[asterisk-bugs] [Asterisk 0013116]: Asterisk 1.4.21.1 segfaults many times daily using mixmonitor

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13116 
====================================================================== 
Reported By:                aragon
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   13116
Category:                   Applications/app_mixmonitor
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     acknowledged
Asterisk Version:           1.4.21 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-07-20 14:37 CDT
Last Modified:              2008-10-28 03:24 CDT
====================================================================== 
Summary:                    Asterisk 1.4.21.1 segfaults many times daily using
mixmonitor
Description: 
Random crashes while mixmonitor is used
backtrace attached
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
has duplicate       0013210 Asterisk production environment crashes...
====================================================================== 

---------------------------------------------------------------------- 
 (0094325) jensvb (reporter) - 2008-10-28 03:24
 http://bugs.digium.com/view.php?id=13116#c94325 
---------------------------------------------------------------------- 
Hi, I have a system that started doing this yesterday...10+ crashes a day,
I have recompiled with "MENUSELECT_CFLAGS=DONT_OPTIMIZE DEBUG_THREADS".

Backtrace from latest crash below.

<snip>
Core was generated by `/usr/sbin/asterisk -f -vvvg -c'.
Program terminated with signal 11, Segmentation fault.
http://bugs.digium.com/view.php?id=0  0x08106f5b in ast_slinfactory_read
(sf=0x85b0684, buf=0xb61bbf30,
samples=160) at slinfactory.c:132
132                                     memcpy(offset, frame_data,
frame_ptr->samples * sizeof(*offset));
(gdb) set pagination off
(gdb) bt full
http://bugs.digium.com/view.php?id=0  0x08106f5b in ast_slinfactory_read
(sf=0x85b0684, buf=0xb61bbf30,
samples=160) at slinfactory.c:132
        frame_ptr = (struct ast_frame *) 0x865cfa8
        sofar = 0
        ineed = 160
        remain = 140254728
        frame_data = (short int *) 0x0
        offset = (short int *) 0xb61bbf30
http://bugs.digium.com/view.php?id=1  0x0807561c in audiohook_read_frame_both
(audiohook=0x85afb50,
samples=160) at audiohook.c:246
        i = 0
        usable_read = 1
        usable_write = 1
        buf1 = 0xb61bc080
        buf2 = 0xb61bbf30
        read_buf = (short int *) 0xb61bc080
        write_buf = (short int *) 0x0
        final_buf = (short int *) 0x0
        data1 = (short int *) 0x0
        data2 = (short int *) 0x0
        frame = {frametype = AST_FRAME_VOICE, subclass = 64, datalen =
320, samples = 160, mallocd = 0, mallocd_hdr_len = 0, offset = 0, src =
0x0, data = 0x0, delivery = {tv_sec = 0, tv_usec = 0}, frame_list = {next =
0x0}, flags = 0, ts = 0, len = 0, seqno = 0}
        __PRETTY_FUNCTION__ = "audiohook_read_frame_both"
http://bugs.digium.com/view.php?id=2  0x0807589d in ast_audiohook_read_frame
(audiohook=0x85afb50,
samples=160, direction=AST_AUDIOHOOK_DIRECTION_BOTH, format=64) at
audiohook.c:293
        read_frame = (struct ast_frame *) 0x0
        final_frame = (struct ast_frame *) 0x0
http://bugs.digium.com/view.php?id=3  0x006e344a in mixmonitor_thread
(obj=0x85afb50) at
app_mixmonitor.c:166
        fr = (struct ast_frame *) 0x0
        mixmonitor = (struct mixmonitor *) 0x85afb50
        fs = (struct ast_filestream *) 0x856edb0
        oflags = 577
        ext = 0x85b112f "wav"
        errflag = 0
        __PRETTY_FUNCTION__ = "mixmonitor_thread"
http://bugs.digium.com/view.php?id=4  0x0811821a in dummy_start (data=0x84e4218)
at utils.c:895
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {12173300,
0, -1239692400, -1239694392, 483459930, -1562689262}, __mask_was_saved =
0}}, __pad = {0xb61bc480, 0x0, 0x0, 0xb7dab378}}
        __cancel_routine = (void (*)(void *)) 0x806a5f7
<ast_unregister_thread>
        __cancel_arg = (void *) 0xb61bcb90
        not_first_call = 0
        ret = (void *) 0xb8cb8c
        a = {start_routine = 0x6e337f <mixmonitor_thread>, data =
0x85afb50, name = 0x85f4be0 "mixmonitor_thread    started at [  286]
app_mixmonitor.c launch_monitor_thread()"}
        lock_info = (struct thr_lock_info *) 0x85748e8
        mutex_attr = {__size = "\001\000\000", __align = 1}
http://bugs.digium.com/view.php?id=5  0x00b8d46b in start_thread () from
/lib/libpthread.so.0
No symbol table info available.
http://bugs.digium.com/view.php?id=6  0x00ae4dbe in clone () from /lib/libc.so.6
No symbol table info available.
(gdb)
</snip>

PS: We do run app_rxfax from "agx-ast-addons" with spandsp5.... but the
crashes happen even when app_rxfax is "module unload app_rxfax"'ed.... 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-10-28 03:24 jensvb         Note Added: 0094325                          
======================================================================