[asterisk-bugs] [JIRA] (ASTERISK-24538) SRTP p->tag corruption

[Badalian Vyacheslav (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-24538?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=225254#comment-225254 ] 

Badalian Vyacheslav commented on ASTERISK-24538:
------------------------------------------------

Hm...in 11.16.0 tag is char.

more info... may be it help. another crash place:

{code}
[root at vm-asterisk02t obs]# ./asan_symbolize.py.txt < /tmp/asan_dump.8289
=================================================================
==8289== ERROR: AddressSanitizer: SEGV on unknown address 0x000000003038 (pc 0x7f3874665e12 sp 0x7f3853dbbc90 bp 0x000000003048 T31)
AddressSanitizer can not provide additional info.
    #0 0x7f3874665e11 in ?? ??:0
    #1 0x7f3874673377 in ?? ??:0
    #2 0x7f385f83ca2f in sdp_crypto_destroy /home/obs/asterisk-11.16.0/channels/sip/sdp_crypto.c:68
    #3 0x7f385f840cb8 in sip_srtp_destroy /home/obs/asterisk-11.16.0/channels/sip/srtp.c:51
    #4 0x7f385f6f1571 in __sip_destroy /home/obs/asterisk-11.16.0/channels/chan_sip.c:6445
    #5 0x7f385f6f35be in sip_destroy /home/obs/asterisk-11.16.0/channels/chan_sip.c:6678
    #6 0x7f385f6f346a in sip_destroy_fn /home/obs/asterisk-11.16.0/channels/chan_sip.c:6667
    #7 0x4827c6 in internal_ao2_ref /home/obs/asterisk-11.16.0/main/astobj2.c:466
    #8 0x482c54 in __ao2_ref /home/obs/asterisk-11.16.0/main/astobj2.c:548
    #9 0x7f385f6c91d3 in dialog_unref_debug /home/obs/asterisk-11.16.0/channels/chan_sip.c:2332
    #10 0x7f385f6cf4c5 in dialog_unlink_all /home/obs/asterisk-11.16.0/channels/chan_sip.c:3309
    #11 0x7f385f77cb43 in dialog_needdestroy /home/obs/asterisk-11.16.0/channels/chan_sip.c:19569
    #12 0x484239 in internal_ao2_callback /home/obs/asterisk-11.16.0/main/astobj2.c:1107
    #13 0x4848de in __ao2_callback /home/obs/asterisk-11.16.0/main/astobj2.c:1212
    #14 0x7f385f7d9b3d in do_monitor /home/obs/asterisk-11.16.0/channels/chan_sip.c:29159
    #15 0x7173c5 in dummy_start /home/obs/asterisk-11.16.0/main/utils.c:1223
    #16 0x7f3874676ba7 in ?? ??:0
    #17 0x7f38733da9d0 in start_thread pthread_create.c:0
    #18 0x7f38741af8fc in __clone ??:0
Thread T31 created by T0 here:
    #0 0x7f3874668b6b in ?? ??:0
    #1 0x71775f in ast_pthread_create_stack /home/obs/asterisk-11.16.0/main/utils.c:1276
    #2 0x7f385f7d9e99 in restart_monitor /home/obs/asterisk-11.16.0/channels/chan_sip.c:29207
    #3 0x7f385f81e95c in load_module /home/obs/asterisk-11.16.0/channels/chan_sip.c:34799
    #4 0x5f3488 in start_resource /home/obs/asterisk-11.16.0/main/loader.c:861
    #5 0x5f4e11 in load_resource_list /home/obs/asterisk-11.16.0/main/loader.c:1063
    #6 0x5f5ba1 in load_modules /home/obs/asterisk-11.16.0/main/loader.c:1216
    #7 0x4814bc in main /home/obs/asterisk-11.16.0/main/asterisk.c:4337
    #8 0x7f38740e5d5c in __libc_start_main ??:0
==8289== ABORTING

{code}


> SRTP p->tag corruption
> ----------------------
>
>                 Key: ASTERISK-24538
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24538
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/General
>    Affects Versions: 11.13.1, 11.14.1
>            Reporter: Badalian Vyacheslav
>            Assignee: Badalian Vyacheslav
>            Severity: Critical
>         Attachments: core.m1-asterisk01.tcsbank.ru-2014-11-18T18%3A46%3A15+0300.txt, core.m1-asterisk01.tcsbank.ru-2014-11-18T19%3A27%3A42+0300.txt, core.m1-asterisk01.tcsbank.ru-2014-11-19T13%3A03%3A47+0300.txt
>
>
> Today 3 crashes in one place
> Backtraces will be added bellow



--
This message was sent by Atlassian JIRA
(v6.2#6252)