[asterisk-bugs] [Asterisk 0016506]: [patch] Segmentation fault using manager http MXML

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=16506 
====================================================================== 
Reported By:                nik600
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   16506
Category:                   Core/ManagerInterface
Reproducibility:            sometimes
Severity:                   crash
Priority:                   normal
Status:                     ready for review
Asterisk Version:           Older 1.4 - please test a newer version 
JIRA:                       SWP-1191 
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-12-23 04:00 CST
Last Modified:              2010-06-21 13:10 CDT
====================================================================== 
Summary:                    [patch] Segmentation fault using manager http MXML
Description: 
Dear all, i'm experiencing a problem with the manager http MXML interface.

I'm using Asterisk 1.4.26.2 on a slackware 13.0

On a system that recieves about 1000-1200 calls per day this happens with
a frequency of 1 time per day.

These are the HTTP MXML requests used:

action=login
action=queuestatus
action=QueueAdd
action=QueueRemove
action=SipPeers

I'm trying to reproduce the problem, but at the moment i haven't yet
figured it out.

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0015495 [patch] Asterisk runs over end of buffe...
has duplicate       0017053 Asterisk crash - core dump at manager.c...
has duplicate       0017281 Asterisk segfault xml_translate manager...
====================================================================== 

---------------------------------------------------------------------- 
 (0123667) coolmig (reporter) - 2010-06-21 13:10
 https://issues.asterisk.org/view.php?id=16506#c123667 
---------------------------------------------------------------------- 
I was load testing between two 1.6.2.9 asterisk servers and I've got the
same crash:

Program terminated with signal 11, Segmentation fault.
https://issues.asterisk.org/view.php?id=0  process_events (s=0xb761934c) at
manager.c:2687
2687			while ( (eqe = NEW_EVENT(s)) ) {
(gdb) bt
https://issues.asterisk.org/view.php?id=0  process_events (s=0xb761934c) at
manager.c:2687
https://issues.asterisk.org/view.php?id=1  0x080ef847 in do_message
(s=0xb761934c) at manager.c:3170
https://issues.asterisk.org/view.php?id=2  0x080efd17 in session_do
(data=0xb7c01800) at manager.c:3235
https://issues.asterisk.org/view.php?id=3  0x0815181b in dummy_start
(data=0xb7c01840) at utils.c:968
https://issues.asterisk.org/view.php?id=4  0x00818832 in start_thread () from
/lib/libpthread.so.0
https://issues.asterisk.org/view.php?id=5  0x001e1e0e in clone () from
/lib/libc.so.6
(gdb) bt full
https://issues.asterisk.org/view.php?id=0  process_events (s=0xb761934c) at
manager.c:2687
        eqe = <value optimized out>
        ret = 0
https://issues.asterisk.org/view.php?id=1  0x080ef847 in do_message
(s=0xb761934c) at manager.c:3170
        m = {hdrcount = 0, headers = {0x0 <repeats 128 times>}}
        header_buf = '\000' <repeats 1024 times>
        res = <value optimized out>
https://issues.asterisk.org/view.php?id=2  0x080efd17 in session_do
(data=0xb7c01800) at manager.c:3235
        s = {session = 0x940fb38, f = 0x0, fd = 0}
        flags = <value optimized out>
        res = <value optimized out>
        __PRETTY_FUNCTION__ = "session_do"
https://issues.asterisk.org/view.php?id=3  0x0815181b in dummy_start
(data=0xb7c01840) at utils.c:968
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf =
{-1212147632, 
                0, -1218339952, -1218341944, -1720409120, 637544596}, 
              __mask_was_saved = 0}}, __pad = {0xb7619480, 0x0, 0x0,
0x263ff4}}
        __cancel_arg = 0xb7619b90
        not_first_call = <value optimized out>
        ret = <value optimized out>
https://issues.asterisk.org/view.php?id=4  0x00818832 in start_thread () from
/lib/libpthread.so.0
No symbol table info available.
https://issues.asterisk.org/view.php?id=5  0x001e1e0e in clone () from
/lib/libc.so.6
No symbol table info available.

On this machine I originate calls to the receiving server so basically the
AMI actions involved are QueueSummary and Originate. Is there any 1.6.2
patch to test? I would be happy to test one. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-06-21 13:10 coolmig        Note Added: 0123667                          
======================================================================