[asterisk-bugs] [JIRA] (ASTERISK-27238) Yet another crash freeing a frame that's already been freed

Richard Kenner (JIRA) noreply at issues.asterisk.org
Tue Sep 5 21:41:07 CDT 2017


    [ https://issues.asterisk.org/jira/browse/ASTERISK-27238?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=238492#comment-238492 ] 

Richard Kenner commented on ASTERISK-27238:
-------------------------------------------

Hmmm... because all of that was in cache, maybe there wasn't a leak afterall.  But I tried another patch, this time reverting the "consume" value back to 1 and this time changing the final test in ast_translate from "if (consume)" to "if (consume && out != f)".  This also fixes the issue, shows a similar memory behavior as above and, when run under valgrind, produces the following on exit:

{noformat}
==29680== LEAK SUMMARY:
==29680==    definitely lost: 221 bytes in 3 blocks
==29680==    indirectly lost: 0 bytes in 0 blocks
==29680==      possibly lost: 5,655 bytes in 28 blocks
==29680==    still reachable: 812,714 bytes in 5,128 blocks
==29680==         suppressed: 0 bytes in 0 blocks
{noformat}


> Yet another crash freeing a frame that's already been freed
> -----------------------------------------------------------
>
>                 Key: ASTERISK-27238
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27238
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Core/Bridging
>    Affects Versions: 14.6.0
>         Environment: Centos 7
>            Reporter: Richard Kenner
>            Assignee: Unassigned
>         Attachments: traceback.txt, valgrind.txt
>
>
> See traceback.txt traceback.  The frame being freed is below:
> {noformat}
> $2 = {frametype = AST_FRAME_VOICE, subclass = {integer = 0, 
>     format = 0x24bc940, frame_ending = 0}, datalen = 0, samples = 320, 
>   mallocd = 1, mallocd_hdr_len = 545, offset = 64, 
>   src = 0x7f554c00c7a8 "func_jitterbuffer interpolation", data = {ptr = 0x0, 
>     uint32 = 0, pad = "\000\000\000\000\000\000\000"}, delivery = {
>     tv_sec = 1504146592, tv_usec = 647484}, frame_list = {
>     next = 0x7f5544002de0}, flags = 0, ts = 0, len = 0, seqno = 0}
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list