[asterisk-bugs] [JIRA] (ASTERISK-25201) Crash in PJSIP distributor on already free'd threadpool

[Matt Jordan (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-25201?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Matt Jordan updated ASTERISK-25201:
-----------------------------------

    Attachment: messages.txt
                full.txt
                backtrace_1191.txt

> Crash in PJSIP distributor on already free'd threadpool
> -------------------------------------------------------
>
>                 Key: ASTERISK-25201
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25201
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Core/General, Resources/res_pjsip
>    Affects Versions: 13.4.0
>            Reporter: Matt Jordan
>         Attachments: backtrace_1191.txt, full.txt, messages.txt
>
>
> One of the tests in the Testsuite (channels/pjsip/transfers/attended_transfer/nominal/caller_local_direct_media) crashed in a rather interesting location - on an ao2 object which was {{0xdeaddead}}. It appears as if this is the PJSIP threadpool that a taskprocessor was attempting to use:
> {code}
> #0  0x0000000000480f86 in __ao2_lock (user_data=0xdeaddeaddeaddead, lock_how=AO2_LOCK_REQ_MUTEX, file=0x87aa00 "threadpool.c", func=0x87add0 "ast_threadpool_push", line=898, var=0x87aa11 "((pool))") at astobj2.c:187
> 187		struct astobj2 *obj = __INTERNAL_OBJ_CHECK(user_data, file, line, func);
> #0  0x0000000000480f86 in __ao2_lock (user_data=0xdeaddeaddeaddead, lock_how=AO2_LOCK_REQ_MUTEX, file=0x87aa00 "threadpool.c", func=0x87add0 "ast_threadpool_push", line=898, var=0x87aa11 "((pool))") at astobj2.c:187
>         p__LINE__ = 0xdeaddeaddeadde85
>         obj = 0x877b83
>         obj_mutex = 0x100000002
>         obj_rwlock = 0x0
>         res = 32588
>         __PRETTY_FUNCTION__ = "__ao2_lock"
> #1  0x00000000007532b6 in ast_threadpool_push (pool=0xdeaddeaddeaddead, task=0x7540a3 <execute_tasks>, data=0x7f4c40021e20) at threadpool.c:898
>         lock = 0x73ef56
>         __PRETTY_FUNCTION__ = "ast_threadpool_push"
> #2  0x00000000007541f5 in serializer_task_pushed (listener=0x7f4c40021d00, was_empty=1) at threadpool.c:1175
>         ser = 0x7f4c40021bf8
>         tps = 0x7f4c40021e20
> {code}
> Logs and backtrace attached.



--
This message was sent by Atlassian JIRA
(v6.2#6252)