[asterisk-bugs] [Asterisk 0016724]: coredump on T.38 Session with 1.6.2.1

Tue Feb 2 16:31:32 CST 2010

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=16724 
====================================================================== 
Reported By:                barthpbx
Assigned To:                dvossel
====================================================================== 
Project:                    Asterisk
Issue ID:                   16724
Category:                   Channels/chan_sip/T.38
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     closed
Asterisk Version:           1.6.2.1 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
Resolution:                 fixed
Fixed in Version:           
====================================================================== 
Date Submitted:             2010-01-28 04:29 CST
Last Modified:              2010-02-02 16:31 CST
====================================================================== 
Summary:                    coredump on T.38 Session with 1.6.2.1
Description: 
We are currently again evaluation T.38 via Asterisk. We see the following
coredump for every t.38 Session:

https://issues.asterisk.org/view.php?id=0  ast_udptl_write (s=0xb5d5a300,
f=0x9af9f28) at udptl.c:1065
1065         len = udptl_build_packet(s, buf, sizeof(buf), f->data.ptr,
len);

bt:
https://issues.asterisk.org/view.php?id=0  ast_udptl_write (s=0xb5d5a300,
f=0x9af9f28) at udptl.c:1065
https://issues.asterisk.org/view.php?id=1  0xb6b4dfa2 in sip_write
(ast=0xb60f0c68, frame=0x9af9f28) at
chan_sip.c:6291
https://issues.asterisk.org/view.php?id=2  0x0809dbb8 in ast_write
(chan=0xb60f0c68, fr=0x9af9f28) at
channel.c:3487
https://issues.asterisk.org/view.php?id=3  0x08117492 in bridge_p2p_loop
(c0=0xb60f0c68, c1=0x98c5410,
p0=0xb5d00018, p1=0x99a10b8, timeoutms=-1, flags=<value optimized out>,
fo=0xb5f43e78, rc=0xb5f43e74,
    pvt0=0xb5e5ebc8, pvt1=0x99ff440) at rtp.c:4350
https://issues.asterisk.org/view.php?id=4  0x08120e95 in ast_rtp_bridge
(c0=0xb60f0c68, c1=0x98c5410, flags=0,
fo=0xb5f43e78, rc=0xb5f43e74, timeoutms=-1) at rtp.c:4554
https://issues.asterisk.org/view.php?id=5  0x080a20ea in ast_channel_bridge
(c0=0xb60f0c68, c1=0x98c5410,
config=0xb5f44cfc, fo=0xb5f43e78, rc=0xb5f43e74) at channel.c:5186
https://issues.asterisk.org/view.php?id=6  0x080c73df in ast_bridge_call
(chan=0xb60f0c68, peer=0x98c5410,
config=0xb5f44cfc) at features.c:2585
https://issues.asterisk.org/view.php?id=7  0xb6a6ee6b in dial_exec_full
(chan=0xb60f0c68, data=0xb5f46f14,
peerflags=0xb5f44e50, continue_exec=0x0) at app_dial.c:2258
https://issues.asterisk.org/view.php?id=8  0xb6a72bcd in dial_exec
(chan=0xb60f0c68, data=0xb5f46f14) at
app_dial.c:2342
https://issues.asterisk.org/view.php?id=9  0x08105457 in pbx_exec (c=0xb60f0c68,
app=0xb7b66030, data=0xb5f46f14)
at pbx.c:1348
https://issues.asterisk.org/view.php?id=10 0x08110206 in pbx_extension_helper
(c=0xb60f0c68, con=0x0,
context=0xb60f0ed8 "local", exten=0xb60f0f28 "<destination>", priority=1,
label=0x0, callerid=0xb5e303f0 "<account>",
    action=E_SPAWN, found=0xb5f49348, combined_find_spawn=1) at
pbx.c:3706
https://issues.asterisk.org/view.php?id=11 0x0811257d in __ast_pbx_run
(c=0xb60f0c68, args=0x0) at pbx.c:4165
https://issues.asterisk.org/view.php?id=12 0x08113df0 in pbx_thread
(data=0xb60f0c68) at pbx.c:4542
https://issues.asterisk.org/view.php?id=13 0x081538cb in dummy_start
(data=0xb60793e0) at utils.c:968
https://issues.asterisk.org/view.php?id=14 0xb7dbc4c0 in start_thread () from
/lib/i686/cmov/libpthread.so.0
https://issues.asterisk.org/view.php?id=15 0xb7eb46de in clone () from
/lib/i686/cmov/libc.so.6

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0016634 asterisk crashes while fax sending
has duplicate       0016517 Segfault while setting up T.38 fax rece...
====================================================================== 

---------------------------------------------------------------------- 
 (0117581) svnbot (reporter) - 2010-02-02 16:31
 https://issues.asterisk.org/view.php?id=16724#c117581 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 244446

_U  branches/1.6.1/
U   branches/1.6.1/channels/chan_sip.c
U   branches/1.6.1/include/asterisk/udptl.h
U   branches/1.6.1/main/udptl.c

------------------------------------------------------------------------
r244446 | dvossel | 2010-02-02 16:31:30 -0600 (Tue, 02 Feb 2010) | 23
lines

Merged revisions 244443 via svnmerge from 
https://origsvn.digium.com/svn/asterisk/trunk

........
  r244443 | dvossel | 2010-02-02 16:27:23 -0600 (Tue, 02 Feb 2010) | 18
lines

  fixes crash during T.38 negotiation caused by invalid or missing
FaxMaxDatagram field

  AST-2010-001

  (closes issue https://issues.asterisk.org/view.php?id=16634)
  Reported by: krn

  (closes issue https://issues.asterisk.org/view.php?id=16724)
  Reported by: barthpbx

  (closes issue https://issues.asterisk.org/view.php?id=16517)
  Reported by: bklang

  (closes issue https://issues.asterisk.org/view.php?id=16485)
  Reported by: elsto
........

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=244446 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-02-02 16:31 svnbot         Checkin                                      
2010-02-02 16:31 svnbot         Note Added: 0117581                          
======================================================================