[asterisk-bugs] [Asterisk 0015109]: [patch] Abort by memory allocator, possibly in moh_files_generator

Thu Aug 27 10:32:10 CDT 2009

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15109 
====================================================================== 
Reported By:                jvandal
Assigned To:                russell
====================================================================== 
Project:                    Asterisk
Issue ID:                   15109
Category:                   Resources/res_musiconhold
Reproducibility:            random
Severity:                   block
Priority:                   normal
Status:                     ready for testing
Target Version:             1.4.27
Asterisk Version:           1.4.24 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-05-14 10:49 CDT
Last Modified:              2009-08-27 10:32 CDT
====================================================================== 
Summary:                    [patch] Abort by memory allocator, possibly in
moh_files_generator
Description: 
I have a server running with Asterisk 1.4.24.1 where it randomly segfault
for "unknown" reason.

I'm not sure if this is related to moh_files_generator function or with
filestream_descructor.

Let me know what needed in order to fix this crash, if GDB traces aren't
enough. 

Asterisk is compiled with DONT_OPTIMIZE and others flag needed for "gdb".

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0014958 Segfault Asterisk 1.4.24.1
related to          0015123 out of bounds crash and core dump
related to          0015506 Asterisk 1.4.26rc5 (revision 202945 ) d...
related to          0015041 Crash on attended transfer
related to          0015719 Crash in ast_readaudio_callback
parent of           0015396 app_queue segfault
has duplicate       0015195 double free or corruption (!prev) in mo...
has duplicate       0015781 crash: in &quot;ast_fdleak_fclose&quot;...
related to          0015735 Asterisk Chrashes Daily
related to          0015609 WARNING[23025]: channel.c:952 __ast_que...
related to          0015460 Asterisk Crashed When made a attended T...
====================================================================== 

---------------------------------------------------------------------- 
 (0109733) marhbere (reporter) - 2009-08-27 10:32
 https://issues.asterisk.org/view.php?id=15109#c109733 
---------------------------------------------------------------------- 
I used the patch, and after 8hs we have had core dump:

(gdb) bt full
https://issues.asterisk.org/view.php?id=0  0x001ad51d in _IO_seekoff_unlocked
(fp=0xb58b4640, offset=0, dir=1,
mode=0) at ioseekoff.c:71
No locals.
https://issues.asterisk.org/view.php?id=1  0x001ac067 in _IO_ftell
(fp=0xb58b4640) at ioftell.c:41
        pos = <value optimized out>
https://issues.asterisk.org/view.php?id=2  0x08316ff8 in __i686.get_pc_thunk.bx
() from
/usr/lib/asterisk/modules/format_mp3.so
No symbol table info available.
https://issues.asterisk.org/view.php?id=3  0xb58b4640 in ?? ()
No symbol table info available.
https://issues.asterisk.org/view.php?id=4  0x08000020 in ?? ()
No symbol table info available.
https://issues.asterisk.org/view.php?id=5  0xb4881348 in ?? ()
No symbol table info available.
https://issues.asterisk.org/view.php?id=6  0x0831719f in __i686.get_pc_thunk.bx
() from
/usr/lib/asterisk/modules/format_mp3.so
No symbol table info available.
https://issues.asterisk.org/view.php?id=7  0xb62b6d20 in ?? ()
No symbol table info available.
https://issues.asterisk.org/view.php?id=8  0x00000000 in ?? ()
No symbol table info available.
(gdb)

Last part log before crash:
"
[2009-08-26 22:03:04.816] VERBOSE[30612] logger.c: [2009-08-26
22:03:04.816]     -- SIP/325-b5360da0 is ringing
[2009-08-26 22:03:04.816] DEBUG[30612] rtp.c: Setting early bridge SDP of
'SIP/329-0a2ab9e0' with that of 'SIP/325-b5360da0'
[2009-08-26 22:03:04.816] DEBUG[30612] chan_sip.c: Trying to put 'SIP/2.0
18' onto UDP socket destined for 10.240.18.186:5060
[2009-08-26 22:03:04.962] DEBUG[24659] audiohook.c: Failed to get 160
samples from read factory 0xa2360f8
[2009-08-26 22:03:04.982] DEBUG[24659] audiohook.c: Failed to get 160
samples from read factory 0xa2360f8
[2009-08-26 22:03:05.082] DEBUG[8514] rtp.c: Got RTCP report of 116 bytes
[2009-08-26 22:03:05.386] DEBUG[13057] chan_sip.c: Attended transfer: Will
use Replace-Call-ID : 63635032-269ef602 at 10.240.18.186 (No check of from/to
tags)
[2009-08-26 22:03:05.386] DEBUG[13057] chan_sip.c: Trying to put 'SIP/2.0
20' onto UDP socket destined for 10.240.18.186:5060
[2009-08-26 22:03:05.386] DEBUG[13057] channel.c: Planning to masquerade
channel SIP/EXT-THSMSW-b7134fe8 into the structure of SIP/329-0a2ab9e0
[2009-08-26 22:03:05.386] DEBUG[13057] channel.c: Done planning to
masquerade channel SIP/EXT-THSMSW-b7134fe8 into the structure of
SIP/329-0a2ab9e0
[2009-08-26 22:03:05.386] DEBUG[13057] chan_sip.c: Trying to put 'NOTIFY
sip' onto UDP socket destined for 10.240.18.186:5060
[2009-08-26 22:03:05.386] DEBUG[13057] chan_sip.c: SIP attended transfer:
Unlocking channel SIP/329-0a2ab9e0
[2009-08-26 22:03:05.386] DEBUG[30612] channel.c: Got clone lock for
masquerade on 'SIP/EXT-THSMSW-b7134fe8' at 0xb71a3e9c
[2009-08-26 22:03:05.386] DEBUG[30612] chan_sip.c: Hangup call
SIP/EXT-THSMSW-b7134fe8<MASQ>, SIP callid 63635032-269ef602 at 10.240.18.186
[2009-08-26 22:03:05.386] DEBUG[30612] chan_sip.c: AST hangup cause 16 (no
match found in SIP)
[2009-08-26 22:03:05.386] DEBUG[30612] chan_sip.c: Trying to put 'SIP/2.0
60' onto UDP socket destined for 10.240.18.186:5060
[2009-08-26 22:03:05.387] DEBUG[30612] channel.c: Set channel
SIP/EXT-THSMSW-b7134fe8 to write format ulaw
[2009-08-26 22:03:05.387] DEBUG[30612] channel.c: Set channel
SIP/EXT-THSMSW-b7134fe8 to read format ulaw
[2009-08-26 22:03:05.387] DEBUG[30612] channel.c: Putting channel
SIP/EXT-THSMSW-b7134fe8 in 4/4 formats
[2009-08-26 22:03:05.387] DEBUG[30612] channel.c: Driver for channel
'SIP/EXT-THSMSW-b7134fe8' does not support indication 3, emulating it
[2009-08-26 22:03:05.387] DEBUG[30612] channel.c: Set channel
SIP/EXT-THSMSW-b7134fe8 to write format slin
[2009-08-26 22:03:05.387] DEBUG[30612] channel.c: Scheduling timer at 160
sample intervals
[2009-08-26 22:03:05.387] DEBUG[30612] channel.c: Released clone lock on
'SIP/329-0a2ab9e0<ZOMBIE>'
[2009-08-26 22:03:05.387] DEBUG[30612] channel.c: Done Masquerading
SIP/EXT-THSMSW-b7134fe8 (6)
[2009-08-26 22:03:12.507] VERBOSE[31222] logger.c: [2009-08-26
22:03:12.507]  Asterisk Event Logger Started /var/log/asterisk/event_log
"
Could this be something to about patch?
what do you think? 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-08-27 10:32 marhbere       Note Added: 0109733                          
======================================================================