[asterisk-bugs] [JIRA] (ASTERISK-26166) res_pjsip_pubsub: Crash when decrementing reference count of message

[Ross Beer (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-26166?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=231398#comment-231398 ] 

Ross Beer edited comment on ASTERISK-26166 at 7/13/16 3:52 AM:
---------------------------------------------------------------

I have tried using the bundled pjsip with the same results: 

{NOFORMAT}Stack trace of thread 7827:
#0  0x00007f9133582b29 pj_atomic_dec_and_get (libpj.so.2)
#1  0x00007f9139265b30 pjsip_tx_data_dec_ref (libpjsip.so.2)
#2  0x00007f9139270f07 tsx_shutdown (libpjsip.so.2)
#3  0x00007f9139271141 tsx_set_state (libpjsip.so.2)
#4  0x00007f91392711ca tsx_on_state_terminated (libpjsip.so.2)
#5  0x00007f9139271227 tsx_timer_callback (libpjsip.so.2)
#6  0x00007f91335913b7 pj_timer_heap_poll (libpj.so.2)
#7  0x00007f9139260c3b pjsip_endpt_handle_events2 (libpjsip.so.2)
#8  0x00007f9131ae2638 n/a (/usr/lib64/asterisk/modules/res_pjsip.so (deleted)){NOFORMAT}


was (Author: rossbeer):
I have tried using the bundled pjsip with the same results: 

Stack trace of thread 7827:
#0  0x00007f9133582b29 pj_atomic_dec_and_get (libpj.so.2)
#1  0x00007f9139265b30 pjsip_tx_data_dec_ref (libpjsip.so.2)
#2  0x00007f9139270f07 tsx_shutdown (libpjsip.so.2)
#3  0x00007f9139271141 tsx_set_state (libpjsip.so.2)
#4  0x00007f91392711ca tsx_on_state_terminated (libpjsip.so.2)
#5  0x00007f9139271227 tsx_timer_callback (libpjsip.so.2)
#6  0x00007f91335913b7 pj_timer_heap_poll (libpj.so.2)
#7  0x00007f9139260c3b pjsip_endpt_handle_events2 (libpjsip.so.2)
#8  0x00007f9131ae2638 n/a (/usr/lib64/asterisk/modules/res_pjsip.so (deleted))

> res_pjsip_pubsub: Crash when decrementing reference count of message
> --------------------------------------------------------------------
>
>                 Key: ASTERISK-26166
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26166
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_pjsip_pubsub
>    Affects Versions: 13.9.1, 13.10.0-rc1
>         Environment: Fedora Server 23 / CentOS 7
>            Reporter: Ross Beer
>         Attachments: backtrace_2016-06-30T11_30_41_CLEAN.txt, backtrace-2016-07-12T12_12_21_CLEAN.txt, core_dump_output_2016-07-11_1047.txt
>
>
> Segfault in "0  pj_atomic_dec_and_get (atomic_var=0x352e3735312e3733) at ../src/pj/os_core_unix.c:962"
> This fault ticket was requested by George Joseph and is a similar issue to a previous patch ASTERISK-26099.



--
This message was sent by Atlassian JIRA
(v6.2#6252)