[asterisk-bugs] [Asterisk 0015719]: Crash in ast_readaudio_callback

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15719 
====================================================================== 
Reported By:                rgj
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   15719
Category:                   Core/FileFormatInterface
Reproducibility:            unable to reproduce
Severity:                   crash
Priority:                   normal
Status:                     acknowledged
Target Version:             1.4.28
Asterisk Version:           1.4.26 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-08-14 01:57 CDT
Last Modified:              2009-08-26 13:01 CDT
====================================================================== 
Summary:                    Crash in ast_readaudio_callback
Description: 
We're experiencing almost-daily crashes in ast_readaudio_callback.
There seems to be corruption in the ast_filestream structure.

At first we thought it was just another appearance of issue 15616 (random
crashes) but currently we're experiencing the same crash at the same
point.

Every time it's a different agent, and a different extension. We have been
completely unable to reproduce this behaviour. It occurs at seemingly
random moments.
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0015109 [patch] Abort by memory allocator, poss...
====================================================================== 

---------------------------------------------------------------------- 
 (0109694) aragon (reporter) - 2009-08-26 13:01
 https://issues.asterisk.org/view.php?id=15719#c109694 
---------------------------------------------------------------------- 
I think I have an almost identical bt and valgrind debug over on ticket
15544
No memory abort in the backtrace but the bt looks very similar.
I'm not using chan_agent or realtime.

The similarities are here (my backtrace includes elements of sched.c and
utils.c):
_0  0x00227432 in __ast_pthread_mutex_lock (filename=0x281b74
"chan_sip.c",
    lineno=1954, func=0x2820fc "retrans_pkt",
    mutex_name=0x282108 "&pkt->owner->lock", t=0x6e6e6f43)
    at /root/asterisksvn/ast14/include/asterisk/lock.h:354
_1  0x002267ab in retrans_pkt (data=0x99b1330) at chan_sip.c:1954
_2  0x081113c5 in ast_sched_runq (con=0x929b980) at sched.c:363
_3  0x0027294c in do_monitor (data=0x0) at chan_sip.c:16784
_4  0x081230d6 in dummy_start (data=0x92a8420) at utils.c:856
_5  0x008b249b in start_thread () from /lib/libpthread.so.0
_6  0x0080942e in clone () from /lib/libc.so.6 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-08-26 13:01 aragon         Note Added: 0109694                          
======================================================================