[asterisk-bugs] [Asterisk 0015109]: Abort by memory allocator, possibly in moh_files_generator

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15109 
====================================================================== 
Reported By:                jvandal
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   15109
Category:                   Resources/res_musiconhold
Reproducibility:            random
Severity:                   block
Priority:                   normal
Status:                     acknowledged
Target Version:             1.4.27
Asterisk Version:           1.4.24 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-05-14 10:49 CDT
Last Modified:              2009-06-18 00:44 CDT
====================================================================== 
Summary:                    Abort by memory allocator, possibly in
moh_files_generator
Description: 
I have a server running with Asterisk 1.4.24.1 where it randomly segfault
for "unknown" reason.

I'm not sure if this is related to moh_files_generator function or with
filestream_descructor.

Let me know what needed in order to fix this crash, if GDB traces aren't
enough. 

Asterisk is compiled with DONT_OPTIMIZE and others flag needed for "gdb".

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0014958 Segfault Asterisk 1.4.24.1
related to          0015123 out of bounds crash and core dump
has duplicate       0015195 double free or corruption (!prev) in mo...
====================================================================== 

---------------------------------------------------------------------- 
 (0106605) aragon (reporter) - 2009-06-18 00:44
 https://issues.asterisk.org/view.php?id=15109#c106605 
---------------------------------------------------------------------- 
This crash didn't happen under 1.4.24.1
So I checked the changelog for 1.4.26rc2 to look for a bad revision.

I found it.

I was running a script to run the conversion tool on each reload to
convert existing MOH and IVR files audio codecs to multiple
formats/codecs.
This combined with the fact that a reload also reloads MOH I think was
causing a race condition which could not be reproduced with valgrind.
Since disabling the conversion script I have no more segfaults (I think).
My test procedure as follows:
No Valgrind...
A script to run the conversion and reload every ten minutes with revision
199742
produced 12 crashes with core file generation every 8 hours.
A script to do a reload every 5 minutes with revision 199742 produced 0
crashes over 8 hours.

The bad revision is here

2009-05-26 18:14 +0000 [r196826] Russell Bryant <russell at digium.com>
   * res/res_convert.c: Resolve a file handle leak. The frames here
    should have always been freed. However, out of luck, there was
    never any memory leaked. However, after file streams became
    reference counted, this code would leak the file stream for the
    file being read. (closes issue
https://issues.asterisk.org/view.php?id=15181) Reported by: jkroon 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-06-18 00:44 aragon         Note Added: 0106605                          
======================================================================