[asterisk-bugs] [Asterisk 0016506]: [patch] Segmentation fault using manager http MXML

Sat Apr 24 07:40:50 CDT 2010

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=16506 
====================================================================== 
Reported By:                nik600
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   16506
Category:                   Core/ManagerInterface
Reproducibility:            sometimes
Severity:                   crash
Priority:                   normal
Status:                     ready for testing
Asterisk Version:           Older 1.4 - please test a newer version 
JIRA:                       SWP-1191 
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-12-23 04:00 CST
Last Modified:              2010-04-24 07:40 CDT
====================================================================== 
Summary:                    [patch] Segmentation fault using manager http MXML
Description: 
Dear all, i'm experiencing a problem with the manager http MXML interface.

I'm using Asterisk 1.4.26.2 on a slackware 13.0

On a system that recieves about 1000-1200 calls per day this happens with
a frequency of 1 time per day.

These are the HTTP MXML requests used:

action=login
action=queuestatus
action=QueueAdd
action=QueueRemove
action=SipPeers

I'm trying to reproduce the problem, but at the moment i haven't yet
figured it out.

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0015495 [patch] Asterisk runs over end of buffe...
has duplicate       0017053 Asterisk crash - core dump at manager.c...
====================================================================== 

---------------------------------------------------------------------- 
 (0120851) kowalma (reporter) - 2010-04-24 07:40
 https://issues.asterisk.org/view.php?id=16506#c120851 
---------------------------------------------------------------------- 
just crashed...

https://issues.asterisk.org/view.php?id=0  0x080eb751 in process_events
(s=0xac5d31bc) at manager.c:2644
2644                    while ( (eqe = NEW_EVENT(s)) ) {
(gdb) bt full
https://issues.asterisk.org/view.php?id=0  0x080eb751 in process_events
(s=0xac5d31bc) at manager.c:2644
        eqe = (struct eventqent *) 0xb1375d30
        ret = 0
https://issues.asterisk.org/view.php?id=1  0x080eca32 in process_message
(s=0xac5d31bc, m=0xac5d2f58) at
manager.c:3030
        action = "Login", '\0' <repeats 74 times>
        ret = 0
        tmp = (struct manager_action *) 0x8844a08
        user = 0xac5d2aea "test"
        __PRETTY_FUNCTION__ = "process_message"
https://issues.asterisk.org/view.php?id=2  0x080eced3 in do_message
(s=0xac5d31bc) at manager.c:3127
        m = {hdrcount = 3, headers = {0xac5d2b00 "Action: Login",
0xac5d2ae0 "Username: test", 0xac5d2ac0 "Secret: testowe", 0x0 <repeats 125
times>}}
        header_buf = "\000ecret: testowe", '\0' <repeats 1009 times>
        res = 1
https://issues.asterisk.org/view.php?id=3  0x080ed168 in session_do
(data=0xb775f550) at manager.c:3185
        ser = (struct ast_tcptls_session_instance *) 0xb775f550
        session = (struct mansession_session *) 0x890af98
        s = {session = 0x890af98, f = 0x0, fd = 0}
        flags = 2050
        res = 0
        __PRETTY_FUNCTION__ = "session_do"
https://issues.asterisk.org/view.php?id=4  0x08140997 in
handle_tcptls_connection (data=0xb775f550) at
tcptls.c:228
        tcptls_session = (struct ast_tcptls_session_instance *)
0xb775f550
        ssl_setup = (int (*)(SSL *)) 0x805e494 <SSL_accept at plt>
        ret = 349
        err = "\\3]?", '\0' <repeats 16 times>,
"\230!?\020\000\000\000\002", '\0' <repeats 11 times>,
"`3]?@`?\b\000\000\000\000\000\000\000\000?/?p\232?\000\000\000@", '\0'
<repeats 20 times>,
"\004\237?\000\000\000\000\0243]?\000\000\000\000\0303]?\0343]?\200\211?\f\000\000\000@`?\000?\017?\000\000\000\000`!??2]?\t??`!?\f\000\000\000\004\237?1\016\002\000?\201:\t\f\000\000\000?/?\000\000\000\000\000\000\000\000(3]?B?\024\b\001\000\000\000\f\000\000\000\0303]????`!?@`?\b8`?\b?"...
        __PRETTY_FUNCTION__ = "handle_tcptls_connection"
        cookie_funcs = {read = 0x8140228 <ssl_read>, write = 0x8140252
<ssl_write>, seek = 0, close = 0x8140273 <ssl_close>}
https://issues.asterisk.org/view.php?id=5  0x0814d0e0 in dummy_start
(data=0xb7bb10a0) at utils.c:968
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf =
{-1210437644, 0, 0, -1403178040, -1368997722, 1033986542}, __mask_was_saved
= 0}}, __pad = {0xac5d3490, 0x0,
    0x888fec0, 0xb7e1a82e}}
        __cancel_routine = (void (*)(void *)) 0x807637a
<ast_unregister_thread>
        __cancel_arg = (void *) 0xac5d3b90
        not_first_call = 0
        ret = (void *) 0xb7ecfd7e
        a = {start_routine = 0x8140418 <handle_tcptls_connection>, data =
0xb775f550,
  name = 0xb7bbed98 "handle_tcptls_connection started at [  275] tcptls.c
ast_tcptls_server_root()"}
https://issues.asterisk.org/view.php?id=6  0xb7d934c0 in start_thread () from
/lib/i686/cmov/libpthread.so.0
No symbol table info available.
https://issues.asterisk.org/view.php?id=7  0xb7e8a61e in clone () from
/lib/i686/cmov/libc.so.6
No symbol table info available. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-04-24 07:40 kowalma        Note Added: 0120851                          
======================================================================