %s (%p)\n", autochan, ast_channel_name(chan), chan);
|
|
|
|
return autochan;
|
|
}
|
|
|
|
void ast_autochan_destroy(struct ast_autochan *autochan)
|
|
{
|
|
struct ast_autochan *autochan_iter;
|
|
|
|
ast_autochan_channel_lock(autochan);
|
|
AST_LIST_TRAVERSE_SAFE_BEGIN(ast_channel_autochans(autochan->chan), autochan_iter, list) {
|
|
if (autochan_iter == autochan) {
|
|
AST_LIST_REMOVE_CURRENT(list);
|
|
ast_debug(1, "Removed autochan %p from the list, about to free it\n", autochan);
|
|
break;
|
|
}
|
|
}
|
|
AST_LIST_TRAVERSE_SAFE_END;
|
|
ast_autochan_channel_unlock(autochan);
|
|
|
|
autochan->chan = ast_channel_unref(autochan->chan);
|
|
|
|
ast_free(autochan);
|
|
}
|
|
|
|
void ast_autochan_new_channel(struct ast_channel *old_chan, struct ast_channel *new_chan)
|
|
{
|
|
struct ast_autochan *autochan;
|
|
|
|
AST_LIST_APPEND_LIST(ast_channel_autochans(new_chan), ast_channel_autochans(old_chan), list);
|
|
|
|
AST_LIST_TRAVERSE(ast_channel_autochans(new_chan), autochan, list) {
|
|
if (autochan->chan == old_chan) {
|
|
autochan->chan = ast_channel_unref(old_chan);
|
|
autochan->chan = ast_channel_ref(new_chan);
|
|
|
|
ast_debug(1, "Autochan %p used to hold channel %s (%p) but now holds channel %s (%p)\n",
|
|
autochan, ast_channel_name(old_chan), old_chan, ast_channel_name(new_chan), new_chan);
|
|
}
|
|
}
|
|
}
|