[asterisk-bugs] [Asterisk 0010196]: my asterisk comes down in flames randomly, it appears to be related to chanspy

noreply at bugs.digium.com noreply at bugs.digium.com
Fri Aug 31 23:58:31 CDT 2007 

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=10196 
====================================================================== 
Reported By:                renemendoza
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   10196
Category:                   Applications/app_chanspy
Reproducibility:            random
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:            1.4.7  
SVN Branch (only for SVN checkouts, not tarball releases): N/A  
SVN Revision (number only!):  
Disclaimer on File?:        Yes 
Request Review:              
====================================================================== 
Date Submitted:             07-12-2007 16:24 CDT
Last Modified:              08-31-2007 23:58 CDT
====================================================================== 
Summary:                    my asterisk comes down in flames randomly, it
appears to be related to chanspy
Description: 
i have almost as much chan_spy calls as zap->sip calls i am doing no
transcoding

Asterisk 1.4.7
Zaptel 1.4.3
PowerEdge 2950 2 3Ghz dual core Xeon processors
8 Gigabits RAM


i have around 14 calls and 6 out of them might be chan_spy calls
doing very light recording
using queues and local channels

asterisk crashes randomly
sometimes stays up for days sometimes it crashes more than once a day
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0010209 ast_check_hangup does not return true a...
====================================================================== 

---------------------------------------------------------------------- 
 fabianoheringer - 08-31-07 23:58  
---------------------------------------------------------------------- 
Hi, I´m having the same crash on 1.4.9 version... (I tried 1.4.10.1 and
1.4.11 too)
It´s look like when spying on Zap <-> Sip Channels after channel hungup.

Below is the bt full of my coredump generated after crash:

