[asterisk-bugs] [JIRA] (ASTERISK-25223) Crash in RLS MWI termination tests

[Matt Jordan (JIRA)]

Matt Jordan created ASTERISK-25223:
--------------------------------------

             Summary: Crash in RLS MWI termination tests
                 Key: ASTERISK-25223
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25223
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Resources/res_pjsip_pubsub
            Reporter: Matt Jordan
         Attachments: logs.zip

See attached tarball for full logs and backtraces.

Essentially, we are attempting to manipulate a subscription that is clearly dead:

{code}
[Thread debugging using libthread_db enabled]
Core was generated by `/usr/sbin/asterisk -f -g -q -m -n -C /tmp/asterisk-testsuite/d1c48e7aee13c35647'.
Program terminated with signal 11, Segmentation fault.
#0  0x005b2b4f in pjsip_evsub_get_state_name (sub=0xdeaddead) at ../src/pjsip-simple/evsub.c:988
988	    return sub->state_str.ptr;
#0  0x005b2b4f in pjsip_evsub_get_state_name (sub=0xdeaddead) at ../src/pjsip-simple/evsub.c:988
No locals.
#1  0x0548e9e2 in sip_subscription_send_request (sub_tree=0xb74146dc, tdata=0xb742b494) at res_pjsip_pubsub.c:1641
        endpoint = 0x9db6b44
        res = 0
        __PRETTY_FUNCTION__ = "sip_subscription_send_request"
#2  0x05490884 in send_notify (sub_tree=0xb74146dc, force_full_state=1) at res_pjsip_pubsub.c:2078
        evsub = 0xb74161f4
        tdata = 0xb742b494
#3  0x05494e4b in pubsub_on_rx_subscribe_request (rdata=0xb740dc44) at res_pjsip_pubsub.c:2604
        expires_header = 0xb740f81c
        handler = 0x5fa9c40
        endpoint = 0x9db6b44
        sub_tree = 0xb74146dc
        generator = 0x784b7e0
        resource = 0xb6dc6f40 "mail_list"
        request_uri = 0xb740ee00
        request_uri_sip = 0xb740ee00
        resource_size = 10
        resp = 200
        tree = {root = 0xb74134d0, notification_batch_interval = 0}
        dlg_status = 0
        __PRETTY_FUNCTION__ = "pubsub_on_rx_subscribe_request"
#4  0x05498fb2 in pubsub_on_rx_request (rdata=0xb740dc44) at res_pjsip_pubsub.c:3089
No locals.
#5  0x009138d9 in pjsip_endpt_process_rx_data (endpt=0x94daf4c, rdata=0xb740dc44, p=0x74b427c, p_handled=0xb6dc715c) at ../src/pjsip/sip_endpoint.c:886
        msg = 0xb740edbc
        def_prm = {start_prio = 122032128, start_mod = 0x8fbc90, idx_after_start = 122367276, silent = 0}
        mod = 0x54a7980
        handled = 0
        i = 1
        status = 9516828
        __PRETTY_FUNCTION__ = "pjsip_endpt_process_rx_data"
{code}

This was caught by the Jenkins build agents. See referenced link for test failure.



--
This message was sent by Atlassian JIRA
(v6.2#6252)