[asterisk-bugs] [Asterisk 0019055]: asterisk crashes on unattended transfer

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=19055 
====================================================================== 
Reported By:                jamhed
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   19055
Category:                   PBX/pbx_lua
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     feedback
Asterisk Version:           1.6.2.17.2 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2011-04-02 17:39 CDT
Last Modified:              2011-04-05 16:32 CDT
====================================================================== 
Summary:                    asterisk crashes on unattended transfer
Description: 
A,B,C are sip peers.

A calls B, then A do a blind transfer (dtmf sequence or sip refer) to C,
and then asterisk (1.6.2.17) dumps core.

If B do a blind transfer then it works.
If A do an attended transfer then it works.

If I replace the context for sip peers to use pbx_config switch,
it works. Here is how it looks:

[ncom]
exten => _24XX,1,DIAL(SIP/${EXTEN},30,tT)
exten => _24XX,n,Hangup

It seems to me that the problem is related to ast_async_goto() because
I see "AsyncGoto/SIP/2401-0000000d<ZOMBIE>" in app.log() while trying to
do a transfer.
Also I've noticed that even that "AsyncGoto" strings disappears in
app.log() output if
I do a one second sleep and then continue execution of lua script.

But when I use pbx_config switch, then it shows a proper channel name
like SIP/2401-00000003, without these AsyncGoto and ZOMBIE.

I think there should be a difference between pbx_config and pbx_lua
behaviour,
but I cannot figure out what it is and where to look for.

I guess that lua script somehow executed on a wrong (dying) channel.

Here is my extensions.lua for this case, it's quite simple:

function simple_switch(ctx, number)
   app.log("VERBOSE", "simple switch: " .. number)
   app.dial("SIP/" .. number, 30, "tT")
end

extensions["ncomlua"] = {
   ["_."] = simple_switch
}
====================================================================== 

---------------------------------------------------------------------- 
 (0133407) jamhed (reporter) - 2011-04-05 16:32
 https://issues.asterisk.org/view.php?id=19055#c133407 
---------------------------------------------------------------------- 
I uploaded gdb's 'thread apply all bt' output, and asterisk's output.

This core I managed to get with dtmf unattended transfer (A dials B, B
answers, A dials dtmf sequence, hear "transfer" and then dials C,
coredump)

And lua's dialplan for this is:

function simple_switch(ctx, number)
   app.log("VERBOSE", "simple switch: " .. number)
   os.execute("sleep 1")
   app.log("VERBOSE", "simple switch: " .. number)
   app.dial("SIP/" .. number, 10, "tT")
end

extensions["ncomlua"] = {
   ["_."] = simple_switch
} 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-04-05 16:32 jamhed         Note Added: 0133407                          
======================================================================