(gdb) bt full
http://bugs.digium.com/view.php?id=0  0x080801d5 in ast_channel_spy_remove
(chan=0x8364f78, spy=0xb62bf760)
at channel.c:1488
        __res = (struct ast_channel_spy *) 0x0
http://bugs.digium.com/view.php?id=1  0xb793cbd3 in channel_spy (chan=0x832aee8,
spyee=0x82363e8,
volfactor=0xb62bfba8, fd=0, flags=0xb62bfe28) at app_chanspy.c:395
        csth = {spy = {list = {next = 0x0}, lock = {mutex = {__m_reserved
= 0, __m_count = 0, __m_owner = 0x0, __m_kind = 1, __m_lock = {__status =
0, __spinlock = 0}},
      file = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, lineno =
{0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, reentrancy = 0, func = {0x0, 0x0, 0x0, 0x0,
0x0, 0x0, 0x0, 0x0, 0x0,
        0x0}, thread = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}, trigger =
{__c_lock = {__status = 0, __spinlock = 0}, __c_waiting = 0x0, __padding =
'\0' <repeats 27 times>,
      __align = 0}, chan = 0x8364f78, read_queue = {list = {first = 0x0,
last = 0x0}, samples = 0, format = 64}, write_queue = {list = {first = 0x0,
last = 0x0}, samples = 0,
      format = 64}, flags = 57, status = CHANSPY_DONE, type = 0xb793e358
"ChanSpy", read_vol_adjustment = 0, write_vol_adjustment = 0}, fd = 0,
volfactor = 0}
        running = -1
        res = 1
        x = 0
        inp = '\0' <repeats 23 times>
        name = 0xb62bf6e0 "Zap/6-1"
        f = (struct ast_frame *) 0x0
        silgen = (struct ast_silence_generator *) 0x0
        __PRETTY_FUNCTION__ = "channel_spy"
http://bugs.digium.com/view.php?id=2  0xb793d667 in common_exec (chan=0x832aee8,
flags=0xb62bfe28,
volfactor=0, fd=0, mygroup=0x0, spec=0xb62bfbc0 "Zap", exten=0x0,
context=0x0) at app_chanspy.c:532
        group = 0x1 <Address 0x1 out of bounds>
        igrp = 1
        groups = {0x81b2427 "", 0x0, 0x81b2427 "", 0xb7de2ffc "\\­\022",
0x8143c0c "%s", 0xb62bfde4 "\214þ+¶xþ+¶\207Å\017\b \037,¶",
0xb62bfa08 "Hú+¶@HÞ·hW\026\bG\rð·",
  0xb7d137d6 "\213\215\fÿÿÿ\211Â9\2150ÿÿÿt\t\213µ(ÿÿÿÆ\006",
0xb62bf91c
"\001\200­û\214#\033\b\214#\033\b\214#\033\b\202^Ý·\202^Ý·\202^Ý·\202^Ý·'$\033\b",
0x8143c0c "%s",
  0xb62bfde8 "xþ+¶\207Å\017\b \037,¶", 0x81b238c "Attaching
SIP/euridice-08368f68 to Zap/6-1\n", 0x0, 0xb7d1a381 "\201Ã{\214\f",
  0xb62bf91c
"\001\200­û\214#\033\b\214#\033\b\214#\033\b\202^Ý·\202^Ý·\202^Ý·\202^Ý·'$\033\b",
0xfbad8001 <Address 0xfbad8001 out of bounds>,
  0x81b238c "Attaching SIP/euridice-08368f68 to Zap/6-1\n", 0x81b238c
"Attaching SIP/euridice-08368f68 to Zap/6-1\n", 0x81b238c "Attaching
SIP/euridice-08368f68 to Zap/6-1\n",
  0xb7dd5e82 "corrupted double-linked list", 0xb7dd5e82 "corrupted
double-linked list", 0xb7dd5e82 "corrupted double-linked list", 0xb7dd5e82
"corrupted double-linked list",
  0x81b2427 "", 0x0}
        dup_group = 0xb62bf91c
"\001\200­û\214#\033\b\214#\033\b\214#\033\b\202^Ý·\202^Ý·\202^Ý·\202^Ý·'$\033\b"
        s = 0xb62bf978 "6-1"
        num_groups = 0
        x = -1211001887
        peer = (struct ast_channel *) 0x82363e8
        prev = (struct ast_channel *) 0x0
        next = (struct ast_channel *) 0x0
        nameprefix =
"Ë1\024\b{\003\000\000÷9\024\bý1\024\b(R\026\b\000\000\000\000¨ú+¶f4\v\b
M\"lø\0378\bèú+¶\nÔ\017\bȪ\026\bîO\025\bÓN\025\bs\000\000\000ßN\025lÐ\036,¶\bû+¶ÌÁ\a\b`¯2\bÂ\232\023\b\b\000\000\000\000\000\000\000ø\0378\bø\0378\b8û+¶\200Ñ\017\bÓN\025\b\"\001\000\000÷ÿÿÿ\000\000\000\000Ì\v\224·Ð\036,¶8û+¶\206¬\b\bs\217\023\bØ\022\000\000½À\023\bw¥\023\b`¯2\b\003\000\000\000ø\0378\b\000\000\000\000Ì\v\224·\000\000\000\000xû+¶cR\b\bè®2\b\002\000\000\000"...
        peer_name =
"spy-zap\0006-1\000ü/Þ·@HÞ·\000\000\000\000Hú+¶ò³Ñ·Øù+¶ºØÑ·@HÞ·X\\#\b
