[asterisk-bugs] [Asterisk 0017686]: Asterisk crashing in ast_readaudio_callback at file.c:762

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=17686 
====================================================================== 
Reported By:                jhoppebugs
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   17686
Category:                   General
Reproducibility:            random
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           1.6.2.9 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-07-22 12:43 CDT
Last Modified:              2010-07-26 05:22 CDT
====================================================================== 
Summary:                    Asterisk crashing in ast_readaudio_callback at
file.c:762
Description: 



Program terminated with signal 11, Segmentation fault.
https://issues.asterisk.org/view.php?id=0  0x080d54db in ast_readaudio_callback
(s=0xb358d5e8) at file.c:762
762			if (s->owner->timingfd > -1) {
https://issues.asterisk.org/view.php?id=0  0x080d54db in ast_readaudio_callback
(s=0xb358d5e8) at file.c:762
        whennext = 160
        __PRETTY_FUNCTION__ = "ast_readaudio_callback"
https://issues.asterisk.org/view.php?id=1  0x080d56ef in ast_fsread_audio
(data=0xb358d5e8) at file.c:789
        fs = 0xb358d5e8
        res = FSREAD_SUCCESS_SCHED
https://issues.asterisk.org/view.php?id=2  0x08098a76 in __ast_read
(chan=0xb59b72f8, dropaudio=0) at
channel.c:2784
        func = 0x80d56d8 <ast_fsread_audio>
        data = 0xb358d5e8
        res = AST_TIMING_EVENT_EXPIRED
        f = 0x0
        blah = -1255758064
        prestate = 6
        count = 0
        cause = 0
        __PRETTY_FUNCTION__ = "__ast_read"
https://issues.asterisk.org/view.php?id=3  0x0809a539 in ast_read
(chan=0xb59b72f8) at channel.c:3163
No locals.
====================================================================== 

---------------------------------------------------------------------- 
 (0125008) davidw (reporter) - 2010-07-26 05:22
 https://issues.asterisk.org/view.php?id=17686#c125008 
---------------------------------------------------------------------- 
In our case, these are what I believe to be the relevant lines in the full
log and the short form backtrace.  I'm not convinced it is worth my time to
remove sensitive data from the complete debug log given that I cannot give
a backtrace with full debugging information.

Inline because very short:

[2010-07-19 09:01:58.570] VERBOSE[22896] chan_agent.c:     -- agent_call,
call to agent '015' call on 'Local/015 at BTSAgentLogins-ae09;2'
[2010-07-19 09:01:58.571] VERBOSE[22896] file.c:     --
<Local/015 at BTSAgentLogins-ae09;2> Playing 'beep.slin' (language 'en')

Next line only to establish the last timestamp before the crash:
[2010-07-19 09:01:59.044] VERBOSE[22913] chan_sip.c: Reliably Transmitting
(no NAT) to 10.17.50.23:5060:

[2010-07-19 09:02:03.474] VERBOSE[22937] logger.c:  Asterisk Event Logger
Started /var/log/asterisk/event_log


https://issues.asterisk.org/view.php?id=0  0x080e2c1c in ast_frdup ()
https://issues.asterisk.org/view.php?id=1  0x08095c55 in __ast_queue_frame ()
https://issues.asterisk.org/view.php?id=2  0x0809602c in ast_queue_frame ()
https://issues.asterisk.org/view.php?id=3  0x002b593b in local_queue_frame
(p=0x97620f0, isoutbound=1,
f=0x97a67dc, us=0x94ed058, us_locked=1)
    at chan_local.c:245
https://issues.asterisk.org/view.php?id=4  0x002b61a2 in local_write
(ast=0x94ed058, f=0x97a67dc) at
chan_local.c:364
https://issues.asterisk.org/view.php?id=5  0x0809d3c7 in ast_write ()
https://issues.asterisk.org/view.php?id=6  0x080df647 in ast_readaudio_callback
()
https://issues.asterisk.org/view.php?id=7  0x080df88c in ast_fsread_audio ()
https://issues.asterisk.org/view.php?id=8  0x0809a308 in __ast_read ()
https://issues.asterisk.org/view.php?id=9  0x0809bc9b in ast_read ()
https://issues.asterisk.org/view.php?id=10 0x003c2192 in agent_ack_sleep
(data=0x94e7cf0) at chan_agent.c:953
https://issues.asterisk.org/view.php?id=11 0x003c83d7 in login_exec
(chan=0x94ed058, data=0xb7425e88) at
chan_agent.c:2122
https://issues.asterisk.org/view.php?id=12 0x0810e0ae in pbx_exec ()
https://issues.asterisk.org/view.php?id=13 0x08116014 in pbx_extension_helper ()
https://issues.asterisk.org/view.php?id=14 0x08117543 in ast_spawn_extension ()
https://issues.asterisk.org/view.php?id=15 0x08117c0f in __ast_pbx_run ()
https://issues.asterisk.org/view.php?id=16 0x08119117 in pbx_thread ()
https://issues.asterisk.org/view.php?id=17 0x081720e9 in dummy_start ()
https://issues.asterisk.org/view.php?id=18 0x00afb49b in start_thread () from
/lib/libpthread.so.0
https://issues.asterisk.org/view.php?id=19 0x00a5242e in clone () from
/lib/libc.so.6 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-07-26 05:22 davidw         Note Added: 0125008                          
======================================================================