[asterisk-bugs] [Asterisk 0013802]: manager core dumps after 45, 000 AMI originates

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13802 
====================================================================== 
Reported By:                hubbaba
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   13802
Category:                   Core/ManagerInterface
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           1.6.0.1 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-10-29 14:29 CDT
Last Modified:              2008-11-10 16:54 CST
====================================================================== 
Summary:                    manager core dumps after 45,000 AMI originates
Description: 
I have a Java GatewayDriver that links ami to agi for outbound calls.  Each
call lasts 10 seconds (stream 2 (5 second) files via fast-agi).  After
45,000 calls (2 hours of processing 90 simultaneous calls on 4 PRI spans),
Asterisk proceeds to core dump.  

I opened the core in gdb.  The segmentation fault is occurring in
manager.c on line 2385.  s->last_ev is NULL for some reason and the
NEW_EVENT calls AST_LIST_NEXT which then fails because it tries to
dereference s->last_ev.  

I have a 62MB core file if anyone is interested in looking through it.  

Thank you for your help!  I really appreciate it!
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0013837 Crash while processing events in manager.c
====================================================================== 

---------------------------------------------------------------------- 
 (0094723) hubbaba (reporter) - 2008-11-10 16:54
 http://bugs.digium.com/view.php?id=13802#c94723 
---------------------------------------------------------------------- 
Here is the latest stack trace without optimization.  This is running the
patched version of Asterisk:

(gdb) bt full
http://bugs.digium.com/view.php?id=0  0x000000000050345f in
ast_atomic_fetchadd_int (p=0x0, v=-1)
    at /usr/src/asterisk-1.6.0.1/include/asterisk/lock.h:1185
No locals.
http://bugs.digium.com/view.php?id=1  0x000000000049e068 in unref_event (e=0x0)
at manager.c:773
No locals.
http://bugs.digium.com/view.php?id=2  0x000000000049e0e5 in free_session
(s=0x2318c1b0) at manager.c:792
        eqe = (struct eventqent *) 0x0
http://bugs.digium.com/view.php?id=3  0x000000000049e1f8 in destroy_session
(s=0x2318c1b0) at manager.c:800
No locals.
http://bugs.digium.com/view.php?id=4  0x00000000004a5b40 in session_do
(data=0x7f03b40e4228) at
manager.c:2946
        ser = (struct ast_tcptls_session_instance *) 0x7f03b40e4228
        s = (struct mansession *) 0x2318c1b0
        flags = 2050
        res = -1
        __PRETTY_FUNCTION__ = "session_do"
http://bugs.digium.com/view.php?id=5  0x00000000004f9b5c in
ast_make_file_from_fd (data=0x7f03b40e4228)
    at tcptls.c:469
        ser = (struct ast_tcptls_session_instance *) 0x7f03b40e4228
        __PRETTY_FUNCTION__ = "ast_make_file_from_fd"
http://bugs.digium.com/view.php?id=6  0x0000000000504ca5 in dummy_start
(data=0x7f03b40ab400) at
utils.c:917
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {0,
        9016794212168105489, 0, 1082468688, 4096, 1105133360,
        9016794212193271313, 9016935682656697873}, __mask_was_saved =
0}},
---Type <return> to continue, or q <return> to quit---
  __pad = {0x408521e0, 0x0, 0x7f03bb439878, 0x7f03bb439890}}
        __cancel_routine = (void (*)(void *)) 0x430f96
<ast_unregister_thread>
        __cancel_arg = (void *) 0x40852950
        not_first_call = 0
        ret = (void *) 0x40852950
        a = {start_routine = 0x4f9a98 <ast_make_file_from_fd>,
  data = 0x7f03b40e4228,
  name = 0x7f03b41d9590 "ast_make_file_from_fd started at [  161] tcptls.c
ast_tcptls_server_root()"}
http://bugs.digium.com/view.php?id=7  0x00007f03bacc73f7 in start_thread () from
/lib/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=8  0x00007f03bb1b8b3d in clone () from
/lib/libc.so.6
No symbol table info available.
http://bugs.digium.com/view.php?id=9  0x0000000000000000 in ?? ()
No symbol table info available. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-11-10 16:54 hubbaba        Note Added: 0094723                          
======================================================================