Bug#415900: asterisk: Asterisk crashes when trying to call from skinny -> skinny

[Bart-Jan Vrielink]

Package: asterisk
Version: 1:1.2.16~dfsg-1
Severity: important

Just installed Asterisk and am trying to get 2 Cisco 7910 phones to call
each other. So far I can call the demo setup with either phone, and if I do
a dial $number on the console, the phone does ring. But the very second I
dial either skinny phone number from either skinny phone, I get the
following:

Attempting to Clear display on Skinny 556 at vroomfondel
skinny_new: tmp->nativeformats=4 fmt=4
    -- Starting simple switch on '556 at vroomfondel'
Collected digit: [5]
    -- Asked to indicate 'Stop tone' condition on channel
Skinny/556 at vroomfondel-4
Collected digit: [5]
    -- Asked to indicate 'Stop tone' condition on channel
Skinny/556 at vroomfondel-4
Collected digit: [5]
    -- Executing Dial("Skinny/556 at vroomfondel-4", "Skinny/555 at majikthise")
in new stack
Found device: majikthise
    -- skinny_request(555 at majikthise)
    -- Skinny cw: -1, dnd: 0, so: 0, sno: 0
skinny_new: tmp->nativeformats=4 fmt=4
    -- skinny_call(Skinny/555 at majikthise-2)
Segmentation fault

Changes made to the config are:
* skinny.conf:
[majikthise]            ; Device name
model=7910              ; Device model
device=SEP00049A1C4FF8  ; Official identifier
version=P00403010102    ; Firmware version identifier
host=majikthise.dontpanic.nl
permit=10.2.1/24        ; Optional, used for authentication
nat=0
callerid="Bart-Jan" <555>
mailbox=555
callwaiting=1
transfer=1
threewaycalling=1
context=default
line => 555             ; Dial(Skinny/555 at majikthise)

[vroomfondel]           ; Device name
model=7910              ; Device model
device=SEP00049A1C5461  ; Official identifier
version=P004Q301        ; Firmware version identifier
host=vroomfondel.dontpanic.nl
permit=10.2.1/24        ; Optional, used for authentication
nat=0
callerid="BJV" <556>
mailbox=556
callwaiting=1
transfer=1
threewaycalling=1
context=default
line => 556             ; Dial(Skinny/556 at vroomfondel)

* extensions.conf, at end of file:
exten => 555,1,Dial(Skinny/555 at majikthise)
exten => 556,1,Dial(Skinny/556 at vroomfondel)

A tcpdump of the attempted phone call shows (as far as I can tell) a normal
exchange of skinny commands, with the last one a SetRingerMessage
(InsideRing) and right after that asterisk closing all open TCP connections.
I was unable to find(1) a core file.

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.19-spiderwebs
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages asterisk depends on:
ii  adduser                  3.102           Add and remove users and groups
ii  asterisk-classic         1:1.2.16~dfsg-1 Open Source Private Branch Exchang

asterisk recommends no packages.

-- no debconf information