[asterisk-bugs] [JIRA] (ASTERISK-29192) Asterisk service is crashing in the pjsip transport functions due to callback are NULL.

[Asterisk Team (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-29192?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=252907#comment-252907 ] 

Asterisk Team commented on ASTERISK-29192:
------------------------------------------

The severity of this issue has been automatically downgraded from "Blocker" to "Major". The "Blocker" severity is reserved for issues which have been determined to block the next release of Asterisk. This severity can only be set by privileged users. If this issue is deemed to block the next release it will be updated accordingly during the triage process.

> Asterisk service is crashing in the pjsip transport functions due to callback are NULL.
> ---------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-29192
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29192
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: pjproject/pjsip
>    Affects Versions: 16.3.0
>         Environment: Cent os 8
>            Reporter: Badareenadh Rangisetti
>
> Asterisk service is crashing for the pjsip transport functions due to callback pointers are NULL. 
> File: sip_transport.c
> Function: pjsip_transport_send
> Code snippet:
> /* Send to transport. */
>     status = (*tr->send_msg)(tr, tdata,  addr, addr_len, (void*)tdata,
>                  &transport_send_callback);
> Here function pointer *tr->send_msg is NULL.
> GDB details:
> (gdb) bt
> #0  0x0000000000000000 in ?? ()
> #1  0x00007f81ff832e9d in pjsip_transport_send (tr=0x10aea08, tdata=tdata at entry=0x7f7fd822d278, addr=addr at entry=0x7f7fd822d468,
>     addr_len=addr_len at entry=16, token=token at entry=0x7f7fd8249ef8, cb=cb at entry=0x7f81ff82d2e0 <stateless_send_transport_cb>)
>     at ../src/pjsip/sip_transport.c:898
> #2  0x00007f81ff82d01f in stateless_send_transport_cb (token=token at entry=0x7f7fd8249ef8, tdata=tdata at entry=0x7f7fd822d278,
>     sent=<optimized out>, sent at entry=-70002) at ../src/pjsip/sip_util.c:1270
> #3  0x00007f81ff82d389 in stateless_send_transport_cb (sent=-70002, tdata=0x7f7fd822d278, token=0x7f7fd8249ef8) at ../src/pjsip/sip_util.c:1371
> #4  stateless_send_resolver_callback (status=<optimized out>, status at entry=0, token=token at entry=0x7f7fd8249ef8, addr=addr at entry=0x7f804acf09e0)
>     at ../src/pjsip/sip_util.c:1371
> #5  0x00007f81a1d3c111 in sip_resolve (resolver=<optimized out>, pool=<optimized out>, target=0x7f804acf3990, token=0x7f7fd8249ef8,
>     cb=0x7f81ff82d2f0 <stateless_send_resolver_callback>) at res_pjsip/pjsip_resolver.c:527
> #6  0x00007f81ff830acf in pjsip_resolve (resolver=0xd88eb0, pool=0x7f7fd822d1d0, target=target at entry=0x7f804acf3990,
>     token=token at entry=0x7f7fd8249ef8, cb=cb at entry=0x7f81ff82d2f0 <stateless_send_resolver_callback>) at ../src/pjsip/sip_resolve.c:207
> #7  0x00007f81ff82c6f9 in pjsip_endpt_resolve (endpt=endpt at entry=0xc32fb8, pool=<optimized out>, target=target at entry=0x7f804acf3990,
>     token=token at entry=0x7f7fd8249ef8, cb=cb at entry=0x7f81ff82d2f0 <stateless_send_resolver_callback>) at ../src/pjsip/sip_endpoint.c:1200
> #8  0x00007f81ff82ed8d in pjsip_endpt_send_request_stateless (endpt=0xc32fb8, tdata=tdata at entry=0x7f7fd822d278,
>     token=token at entry=0x7f814812b8a8, cb=cb at entry=0x7f81ff8428e0 <send_msg_callback>) at ../src/pjsip/sip_util.c:1415
> #9  0x00007f81ff8415f8 in tsx_send_msg (tdata=0x7f7fd822d278, tsx=0x7f814812b8a8) at ../src/pjsip/sip_transaction.c:2224
> #10 tsx_send_msg (tsx=0x7f814812b8a8, tdata=0x7f7fd822d278) at ../src/pjsip/sip_transaction.c:2106
> #11 0x00007f81ff8418e8 in tsx_on_state_null (event=<optimized out>, tsx=0x7f814812b8a8) at ../src/pjsip/sip_transaction.c:2456
> #12 tsx_on_state_null (tsx=0x7f814812b8a8, event=<optimized out>) at ../src/pjsip/sip_transaction.c:2416
> #13 0x00007f81ff844847 in pjsip_tsx_send_msg (tsx=0x7f814812b8a8, tdata=tdata at entry=0x7f7fd822d278) at ../src/pjsip/sip_transaction.c:1794
> #14 0x00007f81ff84695d in pjsip_dlg_send_request (dlg=0x7f81e853cd28, tdata=tdata at entry=0x7f7fd822d278, mod_data_id=<optimized out>,
>     mod_data=mod_data at entry=0x7f7fd819a8c8) at ../src/pjsip/sip_dialog.c:1288
> #15 0x00007f81ff80e465 in pjsip_inv_send_msg (tdata=0x7f7fd822d278, inv=0x7f8154387db8) at ../src/pjsip-ua/sip_inv.c:3238
> #16 pjsip_inv_send_msg (inv=0x7f8154387db8, tdata=tdata at entry=0x7f7fd822d278) at ../src/pjsip-ua/sip_inv.c:3184
> #17 0x00007f819b9ce598 in ast_sip_session_send_request_with_cb (session=session at entry=0x7f7f7c16a340, tdata=0x7f7fd822d278,
>     on_response=on_response at entry=0x0) at res_pjsip_session.c:2075
> #18 0x00007f819b9cf237 in ast_sip_session_send_request (session=session at entry=0x7f7f7c16a340, tdata=<optimized out>) at res_pjsip_session.c:2082
> #19 0x00007f81926b1fab in call (data=0x7f7f50004380) at chan_pjsip.c:2638
> #20 0x0000000000576f6e in ast_taskprocessor_execute ()
> #21 0x000000000057d2b0 in execute_tasks ()
> #22 0x0000000000576f6e in ast_taskprocessor_execute ()
> #23 0x000000000057db80 in worker_start ()
> #24 0x0000000000584ca9 in dummy_start ()
> #25 0x00007f81fd3572de in start_thread () from /lib64/libpthread.so.0
> #26 0x00007f81fc8a4133 in __libc_ifunc_impl_list () from /lib64/libc.so.6



--
This message was sent by Atlassian JIRA
(v6.2#6252)