[asterisk-bugs] [Asterisk 0010936]: Crash in ast_queue_frame

[noreply at bugs.digium.com]

The following issue has been ASSIGNED. 
====================================================================== 
http://bugs.digium.com/view.php?id=10936 
====================================================================== 
Reported By:                ChaseVenters
Assigned To:                russell
====================================================================== 
Project:                    Asterisk
Issue ID:                   10936
Category:                   Channels/chan_local
Reproducibility:            random
Severity:                   crash
Priority:                   normal
Status:                     assigned
Asterisk Version:           1.4.12.1  
SVN Branch (only for SVN checkouts, not tarball releases): N/A  
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             10-10-2007 12:38 CDT
Last Modified:              11-05-2007 14:10 CST
====================================================================== 
Summary:                    Crash in ast_queue_frame
Description: 
We've been getting this crash randomly with a frequency of one every day or
two (sometimes, two in one day). We first saw this problem in 1.4.6, and we
switched to 1.4.11, then 1.4.12.1 to see if the problem might have been
fixed. On 1.4.12.1, we still have the problem.

This appears to be related to an issue,
http://bugs.digium.com/view.php?id=0009694, that was reported in
May, then closed in August due to a lack of further information. That
reporter claims disabling compiler optimizations made his problem go away,
but that sounds like he just changed the timing of his race condition.

What further information can I provide?
====================================================================== 

---------------------------------------------------------------------- 
 svnbot - 11-05-07 14:10  
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 88709

U   branches/1.4/main/channel.c

------------------------------------------------------------------------
r88709 | russell | 2007-11-05 14:10:17 -0600 (Mon, 05 Nov 2007) | 20 lines

Merge the last bit of changes from asterisk/team/russell/readq-1.4

The issue here is that the channel frame readq handling got broken when
the
code was converted to use the linked list macros.  It caused corruption of
the
list head and tail pointers.  So, I fixed up the usage of the linked list
macros and in passing, simplified the code.  I also documented what the
code
is doing, as it was a bit difficult to figure out at first.

This bug showed itself with crashes showing messed up head/tail pointers
for
the readq.  However, there are a couple of crashes that aren't quite as
obvious,
but I think may be related.  So, if your bug gets closed by this commit,
but
you still have a problem, please reopen or create a new bug report.

(closes issue http://bugs.digium.com/view.php?id=10936)
(closes issue http://bugs.digium.com/view.php?id=10595)
(closes issue http://bugs.digium.com/view.php?id=10368)
(closes issue http://bugs.digium.com/view.php?id=11084)
(closes issue http://bugs.digium.com/view.php?id=10040)
(closes issue http://bugs.digium.com/view.php?id=10840)

------------------------------------------------------------------------ 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
11-05-07 14:10  svnbot         Note Added: 0073128                          
11-05-07 14:10  svnbot         Status                   feedback => assigned
11-05-07 14:10  svnbot         Assigned To               => russell         
======================================================================