[asterisk-bugs] [Asterisk 0013338]: Crash in chanspy mutex
Asterisk Bug Tracker
noreply at bugs.digium.com
Tue Aug 19 15:22:23 CDT 2008
A NOTE has been added to this issue.
======================================================================
http://bugs.digium.com/view.php?id=13338
======================================================================
Reported By: ruddy
Assigned To:
======================================================================
Project: Asterisk
Issue ID: 13338
Category: Applications/app_chanspy
Reproducibility: have not tried
Severity: crash
Priority: normal
Status: new
Asterisk Version: 1.4.21.2
SVN Branch (only for SVN checkouts, not tarball releases): N/A
SVN Revision (number only!):
Disclaimer on File?: N/A
Request Review:
======================================================================
Date Submitted: 2008-08-18 15:18 CDT
Last Modified: 2008-08-19 15:22 CDT
======================================================================
Summary: Crash in chanspy mutex
Description:
I'm having a crash on chanspy. And it seems to be in the mutex.
It was specific to a groug. None of the channels was in that group.
Here is the dialplan :
exten => 0000,1,ChanSpy(|g(XXXXXXXX_SPY)q)
Here is the backtrace :
(gdb) bt full
http://bugs.digium.com/view.php?id=0 0x08081fa0 in ast_mutex_lock
(pmutex=0x8213558)
at /asterisk-1.4.21.2/include/asterisk/lock.h:755
No locals.
http://bugs.digium.com/view.php?id=1 0x0808584a in ast_waitfor_nandfds
(c=0xb6eac1b0, n=1,
fds=0xb6eac1bc, nfds=0, exception=0x0, outfd=0xb6eac1a0, ms=0xb6eac1b4)
at channel.c:1654
start = {tv_sec = 0, tv_usec = 0}
pfds = (struct pollfd *) 0xb6eac090
res = -1226129032
rms = -1228921824
x = 0
y = -1209229324
max = 135670632
sz = 8
now = 0
whentohangup = 0
diff = 135670632
winner = (struct ast_channel *) 0x0
fdmap = (struct fdmap *) 0xb6eac040
__PRETTY_FUNCTION__ = "ast_waitfor_nandfds"
http://bugs.digium.com/view.php?id=2 0x08086107 in ast_waitfordigit_full
(c=0x82134e0, ms=100,
audiofd=-1, cmdfd=-1) at channel.c:1828
rchan = (struct ast_channel *) 0xb6c02420
outfd = -99999
__PRETTY_FUNCTION__ = "ast_waitfordigit_full"
http://bugs.digium.com/view.php?id=3 0x08085f9c in ast_waitfordigit
(c=0x82134e0, ms=100) at
channel.c:1791
No locals.
http://bugs.digium.com/view.php?id=4 0xb7a53956 in common_exec (chan=0x82134e0,
flags=0xb6ee0e04,
volfactor=0, fd=0, mygroup=0xb6ee0d83 "XXXXXXXX_SPY", spec=0x0,
exten=0x0, context=0x0) at app_chanspy.c:527
peer_chanspy_ds = (struct chanspy_ds *) 0x0
next_chanspy_ds = (struct chanspy_ds *) 0x0
prev = (struct ast_channel *) 0x0
peer = (struct ast_channel *) 0x0
nameprefix = "?\f???t\033\b\000\000\000\0008\f?U\v\b\200\027\037\b\001
\000\000\000x\f?E\020\bx\027\037\b\f???\034~\025\bs\000\000\000\001\000
\000\000\220???*B??\020V!\b?6!\b`6!\bx\f???L\020\bh?\026\b\000\000\000
\000?\f?L\020\bh?\026\b\000\000\000\000\000\000\000\000tv???6!\b`6!\b?
\f???&\000\000h?\026\b\v\032???\f??\020V!\b\006\000\000\000\f???\000\000
\000\000\000\000\000\000\001\000\000\000\004\000\000\000\a\000\000
\000tv???6!\b`6!\b?\f?\037\b\bX5!\b"...
peer_name = '\0' <repeats 13 times>, "\213\215??\237??`???L \000\000?
\v????", '\0' <repeats 28 times>, "h\020!\b????\000\000\000\000\220???
\000\000\000\000P \000\000k\000\000\000\bV!\b\002\000\000\000S=???Z\005
\b?\035???g???g???\006\005\b?i\001\000Y\222???\036???g???_??1????9\032\b
\220???Y@???g???&\000\000?\237??`???L \000\000\020V!\b\005??\f???\000
\000\000\000L \000\000\001\000\000\000\bV!\bL \000\000tv???6!\b"...
