[asterisk-bugs] [JIRA] (ASTERISK-27006) app_queue: Crash when hanging up with realtime queues

[Nathan Bruning (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-27006?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=242473#comment-242473 ] 

Nathan Bruning commented on ASTERISK-27006:
-------------------------------------------

Our scenario is a AMI Redirect on a queue call (reported as ASTERISK-27707).

I've done a little digging, this is the sequence of events that cause our segfault:

- AMI redirect causes masquerade: ??Actually Masquerading PJSIP/xxx-00000008(6) into the structure of Surrogate/PJSIP/xxx-128.199.61.178-00000008(0)??
- {{ast_channel_destructor}} clears the stasis cache for the channel using {{publish_cache_clear}}: unique_id xxx.16, name PJSIP/xxx-0008, the refcount of the channel is 0.
- {{handle_hangup}} in app_queue.c receives a message with {{queue_data->caller_uniqueid}} = xxx.16, but name is now "Surrogate/xxx", and refcount of the chan is 1. Stasis cache is empty for this unique id, and asterisk segfaults.

Hope this helps in finding the root cause.

> app_queue: Crash when hanging up with realtime queues
> -----------------------------------------------------
>
>                 Key: ASTERISK-27006
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27006
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Applications/app_queue, Core/Stasis
>    Affects Versions: 13.15.0, 14.6.0
>         Environment: Debian 8, Asterisk 13.15 (13.14 did not present issue)
>            Reporter: Niklas Larsson
>         Attachments: backtrace_core.uc02.nguc.weblink.se-2017-05-17T08-02-12+0200.txt, backtrace_core.uc02.nguc.weblink.se-2017-05-17T13-38-19+0200.txt, backtrace_core.uc02.nguc.weblink.se-2017-05-23T13-31-52+0200.txt, backtrace_core.uc02.nguc.weblink.se-2017-05-26T09-10-53+0200.txt, backtrace_core.uc02.nguc.weblink.se-2017-05-30T16-04-54+0200.txt, C-00000345.txt, log.txt, queue_4.txt
>
>
> Segfault in at hangup:
> [2017-05-17 08:02:12] VERBOSE[12389][C-000003ea] bridge_channel.c: Channel PJSIP/ngcore-00000cd3 left 'simple_bridge' basic-bridge <098609d0-4ae7-47e3-980b-06a3b24f3014>
> Happens around ones a day.
> Running asterisk 13 branch, commit ddbc68b (Thu May 11 10:49:04 2017)



--
This message was sent by Atlassian JIRA
(v6.2#6252)