[asterisk-bugs] [Asterisk 0014472]: asterisk segfault in AST_LIST_TRAVERSE_SAFE_BEGIN

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=14472 
====================================================================== 
Reported By:                yxbstorm
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   14472
Category:                   Core/General
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           1.4.23 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-02-12 19:06 CST
Last Modified:              2009-02-12 20:09 CST
====================================================================== 
Summary:                    asterisk segfault in AST_LIST_TRAVERSE_SAFE_BEGIN
Description: 
Bt full attached.
Core was generated by `/usr/sbin/asterisk -f -U asterisk -G asterisk -vvvg
-c'.
Program terminated with signal 11, Segmentation fault.
http://bugs.digium.com/view.php?id=0  0x080f712f in ast_sched_del
(con=0x9a02c00, id=1308395) at
sched.c:267
267             AST_LIST_TRAVERSE_SAFE_BEGIN(&con->schedq, s, list) {
(gdb) bt full
http://bugs.digium.com/view.php?id=0  0x080f712f in ast_sched_del
(con=0x9a02c00, id=1308395) at
sched.c:267
        __list_next = (struct sched *) 0x63746e75
        __list_prev = (struct sched *) 0xb7e08ef0
        __new_prev = (struct sched *) 0x63746e75
        s = (struct sched *) 0x63746e75
        __PRETTY_FUNCTION__ = "ast_sched_del"
http://bugs.digium.com/view.php?id=1  0x00be3053 in parse_register_contact
(pvt=0x9b50b90, peer=0x9a48c58,
req=0xba0050) at chan_sip.c:8476
        _count = 0
        _sched_res = -1
        contact =
"<sip:82810\000172.172.172.122\0005060\000\000s?\000\000\000\000\000\000\000\000??\000\000\000\000f71a025ffa294d16f189f5d9b414269d",
'\0' <repeats 224 times>, "f3d271eb24e11e40f72246fcfedc1f3b", '\0' <repeats
124 times>,
"qS-\000\000\000\000\000\000\000\000\000ld-\000\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000??000X\214?t??t??
        data = "6b93", '\0' <repeats 224 times>,
"REGISTER:sip:172.172.172.2", '\0' <repeats 257 times>
        expires = 0xba045d "60"
        expiry = 60
        curi = 0xb9f9b9 "82810"
        n = 0xb9f9bf "172.172.172.122"
        pt = 0xb9f9cf "5060"
        port = 5060
        useragent = 0x9a02c00 "\001"
        hp = (struct hostent *) 0xb9f394
        ahp = {hp = {h_name = 0x0, h_aliases = 0x0, h_addrtype = 2,
h_length = 0, h_addr_list = 0xb9f3a8}, 
  buf = "??000??", '\0' <repeats 1015 times>}
        oldsin = {sin_family = 2, sin_port = 50195, sin_addr = {s_addr =
2058136748}, sin_zero = "\000\000\000\000\000\000\000"}
        testsin = {sin_family = 0, sin_port = 0, sin_addr = {s_addr =
2058136748}, sin_zero = "\000\000\000\000\000\000\000"}
        __PRETTY_FUNCTION__ = "parse_register_contact"
http://bugs.digium.com/view.php?id=2  0x00be4f55 in register_verify
(p=0x9b50b90, sin=0xba0040,
req=0xba0050, uri=0xba0275 "sip:172.172.172.2") at chan_sip.c:8977
        res = AUTH_SUCCESSFUL
        peer = (struct sip_peer *) 0x9a48c58
        tmp =
"<sip:82810\000172.172.172.2\000\000?000\000\000\000\000\004?\000\000\000\000\000\000\000\000\000?B\000\000\000\000\000\000\000\000\000m?\000,?\000\230\r?t\227\016?tL?\000?B\000,?\000\230\r?t\030?\000?2154\000,?\000\217/?000L?\000\230\r?t\000\000\000\000??000?\000\000\000\001\200?\230\r?t\230\r?t\230\r?t\230\r?t?r?t\227\016?t\230\r?t\227\016?t",
'\0' <repeats 20 times>, "S\231?, '\0' <repeats 17 times>,
"W\003?000`\003?000R\003?000R\003?000\000"...
        name = 0xb9fcb5 "82810"
        c = 0x0
        t = 0xba0286 ""
        domain = 0xb9fcbb "172.172.172.2"
        __PRETTY_FUNCTION__ = "register_verify"
http://bugs.digium.com/view.php?id=3  0x00c06dc9 in handle_request_register
(p=0x9b50b90, req=0xba0050,
sin=0xba0040, e=0xba0275 "sip:172.172.172.2") at chan_sip.c:15839
        reason = 0xb9fe4c "u\002?
        res = 12726159
        __PRETTY_FUNCTION__ = "handle_request_register"
http://bugs.digium.com/view.php?id=4  0x00c07cce in handle_request (p=0x9b50b90,
req=0xba0050, sin=0xba0040,
recount=0xba0034, nounlock=0xba0038) at chan_sip.c:16068
        cmd = 0xba026c "REGISTER"
        cseq = 0xba0352 "32220 REGISTER"
        useragent = 0xba044c "SIP UA"
        seqno = 32220
        len = 5

====================================================================== 

---------------------------------------------------------------------- 
 (0100080) jangjun21 (reporter) - 2009-02-12 20:09
 http://bugs.digium.com/view.php?id=14472#c100080 
---------------------------------------------------------------------- 
my asterisk version is asterisk-1.4.23.1 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-02-12 20:09 jangjun21      Note Added: 0100080                          
======================================================================