[asterisk-bugs] [Asterisk 0013116]: Asterisk 1.4.21.1 segfaults many times daily using mixmonitor

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13116 
====================================================================== 
Reported By:                aragon
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   13116
Category:                   Applications/app_mixmonitor
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     acknowledged
Asterisk Version:           1.4.21 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-07-20 14:37 CDT
Last Modified:              2008-11-27 04:50 CST
====================================================================== 
Summary:                    Asterisk 1.4.21.1 segfaults many times daily using
mixmonitor
Description: 
Random crashes while mixmonitor is used
backtrace attached
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
has duplicate       0013210 Asterisk production environment crashes...
====================================================================== 

---------------------------------------------------------------------- 
 (0095569) jensvb (reporter) - 2008-11-27 04:50
 http://bugs.digium.com/view.php?id=13116#c95569 
---------------------------------------------------------------------- 
Again notice that one of the pointers used in memcpy is null... and that is
not going to work

<snip>
Core was generated by `/usr/sbin/asterisk -f -U asterisk -G asterisk -vvvg
-c'.
Program terminated with signal 11, Segmentation fault.
http://bugs.digium.com/view.php?id=0  0x00000000004cb854 in ast_slinfactory_read
(sf=0x1376e9d0,
buf=0x4185fb30, samples=160) at slinfactory.c:132
132                                     memcpy(offset, frame_data,
frame_ptr->samples * sizeof(*offset));
(gdb)
(gdb) bt full
http://bugs.digium.com/view.php?id=0  0x00000000004cb854 in ast_slinfactory_read
(sf=0x1376e9d0,
buf=0x4185fb30, samples=160) at slinfactory.c:132
        frame_ptr = (struct ast_frame *) 0x13d426d0
        sofar = 0
        ineed = 160
        remain = 0
        frame_data = (short int *) 0x0
        offset = (short int *) 0x4185fb30
http://bugs.digium.com/view.php?id=1  0x0000000000432732 in
audiohook_read_frame_both (audiohook=0x1376dde0,
samples=160) at audiohook.c:246
        i = 0
        usable_read = 1
        usable_write = 1
        buf1 = 0x4185fc80
        buf2 = 0x4185fb30
        read_buf = (short int *) 0x4185fc80
        write_buf = (short int *) 0x0
        final_buf = (short int *) 0x0
        data1 = (short int *) 0x0
        data2 = (short int *) 0x0
        frame = {frametype = AST_FRAME_VOICE, subclass = 64, datalen =
320, samples = 160, mallocd = 0,
  mallocd_hdr_len = 0, offset = 0, src = 0x0, data = 0x0, delivery =
{tv_sec = 0, tv_usec = 0}, frame_list = {
    next = 0x0}, flags = 0, ts = 0, len = 0, seqno = 0}
        __PRETTY_FUNCTION__ = "audiohook_read_frame_both"
http://bugs.digium.com/view.php?id=2  0x0000000000432a7e in
ast_audiohook_read_frame (audiohook=0x1376dde0,
samples=160,
    direction=AST_AUDIOHOOK_DIRECTION_BOTH, format=64) at audiohook.c:293
        read_frame = (struct ast_frame *) 0x0
        final_frame = (struct ast_frame *) 0x0
http://bugs.digium.com/view.php?id=3  0x00002aaab2a1bbd2 in mixmonitor_thread
(obj=0x1376dde0) from
/usr/lib/asterisk/modules/app_mixmonitor.so
        fr = (struct ast_frame *) 0x0
        mixmonitor = (struct mixmonitor *) 0x1376dde0
        fs = (struct ast_filestream *) 0x2aaad81a7a20
        oflags = 577
        ext = 0x1376f4c7 "WAV"
        errflag = 0
        __PRETTY_FUNCTION__ = "mixmonitor_thread"
http://bugs.digium.com/view.php?id=4  0x00000000004deafc in dummy_start
(data=0x141c5d80) at utils.c:895
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {0,
-2995632210857998324, 0, 1099303232, 1089486848,
        4096, -2995632210857997988, -2995632209754545967},
__mask_was_saved = 0}}, __pad = {0x418601d0, 0x0,
    0x13cb7250, 0x0}}
        __cancel_routine = (void (*)(void *)) 0x4276d5
<ast_unregister_thread>
---Type <return> to continue, or q <return> to quit---
        __cancel_arg = (void *) 0x41860940
        not_first_call = 0
        ret = (void *) 0x33deb49880
        a = {start_routine = 0x2aaab2a1bb1e <mixmonitor_thread>, data =
0x1376dde0,
  name = 0x13bac760 "mixmonitor_thread    started at [  286]
app_mixmonitor.c launch_monitor_thread()"}
        lock_info = (struct thr_lock_info *) 0x13ff7500
        mutex_attr = {__size = "\001\000\000", __align = 1}
http://bugs.digium.com/view.php?id=5  0x00000033df006307 in start_thread () from
/lib64/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=6  0x00000033de8d1ded in clone () from
/lib64/libc.so.6
No symbol table info available.
(gdb)
(gdb)
</snip> 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-11-27 04:50 jensvb         Note Added: 0095569                          
======================================================================