[asterisk-bugs] [Asterisk 0014228]: 1.4.22 crash with Park

[Asterisk Bug Tracker]

The following issue has been ASSIGNED. 
====================================================================== 
http://bugs.digium.com/view.php?id=14228 
====================================================================== 
Reported By:                kobaz
Assigned To:                otherwiseguy
====================================================================== 
Project:                    Asterisk
Issue ID:                   14228
Category:                   Resources/res_features
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           1.4.22 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-01-13 08:59 CST
Last Modified:              2009-01-14 17:31 CST
====================================================================== 
Summary:                    1.4.22 crash with Park
Description: 
SIP/5506 Calls SIP/5501
5501 hits *1

5506 parks iteelf
timeout hits
5506 calls itself
pickup the 5506 self-call
asterisk crashes

this seems very similar to
http://insects.digium.com/bug_view_advanced_page.php?bug_id=7565

--------------------------------



   -- Executing [5501 at basic:1] Set("SIP/5506-081de6f0",
"ARGS=dialExt,5501,no") in new stack
    -- Executing [5501 at basic:2] Set("SIP/5506-081de6f0",
"DYNAMIC_FEATURES=park1#park2#park3#park4#park5#park6#park7#park8#park9#park10")
in new stack
    -- Executing [5501 at basic:3] Dial("SIP/5506-081de6f0",
"SIP/5501||rM(dynamicFeatures-callee)") in new stack
    -- Called 5501
    -- SIP/5501-081ec348 is ringing
    -- SIP/5501-081ec348 answered SIP/5506-081de6f0
    -- Executing [s at macro-dynamicFeatures-callee:1]
Set("SIP/5501-081ec348",
"DYNAMIC_FEATURES=park1#park2#park3#park4#park5#park6#park7#park8#park9#park10")
in new stack
[Jan 13 09:17:03] NOTICE[17858]: chan_iax2.c:8888 __iax2_poke_noanswer:
Peer 'mdw_demo_exten' is now UNREACHABLE! Time: 0
[Jan 13 09:17:03] NOTICE[17859]: chan_iax2.c:8888 __iax2_poke_noanswer:
Peer 'MDW-Demo' is now UNREACHABLE! Time: 0
    --  Feature Found: park1 exten: park1
    -- Launched AGI Script /var/lib/asterisk/agi-bin/park.agi
    -- AGI Script Executing Application: (Park) Options: ((null))
  == Parked SIP/5506-081de6f0 on 1 at parkedcalls. Will timeout back to
extension [basic] s, 1 in 10 seconds
    -- <SIP/5506-081de6f0> Playing 'digits/1' (language 'en')
    -- Added extension '1' priority 1 to parkedcalls
    -- Started music on hold, class 'default', on channel
'SIP/5506-081de6f0'
    -- Stopped music on hold on SIP/5506-081de6f0
    -- Registered extension context 'park-dial'
    -- Added extension 'SIP/5506' priority 1 to park-dial
  == Timeout for SIP/5506-081de6f0 parked on 1. Returning to
park-dial,SIP/5506,1
[Jan 13 09:17:16] WARNING[17880]: pbx.c:2368 __ast_pbx_run:
SIP/5506-081de6f0 already has PBX structure??
    -- Executing [SIP/5506 at park-dial:1] Dial("SIP/5506-081de6f0",
"SIP/5506|30|") in new stack
    -- Called 5506
    -- SIP/5506-081f9dc0 is ringing
    -- Started music on hold, class 'default', on channel
'SIP/5501-081ec348'
    -- SIP/5506-081f9dc0 answered SIP/5506-081de6f0
[Jan 13 09:17:18] WARNING[17880]: channel.c:3929 ast_channel_bridge:
SIP/5506-081de6f0 is already in a bridge with SIP/5501-081ec348
[Jan 13 09:17:18] WARNING[17880]: res_features.c:1570 ast_bridge_call:
Bridge failed on channels SIP/5506-081de6f0 and SIP/5506-081f9dc0
  == Spawn extension (park-dial, SIP/5506, 1) exited non-zero on
'SIP/5506-081de6f0'
[Jan 13 09:17:18] WARNING[17880]: channel.c:1498 ast_hangup: Hard hangup
called by thread -1226712176 on SIP/5506-081de6f0, while fd is blocked by
thread -1226220656 in procedure ast_waitfor_nandfds!  Expect a failure
    -- Stopped music on hold on SIP/5501-081ec348
  == Spawn extension (park-dial, SIP/5506, 1) exited non-zero on 'h'
[Jan 13 09:17:18] WARNING[17876]: channel.c:944 ast_queue_frame: Unable to
write to alert pipe on h, frametype/subclass 5/0 (qlen = 0): Bad file
descriptor!
Segmentation fault (core dumped)


http://bugs.digium.com/view.php?id=0  0xb7ec8438 in ?? () from /lib/libc.so.6
http://bugs.digium.com/view.php?id=1  0x0808475a in ast_hangup (chan=0x81e0cb8)
at channel.c:1507
http://bugs.digium.com/view.php?id=2  0x080c5af6 in __ast_pbx_run (c=0x81e0cb8)
at pbx.c:2561
http://bugs.digium.com/view.php?id=3  0x080c5cc2 in pbx_thread (data=0x81e0cb8)
at pbx.c:2621
http://bugs.digium.com/view.php?id=4  0x08103597 in dummy_start (data=0x81c7b68)
at utils.c:912
http://bugs.digium.com/view.php?id=5  0xb7f3a383 in start_thread () from
/lib/libpthread.so.0
http://bugs.digium.com/view.php?id=6  0xb7e5463e in clone () from /lib/libc.so.6
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-01-14 17:31 blitzrage      Assigned To               => otherwiseguy    
======================================================================