[asterisk-bugs] [JIRA] (ASTERISK-25744) Segfaults in ssl3_write_bytes, pj_ssl_sock_send, tls_send_msg

Dmitriy Serov (JIRA) noreply at issues.asterisk.org
Fri Feb 5 06:08:33 CST 2016


    [ https://issues.asterisk.org/jira/browse/ASTERISK-25744?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=229288#comment-229288 ] 

Dmitriy Serov edited comment on ASTERISK-25744 at 2/5/16 6:07 AM:
------------------------------------------------------------------

This error was before, but much less frequently. But it is difficult to say, because the server kept falling over for a different reason: ASTERISK-25439
After eliminating one of the causes started to fall with TLS.
Most likely this error is a consequence, a manifestation of some other situation.

I'm ready to put in the right place assert in order to catch the situation earlier. For example, I don't understand how in backtraces can be such an IP address (despite the fact that the length of the value 12 bytes):

{noformat}
#7  0x00007fb2d40c5eab in pjsip_endpt_respond_stateless (endpt=0x1fb8a28, rdata=0x7fb2900c23c8, st_code=501, st_text=0x0, hdr_list=0x0, body=0x0) at ../src/pjsip/sip_util.c:1869
        status = 0
        res_addr = {transport = 0x7fb2902b9928, addr = {addr = {sa_family = 2}, ipv4 = {sin_family = 2, sin_port = 53779, sin_addr = {s_addr = 624595237}, sin_zero = "\000\000\000\000\000\000\000"}, ipv6 = {sin6_family = 2, sin6_port = 53779, sin6_flowinfo = 624595237, sin6_addr = {s6_addr = '\000' <repeats 15 times>, u6_addr32 = {0, 0, 0, 0}}, sin6_scope_id = 0}}, addr_len = 28, dst_host = {flag = 3, type = PJSIP_TRANSPORT_TLS, addr = {host = {ptr = 0x7fb28ae31708 "37.145.58.3710)", slen = 12}, port = 5074}}}
        tdata = 0x7fb28ae30bb8
{noformat}

{noformat}
#11 0x00007f3d4a0baeab in pjsip_endpt_respond_stateless (endpt=0x1fb7d38, rdata=0x7f3ce442c158, st_code=501, st_text=0x0, hdr_list=0x0, body=0x0) at ../src/pjsip/sip_util.c:1869
        status = 0
        res_addr = {transport = 0x7f3ce41cdc28, addr = {addr = {sa_family = 2}, ipv4 = {sin_family = 2, sin_port = 53779, sin_addr = {s_addr = 624595237}, sin_zero = "\000\000\000\000\000\000\000"}, ipv6 = {sin6_family = 2, sin6_port = 53779, sin6_flowinfo = 624595237, sin6_addr = {s6_addr = '\000' <repeats 15 times>, u6_addr32 = {0, 0, 0, 0}}, sin6_scope_id = 0}}, addr_len = 28, dst_host = {flag = 3, type = PJSIP_TRANSPORT_TLS, addr = {host = {ptr = 0x7f3ce4a4ced8 "37.145.58.37", slen = 12}, port = 5074}}}
        tdata = 0x7f3ce4a4c388
{noformat}

{noformat}
#8  0x00007fca268f5eab in pjsip_endpt_respond_stateless (endpt=0x1fb7df8, rdata=0x7fca08303be8, st_code=501, st_text=0x0, hdr_list=0x0, body=0x0) at ../src/pjsip/sip_util.c:1869
        status = 0
        res_addr = {transport = 0x7fca08253eb8, addr = {addr = {sa_family = 2}, ipv4 = {sin_family = 2, sin_port = 50451, sin_addr = {s_addr = 624595237}, sin_zero = "\000\000\000\000\000\000\000"}, ipv6 = {sin6_family = 2, sin6_port = 50451, sin6_flowinfo = 624595237, sin6_addr = {s6_addr = '\000' <repeats 15 times>, u6_addr32 = {0, 0, 0, 0}}, sin6_scope_id = 0}}, addr_len = 28, dst_host = {flag = 3, type = PJSIP_TRANSPORT_TLS, addr = {host = {ptr = 0x7fca5810dea8 "37.145.58.37\312\177", slen = 12}, port = 5061}}}
        tdata = 0x7fca5810d358
{noformat}



was (Author: demon):
This error was before, but much less frequently. But it is difficult to say, because the server kept falling over for a different reason: ASTERISK-25439
After eliminating one of the causes started to fall with TLS.
Most likely this error is a consequence, a manifestation of some other situation.

