[asterisk-bugs] [JIRA] (ASTERISK-25201) Crash in PJSIP distributor on already free'd threadpool

[Matt Jordan (JIRA)]

Matt Jordan created ASTERISK-25201:
--------------------------------------

             Summary: Crash in PJSIP distributor on already free'd threadpool
                 Key: ASTERISK-25201
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25201
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Core/General, Resources/res_pjsip
            Reporter: Matt Jordan
         Attachments: backtrace_1191.txt, full.txt, messages.txt

One of the tests in the Testsuite (channels/pjsip/transfers/attended_transfer/nominal/caller_local_direct_media) crashed in a rather interesting location - on an ao2 object which was {{0xdeaddead}}. It appears as if this is the PJSIP threadpool that a taskprocessor was attempting to use:

{code}
#0  0x0000000000480f86 in __ao2_lock (user_data=0xdeaddeaddeaddead, lock_how=AO2_LOCK_REQ_MUTEX, file=0x87aa00 "threadpool.c", func=0x87add0 "ast_threadpool_push", line=898, var=0x87aa11 "((pool))") at astobj2.c:187
187		struct astobj2 *obj = __INTERNAL_OBJ_CHECK(user_data, file, line, func);
#0  0x0000000000480f86 in __ao2_lock (user_data=0xdeaddeaddeaddead, lock_how=AO2_LOCK_REQ_MUTEX, file=0x87aa00 "threadpool.c", func=0x87add0 "ast_threadpool_push", line=898, var=0x87aa11 "((pool))") at astobj2.c:187
        p__LINE__ = 0xdeaddeaddeadde85
        obj = 0x877b83
        obj_mutex = 0x100000002
        obj_rwlock = 0x0
        res = 32588
        __PRETTY_FUNCTION__ = "__ao2_lock"
#1  0x00000000007532b6 in ast_threadpool_push (pool=0xdeaddeaddeaddead, task=0x7540a3 <execute_tasks>, data=0x7f4c40021e20) at threadpool.c:898
        lock = 0x73ef56
        __PRETTY_FUNCTION__ = "ast_threadpool_push"
#2  0x00000000007541f5 in serializer_task_pushed (listener=0x7f4c40021d00, was_empty=1) at threadpool.c:1175
        ser = 0x7f4c40021bf8
        tps = 0x7f4c40021e20
{code}

Logs and backtrace attached.



--
This message was sent by Atlassian JIRA
(v6.2#6252)