\000\000\000±\a\000\000\230HÞ·\000\000\000\000@*Þ·\000\000\000\000¨\000\000\000\000\000\000\000xHÞ·@HÞ·`
\000\000 at HÞ·,ú+¶Ô^Ý·\000°Å·\215\000\000\000xHÞ·À+Þ·\fú+¶\vZÑ·8þ\030\b\000°Å·\215\000\000\000_\000\000\000ü/Þ\000Ð\036,¶Hú+¶@HÞ·hW\026\bG\rð·\000\000\020\000\003\000\000\000Hú+¶k\000\000\000P
\000\000Ì\v\224·Ð\036,gÐ\036,¶"...
        zero_volume = 0 '\0'
        waitms = 5000
        res = 0
        ptr = 0xb62bf978 "6-1"
        num = 0
http://bugs.digium.com/view.php?id=3  0xb793dbbf in chanspy_exec
(chan=0x832aee8, data=0xb62bfbc0) at
app_chanspy.c:628
        u = (struct ast_module_user *) 0x81affd0
        options = 0xb62bfbc4 "q"
        spec = 0xb62bfbc0 "Zap"
        argv = {0xb62bfbc0 "Zap", 0xb62bfbc4 "q"}
        mygroup = 0x0
        recbase = 0x0
---Type <return> to continue, or q <return> to quit---
        fd = 0
        flags = {flags = 1}
        oldwf = 4
        argc = 2
        volfactor = 0
        res = 0
        __PRETTY_FUNCTION__ = "chanspy_exec"
http://bugs.digium.com/view.php?id=4  0x080c222b in pbx_exec (c=0x832aee8,
app=0x81bdcf0, data=0xb62c4040)
at pbx.c:532
        res = -1238630704
        saved_c_appl = 0x0
        saved_c_data = 0x0
http://bugs.digium.com/view.php?id=5  0x080c5c57 in pbx_extension_helper
(c=0x832aee8, con=0x0,
context=0x832b10c "Sem_Restricao", exten=0x832b15c "8159", priority=1,
label=0x0, callerid=0x82e6a48 "501",
    action=E_SPAWN) at pbx.c:1833
        e = (struct ast_exten *) 0x81f2d68
        app = (struct ast_app *) 0x81bdcf0
        res = 8
        q = {incstack = {0x0 <repeats 128 times>}, stacklen = 0, status =
5, swo = 0x0, data = 0x0, foundcontext = 0x832b10c "Sem_Restricao"}
        passdata = "Zap|q", '\0' <repeats 8186 times>
        matching_action = 0
        __PRETTY_FUNCTION__ = "pbx_extension_helper"
http://bugs.digium.com/view.php?id=6  0x080c7023 in ast_spawn_extension
(c=0x832aee8, context=0x832b10c
"Sem_Restricao", exten=0x832b15c "8159", priority=1, callerid=0x82e6a48
"501") at pbx.c:2288
No locals.
http://bugs.digium.com/view.php?id=7  0x080c7511 in __ast_pbx_run (c=0x832aee8)
at pbx.c:2388
        dst_exten =
"ü/Þ·\020\000ðµ\210\016ðµ(c,¶ê°Ñ·\020\000ðµ\210\016ðµdQg¶\000\000\000\000°k,¶8d,¶F\023f¶\210\016ðµ
\002\000\000,\033g¶\004¨Ñ·\210Sg¶°k,¶8d,¶ð\021f¶
Ö#\b\214\016ðµ\006\000\000\000dQg¶Zap/6\000,¶p\023ðµð\021f¶xÖ#\b\214\016ðµ\a\000\000\000dQg¶HHÞ·7\000,¶\020\000\000\000ð\021f¶\220\236Ñ·\214\016ð\000\f\000\000\000ü/Þ·@HÞ·G\rð·Øc,¶6ÏÑ·@HÞ·\f\000\000\000\rP\023\b
\b\033\b\000\000\000l\000\000\000\000"...
        pos = 0
        digit = 0
        found = 1
        res = 0
        autoloopflag = 0
        error = 0
        __PRETTY_FUNCTION__ = "__ast_pbx_run"
http://bugs.digium.com/view.php?id=8  0x080c82ce in pbx_thread (data=0x832aee8)
at pbx.c:2603
        c = (struct ast_channel *) 0x832aee8
http://bugs.digium.com/view.php?id=9  0x081046b0 in dummy_start (data=0x81b0820)
at utils.c:545
        _buffer = {__routine = 0x806976a <ast_unregister_thread>, __arg =
0xb62c6bb0, __canceltype = -1238604648, __prev = 0x0}
        ret = (void *) 0xb7de1694
        a = {start_routine = 0x80c82b7 <pbx_thread>, data = 0x832aee8,
name = 0x8255f20 "pbx_thread", ' ' <repeats 11 times>, "started at [ 2627]
pbx.c ast_pbx_start()"}
http://bugs.digium.com/view.php?id=10 0xb7eff20e in start_thread () from
/lib/tls/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=11 0xb7d810de in clone () from
/lib/tls/libc.so.6
No symbol table info available. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
08-31-07 23:58  fabianoheringerNote Added: 0069814                          
======================================================================

More information about the asterisk-bugs mailing list