[asterisk-bugs] [JIRA] (ASTERISK-26797) res_pjsip: Crash when freeing pool of cloned message

[Richard Mudgett (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-26797?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=235668#comment-235668 ] 

Richard Mudgett edited comment on ASTERISK-26797 at 3/10/17 10:00 AM:
----------------------------------------------------------------------

Hi
It seems we have the same problem.
We have a business application that uses both conventional telephony and VoIP.
We use the PJSIP library to make VoIP calls from mobile devices (Android & iOS). On server side we have Asterisk with PJSIP.

Sometimes "Asterisk" process crash with "double free or corruption". This happens shortly after the INVITE transaction was finished (we hear about 0.5s of sound) and only if the call was started on Android device.

We tried to reproduce the crash with other softphones (Zoiper, CSipSimple, Ekiga) and pjsua in CLI but it doesn't crash. Also it doesn't crash when iOS app is used. So, it seems that, the problem is with our Android implementation, but we don't know where to search for the solution.

We tried workarounds from here: ASTERISK-25274
ASTERISK-25275
But nothing worked.

This crash occur once in about 200 calls.
After using Valgrind (valgrind.org) to analyze Asterisk memory, we restart Asterisk and crash is happening more often. Is there a link ?

You will find backtrace and debug in attachments.

We tried Asterisk versions: 13.14 and 14.2
PJSSIP versions: 2.5.5, 2.6
(We tried to change audio codec but nothing changed)

Thanks a lot


was (Author: studioadagio):
Hi
It seems we have the same problem.
We have a business application that uses both conventional telephony and VoIP.
We use the PJSIP library to make VoIP calls from mobile devices (Android & iOS). On server side we have Asterisk with PJSIP.

Sometimes "Asterisk" process crash with "double free or corruption". This happens shortly after the INVITE transaction was finished (we hear about 0.5s of sound) and only if the call was started on Android device.

We tried to reproduce the crash with other softphones (Zoiper, CSipSimple, Ekiga) and pjsua in CLI but it doesn't crash. Also it doesn't crash when iOS app is used. So, it seems that, the problem is with our Android implementation, but we don't know where to search for the solution.

We tried workarounds from here: https://issues.asterisk.org/jira/browse/ASTERISK-25274
https://issues.asterisk.org/jira/browse/ASTERISK-25275
But nothing worked.

This crash occur once in about 200 calls.
After using Valgrind (valgrind.org) to analyze Asterisk memory, we restart Asterisk and crash is happening more often. Is there a link ?

You will find backtrace and debug in attachments.

We tried Asterisk versions: 13.14 and 14.2
PJSSIP versions: 2.5.5, 2.6
(We tried to change audio codec but nothing changed)

Thanks a lot

> res_pjsip: Crash when freeing pool of cloned message
> ----------------------------------------------------
>
>                 Key: ASTERISK-26797
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26797
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_pjsip
>    Affects Versions: GIT
>         Environment: Fedora 23
>            Reporter: Ross Beer
>            Assignee: Unassigned
>         Attachments: backtrace_2016-02-16_1215_clean.txt, gdb.txt, verbose.log
>
>
> Segfault when releasing resources.



--
This message was sent by Atlassian JIRA
(v6.2#6252)