[asterisk-bugs] [Asterisk 0015109]: Abort by memory allocator, possibly in moh_files_generator

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15109 
====================================================================== 
Reported By:                jvandal
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   15109
Category:                   Resources/res_musiconhold
Reproducibility:            random
Severity:                   block
Priority:                   normal
Status:                     acknowledged
Target Version:             1.4.27
Asterisk Version:           1.4.24 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-05-14 10:49 CDT
Last Modified:              2009-07-14 12:59 CDT
====================================================================== 
Summary:                    Abort by memory allocator, possibly in
moh_files_generator
Description: 
I have a server running with Asterisk 1.4.24.1 where it randomly segfault
for "unknown" reason.

I'm not sure if this is related to moh_files_generator function or with
filestream_descructor.

Let me know what needed in order to fix this crash, if GDB traces aren't
enough. 

Asterisk is compiled with DONT_OPTIMIZE and others flag needed for "gdb".

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0014958 Segfault Asterisk 1.4.24.1
related to          0015123 out of bounds crash and core dump
has duplicate       0015195 double free or corruption (!prev) in mo...
====================================================================== 

---------------------------------------------------------------------- 
 (0107725) aragon (reporter) - 2009-07-14 12:59
 https://issues.asterisk.org/view.php?id=15109#c107725 
---------------------------------------------------------------------- 
Russel/Mark

Have either of you had a chance to look at valgrind13072009.txt?
Sorry for the duress but I am very anxious to get a stable 1.4.26
release...
Currently I am forced to use 1.4.24.1

There are two records of interest in the valgrind13072009.txt file

==25462== 6,688 bytes in 19 blocks are still reachable in loss record 60
of 70
==25462==    at 0x4005A88: malloc (vg_replace_malloc.c:207)
==25462==    by 0x79058E: __fopen_internal (in /lib/libc-2.5.so)
==25462==    by 0x792B3B: fopen64 (in /lib/libc-2.5.so)
==25462==    by 0x80B09C6: ast_filehelper (in /usr/sbin/asterisk)
==25462==    by 0x80B1342: ast_openstream_full (in /usr/sbin/asterisk)
==25462==    by 0x46D2106: ast_moh_files_next (res_musiconhold.c:250)
==25462==    by 0x46D22CE: moh_files_readframe (res_musiconhold.c:275)
==25462==    by 0x46D2339: moh_files_generator (res_musiconhold.c:291)
==25462==    by 0x808B6CB: ast_read_generator_actions (in
/usr/sbin/asterisk)
==25462==    by 0x808D039: __ast_read (in /usr/sbin/asterisk)
==25462==    by 0x808D2E1: ast_read (in /usr/sbin/asterisk)
==25462==    by 0x808B311: ast_waitfordigit_full (in /usr/sbin/asterisk)

==13644== 144 bytes in 1 blocks are possibly lost in loss record 21 of 70
==13644==    at 0x4004BAE: calloc (vg_replace_malloc.c:397)
==13644==    by 0x725D49: _dl_allocate_tls (in /lib/ld-2.5.so)
==13644==    by 0x8B2B92: pthread_create@@GLIBC_2.1 (in
/lib/libpthread-2.5.so)
==13644==    by 0x8120E1A: ast_pthread_create_stack (in
/usr/sbin/asterisk)
==13644==    by 0x80DBC69: ast_pbx_start (in /usr/sbin/asterisk)
==13644==    by 0x68279A8: local_call (chan_local.c:523)
==13644==    by 0x808FF36: ast_call (in /usr/sbin/asterisk)
==13644==    by 0x554F8BD: ring_entry (app_queue.c:1988)
==13644==    by 0x554FDA0: ring_one (app_queue.c:2073)
==13644==    by 0x5552CCE: try_calling (app_queue.c:2957)
==13644==    by 0x5557B61: queue_exec (app_queue.c:4086)
==13644==    by 0x80D563C: pbx_exec (in /usr/sbin/asterisk) 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-07-14 12:59 aragon         Note Added: 0107725                          
======================================================================