[asterisk-bugs] [Asterisk 0013063]: Crash in iax2_destroy at chan_iax2.c:1309

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13063 
====================================================================== 
Reported By:                ZX81
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   13063
Category:                   Channels/chan_iax2
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases):  1.4  
SVN Revision (number only!): 129803 
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             07-12-2008 19:12 CDT
Last Modified:              07-14-2008 21:33 CDT
====================================================================== 
Summary:                    Crash in iax2_destroy at chan_iax2.c:1309
Description: 
Brand new system taken from 1.4svn (r129803).

The machine is at my house and the network is particularly bad today
(http://bugs.digium.com/view.php?id=22#60%
packet loss).

I have a caching name server, and have registrations to three Asterisk 1.4
machines I own (trunking enabled).

There are no users on the machine as it is being built for production for
next week.

With no activity except for the outgoing registrations and qualify
statements, Asterisk crashed with the following:

http://bugs.digium.com/view.php?id=0  0xb732a9dc in iax2_destroy (callno=4176)
at chan_iax2.c:1309
http://bugs.digium.com/view.php?id=1  0xb7334dc3 in __iax2_poke_noanswer
(data=0x81f02e0) at
chan_iax2.c:8869
http://bugs.digium.com/view.php?id=2  0xb734d3d5 in iax2_process_thread
(data=0x81f40d0) at
chan_iax2.c:8642
http://bugs.digium.com/view.php?id=3  0x080ff690 in dummy_start (data=0x81e9c00)
at utils.c:912
http://bugs.digium.com/view.php?id=4  0xb7f37240 in start_thread () from
/lib/tls/i686/cmov/libpthread.so.0
http://bugs.digium.com/view.php?id=5  0xb7e5249e in clone () from
/lib/tls/i686/cmov/libc.so.6

The machine is:

2.6.18-5-686 http://bugs.digium.com/view.php?id=1 SMP Tue Dec 18 21:24:20 UTC
2007 i686 GNU/Linux

It crashed twice earlier (within 10 minutes of each other), but has not
crashed in the last 2 hours.

The only difference I can see (seeing as the box is doing nothing) is that
in the period where it crashed twice, the packet loss was extreme.

This may prove to be a difficult one to track down, however I have
recompiled Asterisk with DEBUG_THREADS and DONT_OPTIMIZE and will upload
another core if I get one.
====================================================================== 

---------------------------------------------------------------------- 
 ZX81 - 07-14-08 21:33  
---------------------------------------------------------------------- 
Ok, so, turns out its in 127069 too:

[Jul 15 14:40:31] Connected to Asterisk SVN-branch-1.4-r127069 currently
running on wickliffe (pid = 31973)
Verbosity is at least 100

http://bugs.digium.com/view.php?id=0  0xb72c7ddc in iax2_destroy (callno=11570)
at chan_iax2.c:1308
        _sched_res = <value optimized out>
        pvt = (struct chan_iax2_pvt *) 0x0
        owner = (struct ast_channel *) 0xb7363250
        __PRETTY_FUNCTION__ = "iax2_destroy"
http://bugs.digium.com/view.php?id=1  0xb72d9743 in __iax2_poke_noanswer
(data=0x82661a8) at
chan_iax2.c:8854
        callno = 11570
        __PRETTY_FUNCTION__ = "__iax2_poke_noanswer"
http://bugs.digium.com/view.php?id=2  0xb72f13b5 in iax2_process_thread
(data=0x825ea30) at
chan_iax2.c:8627
        curelm = <value optimized out>
        _buffer = {__routine = 0xb72ce8f0 <iax2_process_thread_cleanup>,
__arg = 0x825ea30, __canceltype = 135599656, 
  __prev = 0xb700f43c}
        thread = <value optimized out>
        ts = {tv_sec = -1209669838, tv_nsec = -1208847168}
        put_into_idle = 1
http://bugs.digium.com/view.php?id=3  0x080ff4a0 in dummy_start (data=0x8259450)
at utils.c:912
        _buffer = {__routine = 0x806a620 <ast_unregister_thread>, __arg =
0xb700fbb0, __canceltype = 0, __prev = 0x0}
        ret = <value optimized out>
http://bugs.digium.com/view.php?id=4  0xb7fa9240 in start_thread () from
/lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=5  0xb7ec449e in clone () from
/lib/tls/i686/cmov/libc.so.6
No symbol table info available. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
07-14-08 21:33  ZX81           Note Added: 0090267                          
======================================================================