[asterisk-bugs] [Asterisk 0015396]: app_queue segfault

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15396 
====================================================================== 
Reported By:                aragon
Assigned To:                russell
====================================================================== 
Project:                    Asterisk
Issue ID:                   15396
Category:                   Applications/app_queue
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     closed
Asterisk Version:           SVN 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases):  1.4  
SVN Revision (number only!): 202945 
Request Review:              
Resolution:                 fixed
Fixed in Version:           
====================================================================== 
Date Submitted:             2009-06-25 08:26 CDT
Last Modified:              2009-09-01 15:45 CDT
====================================================================== 
Summary:                    app_queue segfault
Description: 
While hammer testing 1.4.26rc4 release I have multiple crashes in
app_queue
System is under very high load.
4 segfaults in 8 hours
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
child of            0015109 [patch] Abort by memory allocator, poss...
====================================================================== 

---------------------------------------------------------------------- 
 (0109957) svnbot (reporter) - 2009-09-01 15:45
 https://issues.asterisk.org/view.php?id=15396#c109957 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 215213

_U  branches/1.6.2/

------------------------------------------------------------------------
r215213 | russell | 2009-09-01 15:45:26 -0500 (Tue, 01 Sep 2009) | 51
lines

Blocked revisions 215212 via svnmerge

........
  r215212 | russell | 2009-09-01 15:44:13 -0500 (Tue, 01 Sep 2009) | 45
lines
  
  Fix memory corruption caused by format_mp3.
  
  format_mp3 claimed that it provided AST_FRIENDLY_OFFSET in frames
returned by
  read().  However, it lied.  This means that other parts of the code that
  attempted to make use of the offset buffer would end up corrupting the
fields
  in the ast_filestream structure.  This resulted in quite a few crashes
due to
  unexpected values for fields in ast_filestream.
  
  This patch closes out quite a few bugs.  However, some of these bugs
have been
  open for a while and have been an area where more than one bug has been
  discussed.  So with that said, anyone that is following one of the
issues
  closed here, if you still have a problem, please open a new bug report
for the
  specific problem you are still having.  If you do, please ensure that
the bug
  report is based on the newest version of Asterisk, and that this patch
is
  applied if format_mp3 is in use.  Thanks!
  
  (closes issue https://issues.asterisk.org/view.php?id=15109)
  Reported by: jvandal
  Tested by: aragon, russell, zerohalo, marhbere, rgj
  
  (closes issue https://issues.asterisk.org/view.php?id=14958)
  Reported by: aragon
  
  (closes issue https://issues.asterisk.org/view.php?id=15123)
  Reported by: axisinternet
  
  (closes issue https://issues.asterisk.org/view.php?id=15041)
  Reported by: maxnuv
  
  (closes issue https://issues.asterisk.org/view.php?id=15396)
  Reported by: aragon
  
  (closes issue https://issues.asterisk.org/view.php?id=15195)
  Reported by: amorsen
  Tested by: amorsen
  
  (closes issue https://issues.asterisk.org/view.php?id=15781)
  Reported by: jensvb
  
  (closes issue https://issues.asterisk.org/view.php?id=15735)
  Reported by: thom4fun
  
  (closes issue https://issues.asterisk.org/view.php?id=15460)
  Reported by: marhbere
........

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=215213 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-09-01 15:45 svnbot         Checkin                                      
2009-09-01 15:45 svnbot         Note Added: 0109957                          
======================================================================