[asterisk-bugs] [JIRA] (ASTERISK-27256) Segfault while sending unsolicited MWI

[Asterisk Team (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-27256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=238502#comment-238502 ] 

Asterisk Team commented on ASTERISK-27256:
------------------------------------------

Thanks for creating a report! The issue has entered the triage process. That means the issue will wait in this status until a Bug Marshal has an opportunity to review the issue. Once the issue has been reviewed you will receive comments regarding the next steps towards resolution.

A good first step is for you to review the [Asterisk Issue Guidelines|https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines] if you haven't already. The guidelines detail what is expected from an Asterisk issue report.

Then, if you are submitting a patch, please review the [Patch Contribution Process|https://wiki.asterisk.org/wiki/display/AST/Patch+Contribution+Process].

> Segfault while sending unsolicited MWI
> --------------------------------------
>
>                 Key: ASTERISK-27256
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27256
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_pjsip_mwi
>    Affects Versions: GIT
>         Environment: Fedora 23
>            Reporter: Ross Beer
>
> Segfault when generating out of dialog unsolicited MWI:
> {noformat}
> 0  0x00007f901a2d21e0 in pop_freelist (ht=0x1a821d0) at ../src/pj/timer.c:149
>         new_id = -1313818704
> #1  0x00007f901a2d29d2 in schedule_entry (ht=0x1a821d0, entry=0x7f8cb9411948, future_time=0x7f8d624293f0) at ../src/pj/timer.c:312
> #2  0x00007f901a2d2e82 in schedule_w_grp_lock (ht=0x1a821d0, entry=0x7f8cb9411948, delay=0x7f901a5256c0 <t1_timer_val>, set_id=1, id_val=1, grp_lock=0x7f8ca8d16e68) at ../src/pj/timer.c:514
>         status = 0
>         expires = {sec = 16946142, msec = 855}
> #3  0x00007f901a2d2f51 in pj_timer_heap_schedule_w_grp_lock (ht=0x1a821d0, entry=0x7f8cb9411948, delay=0x7f901a5256c0 <t1_timer_val>, id_val=1, grp_lock=0x7f8ca8d16e68) at ../src/pj/timer.c:567
> #4  0x00007f901a241325 in tsx_schedule_timer (tsx=0x7f8cb94117c8, entry=0x7f8cb9411948, delay=0x7f901a5256c0 <t1_timer_val>, active_id=1) at ../src/pjsip/sip_transaction.c:981
>         timer_heap = 0x1a821d0
>         status = 0
> #5  0x00007f901a243c90 in tsx_on_state_null (tsx=0x7f8cb94117c8, event=0x7f8d624294e0) at ../src/pjsip/sip_transaction.c:2459
>         tdata = 0x7f8ed090be98
>         status = 0
> #6  0x00007f901a2429d7 in pjsip_tsx_send_msg (tsx=0x7f8cb94117c8, tdata=0x7f8ed090be98) at ../src/pjsip/sip_transaction.c:1789
>         event = {prev = 0x10, next = 0x7f8cb94117a0, type = PJSIP_EVENT_TX_MSG, body = {timer = {entry = 0x7f8ed090be98}, tsx_state = {src = {rdata = 0x7f8ed090be98, tdata = 0x7f8ed090be98, timer = 0x7f8ed090be98, status = -795820392, data = 0x7f8ed090be98}, tsx = 0x7f8d62429530, prev_state = 439113248, type = 32656}, tx_msg = {tdata = 0x7f8ed090be98}, tx_error = {tdata = 0x7f8ed090be98, tsx = 0x7f8d62429530}, rx_msg = {rdata = 0x7f8ed090be98}, user = {user1 = 0x7f8ed090be98, user2 = 0x7f8d62429530, user3 = 0x7f901a2c5620 <pj_pool_alloc+39>, user4 = 0x10}}}
>         status = 32652
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)