[asterisk-bugs] [JIRA] (ASTERISK-24190) IMAP voicemail causes segfault

[Walter Doekes (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-24190?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=221451#comment-221451 ] 

Walter Doekes commented on ASTERISK-24190:
------------------------------------------

{noformat}
[Aug  8 07:52:29] DEBUG[21051] app_voicemail.c: saving mailbox message number 266 as message 253. Interactive set to 0
[Aug  8 07:52:29] DEBUG[21051] app_voicemail.c: saving mailbox message number 267 as message 254. Interactive set to 0
[Aug  8 07:52:29] DEBUG[21051] app_voicemail.c: saving mailbox message number 268 as message 255. Interactive set to 0
[Aug  8 07:52:29] DEBUG[21051] app_voicemail.c: saving mailbox message number 269 as message 256. Interactive set to 0
[Aug  8 07:52:29] DEBUG[21051] app_voicemail.c: saving mailbox message number 270 as message 257. Interactive set to 0
[Aug  8 07:52:29] DEBUG[21051] app_voicemail.c: support at mydomain.com not found in vmstates
[Aug  8 07:52:29] DEBUG[21051] app_voicemail.c: support at mydomain.com not found in vmstates
[Aug  8 07:52:29] DEBUG[21051] app_voicemail.c: support at mydomain.com not found in vmstates
[Aug  8 07:52:29] DEBUG[21051] app_voicemail.c: support at mydomain.com not found in vmstates
{noformat}

{code}
#define VMSTATE_MAX_MSG_ARRAY 256
...
        long msgArray[VMSTATE_MAX_MSG_ARRAY];
...
        ast_debug(3, "saving mailbox message number %lu as message %d. Interactive set to %d\n", number, vms->vmArrayIndex, vms->interactive);
        vms->msgArray[vms->vmArrayIndex++] = number;
{code}

Memory corruption..

> IMAP voicemail causes segfault
> ------------------------------
>
>                 Key: ASTERISK-24190
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24190
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Applications/app_voicemail, Applications/app_voicemail/IMAP
>    Affects Versions: 11.11.0
>         Environment: Ubuntu 14.04.1
> Linux 3.13.0-32-generic  x86_64
>            Reporter: Nick Adams
>            Assignee: Matt Jordan
>            Severity: Critical
>         Attachments: backtrace.txt, myDebugLog
>
>
> When using IMAP storage for Voicemail, I can reliably cause Asterisk to segfault. I noticed a number of random segfaults over the past few days and on further investigation, was able to reproduce it by running "voicemail show users for default". That produces the following segfault:
> {quote}Aug  8 07:50:10 timmy kernel: [1025781.678733] asterisk[20482]: segfault at 10d ip 00007fe97c22ab78 sp 00007fe8a0d09900 error 4 in libc-client.so.2007e.0[7fe97c1fb000+101000]{quote}
> This happens on multiple boxes so I've ruled out memory corruption or some other nastiness.
> voicemail.conf is at defaults except for:
> {quote}imapserver=mail.mydomain.com
> imapport=993
> imapgreetings=yes
> greetingsfolder=INBOX.Voicemail
> imapparentfolder=INBOX.
> imapfolder=INBOX.Voicemail
> imapflags=ssl
> [default]
> 0400000000 => 0400000000,Some User,,,attach=yes|imapuser=user at mydomain.com|imappassword=PASSWORD
> {quote}
> The relevant INBOX.Voicemail IMAP folder has about 300 voicemails in it. I think this may be related to users having forwarded messages out of those folders resulting in additional IMAP flags being added - though I can't be sure.



--
This message was sent by Atlassian JIRA
(v6.2#6252)