[asterisk-bugs] [JIRA] (ASTERISK-28923) T.38 Segfaults in chan_pjsip_queryoption

[Sean Bright (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-28923?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=250976#comment-250976 ] 

Sean Bright edited comment on ASTERISK-28923 at 6/1/20 8:22 AM:
----------------------------------------------------------------

In logs I can see:

{noformat}
[Sat May 30 11:06:20 2020] asterisk[81358]: segfault at 8 ip 00007fd456c391d8 sp 00007fd3d159a230 error 4 in chan_pjsip.so[7fd456c2e000+1d000]
[Sat May 30 11:06:44 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 11:34:16 2020] asterisk[87569]: segfault at 8 ip 00007f56791cd1d8 sp 00007f56469be230 error 4 in chan_pjsip.so[7f56791c2000+1d000]
[Sat May 30 11:34:23 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 11:39:27 2020] asterisk[88714]: segfault at 8 ip 00007f8f695c11d8 sp 00007f8eab24e230 error 4 in chan_pjsip.so[7f8f695b6000+1d000]
[Sat May 30 11:39:32 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 12:57:16 2020] asterisk[106814]: segfault at 8 ip 00007ff3491cd1d8 sp 00007ff28f6b3230 error 4 in chan_pjsip.so[7ff3491c2000+1d000]
[Sat May 30 12:57:20 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 15:33:44 2020] asterisk[1425]: segfault at 8 ip 00007f38c95c11d8 sp 00007f393c73e230 error 4 in chan_pjsip.so[7f38c95b6000+1d000]
[Sat May 30 15:33:48 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 16:53:14 2020] asterisk[15169]: segfault at 8 ip 00007f19373201d8 sp 00007f1890490230 error 4 in chan_pjsip.so[7f1937315000+1d000]
[Sat May 30 16:53:18 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 17:11:51 2020] asterisk[17795]: segfault at 8 ip 00007f298bb421d8 sp 00007f298a00b230 error 4 in chan_pjsip.so[7f298bb37000+1d000]
[Sat May 30 17:11:54 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 17:52:29 2020] asterisk[22201]: segfault at 8 ip 00007f5d277561d8 sp 00007f5ce67ca230 error 4 in chan_pjsip.so[7f5d2774b000+1d000]
[Sat May 30 17:52:32 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 17:57:29 2020] asterisk[23031]: segfault at 8 ip 00007f5b2c7a11d8 sp 00007f5b2a975230 error 4 in chan_pjsip.so[7f5b2c796000+1d000]
{noformat}

every time the issue happens.

SYN flood happens after Asterisk segfaults as every TCP-enabled client immediately tries to reconnect.


was (Author: lt_flash):
In logs I can see:
[Sat May 30 11:06:20 2020] asterisk[81358]: segfault at 8 ip 00007fd456c391d8 sp 00007fd3d159a230 error 4 in chan_pjsip.so[7fd456c2e000+1d000]
[Sat May 30 11:06:44 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 11:34:16 2020] asterisk[87569]: segfault at 8 ip 00007f56791cd1d8 sp 00007f56469be230 error 4 in chan_pjsip.so[7f56791c2000+1d000]
[Sat May 30 11:34:23 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 11:39:27 2020] asterisk[88714]: segfault at 8 ip 00007f8f695c11d8 sp 00007f8eab24e230 error 4 in chan_pjsip.so[7f8f695b6000+1d000]
[Sat May 30 11:39:32 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 12:57:16 2020] asterisk[106814]: segfault at 8 ip 00007ff3491cd1d8 sp 00007ff28f6b3230 error 4 in chan_pjsip.so[7ff3491c2000+1d000]
[Sat May 30 12:57:20 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 15:33:44 2020] asterisk[1425]: segfault at 8 ip 00007f38c95c11d8 sp 00007f393c73e230 error 4 in chan_pjsip.so[7f38c95b6000+1d000]
[Sat May 30 15:33:48 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 16:53:14 2020] asterisk[15169]: segfault at 8 ip 00007f19373201d8 sp 00007f1890490230 error 4 in chan_pjsip.so[7f1937315000+1d000]
[Sat May 30 16:53:18 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 17:11:51 2020] asterisk[17795]: segfault at 8 ip 00007f298bb421d8 sp 00007f298a00b230 error 4 in chan_pjsip.so[7f298bb37000+1d000]
[Sat May 30 17:11:54 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 17:52:29 2020] asterisk[22201]: segfault at 8 ip 00007f5d277561d8 sp 00007f5ce67ca230 error 4 in chan_pjsip.so[7f5d2774b000+1d000]
[Sat May 30 17:52:32 2020] TCP: request_sock_TCP: Possible SYN flooding on port 7060. Sending cookies.  Check SNMP counters.
[Sat May 30 17:57:29 2020] asterisk[23031]: segfault at 8 ip 00007f5b2c7a11d8 sp 00007f5b2a975230 error 4 in chan_pjsip.so[7f5b2c796000+1d000]

every time the issue happens.

SYN flood happens after Asterisk segfaults as every TCP-enabled client immediately tries to reconnect.

> T.38 Segfaults in chan_pjsip_queryoption
> ----------------------------------------
>
>                 Key: ASTERISK-28923
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-28923
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_pjsip
>    Affects Versions: 16.10.0
>         Environment: Linux Ubuntu 18.04.04 LTS
>            Reporter: Yury Kirsanov
>            Assignee: Unassigned
>              Labels: fax
>         Attachments: crash.tar.gz
>
>
> We're using Asterisk in a heavily-loaded production environment with a lot of devices in both UDP and TCP mode, compiled with bundled version of PJSIP. Recently we have enabled T.38 fax receiving and started to get segfaults even when there's not too much load (i.e. during weekend days) in chan_pjsip.so. I've tried to compile external (non-bundled) version of PJProject, it works fine (version 2.10-dev) but didn't resolve the issue. So I have compiled a debug version of Asterisk and it looks like thread 1 is crashing when doing some T.38 fax options. Could you please let me know if I'm correct or what could be wrong? I'm attaching coredump files in archive. Thanks.



--
This message was sent by Atlassian JIRA
(v6.2#6252)