[asterisk-bugs] [JIRA] (ASTERISK-22540) WARNING[2324] asterisk.c: Fork failed: Cannot allocate memory in /var/log/asterisk/messages then segfault

Tue Sep 24 08:24:04 CDT 2013

    [ https://issues.asterisk.org/jira/browse/ASTERISK-22540?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=210524#comment-210524 ] 

David Brillert commented on ASTERISK-22540:
-------------------------------------------

A couple of updates:

1. Upgraded the server to SVN r399516 and since then no more 'Fork failed: Cannot allocate memory' warnings and no new segfault as of 4 days.

2. /var/log/asterisk/security shows the server under some sort of attack which may be responsible for the problems.  Thousands of requests per second and 1 GB per day of logs in /var/log/asterisk/security and they look like this (IP's scrubbed):

[2013-09-14 23:47:26] SECURITY[32620] res_security_log.c: SecurityEvent="ChallengeSent",EventTV="1379224046-127489",Severity="Informationa
l",Service="SIP",EventVersion="1",AccountID="sip:ATTACKERIP:9",SessionID="0x3de88648",LocalAddress="IPV4/UDP/SERVERIP/5060",Remot
eAddress="IPV4/UDP/ATTACKERIP/9",Challenge="63654509"
[2013-09-14 23:47:26] SECURITY[32620] res_security_log.c: SecurityEvent="ChallengeSent",EventTV="1379224046-147487",Severity="Informationa
l",Service="SIP",EventVersion="1",AccountID="sip:ATTACKERIP:9",SessionID="0x3de90138",LocalAddress="IPV4/UDP/SERVERIP/5060",Remot
eAddress="IPV4/UDP/ATTACKERIP/9",Challenge="3b0da3ef"
[2013-09-14 23:47:26] SECURITY[32620] res_security_log.c: SecurityEvent="ChallengeSent",EventTV="1379224046-165780",Severity="Informationa
l",Service="SIP",EventVersion="1",AccountID="sip:ATTACKERIP:9",SessionID="0x3de97c28",LocalAddress="IPV4/UDP/SERVERIP/5060",Remot
eAddress="IPV4/UDP/ATTACKERIP/9",Challenge="2ba8f0a7"
[2013-09-14 23:47:26] SECURITY[32620] res_security_log.c: SecurityEvent="ChallengeSent",EventTV="1379224046-188493",Severity="Informationa
l",Service="SIP",EventVersion="1",AccountID="sip:ATTACKERIP:9",SessionID="0x3de9f718",LocalAddress="IPV4/UDP/SERVERIP/5060",Remot
eAddress="IPV4/UDP/ATTACKERIP/9",Challenge="2ef10a9f"
[2013-09-14 23:47:26] SECURITY[32620] res_security_log.c: SecurityEvent="ChallengeSent",EventTV="1379224046-209056",Severity="Informationa
l",Service="SIP",EventVersion="1",AccountID="sip:ATTACKERIP:9",SessionID="0x3dea7208",LocalAddress="IPV4/UDP/SERVERIP/5060",Remot
eAddress="IPV4/UDP/ATTACKERIP/9",Challenge="05ed0e4a"
[2013-09-14 23:47:26] SECURITY[32620] res_security_log.c: SecurityEvent="ChallengeSent",EventTV="1379224046-228397",Severity="Informationa
l",Service="SIP",EventVersion="1",AccountID="sip:ATTACKERIP:9",SessionID="0x3deaecf8",LocalAddress="IPV4/UDP/SERVERIP/5060",Remot
eAddress="IPV4/UDP/ATTACKERIP/9",Challenge="61d0cfbb"
[2013-09-14 23:47:26] SECURITY[32620] res_security_log.c: SecurityEvent="ChallengeSent",EventTV="1379224046-246259",Severity="Informationa
l",Service="SIP",EventVersion="1",AccountID="sip:ATTACKERIP:9",SessionID="0x3deb67e8",LocalAddress="IPV4/UDP/SERVERIP/5060",Remot
eAddress="IPV4/UDP/ATTACKERIP/9",Challenge="4af6412c"

> WARNING[2324] asterisk.c: Fork failed: Cannot allocate memory in /var/log/asterisk/messages then segfault
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-22540
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-22540
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: General
>    Affects Versions: 11.5.1
>         Environment: SVN r398885
>            Reporter: David Brillert
>         Attachments: gdb-c core asterisk.txt, messages.rar, valgrind.rar
>
>
> Asterisk eats memory until it crashes.
> Attached valgrind log and bt full from core file.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira