[asterisk-bugs] [Asterisk 0011859]: Random Segmentation Fault (crash)

noreply at bugs.digium.com noreply at bugs.digium.com
Tue Jan 29 09:16:03 CST 2008


The following issue has been RESOLVED. 
====================================================================== 
http://bugs.digium.com/view.php?id=11859 
====================================================================== 
Reported By:                akron
Assigned To:                file
====================================================================== 
Project:                    Asterisk
Issue ID:                   11859
Category:                   . I did not set the category correctly.
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     resolved
Asterisk Version:           1.2.26.1 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
Resolution:                 suspended
Fixed in Version:           
====================================================================== 
Date Submitted:             01-29-2008 04:35 CST
Last Modified:              01-29-2008 09:16 CST
====================================================================== 
Summary:                    Random Segmentation Fault (crash)
Description: 
1.2.26.2

gdb  /usr/sbin/asterisk ./core.27197     

(gdb) bt full
http://bugs.digium.com/view.php?id=0  0x40141ef1 in kill () from /lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=1  0x40028bb1 in pthread_kill () from
/lib/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=2  0x40028f2b in raise () from
/lib/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=3  0x40141b24 in raise () from /lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=4  0x401433fd in abort () from /lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=5  0x4017476c in __libc_message () from
/lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=6  0x4017d066 in malloc_printerr () from
/lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=7  0x4017c0ea in malloc_consolidate () from
/lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=8  0x4017b703 in _int_malloc () from
/lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=9  0x4017b080 in calloc () from
/lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=10 0x4039a552 in sip_alloc (callid=0xbeffea8b
"45a218a1-41da673 at 192.168.100.251", sin=0xbeffe794, 
    useglobal_nat=1, intended_method=2) at chan_sip.c:3138
        p = (struct sip_pvt *) 0x2
http://bugs.digium.com/view.php?id=11 0x403af480 in find_call (req=0xbeffe7a4,
sin=0xbeffe794,
intended_method=2) at chan_sip.c:3316
        found = 0
        p = (struct sip_pvt *) 0xbeffea8b
        callid = 0xbeffea8b "45a218a1-41da673 at 192.168.100.251"
        tag = 0x403c30b1 ""
        totag = '\0' <repeats 72 times>,
"?\223\002@ô\037#@p\236\002@?\223\002@ô\037#@\230??ž?\223\002@???ž???žô?\002@???ž\210í<@???ž­j\002@"
        fromtag =
"6.111.xxx.xx\000;q=0;expires=120;received=\"sip:86.111.xxx.xx:5060\"\000
00:08:07 GMT", '\0' <repeats 50 times>
http://bugs.digium.com/view.php?id=12 0x403ad97b in sipsock_read (id=0x8143fa0,
fd=9, events=1, ignore=0x0)
at chan_sip.c:11589
        req = {rlPart1 = 0xbeffe9bc "REGISTER", rlPart2 = 0xbeffe9c5
"sip:192.168.100.2", 
  len = 641, headers = 13, method = 2, header = {0xbeffe9bc "REGISTER", 
    0xbeffe9e0 "Via: SIP/2.0/UDP
192.168.100.251:5060;branch=z2hG4bK-4a3d5451", 
    0xbeffea1f "From: <sip:s at 192.168.100.2>;tag=202e68133ca6333ao0", 
    0xbeffea5d "To: <sip:s at 192.168.100.2>", 
---Type <return> to continue, or q <return> to quit---
    0xbeffea82 "Call-ID: 45a218a1-41da673 at 192.168.100.251", 0xbeffeaad
"CSeq: 8441 REGISTER", 
    0xbeffeac2 "Max-Forwards: 70", 
    0xbeffead4 "Authorization: Digest
username=\"xxxs\",realm=\"asterisk\",nonce=\"022f025c\",uri=\"sip:192.168.100.2\",algorithm=MD5,response=\"4f8b797f308d260371454bffbcf38c07\"",

    0xbeffeb76 "Contact: <sip:xxxxs at 192.168.100.251:5060>;expires=60", 
    0xbeffebb2 "User-Agent: Linksys/SPA941-5.1.8", 0xbeffebd4
"Content-Length: 0", 
    0xbeffebe7 "Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS,
REFER", 
    0xbeffec26 "Supported: replaces", 0xbeffec3b "", 0x0 <repeats 50
times>}, lines = 0, line = {
    0xbeffec3d "", 0x0 <repeats 63 times>}, 
  data = "REGISTER\000sip:192.168.100.2\000SIP/2.0\000\000Via: SIP/2.0/UDP
192.168.100.251:5060;branch=z2hG4bK-2a3d5451\000\000From:
<sip:xxxxs at 192.168.100.2>;tag=202e68133ca6333ao0\000\000To:
<sip:xxxxs at 192.168.100.2>\000\000Ca"..., debug = 0, flags = 0, sdp_start =
0, sdp_end = 0}
        sin = {sin_family = 2, sin_port = 50195, sin_addr = {s_addr =
4217678016}, 
  sin_zero = "\000\000\000\000\000\000\000"}
        p = (struct sip_pvt *) 0xbeffe7a4
        res = -1090525292
        len = 16
        nounlock = 0
        recount = 0
        iabuf = '\0' <repeats 15 times>
        lockretry = 100
http://bugs.digium.com/view.php?id=13 0x08055b5d in ast_io_wait (ioc=0x813fe28,
howlong=0) at io.c:284
        res = 1
        x = 0
        origcnt = 1
http://bugs.digium.com/view.php?id=14 0x403a3999 in do_monitor (data=0x0) at
chan_sip.c:11789
        res = 135527976
        sip = (struct sip_pvt *) 0x813fe28
        peer = (struct sip_peer *) 0x813fe28
        t = 1201565310
        fastrestart = 0
        lastpeernum = -1
        curpeernum = 11
        reloading = 135527976
http://bugs.digium.com/view.php?id=15 0x4002654e in pthread_start_thread () from
/lib/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=16 0x401d2b8a in clone () from /lib/libc.so.6
No symbol table info available.



