[asterisk-bugs] [Asterisk 0015109]: Abort by memory allocator, possibly in moh_files_generator

Asterisk Bug Tracker noreply at bugs.digium.com
Wed Aug 12 18:15:24 CDT 2009


A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15109 
====================================================================== 
Reported By:                jvandal
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   15109
Category:                   Resources/res_musiconhold
Reproducibility:            random
Severity:                   block
Priority:                   normal
Status:                     feedback
Target Version:             1.4.27
Asterisk Version:           1.4.24 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-05-14 10:49 CDT
Last Modified:              2009-08-12 18:15 CDT
====================================================================== 
Summary:                    Abort by memory allocator, possibly in
moh_files_generator
Description: 
I have a server running with Asterisk 1.4.24.1 where it randomly segfault
for "unknown" reason.

I'm not sure if this is related to moh_files_generator function or with
filestream_descructor.

Let me know what needed in order to fix this crash, if GDB traces aren't
enough. 

Asterisk is compiled with DONT_OPTIMIZE and others flag needed for "gdb".

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0014958 Segfault Asterisk 1.4.24.1
related to          0015123 out of bounds crash and core dump
related to          0015506 Asterisk 1.4.26rc5 (revision 202945 ) d...
parent of           0015396 app_queue segfault in revision 202945
has duplicate       0015195 double free or corruption (!prev) in mo...
====================================================================== 

---------------------------------------------------------------------- 
 (0108986) amilcar (reporter) - 2009-08-12 18:15
 https://issues.asterisk.org/view.php?id=15109#c108986 
---------------------------------------------------------------------- 
I'm having the same segfaults described here. Always one of this two
backtraces:

First box:

Core was generated by `/usr/sbin/asterisk -f -vvvg -c'.
Program terminated with signal 6, Aborted.
(gdb) bt
https://issues.asterisk.org/view.php?id=0  0x00002abdd9fde215 in raise () from
/lib64/libc.so.6
https://issues.asterisk.org/view.php?id=1  0x00002abdd9fdfcc0 in abort () from
/lib64/libc.so.6
https://issues.asterisk.org/view.php?id=2  0x00002abdda0187fb in __libc_message
() from /lib64/libc.so.6
https://issues.asterisk.org/view.php?id=3  0x00002abdda01fce2 in _int_free ()
from /lib64/libc.so.6
https://issues.asterisk.org/view.php?id=4  0x00002abdda02390c in free () from
/lib64/libc.so.6
https://issues.asterisk.org/view.php?id=5  0x00002abdda00ed0b in
fclose@@GLIBC_2.2.5 () from /lib64/libc.so.6
https://issues.asterisk.org/view.php?id=6  0x00000000004554c8 in
filestream_destructor (arg=<value optimized
out>) at file.c:346
https://issues.asterisk.org/view.php?id=7  0x0000000000427883 in ao2_ref
(user_data=0x2aaadc0f4068, delta=22576)
at astobj2.c:229
https://issues.asterisk.org/view.php?id=8  0x0000000000458aba in ast_frame_free
(frame=0x2aaadc0f40b8, cache=1)
at frame.c:350
https://issues.asterisk.org/view.php?id=9  0x00002aaaab6f2385 in
moh_files_generator (chan=0x2aaad0042ca0,
data=<value optimized out>, len=<value optimized out>, samples=<value
optimized out>) at res_musiconhold.c:295
https://issues.asterisk.org/view.php?id=10 0x000000000043d732 in
ast_read_generator_actions (chan=0x2aaad0042ca0,
f=0x53c1250) at channel.c:1997
https://issues.asterisk.org/view.php?id=11 0x000000000043dde9 in __ast_read
(chan=0x2aaad0042ca0, dropaudio=0) at
channel.c:2476
https://issues.asterisk.org/view.php?id=12 0x000000000043f51c in
ast_channel_bridge (c0=0x2aaad0042ca0, c1=0x0,
config=0x443df6d0, fo=0x443de318, rc=0x443de310) at channel.c:2510
https://issues.asterisk.org/view.php?id=13 0x00002aaaaacbc6a5 in ast_bridge_call
(chan=0x2aaad0042ca0,
peer=0x545c2c0, config=0x443df6d0) at res_features.c:1806
https://issues.asterisk.org/view.php?id=14 0x00002aaac22473b7 in dial_exec_full
(chan=0x2aaad0042ca0, data=<value
optimized out>, peerflags=0x443df990, continue_exec=0x0) at
app_dial.c:1804
https://issues.asterisk.org/view.php?id=15 0x00002aaac22489a5 in dial_exec
(chan=0x109a, data=0x5830) at
app_dial.c:1843
https://issues.asterisk.org/view.php?id=16 0x00000000004801dd in
pbx_extension_helper (c=0x2aaad0042ca0,
con=<value optimized out>, context=0x2aaad0042ef0 "ivr-main",
exten=0x2aaad0042f40 "s", priority=10, 
    label=<value optimized out>, callerid=0x2aaad0042c30 "2197595646",
action=E_SPAWN) at pbx.c:536
https://issues.asterisk.org/view.php?id=17 0x0000000000482862 in __ast_pbx_run
(c=0x2aaad0042ca0) at pbx.c:2283
https://issues.asterisk.org/view.php?id=18 0x0000000000483729 in pbx_thread
(data=0x109a) at pbx.c:2599
https://issues.asterisk.org/view.php?id=19 0x00000000004aef9c in dummy_start
(data=<value optimized out>) at
utils.c:856
https://issues.asterisk.org/view.php?id=20 0x00002abdd9900367 in start_thread ()
from /lib64/libpthread.so.0
https://issues.asterisk.org/view.php?id=21 0x00002abdda080f7d in clone () from
/lib64/libc.so.6


