[asterisk-bugs] [JIRA] (ASTERISK-25223) Crash in RLS MWI termination tests

[Asterisk Team (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-25223?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=226759#comment-226759 ] 

Asterisk Team commented on ASTERISK-25223:
------------------------------------------

Thanks for creating a report! The issue has entered the triage process. That means the issue will wait in this status until a Bug Marshal has an opportunity to review the issue. Once the issue has been reviewed you will receive comments regarding the next steps towards resolution.

A good first step is for you to review the [Asterisk Issue Guidelines|https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines] if you haven't already. The guidelines detail what is expected from an Asterisk issue report.

Then, if you are submitting a patch, please review the [Patch Contribution Process|https://wiki.asterisk.org/wiki/display/AST/Patch+Contribution+Process].

> Crash in RLS MWI termination tests
> ----------------------------------
>
>                 Key: ASTERISK-25223
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25223
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_pjsip_pubsub
>            Reporter: Matt Jordan
>         Attachments: logs.zip
>
>
> See attached tarball for full logs and backtraces.
> Essentially, we are attempting to manipulate a subscription that is clearly dead:
> {code}
> [Thread debugging using libthread_db enabled]
> Core was generated by `/usr/sbin/asterisk -f -g -q -m -n -C /tmp/asterisk-testsuite/d1c48e7aee13c35647'.
> Program terminated with signal 11, Segmentation fault.
> #0  0x005b2b4f in pjsip_evsub_get_state_name (sub=0xdeaddead) at ../src/pjsip-simple/evsub.c:988
> 988	    return sub->state_str.ptr;
> #0  0x005b2b4f in pjsip_evsub_get_state_name (sub=0xdeaddead) at ../src/pjsip-simple/evsub.c:988
> No locals.
> #1  0x0548e9e2 in sip_subscription_send_request (sub_tree=0xb74146dc, tdata=0xb742b494) at res_pjsip_pubsub.c:1641
>         endpoint = 0x9db6b44
>         res = 0
>         __PRETTY_FUNCTION__ = "sip_subscription_send_request"
> #2  0x05490884 in send_notify (sub_tree=0xb74146dc, force_full_state=1) at res_pjsip_pubsub.c:2078
>         evsub = 0xb74161f4
>         tdata = 0xb742b494
> #3  0x05494e4b in pubsub_on_rx_subscribe_request (rdata=0xb740dc44) at res_pjsip_pubsub.c:2604
>         expires_header = 0xb740f81c
>         handler = 0x5fa9c40
>         endpoint = 0x9db6b44
>         sub_tree = 0xb74146dc
>         generator = 0x784b7e0
>         resource = 0xb6dc6f40 "mail_list"
>         request_uri = 0xb740ee00
>         request_uri_sip = 0xb740ee00
>         resource_size = 10
>         resp = 200
>         tree = {root = 0xb74134d0, notification_batch_interval = 0}
>         dlg_status = 0
>         __PRETTY_FUNCTION__ = "pubsub_on_rx_subscribe_request"
> #4  0x05498fb2 in pubsub_on_rx_request (rdata=0xb740dc44) at res_pjsip_pubsub.c:3089
> No locals.
> #5  0x009138d9 in pjsip_endpt_process_rx_data (endpt=0x94daf4c, rdata=0xb740dc44, p=0x74b427c, p_handled=0xb6dc715c) at ../src/pjsip/sip_endpoint.c:886
>         msg = 0xb740edbc
>         def_prm = {start_prio = 122032128, start_mod = 0x8fbc90, idx_after_start = 122367276, silent = 0}
>         mod = 0x54a7980
>         handled = 0
>         i = 1
>         status = 9516828
>         __PRETTY_FUNCTION__ = "pjsip_endpt_process_rx_data"
> {code}
> This was caught by the Jenkins build agents. See referenced link for test failure.



--
This message was sent by Atlassian JIRA
(v6.2#6252)