[asterisk-bugs] [Asterisk 0018976]: Segfault in what seems to be related to RTCP (rtp.c)

[Asterisk Bug Tracker]

The following issue has been SUBMITTED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18976 
====================================================================== 
Reported By:                sysreq
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18976
Category:                   Core/RTP
Reproducibility:            unable to reproduce
Severity:                   crash
Priority:                   normal
Status:                     new
Asterisk Version:           SVN 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): 1.6.2 
SVN Revision (number only!): 308989 
Request Review:              
====================================================================== 
Date Submitted:             2011-03-15 11:19 CDT
Last Modified:              2011-03-15 11:19 CDT
====================================================================== 
Summary:                    Segfault in what seems to be related to RTCP (rtp.c)
Description: 
https://issues.asterisk.org/view.php?id=0  0x08158c7c in ast_rtcp_write
(data=0xa94ad2c0) at rtp.c:3623
3623            if (rtp->txcount > rtp->rtcp->lastsrtxcount)
https://issues.asterisk.org/view.php?id=0  0x08158c7c in ast_rtcp_write
(data=0xa94ad2c0) at rtp.c:3623
        rtp = (struct ast_rtp *) 0xa94ad2c0
        res = 0
https://issues.asterisk.org/view.php?id=1  0x08183765 in ast_sched_runq
(con=0xb33f5198) at sched.c:621
        current = (struct sched *) 0xa9435bf8
        when = {tv_sec = 1300203619, tv_usec = 817086}
        numevents = 0
        res = 0
        __PRETTY_FUNCTION__ = "ast_sched_runq"
https://issues.asterisk.org/view.php?id=2  0xb6d96366 in do_monitor (data=0x0)
at chan_sip.c:23001
        res = 1
        t = 1300203619
        reloading = 0
        __PRETTY_FUNCTION__ = "do_monitor"
https://issues.asterisk.org/view.php?id=3  0x081a04f6 in dummy_start
(data=0xb33646e0) at utils.c:970
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf =
{-1212649484, 0, -1288946800, -1288948776, -456736609, -2002261527},
__mask_was_saved = 0}}, __pad = {0xb32c3490, 0x0, 0x0, 0x0}}
        __cancel_routine = (void (*)(void *)) 0x807af3f
<ast_unregister_thread>
        __cancel_arg = (void *) 0xb32c3b90
        not_first_call = 0
        ret = (void *) 0x0
        a = {start_routine = 0xb6d96014 <do_monitor>, data = 0x0, name =
0xb33f5a08 "do_monitor", ' ' <repeats 11 times>, "started at [23028]
chan_sip.c restart_monitor()"}
        lock_info = (struct thr_lock_info *) 0x85c1c90
        mutex_attr = {__size = "\001\000\000", __align = 1}
https://issues.asterisk.org/view.php?id=4  0xb7b774fb in start_thread () from
/lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
https://issues.asterisk.org/view.php?id=5  0xb7d88e5e in clone () from
/lib/tls/i686/cmov/libc.so.6
No symbol table info available.
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-03-15 11:19 sysreq         New Issue                                    
2011-03-15 11:19 sysreq         Asterisk Version          => SVN             
2011-03-15 11:19 sysreq         Regression                => No              
2011-03-15 11:19 sysreq         SVN Branch (only for SVN checkouts, not tarball
releases) => 1.6.2           
2011-03-15 11:19 sysreq         SVN Revision (number only!) => 308989          
======================================================================