[asterisk-bugs] [Asterisk 0012520]: Asterisk crash randomly while doing transfer

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=12520 
====================================================================== 
Reported By:                tcap
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   12520
Category:                   Core/PBX
Reproducibility:            random
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           Older 1.4 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             04-24-2008 17:05 CDT
Last Modified:              05-08-2008 12:29 CDT
====================================================================== 
Summary:                    Asterisk crash randomly while doing transfer
Description: 
My version is 1.4.10.1 , asterisk crash randomly while I do transfer test.
It can be reproduced after I did hundread times transfer. I update to
1.4.19, but no help, got same situation. Anyone known about it?

The attach is GDB for 1.4.10.1 version
====================================================================== 

---------------------------------------------------------------------- 
 stgraham2000 - 05-08-08 12:29  
---------------------------------------------------------------------- 
I'm working on this bug as well.  The bug is much harder to reproduce now
that we have upgraded to 1.4.19 but it still has happened.  Unfortunately,
we have only crashed once on 1.4.19 and at that particular time we were not
dumping cores.  However, I've been doing some reviews of the code and may
have found a few issues but I need an expert in the area to confirm my
findings.

In "apps/app_dial.c", "apps/app_queue.c", and "apps/app_speech_utils.c"
there are calls to "ast_channel_datastore_remove" that are not protected
with locks.  It looks like this linked list needs to be protected before
modification.

A couple of other functions I'm concerned about are
"ast_channel_datastore_inherit" and "ast_channel_inherit_variables".  Do
these require locks as well?  It looks like they do.  If so then I think
there are a few more areas in the code that may not be protected.  Some of
the calls are a bit tricky to tell if they are all locked because somewhere
higher in the call stack may be locking the channel. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
05-08-08 12:29  stgraham2000   Note Added: 0086623                          
======================================================================