[asterisk-bugs] [JIRA] (ASTERISK-29037) segfault in opus codec stats transmission

[Andrew Yager (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-29037?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=251733#comment-251733 ] 

Andrew Yager commented on ASTERISK-29037:
-----------------------------------------

This _specific_ issue is fixed in the pcsc-lite library as of this version: https://ludovicrousseau.blogspot.com/2020/01/new-version-of-pcsc-lite-1826.html.

The underlying issue is that the version of pcsc-lite shipping with CentOS 7 uses select() to receive a FD to allow it to talk to a smartcard library. During initialising the NSS library to open an SSL/TLS connection, the OS will attempt to load keys/details from a connected device, and attempt to open access to a smartcard reader, even if it doesn't exist. In this case, the select() method in the shipped version of the library fails under load, because the number of open connections > 1024. poll() does not have this same issue, and the updated version of pcsc-lite makes the change to address this issue.

The fix, in our case, was simply to remove the pcsc library set all together. Anecdotally, this actually also improved performance of the entire TLS stack (presumedly because we've reduce the call stack for any encrypted call by having less to do); and is a firm reminder to understand what the libraries on your system are there for, and remove any components that aren't required.

> segfault in opus codec stats transmission
> -----------------------------------------
>
>                 Key: ASTERISK-29037
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29037
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Codecs/codec_opus
>    Affects Versions: 13.35.0
>         Environment: Centos 7.8
>            Reporter: Andrew Yager
>            Assignee: Andrew Yager
>            Severity: Minor
>         Attachments: core.6345-brief.txt, core.6345-thread1.txt
>
>
> Apparently during codec decrease count and license usage telemetry, we see a segfault generated. 



--
This message was sent by Atlassian JIRA
(v6.2#6252)