Another box, little bit different:

Program terminated with signal 6, Aborted.
https://issues.asterisk.org/view.php?id=0  0x0000003629430215 in raise () from
/lib64/libc.so.6
(gdb) bt
https://issues.asterisk.org/view.php?id=0  0x0000003629430215 in raise () from
/lib64/libc.so.6
https://issues.asterisk.org/view.php?id=1  0x0000003629431cc0 in abort () from
/lib64/libc.so.6
https://issues.asterisk.org/view.php?id=2  0x000000362946a7fb in __libc_message
() from /lib64/libc.so.6
https://issues.asterisk.org/view.php?id=3  0x0000003629471ce2 in _int_free ()
from /lib64/libc.so.6
https://issues.asterisk.org/view.php?id=4  0x000000362947590c in free () from
/lib64/libc.so.6
https://issues.asterisk.org/view.php?id=5  0x0000003629460d0b in
fclose@@GLIBC_2.2.5 () from /lib64/libc.so.6
https://issues.asterisk.org/view.php?id=6  0x00000000004554c8 in
filestream_destructor (arg=<value optimized
out>) at file.c:346
https://issues.asterisk.org/view.php?id=7  0x0000000000427883 in ao2_ref
(user_data=0x2aaae4029e58, delta=29153)
at astobj2.c:229
https://issues.asterisk.org/view.php?id=8  0x0000000000458aba in ast_frame_free
(frame=0x2aaae4029ea8, cache=1)
at frame.c:350
https://issues.asterisk.org/view.php?id=9  0x00002aaaab90a385 in
moh_files_generator (chan=0x98dfe40, data=<value
optimized out>, len=<value optimized out>, samples=<value optimized out>)
at res_musiconhold.c:295
https://issues.asterisk.org/view.php?id=10 0x000000000043d732 in
ast_read_generator_actions (chan=0x98dfe40,
f=0x2aaaac03a4e0) at channel.c:1997
https://issues.asterisk.org/view.php?id=11 0x000000000043dde9 in __ast_read
(chan=0x98dfe40, dropaudio=0) at
channel.c:2476
https://issues.asterisk.org/view.php?id=12 0x0000000000429dec in autoservice_run
(ign=<value optimized out>) at
autoservice.c:121
https://issues.asterisk.org/view.php?id=13 0x00000000004aef9c in dummy_start
(data=<value optimized out>) at
utils.c:856
https://issues.asterisk.org/view.php?id=14 0x000000362a006367 in start_thread ()
from /lib64/libpthread.so.0
https://issues.asterisk.org/view.php?id=15 0x00000036294d2f7d in clone () from
/lib64/libc.so.6

All the boxes war very stable in 1.4.22, just changed to 1.4.26 (the
problem seems to occur 14.23.2+). 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-08-12 18:15 amilcar        Note Added: 0108986                          
======================================================================




More information about the asterisk-bugs mailing list