[asterisk-bugs] [JIRA] (ASTERISK-28086) Segfault in ast_senddigit_end using PJSIP

[Joshua C. Colp (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-28086?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=245039#comment-245039 ] 

Joshua C. Colp commented on ASTERISK-28086:
-------------------------------------------

Thank you for the crash report. However, we need more information to investigate the crash. Please provide:

1. A backtrace generated from a core dump using the instructions provided on the Asterisk wiki [1].
2. Specific steps taken that lead to the crash.
3. All configuration information necesary to reproduce the crash.

Thanks!

[1]: https://wiki.asterisk.org/wiki/display/AST/Getting+a+Backtrace

In this case the backtrace has been optimized it seems, and barely any data can be retrieved from it.

As well the version of Asterisk in use is about 10 months old. Please ensure you are using the latest one as we do fix bugs such as this.

> Segfault in ast_senddigit_end using PJSIP
> -----------------------------------------
>
>                 Key: ASTERISK-28086
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-28086
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_pjsip, Resources/res_pjsip_session
>    Affects Versions: 13.19.0
>         Environment: Gentoo (physical), Debian (AWS)
>            Reporter: Jeremiah Gadd
>              Labels: pjsip
>         Attachments: core-20180926-094817-brief.txt, core-20180926-094817-full.txt, core-20180926-094817-locks.txt, core-20180926-094817-thread1.txt
>
>
> It appears there may be a race condition in which PJSIP attempts to end the sending of a DTMF tone after a bridge is destroyed, causing PJSIP to try to send to a non-existent channel.
> I've attached the corresponding core dumps.
> Thread 1 (Thread 0x7f45562ef700 (LWP 3781)):
> #0  0x00007f49d9b49233 in ?? () from /usr/lib64/asterisk/modules/chan_pjsip.so
> #1  0x00000000004b5fe7 in ast_senddigit_end ()
> #2  0x00007f49da56d29c in ?? () from /usr/lib64/asterisk/modules/app_senddtmf.so
> #3  0x000000000054ce1e in ?? ()
> #4  0x000000000054fbaa in ?? ()
> #5  0x00000000005dd2dd in ?? ()
> #6  0x00000000005eb91a in ?? ()
> #7  0x00007f4a6a065f3a in __pthread_mutex_unlock_full () from /lib64/libpthread.so.0
> #8  0xb5e6219ff3277d21 in ?? ()
> #9  0x0000000000000000 in ?? ()



--
This message was sent by Atlassian JIRA
(v6.2#6252)