BUG How to crash Asterisk 11.12.0 in a fresh PIAF-Green Install?

[hecatae]

See here:

https://issues.asterisk.org/jira/browse/ASTERISK-24301

The following scenario will crash Asterisk, confirmed on versions 11 and 12:
Don't set the following sip.conf variables set:
accept_outofcall_messages (or set to no the default)
outofcall_message_context (not set in general or for a specific context)
If you then receive an out of call SIP Message (SMS Message in this case) and the message is directed to ReceiveFAX() where, in my case we had spandsp installed, Asterisk will crash.

If you run the PIAF3-install script and select PIAF-Green, it installs Asterisk 11.12.0, which has the above mentioned vulnerability.

Is there an update-fixes to patch against this?

 

[Bob Helbush]

http://pbxinaflash.com/community/in...sk-11-upgrade-script.12560/page-3#post-101911