[asterisk-bugs] [Asterisk 0011791]: Crash on iax2 channel hangup

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=11791 
====================================================================== 
Reported By:                corruptor
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   11791
Category:                   Channels/chan_iax2
Reproducibility:            sometimes
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           1.4.17 
SVN Branch (only for SVN checkouts, not tarball releases): N/A  
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             01-18-2008 05:25 CST
Last Modified:              01-18-2008 20:52 CST
====================================================================== 
Summary:                    Crash on iax2 channel hangup
Description: 
Server (A) is IAX -> SIP and IAX -> ZAP
All calls are coming from another asterisk server X. Callflow: ServerX ->
iax -> ServerA -> sip (or) zap (e1)
Crashes appear when I have more then 30 iax channels. There are also many
attempts  via this iax trunk which we have to deny (by sending Congestion).

Before crash asterisk writes to log:
[Jan 18 06:40:26] VERBOSE[4246] logger.c:     -- Hungup 'IAX2/pbx3-51'
[Jan 18 06:40:26] WARNING[4246] channel.c: Channel 'IAX2/pbx3-51' may not
have been hung up properly
This is the only reason I've set category to chan_iax2. I don't see any
referenced to iax in bt so I might set category incorrectly.
bt is attached.
====================================================================== 

---------------------------------------------------------------------- 
 dimas - 01-18-08 20:52  
---------------------------------------------------------------------- 
crash in free() almost always means some kind of memory corruption which
may happened long before the actual crash. If I were you, I would run
Asterisk under valgrind to find who really corrupts memory.

PS: nice nickname btw :) 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
01-18-08 20:52  dimas          Note Added: 0080887                          
======================================================================