[asterisk-bugs] [Asterisk 0015109]: [patch] Abort by memory allocator, possibly in moh_files_generator

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15109 
====================================================================== 
Reported By:                jvandal
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   15109
Category:                   Resources/res_musiconhold
Reproducibility:            random
Severity:                   block
Priority:                   normal
Status:                     acknowledged
Target Version:             1.4.27
Asterisk Version:           1.4.24 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-05-14 10:49 CDT
Last Modified:              2009-08-25 14:49 CDT
====================================================================== 
Summary:                    [patch] Abort by memory allocator, possibly in
moh_files_generator
Description: 
I have a server running with Asterisk 1.4.24.1 where it randomly segfault
for "unknown" reason.

I'm not sure if this is related to moh_files_generator function or with
filestream_descructor.

Let me know what needed in order to fix this crash, if GDB traces aren't
enough. 

Asterisk is compiled with DONT_OPTIMIZE and others flag needed for "gdb".

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0014958 Segfault Asterisk 1.4.24.1
related to          0015123 out of bounds crash and core dump
related to          0015506 Asterisk 1.4.26rc5 (revision 202945 ) d...
related to          0015041 Crash on attended transfer
related to          0015719 Crash in ast_readaudio_callback
parent of           0015396 app_queue segfault
has duplicate       0015195 double free or corruption (!prev) in mo...
related to          0015735 Asterisk Chrashes Daily
====================================================================== 

---------------------------------------------------------------------- 
 (0109614) russell (administrator) - 2009-08-25 14:49
 https://issues.asterisk.org/view.php?id=15109#c109614 
---------------------------------------------------------------------- 
I have attached a patch, mp3_filestream_corruption.rev1.txt, which I am
hoping will resolve this, and a whole bunch of other crashes that have been
reported.

This patch is for the Asterisk-addons 1.4 version of format_mp3.

A bug in format_mp3 made it so the internals of an ast_filestream could
get corrupted.  Since the corruption happened within valid memory, it is a
bug that valgrind would never notice.  That would explain why we have had
so much trouble getting help from valgrind on this issue.

If you're having trouble with crashes within a filestream destructor (or
really, anything filestream related at this point), and you are using
format_mp3, please try this patch.

Thanks! 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-08-25 14:49 russell        Note Added: 0109614                          
======================================================================