zero_volume = 0 '\0'
waitms = 100
res = 0
ptr = 0x0
num = -1209224820
num_spyed_upon = 0
chanspy_ds = {chan = 0x0, unique_id = "0\000\000\000\000\020??0g\000
\000\000\000\000\000\004\000\000", lock = {__data = {__lock = 0, __count
= 0, __owner = 0, __kind = 1, __nusers = 0, {
__spins = 0, __list = {__next = 0x0}}}, __size = '\0' <repeats
12 times>, "\001\000\000\000\000\000\000\000\000\000\000", __align = 0}}
http://bugs.digium.com/view.php?id=5 0xb7a54749 in chanspy_exec
(chan=0x82134e0, data=0xb6ee0d80) at
app_chanspy.c:740
u = (struct ast_module_user *) 0x8211d68
options = 0xb6ee0d81 "g(XXXXXXXX_SPY"
spec = 0x0
argv = {0xb6ee0d80 "", 0xb6ee0d81 "g(XXXXXXXX_SPY"}
mygroup = 0xb6ee0d83 "XXXXXXXX_SPY"
recbase = 0x0
fd = 0
flags = {flags = 9}
oldwf = 4
argc = 2
volfactor = 0
---Type <return> to continue, or q <return> to quit---
res = 0
__PRETTY_FUNCTION__ = "chanspy_exec"
http://bugs.digium.com/view.php?id=6 0x080c3d14 in pbx_exec (c=0x82134e0,
app=0x81b6a18, data=0xb6ee40f8)
at pbx.c:537
res = -16121856
saved_c_appl = 0x0
saved_c_data = 0x0
http://bugs.digium.com/view.php?id=7 0x080c72d4 in pbx_extension_helper
(c=0x82134e0, con=0x0,
context=0x8213660 "xxxxxx", exten=0x82136b0 "xxxxxxxxspy", priority=1,
label=0x0, callerid=0x82113d0 "140", action=E_SPAWN) at pbx.c:1862
e = (struct ast_exten *) 0x81ffe68
app = (struct ast_app *) 0x81b6a18
res = 0
q = {incstack = {0x81fcfc4 "xxxxxx", 0x81fd1ec "papers", 0x81ff9d4
"qwebec", 0x0 <repeats 125 times>}, stacklen = 3, status = 5, swo = 0x0,
data = 0x0, foundcontext = 0x81fd18d "allopass"}
passdata = "|g(ALLOPASS_SPY)q", '\0' <repeats 8174 times>
matching_action = 0
__PRETTY_FUNCTION__ = "pbx_extension_helper"
http://bugs.digium.com/view.php?id=8 0x080c8443 in ast_spawn_extension
(c=0x82134e0, context=0x8213660
"xxxxxx", exten=0x82136b0 "xxxxxxxxspy", priority=1, callerid=0x82113d0
"140") at pbx.c:2317
No locals.
http://bugs.digium.com/view.php?id=9 0x080c89ef in __ast_pbx_run (c=0x82134e0)
at pbx.c:2419
dst_exten = '\0' <repeats 44 times>, "\020", '\0' <repeats 35 times>,
"?8!\b", '\0' <repeats 32 times>, "\220\211?\f\000\000\000???\000?
\237??`???\f\000\000\000?b?????`???1????8!\b?\211\001\000\bV!\b\f\000
\000\000?&\000\000\000\000\000\000\220k??8c??D?\020\b\001\000\000\000
\f???\000\000\000\000\000\000\000\000\001", '\0' <repeats 11 times>,
"????\000\000\000\000\220k??8c????\006\b?\030\026\b?8!\bhc??n?\006\b"
pos = 0
digit = 0
found = 1
res = 0
autoloopflag = 0
error = 0
__PRETTY_FUNCTION__ = "__ast_pbx_run"
http://bugs.digium.com/view.php?id=10 0x080c99dc in pbx_thread (data=0x82134e0)
at pbx.c:2636
c = (struct ast_channel *) 0x82134e0
http://bugs.digium.com/view.php?id=11 0x0810bae8 in dummy_start (data=0x82138d8)
at utils.c:895
__cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {-1208696844,
0, -1225888880, -1225890856, -926490477, 896889326}, __mask_was_saved =
0}}, __pad = {0xb6ee6490, 0x0, 0x0, 0x0}}
__cancel_routine = (void (*)(void *)) 0x806c970 <ast_unregister_thread>
__cancel_arg = (void *) 0xb6ee6b90
not_first_call = 0
ret = (void *) 0x0
a = {start_routine = 0x80c99c5 <pbx_thread>, data = 0x82134e0, name =
0x8211560 "pbx_thread", ' ' <repeats 11 times>, "started at [ 2660]
pbx.c ast_pbx_start()"}
http://bugs.digium.com/view.php?id=12 0xb7f3c4fb in start_thread ()
from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=13 0xb7e55e5e in clone () from
/lib/tls/i686/cmov/libc.so.6
No symbol table info available.
======================================================================
----------------------------------------------------------------------
(0091564) putnopvut (administrator) - 2008-08-19 15:22
http://bugs.digium.com/view.php?id=13338#c91564
----------------------------------------------------------------------
I wasn't able to reproduce it here in my test setup. I'm suspecting that
there's some sort of memory corruption occurring, but it's very difficult
to tell where or how it is happening just by looking at the code.
Is it possible for you to run Asterisk under valgrind? If you could do so
and upload the output here, that could be very helpful. There are
instructions for how to do this in doc/valgrind.txt in the Asterisk source
directory.
Thanks!
Issue History
Date Modified Username Field Change
======================================================================
2008-08-19 15:22 putnopvut Note Added: 0091564
======================================================================
More information about the asterisk-bugs
mailing list