[asterisk-bugs] [JIRA] (ASTERISK-26690) res_pjsip: segfault in ssl_write from pjsip_endpt_process_rx_data

Thu Jan 5 09:08:10 CST 2017

     [ https://issues.asterisk.org/jira/browse/ASTERISK-26690?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rusty Newton updated ASTERISK-26690:
------------------------------------

    Description: 
Asterisk crashes after a few hours of running, see trace below. This is
asterisk-13.13.1 with pjproject-2.5.5. This seems to be in pjsip_endpt_process_rx_data.
My first idea would be that an openssl socket is being accessed from multiple asterisk threads?
{noformat}
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffff3d64700 (LWP 6347)]
__memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:116
116     ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S: No such file or directory.
(gdb) bt
#0  __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:116
#1  0x00007ffff6e03239 in ?? () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
#2  0x00007ffff6e021dc in BIO_write () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
#3  0x00007ffff712cf12 in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
#4  0x00007ffff712d5d4 in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
#5  0x00007ffff0744268 in ssl_write () from /usr/local/lib/libpj.so.2
#6  0x00007ffff0744699 in pj_ssl_sock_send () from /usr/local/lib/libpj.so.2
#7  0x00007ffff20f12bf in tls_send_msg () from /usr/local/lib/libpjsip.so.2
#8  0x00007ffff20e5825 in pjsip_transport_send () from /usr/local/lib/libpjsip.so.2
#9  0x00007ffff20fadc2 in tsx_send_msg () from /usr/local/lib/libpjsip.so.2
#10 0x00007ffff20fbe3e in tsx_on_state_proceeding_uas () from /usr/local/lib/libpjsip.so.2
#11 0x00007ffff20fbbf0 in tsx_on_state_trying () from /usr/local/lib/libpjsip.so.2
#12 0x00007ffff20fa2ed in pjsip_tsx_send_msg () from /usr/local/lib/libpjsip.so.2
#13 0x00007ffff2ce0f09 in ast_sip_send_stateful_response (rdata=rdata at entry=0x7fffcc018ce8, tdata=0x7fffcc01f8b8,
    sip_endpoint=sip_endpoint at entry=0x1260158) at res_pjsip.c:4156
#14 0x00007fff9b35fa81 in register_aor_core (rdata=0x7fffcc018ce8, endpoint=0x1260158, aor=0x124a578,
    aor_name=0x124a8f0 "deleted", contacts=<optimized out>) at res_pjsip_registrar.c:514
{noformat}

  was:
Asterisk crashes after a few hours of running, see trace below. This is
asterisk-13.13.1 with pjproject-2.5.5. This seems to be in pjsip_endpt_process_rx_data.
My first idea would be that an openssl socket is being accessed from multiple asterisk threads?

