AST-2014-014: Fix race condition where channels may get stuck in ConfBridge under load.

Under load it was possible for the bridging API, and thus ConfBridge, to get
channels that may have hung up stuck in it. This is because handling of state
transitions for a bridged channel within a bridge was not protected and simply
set the new state without regard to the existing state. If the existing state
had been hung up this would get overwritten.

This change adds locking to protect changing of the state and also
takes into consideration the existing state.

ASTERISK-24440 #close
Reported by: Ben Klang

Review: https://reviewboard.asterisk.org/r/4173/


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/11@428299 65c4cc65-6c06-0410-ace0-fbb531ad65f3
This commit is contained in:
Joshua Colp
2014-11-20 14:20:08 +00:00
parent 094eeade6e
commit ce20eaa076

View File

@@ -120,8 +120,22 @@ int ast_bridge_technology_unregister(struct ast_bridge_technology *technology)
void ast_bridge_change_state(struct ast_bridge_channel *bridge_channel, enum ast_bridge_channel_state new_state)
{
/* Change the state on the bridge channel */
bridge_channel->state = new_state;
/* Change the state on the bridge channel with some manner of intelligence. */
ao2_lock(bridge_channel);
switch (bridge_channel->state) {
case AST_BRIDGE_CHANNEL_STATE_DEPART:
break;
case AST_BRIDGE_CHANNEL_STATE_END:
case AST_BRIDGE_CHANNEL_STATE_HANGUP:
if (new_state != AST_BRIDGE_CHANNEL_STATE_DEPART) {
break;
}
/* Fall through */
default:
bridge_channel->state = new_state;
break;
}
ao2_unlock(bridge_channel);
/* Only poke the channel's thread if it is not us */
if (!pthread_equal(pthread_self(), bridge_channel->thread)) {
@@ -130,8 +144,6 @@ void ast_bridge_change_state(struct ast_bridge_channel *bridge_channel, enum ast
ast_cond_signal(&bridge_channel->cond);
ao2_unlock(bridge_channel);
}
return;
}
/*! \brief Helper function to poke the bridge thread */
@@ -1147,8 +1159,12 @@ static void *bridge_channel_thread(void *data)
state = bridge_channel_join(bridge_channel);
/* If no other thread is going to take the channel then hang it up, or else we would have to service it until something else came along */
if (bridge_channel->allow_impart_hangup && (state == AST_BRIDGE_CHANNEL_STATE_END || state == AST_BRIDGE_CHANNEL_STATE_HANGUP)) {
if (bridge_channel->allow_impart_hangup
&& state != AST_BRIDGE_CHANNEL_STATE_DEPART) {
ast_hangup(bridge_channel->chan);
/* nobody is waiting to join me. */
pthread_detach(pthread_self());
}
/* cleanup */