[asterisk-bugs] [Asterisk 0014211]: Asterisk Crashes with signal 11 (segmentation fault) at random intervals (but at least 2 times a day)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=14211 
====================================================================== 
Reported By:                aborghi
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   14211
Category:                   Channels/chan_sip/Registration
Reproducibility:            random
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           1.4.22 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2009-01-11 16:34 CST
Last Modified:              2009-01-12 16:17 CST
====================================================================== 
Summary:                    Asterisk Crashes with signal 11 (segmentation fault)
at random intervals (but at least 2 times a day)
Description: 
Asterisk Crashes with signal 11 (segmentation fault) at random intervals
(but at least 2 times a day)

Asterisk began crashing after a configuration change to the sip channel to
handle two additional Corda numbers (before we had only one number and the
server keep running months).
Beside the obvious error in sip configuration i was going to solve,
asterisk began crashing more or less regularly after adding the
registrations for the new corda numbers, totalling 3 SIP registrations to
the cordia servers.

while debugging, I noted that che cordia servers does not seem to reply in
a timely manner to the sip requests, delaying registrations for long time
before accepting it.

from various backtraces i done while preparing the files for the report,
form various different crashes, i see that the signal 11 occours every time
in handle_response_register

A thing i noted is that while i have registerattempts=10 when the
registrations to cordia are timing out in the messages in the console i see
ALWAYS the attempt count a 0. It seems that asterisk is not counting
attempts to register to the cordia servers so it is not reaching the limit
i imposed of 10 attempts.


====================================================================== 

---------------------------------------------------------------------- 
 (0097540) putnopvut (administrator) - 2009-01-12 16:17
 http://bugs.digium.com/view.php?id=14211#c97540 
---------------------------------------------------------------------- 
The reason that you see the attempt count at 0 is that the function where
the crash is occurring sets the count back to 0 since we are receiving a
successful reply to our REGISTER.

As for the actual crash, this is an interesting one. Based on the
backtraces you provided, I can see that the crash is occurring because we
are attempting to dereference a NULL pointer. The interesting part is that
there is a check about 10 lines up in the source to make sure we don't do
that. I'll have to investigate a bit deeper to see if I can find a suitable
cause for this crash to happen. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-01-12 16:17 putnopvut      Note Added: 0097540                          
======================================================================