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffff3d64700 (LWP 6347)]
__memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:116
116     ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S: No such file or directory.
(gdb) bt
#0  __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:116
#1  0x00007ffff6e03239 in ?? () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
#2  0x00007ffff6e021dc in BIO_write () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
#3  0x00007ffff712cf12 in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
#4  0x00007ffff712d5d4 in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
#5  0x00007ffff0744268 in ssl_write () from /usr/local/lib/libpj.so.2
#6  0x00007ffff0744699 in pj_ssl_sock_send () from /usr/local/lib/libpj.so.2
#7  0x00007ffff20f12bf in tls_send_msg () from /usr/local/lib/libpjsip.so.2
#8  0x00007ffff20e5825 in pjsip_transport_send () from /usr/local/lib/libpjsip.so.2
#9  0x00007ffff20fadc2 in tsx_send_msg () from /usr/local/lib/libpjsip.so.2
#10 0x00007ffff20fbe3e in tsx_on_state_proceeding_uas () from /usr/local/lib/libpjsip.so.2
#11 0x00007ffff20fbbf0 in tsx_on_state_trying () from /usr/local/lib/libpjsip.so.2
#12 0x00007ffff20fa2ed in pjsip_tsx_send_msg () from /usr/local/lib/libpjsip.so.2
#13 0x00007ffff2ce0f09 in ast_sip_send_stateful_response (rdata=rdata at entry=0x7fffcc018ce8, tdata=0x7fffcc01f8b8,
    sip_endpoint=sip_endpoint at entry=0x1260158) at res_pjsip.c:4156
#14 0x00007fff9b35fa81 in register_aor_core (rdata=0x7fffcc018ce8, endpoint=0x1260158, aor=0x124a578,
    aor_name=0x124a8f0 "deleted", contacts=<optimized out>) at res_pjsip_registrar.c:514
#15 0x00007fff9b3608d2 in register_aor (aor_name=<optimized out>, aor=<optimized out>, endpoint=<optimized out>,
    rdata=<optimized out>) at res_pjsip_registrar.c:541
#16 registrar_on_rx_request (rdata=0x7fffcc018ce8) at res_pjsip_registrar.c:726
#17 0x00007ffff20dda35 in pjsip_endpt_process_rx_data () from /usr/local/lib/libpjsip.so.2
#18 0x00007ffff2cecdd7 in distribute (data=0x7fffcc018ce8) at res_pjsip/pjsip_distributor.c:769
#19 0x00000000005cd81e in ast_taskprocessor_execute (tps=tps at entry=0x1265ab0) at taskprocessor.c:967
#20 0x00000000005d45d0 in execute_tasks (data=0x1265ab0) at threadpool.c:1322
#21 0x00000000005cd81e in ast_taskprocessor_execute (tps=0xa52830) at taskprocessor.c:967
#22 0x00000000005d4e88 in threadpool_execute (pool=<optimized out>) at threadpool.c:351
#23 worker_active (worker=<optimized out>) at threadpool.c:1105
#24 worker_start (arg=0x7fffc4000b20) at threadpool.c:1024
#25 0x00000000005de51a in dummy_start (data=<optimized out>) at utils.c:1235
#26 0x00007ffff60a50a4 in start_thread (arg=0x7ffff3d64700) at pthread_create.c:309
#27 0x00007ffff515462d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

> res_pjsip: segfault in ssl_write from pjsip_endpt_process_rx_data
> -----------------------------------------------------------------
>
>                 Key: ASTERISK-26690
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26690
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_pjsip, pjproject/pjsip
>    Affects Versions: 13.13.1
>            Reporter: Frederik Vermeulen
>
> Asterisk crashes after a few hours of running, see trace below. This is
> asterisk-13.13.1 with pjproject-2.5.5. This seems to be in pjsip_endpt_process_rx_data.
> My first idea would be that an openssl socket is being accessed from multiple asterisk threads?
> {noformat}
> Program received signal SIGSEGV, Segmentation fault.
> [Switching to Thread 0x7ffff3d64700 (LWP 6347)]
> __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:116
> 116     ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S: No such file or directory.
> (gdb) bt
> #0  __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:116
> #1  0x00007ffff6e03239 in ?? () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
> #2  0x00007ffff6e021dc in BIO_write () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
> #3  0x00007ffff712cf12 in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
> #4  0x00007ffff712d5d4 in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
> #5  0x00007ffff0744268 in ssl_write () from /usr/local/lib/libpj.so.2
> #6  0x00007ffff0744699 in pj_ssl_sock_send () from /usr/local/lib/libpj.so.2
> #7  0x00007ffff20f12bf in tls_send_msg () from /usr/local/lib/libpjsip.so.2
> #8  0x00007ffff20e5825 in pjsip_transport_send () from /usr/local/lib/libpjsip.so.2
> #9  0x00007ffff20fadc2 in tsx_send_msg () from /usr/local/lib/libpjsip.so.2
> #10 0x00007ffff20fbe3e in tsx_on_state_proceeding_uas () from /usr/local/lib/libpjsip.so.2
> #11 0x00007ffff20fbbf0 in tsx_on_state_trying () from /usr/local/lib/libpjsip.so.2
> #12 0x00007ffff20fa2ed in pjsip_tsx_send_msg () from /usr/local/lib/libpjsip.so.2
> #13 0x00007ffff2ce0f09 in ast_sip_send_stateful_response (rdata=rdata at entry=0x7fffcc018ce8, tdata=0x7fffcc01f8b8,
>     sip_endpoint=sip_endpoint at entry=0x1260158) at res_pjsip.c:4156
> #14 0x00007fff9b35fa81 in register_aor_core (rdata=0x7fffcc018ce8, endpoint=0x1260158, aor=0x124a578,
>     aor_name=0x124a8f0 "deleted", contacts=<optimized out>) at res_pjsip_registrar.c:514
> {noformat}

--
This message was sent by Atlassian JIRA
(v6.2#6252)