[asterisk-bugs] [Asterisk 0010571]: SIP hairpin invokes Local within app_dial to produce a crash.

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=10571 
====================================================================== 
Reported By:                dtyoo
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   10571
Category:                   Applications/app_dial
Reproducibility:            unable to reproduce
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:            1.4.9  
SVN Branch (only for SVN checkouts, not tarball releases): N/A  
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             08-27-2007 08:43 CDT
Last Modified:              10-10-2007 13:25 CDT
====================================================================== 
Summary:                    SIP hairpin invokes Local within app_dial to produce
a crash.
Description: 
We are getting crashes in app_voicemail on a fairly regular basis.  I'm
still working on steps to re-produce, but I thought I would post the
backtraces here in case someone could glean anything from them.  I will
update if I can figure out the steps to re-produce.
====================================================================== 

---------------------------------------------------------------------- 
 callguy - 10-10-07 13:25  
---------------------------------------------------------------------- 
Corydon76: We reviewed this in more detail today, and agree with Ivan, this
is not just an initialization issue. The reason is that the debug code that
he had commented out is performing operations against the reentrancy
variable (this is only if DEBUG_THREADS is set).

The core issue is that the debugging code isn't thread safe, so there are
several situations where the incrementing/decrementing of reentrancy in the
debug code could lead to an out of bounds array index.

It looks like the easiest way to deal with this is instead of a flat
structure of arrays, we need an array of structures. We're going to create
a patch over here that should resolve this and will submit later today. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
10-10-07 13:25  callguy        Note Added: 0071782                          
======================================================================