[asterisk-bugs] [JIRA] (ASTERISK-27256) Segfault while sending unsolicited MWI

[Ross Beer (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-27256?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ross Beer updated ASTERISK-27256:
---------------------------------

    Attachment: core-asterisk-103187-1506506276-thread1.txt

Another segfault just occurred while attempting to send unsolicited MWI with chan_pjsip. Please see the attached backtrace.

> Segfault while sending unsolicited MWI
> --------------------------------------
>
>                 Key: ASTERISK-27256
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27256
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_pjsip_mwi
>    Affects Versions: 13.17.1, GIT
>         Environment: Fedora 23
>            Reporter: Ross Beer
>            Assignee: Unassigned
>         Attachments: core-asterisk-103187-1506506276-thread1.txt, core-asterisk-151140-thread1.txt
>
>
> Segfault when generating out of dialog unsolicited MWI:
> {noformat}
> 0  0x00007f901a2d21e0 in pop_freelist (ht=0x1a821d0) at ../src/pj/timer.c:149
>         new_id = -1313818704
> #1  0x00007f901a2d29d2 in schedule_entry (ht=0x1a821d0, entry=0x7f8cb9411948, future_time=0x7f8d624293f0) at ../src/pj/timer.c:312
> #2  0x00007f901a2d2e82 in schedule_w_grp_lock (ht=0x1a821d0, entry=0x7f8cb9411948, delay=0x7f901a5256c0 <t1_timer_val>, set_id=1, id_val=1, grp_lock=0x7f8ca8d16e68) at ../src/pj/timer.c:514
>         status = 0
>         expires = {sec = 16946142, msec = 855}
> #3  0x00007f901a2d2f51 in pj_timer_heap_schedule_w_grp_lock (ht=0x1a821d0, entry=0x7f8cb9411948, delay=0x7f901a5256c0 <t1_timer_val>, id_val=1, grp_lock=0x7f8ca8d16e68) at ../src/pj/timer.c:567
> #4  0x00007f901a241325 in tsx_schedule_timer (tsx=0x7f8cb94117c8, entry=0x7f8cb9411948, delay=0x7f901a5256c0 <t1_timer_val>, active_id=1) at ../src/pjsip/sip_transaction.c:981
>         timer_heap = 0x1a821d0
>         status = 0
> #5  0x00007f901a243c90 in tsx_on_state_null (tsx=0x7f8cb94117c8, event=0x7f8d624294e0) at ../src/pjsip/sip_transaction.c:2459
>         tdata = 0x7f8ed090be98
>         status = 0
> #6  0x00007f901a2429d7 in pjsip_tsx_send_msg (tsx=0x7f8cb94117c8, tdata=0x7f8ed090be98) at ../src/pjsip/sip_transaction.c:1789
>         event = {prev = 0x10, next = 0x7f8cb94117a0, type = PJSIP_EVENT_TX_MSG, body = {timer = {entry = 0x7f8ed090be98}, tsx_state = {src = {rdata = 0x7f8ed090be98, tdata = 0x7f8ed090be98, timer = 0x7f8ed090be98, status = -795820392, data = 0x7f8ed090be98}, tsx = 0x7f8d62429530, prev_state = 439113248, type = 32656}, tx_msg = {tdata = 0x7f8ed090be98}, tx_error = {tdata = 0x7f8ed090be98, tsx = 0x7f8d62429530}, rx_msg = {rdata = 0x7f8ed090be98}, user = {user1 = 0x7f8ed090be98, user2 = 0x7f8d62429530, user3 = 0x7f901a2c5620 <pj_pool_alloc+39>, user4 = 0x10}}}
>         status = 32652
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)