[asterisk-bugs] [Asterisk 0011373]: crash at manager.c pointer error

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=11373 
====================================================================== 
Reported By:                enst
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   11373
Category:                   Core/ManagerInterface
Reproducibility:            random
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:            1.4.13  
SVN Branch (only for SVN checkouts, not tarball releases): N/A  
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             11-25-2007 20:01 CST
Last Modified:              11-26-2007 11:47 CST
====================================================================== 
Summary:                    crash at manager.c pointer error
Description: 
http://bugs.digium.com/view.php?id=0  0x000000000048e09a in process_events
(s=0x7cfc64) at manager.c:1982
        eqe = (struct eventqent *) 0xe0430b24
        ret = 0
        __PRETTY_FUNCTION__ = "process_events"
http://bugs.digium.com/view.php?id=1  0x000000000048ee5b in do_message
(s=0x7cfc64) at manager.c:2169
        m = {hdrcount = 0, headers = {0x0 <repeats 128 times>}}
        header_buf = '\0' <repeats 1023 times>
        res = 0
http://bugs.digium.com/view.php?id=2  0x000000000048f0cc in session_do
(data=0x7cfc64) at manager.c:2197
        s = (struct mansession *) 0x7cfc64
        res = 0
        __PRETTY_FUNCTION__ = "session_do"
http://bugs.digium.com/view.php?id=3  0x00000000004e23a8 in dummy_start
(data=0x7cd7c4) at utils.c:806
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {0,
-443722360254235116, 1074233344, 1078901072, 4096, 1074229264, 
        -443722360262623724, -443863101436592620}, __mask_was_saved = 0}},
__pad = {0x404eb1e0, 0x0, 0x2b8748a60870, 0x2b8748a60888}}
        __cancel_routine = (void (*)(void *)) 0x42a31b
<ast_unregister_thread>
        __cancel_arg = (void *) 0x404eb950
        not_first_call = 0
        ret = (void *) 0x2b8748a60880
        a = {start_routine = 0x48f09c <session_do>, data = 0x7cfc64, 
  name = 0x7cd864 "session_do", ' ' <repeats 11 times>, "started at [
2306] manager.c accept_thread()"}
        lock_info = (struct thr_lock_info *) 0x7d0314
        __PRETTY_FUNCTION__ = "dummy_start"
http://bugs.digium.com/view.php?id=4  0x00002b8747e07317 in start_thread () from
/lib/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=5  0x00002b87487e2d5d in clone () from
/lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=6  0x0000000000000000 in ?? ()
No symbol table info available.


(gdb) f 0
http://bugs.digium.com/view.php?id=0  0x000000000048e09a in process_events
(s=0x7cfc64) at manager.c:1982
1982                    if ((s->authenticated && (s->readperm &
eqe->category) == eqe->category) &&
(gdb) p eqe
$3 = (struct eventqent *) 0xe0430b24
(gdb) p s->eventq->next
$4 = (struct eventqent *) 0x2aaae0430b24


====================================================================== 

---------------------------------------------------------------------- 
 Corydon76 - 11-26-07 11:47  
---------------------------------------------------------------------- 
Also, please upgrade to 1.4.14, as the crash may already have been fixed. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
11-26-07 11:47  Corydon76      Note Added: 0074347                          
======================================================================