gettimeofday({1201565305, 256682}, NULL) = 0
poll([{fd=9, events=POLLIN, revents=POLLIN}], 1, 1000) = 1
recvfrom(9, "NOTIFY sip:192.168.100.2 SIP/2.0"..., 4095, 0,
{sa_family=AF_INET, sin_port=htons(5061),
sin_addr=inet_addr("192.168.100.250")}, [16]) = 348
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 13
connect(13, {sa_family=AF_INET, sin_port=htons(50195),
sin_addr=inet_addr("192.168.100.250")}, 16) = 0
getsockname(13, {sa_family=AF_INET, sin_port=htons(34576),
sin_addr=inet_addr("192.168.100.2")}, [16]) = 0
close(13)                               = 0
sendto(9, "SIP/2.0 603 Declined (no dialog)"..., 401, 0,
{sa_family=AF_INET, sin_port=htons(5061),
sin_addr=inet_addr("192.168.100.250")}, 16) = 401
gettimeofday({1201565305, 266580}, NULL) = 0
time([1201565305])                      = 1201565305
time([1201565305])                      = 1201565305
gettimeofday({1201565305, 266630}, NULL) = 0
poll([{fd=9, events=POLLIN}], 1, 1000)  = 0
gettimeofday({1201565306, 273602}, NULL) = 0
time([1201565306])                      = 1201565306
time([1201565306])                      = 1201565306
gettimeofday({1201565306, 273642}, NULL) = 0
poll([{fd=9, events=POLLIN}], 1, 1000)  = 0
gettimeofday({1201565307, 283651}, NULL) = 0
time([1201565307])                      = 1201565307
time([1201565307])                      = 1201565307
gettimeofday({1201565307, 283696}, NULL) = 0
poll([{fd=9, events=POLLIN, revents=POLLIN}], 1, 1000) = 1
recvfrom(9, "NOTIFY sip:192.168.100.2 SIP/2.0"..., 4095, 0,
{sa_family=AF_INET, sin_port=htons(5060),
sin_addr=inet_addr("192.168.100.251")}, [16]) = 339
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 13
connect(13, {sa_family=AF_INET, sin_port=htons(50195),
sin_addr=inet_addr("192.168.100.251")}, 16) = 0
getsockname(13, {sa_family=AF_INET, sin_port=htons(34577),
sin_addr=inet_addr("192.168.100.2")}, [16]) = 0
close(13)                               = 0
sendto(9, "SIP/2.0 603 Declined (no dialog)"..., 402, 0,
{sa_family=AF_INET, sin_port=htons(5060),
sin_addr=inet_addr("192.168.100.251")}, 16) = 402
gettimeofday({1201565307, 339053}, NULL) = 0
time([1201565307])                      = 1201565307
time([1201565307])                      = 1201565307
gettimeofday({1201565307, 339113}, NULL) = 0
poll([{fd=9, events=POLLIN}], 1, 1000)  = 0
gettimeofday({1201565308, 343644}, NULL) = 0
time([1201565308])                      = 1201565308
time([1201565308])                      = 1201565308
gettimeofday({1201565308, 343691}, NULL) = 0
poll([{fd=9, events=POLLIN}], 1, 1000)  = 0
gettimeofday({1201565309, 353640}, NULL) = 0
time([1201565309])                      = 1201565309
time([1201565309])                      = 1201565309
gettimeofday({1201565309, 353686}, NULL) = 0
poll([{fd=9, events=POLLIN}], 1, 1000)  = 0
gettimeofday({1201565310, 363654}, NULL) = 0
time([1201565310])                      = 1201565310
time([1201565310])                      = 1201565310
gettimeofday({1201565310, 363695}, NULL) = 0
poll([{fd=9, events=POLLIN, revents=POLLIN}], 1, 1000) = 1
recvfrom(9, "REGISTER sip:192.168.100.2 SIP/2"..., 4095, 0,
{sa_family=AF_INET, sin_port=htons(5060),
sin_addr=inet_addr("192.168.100.251")}, [16]) = 641
open("/dev/tty", O_RDWR|O_NONBLOCK|O_NOCTTY) = -1 ENXIO (No such device or
address)
writev(2, [{"*** glibc detected *** ", 23}, {"corrupted double-linked
list", 28}, {": 0x", 4}, {"08143048", 8}, {" ***\n", 5}], 5) = 68
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
kill(27197, SIGABRT)                    = 0
--- SIGABRT (Aborted) @ 0 (0) ---



getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000) = 0
getppid() = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000) = 0
getppid() = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 2000) = 1
getppid() = 27190
read(3, "\340\373?\277\0\0\0\0t\372?\277`\362?@h<\23\10\3P\0\210"..., 148)
= 148
old_mmap(0xbedbf000, 266240, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xbedbf000
mprotect(0xbedbf000, 4096, PROT_NONE)   = 0
sched_getscheduler(27195)               = 0 (SCHED_OTHER)
sched_getparam(27195, { 0 })            = 0
clone(child_stack=0xbedffbc8,
flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|SIGRT_1) = 21722
--- SIGRT_1 (Unknown signal 33) @ 0 (0) ---
sigreturn()                             = ? (mask now ~[TRAP KILL STOP])
kill(27195, SIGRTMIN) = 0
poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 2000) = 1
getppid()                               = 27190
waitpid(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], WNOHANG|__WCLONE) =
21722
munmap(0xbedbf000, 266240)              = 0
waitpid(-1, 0x813139c, WNOHANG|__WCLONE) = 0
read(3, "\340\373?\277\0\0\0\0t\372?\277`\362?@h<\23\10\3P\0\210"..., 148)
= 148
old_mmap(0xbedbf000, 266240, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xbedbf000
mprotect(0xbedbf000, 4096, PROT_NONE)   = 0
sched_getscheduler(27195)               = 0 (SCHED_OTHER)
sched_getparam(27195, { 0 })            = 0
clone(child_stack=0xbedffbc8,
flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|SIGRT_1) = 21723
--- SIGRT_1 (Unknown signal 33) @ 0 (0) ---
sigreturn()                             = ? (mask now ~[TRAP KILL STOP])
kill(27195, SIGRTMIN) = 0
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
waitpid(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], WNOHANG|__WCLONE) =
21723
munmap(0xbedbf000, 266240)              = 0
waitpid(-1, 0x813139c, WNOHANG|__WCLONE) = 0
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 2000) = 1
getppid() = 27190
read(3, "\340\373_\277\0\0\0\0\224\372_\277\0202\v\0100+\24\10\3"..., 148)
= 148
old_mmap(0xbedbf000, 266240, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xbedbf000
mprotect(0xbedbf000, 4096, PROT_NONE)   = 0
sched_getscheduler(27194)               = 0 (SCHED_OTHER)
sched_getparam(27194, { 0 })            = 0
clone(child_stack=0xbedffbc8,
flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|SIGRT_1) = 21741
--- SIGRT_1 (Unknown signal 33) @ 0 (0) ---
sigreturn()                             = ? (mask now ~[TRAP KILL STOP])
kill(27194, SIGRTMIN) = 0
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
waitpid(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], WNOHANG|__WCLONE) =
21741
munmap(0xbedbf000, 266240)              = 0
waitpid(-1, 0x813139c, WNOHANG|__WCLONE) = 0
poll([{fd=3, events=POLLIN}], 1, 2000)  = 0
getppid()                               = 27190
poll([{fd=3, events=POLLIN}], 1, 2000) = -1 EINTR (Interrupted system
call)
--- SIGRT_1 (Unknown signal 33) @ 0 (0) ---
sigreturn()                             = ? (mask now ~[TRAP KILL STOP])
getppid()                               = 27190
waitpid(-1, [{WIFSIGNALED(s) && WTERMSIG(s) == SIGABRT && WCOREDUMP(s)}],
WNOHANG|__WCLONE) = 27197
kill(27196, SIGABRT) = 0
kill(27195, SIGABRT)     = 0
--- SIGRT_1 (Unknown signal 33) @ 0 (0) ---
sigreturn()                             = ? (mask now ~[TRAP KILL STOP])
--- SIGRT_1 (Unknown signal 33) @ 0 (0) ---
sigreturn()                             = ? (mask now ~[TRAP KILL STOP])
kill(27194, SIGABRT) = 0
kill(27193, SIGABRT) = 0
--- SIGRT_1 (Unknown signal 33) @ 0 (0) ---
sigreturn()                             = ? (mask now ~[TRAP KILL STOP])
--- SIGRT_1 (Unknown signal 33) @ 0 (0) ---
sigreturn()                             = ? (mask now ~[TRAP KILL STOP])
kill(27190, SIGABRT)                    = 0
exit_group(0)                           = ?

====================================================================== 

---------------------------------------------------------------------- 
 file - 01-29-08 09:16  
---------------------------------------------------------------------- 
1.2 is no longer being supported on the bug tracker. If you can reproduce
this with Asterisk 1.4 feel free to reopen with an attached backtrace. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
01-29-08 09:16  file           Resolution               open => suspended   
01-29-08 09:16  file           Assigned To               => file            
01-29-08 09:16  file           Note Added: 0081321                          
======================================================================




More information about the asterisk-bugs mailing list