[asterisk-bugs] [JIRA] (ASTERISK-21892) Segfault after fax

[Matt Jordan (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-21892?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=207118#comment-207118 ] 

Matt Jordan commented on ASTERISK-21892:
----------------------------------------

This appears to be crashing on something in the frame that was passed in to res_fax_spandsp. If you have the core file and/or can reproduce this, can you inspect the contents of the frame?

That would be either:
 * {{frame}} in stack frame 2. In particular, the data.ptr and samples attributes of that struct are what's of importance.
 * {{f}} in stack frame 1 (which is the same thing).

Getting all attributes of {{frame}} would be helpful, since it will tell us what frame caused the seg fault. If the frame is fine, this may be an error in {{libspandsp}}.
                
> Segfault after fax
> ------------------
>
>                 Key: ASTERISK-21892
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-21892
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>    Affects Versions: 11.2.1
>            Reporter: Alexandr Gordeev
>            Severity: Critical
>         Attachments: backtrace_20130610.txt
>
>
> {code}#0  0x00000002 in ?? ()
> #1  0xb67507d6 in spandsp_fax_write (s=0x100650a4, f=0x14f97390) at res_fax_spandsp.c:701
> #2  0xb678687b in generic_fax_exec (chan=0x150ca27c, details=0xfdea6e4, reserved=0x100650a4, token=0x0) at res_fax.c:1498
> #3  0xb678f9b2 in sendfax_exec (chan=0x150ca27c, data=0xb46c0c5c "/tmp/1370844606_100001_100002.tif,f") at res_fax.c:2443
> #4  0x0815704f in pbx_exec (c=0x150ca27c, app=0x955bef8, data=0xb46c0c5c "/tmp/1370844606_100001_100002.tif,f") at pbx.c:1589
> #5  0x0815ffae in pbx_extension_helper (c=0x150ca27c, con=0x0, context=0x150cae30 "www-autooutgoing", exten=0x150cae80 "send", priority=3, label=0x0,
>     callerid=0x1033e798 "100001", action=E_SPAWN, found=0xb46c3080, combined_find_spawn=1) at pbx.c:4665
> #6  0x08162f5a in ast_spawn_extension (c=0x150ca27c, context=0x150cae30 "www-autooutgoing", exten=0x150cae80 "send", priority=3, callerid=0x1033e798 "100001",
>     found=0xb46c3080, combined_find_spawn=1) at pbx.c:5781
> #7  0x081645ca in __ast_pbx_run (c=0x150ca27c, args=0x0) at pbx.c:6256
> #8  0x08166022 in ast_pbx_run_args (c=0x150ca27c, args=0x0) at pbx.c:6634
> #9  0x08166048 in ast_pbx_run (c=0x150ca27c) at pbx.c:6643
> #10 0x081701fe in ast_pbx_outgoing_exten (type=0x1073f0e4 "Local", cap=0xfc31ef0, addr=0x1073f0ec "call at www-autooutgoing", timeout=20000, context=0x1073f10a "www-autooutgoing",
>     exten=0x1073f11e "send", priority=1, reason=0xb46c3300, synchronous=2, cid_num=0x1073f0d6 "100001", cid_name=0x824b14e "", vars=0xfc11f78, account=0x824b14e "",
>     channel=0x0, early_media=0) at pbx.c:10156
> #11 0xb67674b8 in attempt_thread (data=0xfd08418) at pbx_spool.c:382
> #12 0x081b8735 in dummy_start (data=0xfacc170) at utils.c:1028
> #13 0xb7401955 in start_thread () from /lib/i686/cmov/libpthread.so.0
> #14 0xb782858e in clone () from /lib/i686/cmov/libc.so.6
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira