[asterisk-bugs] [Asterisk 0011255]: crash ast_queue_hangup (chan=0x0)

[noreply at bugs.digium.com]

The following issue has been UPDATED. 
====================================================================== 
http://bugs.digium.com/view.php?id=11255 
====================================================================== 
Reported By:                enst
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   11255
Category:                   Applications/app_queue
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     new
Asterisk Version:           1.4.13  
SVN Branch (only for SVN checkouts, not tarball releases): N/A  
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             11-15-2007 04:23 CST
Last Modified:              11-15-2007 04:43 CST
====================================================================== 
Summary:                    crash   ast_queue_hangup (chan=0x0)
Description: 
http://bugs.digium.com/view.php?id=0  0x0000000000448361 in
__ast_pthread_mutex_trylock (filename=0x51b973
"channel.c", lineno=5041, func=0x51f650 "ast_channel_trylock", 
    mutex_name=0x51d283 "&chan->lock", t=0xc8) at
/usr/src/asterisk/include/asterisk/lock.h:349
        res = 1195112954
        canlog = -1
        __PRETTY_FUNCTION__ = "__ast_pthread_mutex_trylock"
http://bugs.digium.com/view.php?id=1  0x0000000000451b50 in ast_channel_trylock
(chan=0x0) at
channel.c:5041
        res = -737182658
        __PRETTY_FUNCTION__ = "ast_channel_trylock"
http://bugs.digium.com/view.php?id=2  0x0000000000441cd5 in ast_queue_hangup
(chan=0x0) at channel.c:955
        f = {frametype = AST_FRAME_CONTROL, subclass = 1, datalen = 0,
samples = 0, mallocd = 0, mallocd_hdr_len = 0, offset = 0, src = 0x0, 
  data = 0x0, delivery = {tv_sec = 0, tv_usec = 0}, frame_list = {next =
0x0}, has_timing_info = 0, ts = 0, len = 0, seqno = 0}
http://bugs.digium.com/view.php?id=3  0x00002aaac0834c69 in __sip_autodestruct
(data=0x2aaad4103b10) at
chan_sip.c:2108
        p = (struct sip_pvt *) 0x2aaad4103b10
        __PRETTY_FUNCTION__ = "__sip_autodestruct"
http://bugs.digium.com/view.php?id=4  0x00000000004cbc6c in ast_sched_runq
(con=0x2aaab004ca30) at
sched.c:359
        current = (struct sched *) 0x2aaadc0a2e00
        tv = {tv_sec = 1195112955, tv_usec = 7745}
        numevents = 0
        res = 0
        __PRETTY_FUNCTION__ = "ast_sched_runq"
http://bugs.digium.com/view.php?id=5  0x00002aaac087afc9 in do_monitor
(data=0x0) at chan_sip.c:15416
        res = 1
        sip = (struct sip_pvt *) 0x2aaacc1b4830
        peer = (struct sip_peer *) 0x0
        t = 1195112955
        fastrestart = 1
        lastpeernum = 116
        curpeernum = 117
        reloading = 0
        __PRETTY_FUNCTION__ = "do_monitor"
http://bugs.digium.com/view.php?id=6  0x00000000004deaae in dummy_start
(data=0x2aaab0056820) at
utils.c:806
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {0,
-68017707629103782, 0, 0, 3, 1076445184, -68017707629104102, 
        -68017708705223228}, __mask_was_saved = 0}}, __pad = {0x402931c0,
0x0, 0x0, 0x0}}
        __cancel_routine = (void (*)(void *)) 0x429baa
<ast_unregister_thread>
        __cancel_arg = (void *) 0x40293940
        not_first_call = 0
        ret = (void *) 0x0
        a = {start_routine = 0x2aaac087a90d <do_monitor>, data = 0x0, 
  name = 0x2aaab0197540 "do_monitor", ' ' <repeats 11 times>, "started at
[15470] chan_sip.c restart_monitor()"}
        lock_info = (struct thr_lock_info *) 0x7cf620
http://bugs.digium.com/view.php?id=7  0x00002b47937e12a5 in start_thread () from
/lib/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=8  0x00002b47941b961d in clone () from
/lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=9  0x0000000000000000 in ?? ()
No symbol table info available.


chan_sip.c 
p->owner == 0x0;

if (p->owner) {
		ast_log(LOG_WARNING, "Autodestruct on dialog '%s' with owner in place
(Method: %s)\n", p->callid, sip_methods[p->method].text);
		ast_queue_hangup(p->owner);
}


====================================================================== 

---------------------------------------------------------------------- 
 oej - 11-15-07 04:43  
---------------------------------------------------------------------- 
Moving this issue away from SIP to app_queue 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
11-15-07 04:43  oej            Disclaimer on File?       => N/A             
11-15-07 04:43  oej            Note Added: 0073675                          
11-15-07 04:43  oej            Category                
Channels/chan_sip/General => Applications/app_queue
======================================================================