[asterisk-bugs] [JIRA] (ASTERISK-26690) res_pjsip: segfault in ssl_write from pjsip_endpt_process_rx_data

[Rusty Newton (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-26690?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rusty Newton updated ASTERISK-26690:
------------------------------------

    Assignee: Frederik Vermeulen
      Status: Waiting for Feedback  (was: Triage)

Thanks for the report.

1. Please don't post lengthy debug in the description or comment fields. Follow the guidelines.

2. Please follow the linked instructions for getting a backtrace, making sure to recompile with the appropriate options. Attach it to the issue.

> res_pjsip: segfault in ssl_write from pjsip_endpt_process_rx_data
> -----------------------------------------------------------------
>
>                 Key: ASTERISK-26690
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26690
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_pjsip, pjproject/pjsip
>    Affects Versions: 13.13.1
>            Reporter: Frederik Vermeulen
>            Assignee: Frederik Vermeulen
>
> Asterisk crashes after a few hours of running, see trace below. This is
> asterisk-13.13.1 with pjproject-2.5.5. This seems to be in pjsip_endpt_process_rx_data.
> My first idea would be that an openssl socket is being accessed from multiple asterisk threads?
> {noformat}
> Program received signal SIGSEGV, Segmentation fault.
> [Switching to Thread 0x7ffff3d64700 (LWP 6347)]
> __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:116
> 116     ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S: No such file or directory.
> (gdb) bt
> #0  __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:116
> #1  0x00007ffff6e03239 in ?? () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
> #2  0x00007ffff6e021dc in BIO_write () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
> #3  0x00007ffff712cf12 in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
> #4  0x00007ffff712d5d4 in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
> #5  0x00007ffff0744268 in ssl_write () from /usr/local/lib/libpj.so.2
> #6  0x00007ffff0744699 in pj_ssl_sock_send () from /usr/local/lib/libpj.so.2
> #7  0x00007ffff20f12bf in tls_send_msg () from /usr/local/lib/libpjsip.so.2
> #8  0x00007ffff20e5825 in pjsip_transport_send () from /usr/local/lib/libpjsip.so.2
> #9  0x00007ffff20fadc2 in tsx_send_msg () from /usr/local/lib/libpjsip.so.2
> #10 0x00007ffff20fbe3e in tsx_on_state_proceeding_uas () from /usr/local/lib/libpjsip.so.2
> #11 0x00007ffff20fbbf0 in tsx_on_state_trying () from /usr/local/lib/libpjsip.so.2
> #12 0x00007ffff20fa2ed in pjsip_tsx_send_msg () from /usr/local/lib/libpjsip.so.2
> #13 0x00007ffff2ce0f09 in ast_sip_send_stateful_response (rdata=rdata at entry=0x7fffcc018ce8, tdata=0x7fffcc01f8b8,
>     sip_endpoint=sip_endpoint at entry=0x1260158) at res_pjsip.c:4156
> #14 0x00007fff9b35fa81 in register_aor_core (rdata=0x7fffcc018ce8, endpoint=0x1260158, aor=0x124a578,
>     aor_name=0x124a8f0 "deleted", contacts=<optimized out>) at res_pjsip_registrar.c:514
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)