[asterisk-bugs] [JIRA] (ASTERISK-26009) ARI Bug Crashes Asterisk (Bounty)

[Sidney VanNess (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-26009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=230555#comment-230555 ] 

Sidney VanNess commented on ASTERISK-26009:
-------------------------------------------

I can't immediately see how to attach the backtrace to a comment, so I've put it here: https://www.dropbox.com/s/v80673jymni8dee/backtrace.txt?dl=0

Steps to reproduce:
Step 1 - Connect to ARI with 6-8 apps making sure &subscribeAll=1 is present.  (I just do this in 6 terminal windows) * You may need more than 6 to cause the issue
wscat -c 'ws://127.0.0.1:8088/ari/events?api_key=<username>:<password>&app=app1&subscribeAll=1'
wscat -c 'ws://127.0.0.1:8088/ari/events?api_key=<username>:<password>&app=app2&subscribeAll=1'
wscat -c 'ws://127.0.0.1:8088/ari/events?api_key=<username>:<password>&app=app3&subscribeAll=1'
wscat -c 'ws://127.0.0.1:8088/ari/events?api_key=<username>:<password>&app=app4&subscribeAll=1'
wscat -c 'ws://127.0.0.1:8088/ari/events?api_key=<username>:<password>&app=app5&subscribeAll=1'
wscat -c 'ws://127.0.0.1:8088/ari/events?api_key=<username>:<password>&app=app6&subscribeAll=1'

Step 2 - Do anything that causes ARI events such as dialing or causing a device state change...

That's it.
* If it doesn't crash, try wscat in more terminals with more app names

Configuration:
Standard asterisk build with no changes.
http enabled and an ARI user for connecting with wscat.

> ARI Bug Crashes Asterisk (Bounty)
> ---------------------------------
>
>                 Key: ASTERISK-26009
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26009
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Core/Stasis, Resources/res_ari, Resources/res_ari_events
>    Affects Versions: 13.7.2
>         Environment: Ubuntu 14.04.4 LTS
>            Reporter: Sidney VanNess
>            Assignee: Sidney VanNess
>            Severity: Critical
>              Labels: crash
>
> I've posted this on the Asterisk dev mailing list, and we are offering a $1000 Bounty for a fix to this issue. See: http://lists.digium.com/pipermail/asterisk-dev/2016-May/075517.html for details.
> ============
> *Description/How To Reproduce*
> $ wscat -c
> 'ws://localhost:8088/ari/events?api_key=<key>:<password>&app=<appname>&subscribeAll=1
> #
> Run 5 or 10 of these at once with appname different for each one with all
> of them subscribing to all events.
> Place a call which will emit stasisStart for one of the apps (maybe a few
> times).
> Asterisk should terminate at this point.
> *This was done using local channels
> json_mem_free in json.c seems to have the issue.  If you don't free the
> memory, then it does not terminate.
> Of note, the issue seems somewhat similar in nature to the following bug
> report:
> https://issues.asterisk.org/jira/browse/ASTERISK-25775
> Therefore, we expect the fix to our issue also would result in the
> resolution of this seemingly related bug report.



--
This message was sent by Atlassian JIRA
(v6.2#6252)