[asterisk-bugs] [JIRA] (ASTERISK-28885) res_rtp_asterisk.c: ast_rtp_remote_address_set SIGABRT
Josep B (JIRA)
noreply at issues.asterisk.org
Mon May 11 11:58:25 CDT 2020
[ https://issues.asterisk.org/jira/browse/ASTERISK-28885?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Josep B updated ASTERISK-28885:
-------------------------------
Attachment: core SIGABRT res_rtp_asterisk.zip
Thanks, and sorry I missed upload backtraces.
Unfortunately we don't know how to reproduce. The crash reproduced 2 times in production environment with 150+ extensions.
We use Asterisk 13.32.0 with PJSIP2.9 bundled. Extensions are configured with WebRTC and rel100/PRACK.
ParameterName : ParameterValue
========================================================================
*100rel : required*
accept_multiple_sdp_answers : false
accountcode :
acl :
aggregate_mwi : true
allow : (ulaw|alaw|gsm|g726|g722)
allow_overlap : true
allow_subscribe : true
allow_transfer : true
aors : 9400
asymmetric_rtp_codec : false
auth : 9400-auth
bind_rtp_to_media_address : false
call_group :
callerid : "device" <9400>
callerid_privacy : allowed_not_screened
callerid_tag :
connected_line_method : invite
contact_acl :
context : from-internal
cos_audio : 0
cos_video : 0
device_state_busy_at : 0
direct_media : true
direct_media_glare_mitigation : none
direct_media_method : invite
disable_direct_media_on_nat : false
dtls_ca_file :
dtls_ca_path :
dtls_cert_file : /etc/asterisk/keys/ContestaWild.crt
dtls_cipher :
dtls_fingerprint : SHA-256
dtls_private_key : /etc/asterisk/keys/ContestaWild.key
dtls_rekey : 0
dtls_setup : actpass
dtls_verify : Yes
dtmf_mode : rfc4733
fax_detect : false
fax_detect_timeout : 0
follow_early_media_fork : true
force_avp : false
force_rport : true
from_domain :
from_user :
g726_non_standard : false
ice_support : true
identify_by : username,ip
ignore_183_without_sdp : false
inband_progress : false
incoming_mwi_mailbox :
language : es
mailboxes :
media_address :
media_encryption : dtls
media_encryption_optimistic : false
media_use_received_transport : false
message_context :
moh_passthrough : false
moh_suggest : default
mwi_from_user :
mwi_subscribe_replaces_unsolicited : yes
named_call_group :
named_pickup_group :
notify_early_inuse_ringing : false
one_touch_recording : false
outbound_auth :
outbound_proxy :
pickup_group :
record_off_feature : automixmon
record_on_feature : automixmon
refer_blind_progress : true
rewrite_contact : true
rpid_immediate : false
rtcp_mux : true
rtp_engine : asterisk
rtp_ipv6 : false
rtp_keepalive : 0
rtp_symmetric : true
rtp_timeout : 0
rtp_timeout_hold : 0
sdp_owner : -
sdp_session : Asterisk
send_connected_line : yes
send_diversion : true
send_pai : true
send_rpid : false
set_var :
srtp_tag_32 : false
sub_min_expiry : 0
subscribe_context :
suppress_q850_reason_headers : false
t38_udptl : false
t38_udptl_ec : none
t38_udptl_ipv6 : false
t38_udptl_maxdatagram : 0
t38_udptl_nat : false
timers : yes
timers_min_se : 90
timers_sess_expires : 1800
tone_zone :
tos_audio : 0
tos_video : 0
transport :
trust_connected_line : yes
trust_id_inbound : true
trust_id_outbound : false
use_avpf : true
use_ptime : false
user_eq_phone : false
voicemail_extension :
> res_rtp_asterisk.c: ast_rtp_remote_address_set SIGABRT
> ------------------------------------------------------
>
> Key: ASTERISK-28885
> URL: https://issues.asterisk.org/jira/browse/ASTERISK-28885
> Project: Asterisk
> Issue Type: Bug
> Security Level: None
> Components: Resources/res_rtp_asterisk
> Affects Versions: 13.32.0
> Environment: Centos 7.5, Asterisk 13.32.0
> Reporter: Josep B
> Assignee: Josep B
> Labels: fax, webrtc
> Attachments: core SIGABRT res_rtp_asterisk.zip
>
>
> Hi,
> We are using asterisk 13.32.0 with pjsip 2.9 bundled, using webrtc transport with ‘rel100‘ activated.
> We get a SIGABRT crash:
> #0 0x00007ff76c375337 in raise () from /usr/lib64/libc.so.6
> #1 0x00007ff76c376a28 in abort () from /usr/lib64/libc.so.6
> #2 0x00007ff76c3b7e87 in __libc_message () from /usr/lib64/libc.so.6
> #3 0x00007ff76c3c0679 in _int_free () from /usr/lib64/libc.so.6
> #4 0x00007ff69acd67e7 in ast_rtp_remote_address_set (instance=<optimized out>, addr=0x7ff68818e320) at res_rtp_asterisk.c:6159
> #5 0x0000000000590655 in rtp_instance_set_incoming_source_address_nolock (address=0x7ff68ce97b80, instance=0x7ff68818e1e8) at rtp_engine.c:549
> #6 ast_rtp_instance_set_requested_target_address (instance=instance at entry=0x7ff68818e1e8, address=address at entry=0x7ff68ce97b80) at rtp_engine.c:569
> #7 0x00007ff69acdc4fc in ast_rtp_ice_start_media (status=<optimized out>, ice=0x7ff68801e9c8) at res_rtp_asterisk.c:2172
> #8 ast_rtp_on_ice_complete (ice=0x7ff68801e9c8, status=<optimized out>) at res_rtp_asterisk.c:2217
> #9 0x00007ff76efe9eb5 in on_timer (th=<optimized out>, te=<optimized out>) at ../src/pjnath/ice_session.c:1177
> #10 0x00007ff76f065147 in pj_timer_heap_poll (ht=0x4ba32b8, next_delay=next_delay at entry=0x0) at ../src/pj/timer.c:659
> #11 0x00007ff69acd5420 in timer_worker_thread (data=<optimized out>) at res_rtp_asterisk.c:2296
> #12 0x00007ff76f04e1a0 in thread_main (param=0x5faac00) at ../src/pj/os_core_unix.c:541
> #13 0x00007ff76d09be65 in start_thread () from /usr/lib64/libpthread.so.0
> #14 0x00007ff76c43d88d in clone () from /usr/lib64/libc.so.6
> Related code lines (res_rtp_asterisk.c:6159) is: ast_free(rtp->rtcp->local_addr_str);
> Seems like rtp->rtcp->local_addr_str memory was corrupt (released, allocated or wrote) and libc asserts it.
> We attach additional information.
> ¿Does anyone know if it’s a known issue?
> We can colaborate testing or getting additional information.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
More information about the asterisk-bugs
mailing list