[asterisk-bugs] [JIRA] (ASTERISK-27859) Crash when freeing after bridge

[Olivier Krief (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-27859?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=243857#comment-243857 ] 

Olivier Krief commented on ASTERISK-27859:
------------------------------------------

Today, I add a new issue on the same box.
I've attached attach2.zip file with relevant logs.
Unfortunately, as reported earlier, we could not leave the box with MALLOC_DEBUG turned as the only time we left this option on, we had two issues in the same day as opposed once every 2 to 8 weeks.

Previously we had in /var/log/syslog, lines such as :
Jun  5 15:05:26 localhost kernel: [56636.313611] traps: asterisk[19465] general protection ip:563441700f41 sp:7f95b5acbc20 error:0

Today's case is:
Jun 19 16:12:26 localhost kernel: [1178276.251548] asterisk[27065]: segfault at 7f7484111e50 ip 00007f7484111e50 sp 00007f742141cbf8 error 15

Latest case has a very specific pattern : it is self-aimed (don't ask why such call occurs) as this call is from 0320290292 to 0320290292  (See channel SIP/Webdeal-IPO-000a697b in file syslog_extract inside attach2.zip file).

This type of call is supposed to follow the following path
Customer IPBX1  -----> Our asterisk -----> ProviderA ---- ? ---> ProviderA  ----->  Our asterisk  ----> Customer IPBX1

Is is very possible our provider (called ProviderA in the above drawaing) simply "forwards us back" our outbound calls aimed at one of our incoming numbers, without passing through other boxes.
This provider is using Asterisk 11.25 (I won't blame him for that, shall I ? ;-))))






> Crash when freeing after bridge
> -------------------------------
>
>                 Key: ASTERISK-27859
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27859
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Core/Bridging
>    Affects Versions: 13.20.0
>         Environment: Debian Stretch on VMWare. Asterisk compiled from source
>            Reporter: Olivier Krief
>            Assignee: Olivier Krief
>              Labels: pjsip
>         Attachments: attach.zip, core-brief.txt, core-full.txt, core-locks.txt, core-thread1.txt, debug_extract, syslog_extract
>
>
> Asterisk stops with the following message (from /var/log/syslog):
> May 16 12:11:07 localhost asterisk[3216]: *** Error in `/usr/sbin/asterisk': free(): invalid size: 0x00007f1a540db0a0 ***
> May 16 12:11:07 localhost asterisk[3216]: ======= Backtrace: =========
> May 16 12:11:07 localhost asterisk[3216]: /lib/x86_64-linux-gnu/libc.so.6(+0x70bfb)[0x7f1a6800dbfb]
> May 16 12:11:07 localhost asterisk[3216]: /lib/x86_64-linux-gnu/libc.so.6(+0x76fc6)[0x7f1a68013fc6]
> May 16 12:11:07 localhost asterisk[3216]: /lib/x86_64-linux-gnu/libc.so.6(+0x7780e)[0x7f1a6801480e]
> May 16 12:11:07 localhost asterisk[3216]: /usr/sbin/asterisk(ast_bridge_run_after_callback+0x11c)[0x56445a48b5cb]
> May 16 12:11:07 localhost asterisk[3216]: /usr/sbin/asterisk(+0x80032)[0x56445a481032]
> May 16 12:11:07 localhost asterisk[3216]: /usr/sbin/asterisk(+0x226d4e)[0x56445a627d4e]
> May 16 12:11:07 localhost asterisk[3216]: /lib/x86_64-linux-gnu/libpthread.so.0(+0x7494)[0x7f1a69153494]
> May 16 12:11:07 localhost asterisk[3216]: /lib/x86_64-linux-gnu/libc.so.6(clone+0x3f)[0x7f1a68085acf]



--
This message was sent by Atlassian JIRA
(v6.2#6252)