[asterisk-bugs] [JIRA] (ASTERISK-22581) AMI: ConfbridgeList has race condition causing crashes

[Matt Jordan (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-22581?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Matt Jordan updated ASTERISK-22581:
-----------------------------------

    Description: 
I have started to get random crashes on 11.5.1 (10.4.1 is known to be stable) with ConfBridge setups. I managed to get non-debug enabled core, and pinpointed the issue to handling ConfbridgeList AMI request.

The incomplete backtrace is:
{noformat}
(gdb) where                                                                     
#0  0x1170ee21 in ast_channel_name ()                                           
#1  0x4f8d2000 in ?? () from /usr/lib/asterisk/modules/app_confbridge.so        
#2  0x4f8d2296 in ?? () from /usr/lib/asterisk/modules/app_confbridge.so
#3  0x117764e8 in ?? ()                                                 
#4  0x1177a159 in ?? ()                                                         
#5  0x117d1cf0 in ?? ()                                                         
#6  0x117dc72b in ?? ()                                                         
#7  0x4feacb8f in start_thread () from /lib/libpthread.so.0.9.32        
#8  0x501b2ffa in clone () from /lib/libc.so.0.9.32                     
{noformat}

And I managed to disasemble the the two functions from app_confbridge.so with matches, so the beginning of stack trace is:
{noformat}
  ast_channel_name(NULL)
  action_confbridgelist_item() in app_confbridge.c
  action_confbridgelist() in app_confbridge.c
{noformat}

Apparently there is some locking issue / race condition that triggers this.


  was:
I have started to get random crashes on 11.5.1 (10.4.1 is known to be stable) with ConfBridge setups. I managed to get non-debug enabled core, and pinpointed the issue to handling ConfbridgeList AMI request.

The incomplete backtrace is:
(gdb) where                                                                     
#0  0x1170ee21 in ast_channel_name ()                                           
#1  0x4f8d2000 in ?? () from /usr/lib/asterisk/modules/app_confbridge.so        
#2  0x4f8d2296 in ?? () from /usr/lib/asterisk/modules/app_confbridge.so
#3  0x117764e8 in ?? ()                                                 
#4  0x1177a159 in ?? ()                                                         
#5  0x117d1cf0 in ?? ()                                                         
#6  0x117dc72b in ?? ()                                                         
#7  0x4feacb8f in start_thread () from /lib/libpthread.so.0.9.32        
#8  0x501b2ffa in clone () from /lib/libc.so.0.9.32                     

And I managed to disasemble the the two functions from app_confbridge.so with matches, so the beginning of stack trace is:
  ast_channel_name(NULL)
  action_confbridgelist_item() in app_confbridge.c
  action_confbridgelist() in app_confbridge.c

Apparently there is some locking issue / race condition that triggers this.


    
> AMI: ConfbridgeList has race  condition causing crashes
> -------------------------------------------------------
>
>                 Key: ASTERISK-22581
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-22581
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Applications/app_confbridge
>    Affects Versions: 11.5.1
>            Reporter: Timo Teräs
>            Assignee: Timo Teräs
>
> I have started to get random crashes on 11.5.1 (10.4.1 is known to be stable) with ConfBridge setups. I managed to get non-debug enabled core, and pinpointed the issue to handling ConfbridgeList AMI request.
> The incomplete backtrace is:
> {noformat}
> (gdb) where                                                                     
> #0  0x1170ee21 in ast_channel_name ()                                           
> #1  0x4f8d2000 in ?? () from /usr/lib/asterisk/modules/app_confbridge.so        
> #2  0x4f8d2296 in ?? () from /usr/lib/asterisk/modules/app_confbridge.so
> #3  0x117764e8 in ?? ()                                                 
> #4  0x1177a159 in ?? ()                                                         
> #5  0x117d1cf0 in ?? ()                                                         
> #6  0x117dc72b in ?? ()                                                         
> #7  0x4feacb8f in start_thread () from /lib/libpthread.so.0.9.32        
> #8  0x501b2ffa in clone () from /lib/libc.so.0.9.32                     
> {noformat}
> And I managed to disasemble the the two functions from app_confbridge.so with matches, so the beginning of stack trace is:
> {noformat}
>   ast_channel_name(NULL)
>   action_confbridgelist_item() in app_confbridge.c
>   action_confbridgelist() in app_confbridge.c
> {noformat}
> Apparently there is some locking issue / race condition that triggers this.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira