Bug#731661: linphone: segfault with Asterisk video calls

[Eric Cooper]

Package: linphone
Version: 3.6.1-2.1+b2
Severity: important

If I attempt a video call from linphone through my Asterisk server,
the linphone client segfaults as soon as the call is accepted.  This
happens even when making a call to a voice-only destination, if the
"Always start video" option is on.  When it's off, voice calls work
fine.

Video calls works fine with linphone 3.5.2 from wheezy.  And version
3.6.1 also works OK when calling direct from linphone to linphone,
without going through Asterisk.

I have Asterisk configured for h263 video, ulaw audio only.

Here is the backtrace from the segfault:

#0  rtp_session_rtp_recv_abstract (socket=socket at entry=28, msg=0x7fffbc006bb0, flags=0, from=0x7fffd77fd990, 
    fromlen=0x7fffd77fd98c) at rtpsession_inet.c:1097
#1  0x00007ffff2e071f0 in rtp_session_rtp_recv (session=session at entry=0xc23400, user_ts=user_ts at entry=29700)
    at rtpsession_inet.c:1219
#2  0x00007ffff2e0501b in rtp_session_recvm_with_ts (session=0xc23400, user_ts=user_ts at entry=29700)
    at rtpsession.c:1088
#3  0x00007ffff74dd78b in receiver_process (f=0xaedee0) at otherfilters/msrtp.c:582
#4  0x00007ffff72b1a80 in ms_filter_process (f=f at entry=0xaedee0) at base/msfilter.c:303
#5  0x00007ffff72b2428 in call_process (f=0xaedee0) at base/msticker.c:222
#6  run_graph (f=0xaedee0, s=s at entry=0xb498c0, unschedulable=unschedulable at entry=0x7fffd77fdb58, 
    force_schedule=force_schedule at entry=0 '\000') at base/msticker.c:242
#7  0x00007ffff72b2542 in run_graphs (s=s at entry=0xb498c0, execution_list=<optimized out>, 
    force_schedule=force_schedule at entry=0 '\000') at base/msticker.c:261
#8  0x00007ffff72b297f in ms_ticker_run (arg=0xb498c0) at base/msticker.c:440
#9  0x00007ffff2be3e0e in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0
#10 0x00007fffef4f30fd in clone () from /lib/x86_64-linux-gnu/libc.so.6

Please let me know if you'd like me to capture any additional
information.

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing'), (400, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.10-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages linphone depends on:
ii  libasound2                1.0.27.2-3
ii  libatk1.0-0               2.10.0-2
ii  libavcodec54              6:9.10-1
ii  libavutil52               6:9.10-1
ii  libc6                     2.17-97
ii  libcairo2                 1.12.16-2
ii  libexosip2-10             4.0.0-4
ii  libfontconfig1            2.11.0-1
ii  libfreetype6              2.4.9-1.1
ii  libgdk-pixbuf2.0-0        2.28.2-1
ii  libgl1-mesa-glx [libgl1]  9.2.2-1
ii  libglew1.10               1.10.0-3
ii  libglib2.0-0              2.36.4-1
ii  libglu1-mesa [libglu1]    9.0.0-2
ii  libgtk2.0-0               2.24.22-1
ii  liblinphone5              3.6.1-2.1+b2
ii  libmediastreamer-base3    3.6.1-2.1+b2
ii  libnotify4                0.7.6-1
ii  libogg0                   1.3.1-1
ii  libopus0                  1.1~beta-3
ii  libortp9                  3.6.1-2.1+b2
ii  libosip2-10               4.0.0-3
ii  libpango-1.0-0            1.36.0-1
ii  libpangocairo-1.0-0       1.36.0-1
ii  libpangoft2-1.0-0         1.36.0-1
ii  libpulse0                 4.0-6+b1
ii  libsoup2.4-1              2.44.1-1
ii  libspandsp2               0.0.6~pre21-1
ii  libspeex1                 1.2~rc1.1-1
ii  libspeexdsp1              1.2~rc1.1-1
ii  libsqlite3-0              3.8.1-1
ii  libswscale2               6:9.10-1
ii  libtheora0                1.1.1+dfsg.1-3.1
ii  libtiff4                  3.9.7-2
ii  libudev1                  204-5
ii  libupnp6                  1:1.6.17-1.2
ii  libv4l-0                  1.0.0-1
ii  libvpx1                   1.2.0-2
ii  libx11-6                  2:1.6.2-1
ii  libxv1                    2:1.0.9-1
ii  linphone-nogtk            3.6.1-2.1+b2

linphone recommends no packages.

Versions of packages linphone suggests:
ii  yelp  3.10.1-1

-- no debconf information