[asterisk-bugs] [Asterisk 0018035]: Asterisk crashes on local_ast_moh_start (Segmentation Fault)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18035 
====================================================================== 
Reported By:                valen22br
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18035
Category:                   Channels/General
Reproducibility:            sometimes
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           1.6.2.13 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-09-23 07:27 CDT
Last Modified:              2010-10-04 14:59 CDT
====================================================================== 
Summary:                    Asterisk crashes on local_ast_moh_start
(Segmentation Fault)
Description: 
Scenario: Asterisk(A) connect to Asterisk(B) through IAX2 trunk.
Using res_timing_dahdi as timing source.

Call comes from PSTN to Asterisk(A), with DID to a SIP extension that have
an follow me configured to a external route (using IAX2 trunk) that point
to another SIP extension on Asterisk(B).

In this scenario I have two segmentations faults on Asterisk(A), 1000
calls per day.
Today I changed the IAX2 trunk between Asterisk(A) and Asterisk(B) to a
SIP trunk and until now, I do not have an segmentation fault.

I am suspecting that the problem is with IAX2 trunk.
====================================================================== 

---------------------------------------------------------------------- 
 (0127678) valen22br (reporter) - 2010-10-04 14:59
 https://issues.asterisk.org/view.php?id=18035#c127678 
---------------------------------------------------------------------- 
Hello all,

after many days doing tests, we got the following:

Asterisk(A) dial to Asterisk(B) using a IAX2 trunk, the Asterisk(B) get
the extension and dial to a SIP extension(logged on Asterisk(B)).

If the Asterisk(B) has the mohinterpret parameter set as passthrough, in
iax.conf. After the SIP extension logged on Asterisk(B) tries to transfer
the call, we got a crash or a message like this: "[Oct  4 15:44:53]
DEBUG[24045] res_musiconhold.c: Music on Hold class
']]][YY]^[Y]a`][ZXXZ]][]fg\VWZ[XXYYWY`g_YY\[WUY]]\^ef][be[UWXWVX\_^]ad^YXYXYYZZZ[[[[[[[[[\\\\\[ZZYXXXXYZ[\\[[ZYXXXYZ[]^`bbba`_^^]\\\\]]]]]]\\\\\\\]]]]]\\[[[[[\\]°^C'
not found in memory".

We did tests using 3 versions (All of those using Asterisk(A) 1.6.2.13
version:

Asterisk(B) 1.2.24: We don't need to enable mohinterpret=passthrough
parameter in iax.conf at Asterisk(B), and all the calls transfered crashs
Asterisk(A);

Asterisk(B) 1.4.30: We must enable mohinterpret=passthrough parameter in
iax.conf at Asterisk(B), to crash Asterisk(A);

Asterisk(B) 1.6.2.13: We must enable mohinterpret=passthrough parameter in
iax.conf at Asterisk(B), to crash Asterisk(A);

__________________________________________________________________________


My simple dialplan at Asterisk(A):
exten => 89001,1,Dial(IAX2/itrunk2/9001)
exten => 89001,n,Hangup



My simple dialplan at Asterisk(B):
exten => 9001,n,Dial(SIP/9001,,Tt)
exten => 9001,n,Hangup

The logs from asterisk(A) and asterisk(B) are attached.

Tnanks 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-10-04 14:59 valen22br      Note Added: 0127678                          
======================================================================