I'm ready to put in the right place assert in order to catch the situation earlier. For example, I don't understand how in backtraces can be such an IP address (despite the fact that the length of the value 12 bytes):

{code}
#7  0x00007fb2d40c5eab in pjsip_endpt_respond_stateless (endpt=0x1fb8a28, rdata=0x7fb2900c23c8, st_code=501, st_text=0x0, hdr_list=0x0, body=0x0) at ../src/pjsip/sip_util.c:1869
        status = 0
        res_addr = {transport = 0x7fb2902b9928, addr = {addr = {sa_family = 2}, ipv4 = {sin_family = 2, sin_port = 53779, sin_addr = {s_addr = 624595237}, sin_zero = "\000\000\000\000\000\000\000"}, ipv6 = {sin6_family = 2, sin6_port = 53779, sin6_flowinfo = 624595237, sin6_addr = {s6_addr = '\000' <repeats 15 times>, u6_addr32 = {0, 0, 0, 0}}, sin6_scope_id = 0}}, addr_len = 28, dst_host = {flag = 3, type = PJSIP_TRANSPORT_TLS, addr = {host = {ptr = 0x7fb28ae31708 "37.145.58.3710)", slen = 12}, port = 5074}}}
        tdata = 0x7fb28ae30bb8
{/code}

{code}
#11 0x00007f3d4a0baeab in pjsip_endpt_respond_stateless (endpt=0x1fb7d38, rdata=0x7f3ce442c158, st_code=501, st_text=0x0, hdr_list=0x0, body=0x0) at ../src/pjsip/sip_util.c:1869
        status = 0
        res_addr = {transport = 0x7f3ce41cdc28, addr = {addr = {sa_family = 2}, ipv4 = {sin_family = 2, sin_port = 53779, sin_addr = {s_addr = 624595237}, sin_zero = "\000\000\000\000\000\000\000"}, ipv6 = {sin6_family = 2, sin6_port = 53779, sin6_flowinfo = 624595237, sin6_addr = {s6_addr = '\000' <repeats 15 times>, u6_addr32 = {0, 0, 0, 0}}, sin6_scope_id = 0}}, addr_len = 28, dst_host = {flag = 3, type = PJSIP_TRANSPORT_TLS, addr = {host = {ptr = 0x7f3ce4a4ced8 "37.145.58.37", slen = 12}, port = 5074}}}
        tdata = 0x7f3ce4a4c388
{/code}

{code}
#8  0x00007fca268f5eab in pjsip_endpt_respond_stateless (endpt=0x1fb7df8, rdata=0x7fca08303be8, st_code=501, st_text=0x0, hdr_list=0x0, body=0x0) at ../src/pjsip/sip_util.c:1869
        status = 0
        res_addr = {transport = 0x7fca08253eb8, addr = {addr = {sa_family = 2}, ipv4 = {sin_family = 2, sin_port = 50451, sin_addr = {s_addr = 624595237}, sin_zero = "\000\000\000\000\000\000\000"}, ipv6 = {sin6_family = 2, sin6_port = 50451, sin6_flowinfo = 624595237, sin6_addr = {s6_addr = '\000' <repeats 15 times>, u6_addr32 = {0, 0, 0, 0}}, sin6_scope_id = 0}}, addr_len = 28, dst_host = {flag = 3, type = PJSIP_TRANSPORT_TLS, addr = {host = {ptr = 0x7fca5810dea8 "37.145.58.37\312\177", slen = 12}, port = 5061}}}
        tdata = 0x7fca5810d358
{/code}


> Segfaults in ssl3_write_bytes, pj_ssl_sock_send, tls_send_msg
> -------------------------------------------------------------
>
>                 Key: ASTERISK-25744
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25744
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_pjsip
>    Affects Versions: 13.7.0
>         Environment: openssl-1.0.1q-x86_64
> pjproject 2.4.5
>            Reporter: Dmitriy Serov
>            Assignee: Unassigned
>         Attachments: 2016_02_03__17_00_07.backtrace-threads.txt, 2016_02_03__17_00_07.full.tail.txt, 2016_02_03__23_38_07.backtrace-threads.txt, 2016_02_03__23_38_07.full.tail.txt, 2016_02_03__23_52_07.backtrace-threads.txt, 2016_02_03__23_52_07.full.tail.txt, 2016_02_04__00_42_07.backtrace-threads.txt, 2016_02_04__00_42_07.full.tail.txt, 2016_02_04__10_36_07.backtrace-threads.txt, 2016_02_04__10_36_07.full.tail.txt
>
>
> Regular segfaults in the same place of the program.
> Asterisk faults, 3-4 times per day
> Several logs attached.



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list