[asterisk-bugs] [Asterisk 0017083]: Crash in device state handling

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=17083 
====================================================================== 
Reported By:                parisioa
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   17083
Category:                   General
Reproducibility:            random
Severity:                   crash
Priority:                   normal
Status:                     acknowledged
Asterisk Version:           1.6.1.18 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-03-23 11:42 CDT
Last Modified:              2010-03-23 16:18 CDT
====================================================================== 
Summary:                    Crash in device state handling
Description: 
I finally had it set up for a backtrace when it happened, with verbose
logging to file turned on.  The system was in the middle of a reload when
the crash happened.  Here is the backtrace info.  I'm not 100% sure if i'm
supposed to post this here but the asterisk debugging page on voip-info
said submit a ticket.  I confirmed with a user that they had dialed their
phone when the crash happened, and that at that instant everybody else said
their phones had died.  The dial is actually a scripted button which uses
the AMI to originate the call.

(gdb) bt
https://issues.asterisk.org/view.php?id=0  0x0811eb99 in handle_statechange
(datap=0xac080df8) at pbx.c:3387
https://issues.asterisk.org/view.php?id=1  0x0816a4f9 in tps_processing_function
(data=0xb7a24ab0) at
taskprocessor.c:310
https://issues.asterisk.org/view.php?id=2  0x0817c8b2 in dummy_start
(data=0xb7a21670) at utils.c:968
https://issues.asterisk.org/view.php?id=3  0xb7c5e4c0 in start_thread () from
/lib/i686/cmov/libpthread.so.0
https://issues.asterisk.org/view.php?id=4  0xb7d556de in clone () from
/lib/i686/cmov/libc.so.6
(gdb) bt full
https://issues.asterisk.org/view.php?id=0  0x0811eb99 in handle_statechange
(datap=0xac080df8) at pbx.c:3387
        buf =
"SIP/1655\000SIP/16551\000\000øf\035\b\016g\035\bèJ¢·\214K¢·\235\221\026\b\000\000\000\000\000\000\000\000èJ¢·\001\000\000\000\000\000\000\000ôßÆ·\bs\230·Ù´\026\b,_\035\b\201\001\000"
        parse = 0xb79872a1 "SIP/16551"
        state = 8
        cblist = (struct ast_state_cb *) 0x822e278
        cur = 0xb7987298 "SIP/1655"
        hint = (struct ast_hint *) 0x89879c8
        sc = (struct statechange *) 0xac080df8
        __PRETTY_FUNCTION__ = "handle_statechange"
https://issues.asterisk.org/view.php?id=1  0x0816a4f9 in tps_processing_function
(data=0xb7a24ab0) at
taskprocessor.c:310
        i = (struct ast_taskprocessor *) 0xb7a24ab0
        t = (struct tps_task *) 0xac0a8330
        size = 0
        __PRETTY_FUNCTION__ = "tps_processing_function"
https://issues.asterisk.org/view.php?id=2  0x0817c8b2 in dummy_start
(data=0xb7a21670) at utils.c:968
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf =
{-1211703308, 0, 0, -1214745656, 619094161, 999252462}, __mask_was_saved =
0}}, __pad = {0xb7987490, 0x0,
    0x0, 0x0}}
        __cancel_routine = (void (*)(void *)) 0x8077f5d
<ast_unregister_thread>
        __cancel_arg = (void *) 0xb7987b90
        not_first_call = 0
        ret = (void *) 0x0
        a = {start_routine = 0x816a2d4 <tps_processing_function>, data =
0xb7a24ab0,
  name = 0xb7a21738 "tps_processing_function started at [  451]
taskprocessor.c ast_taskprocessor_get()"}
        lock_info = (struct thr_lock_info *) 0x8231910
        mutex_attr = {__size = "\001\000\000", __align = 1}
https://issues.asterisk.org/view.php?id=3  0xb7c5e4c0 in start_thread () from
/lib/i686/cmov/libpthread.so.0
No symbol table info available.
https://issues.asterisk.org/view.php?id=4  0xb7d556de in clone () from
/lib/i686/cmov/libc.so.6
No symbol table info available.

====================================================================== 

---------------------------------------------------------------------- 
 (0119769) parisioa (reporter) - 2010-03-23 16:18
 https://issues.asterisk.org/view.php?id=17083#c119769 
---------------------------------------------------------------------- 
In the meantime would it help if i removed the subscribe context that the
reception console uses to monitor the 100+ sip peers?  Anything to remove
the potential for this crash would be great while we work on resolving it.

Thanks! 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-03-23 16:18 parisioa       Note Added: 0119769                          
======================================================================