[asterisk-dev] segfaults in rtp.c

[Julian Lyndon-Smith]

Using SVN-trunk-r37320, with about 20 active calls at any time, asterisk 
crashes often.

I've looked at the core files, and most of them so far contain the 
following:

(Each ###### separates part of the bt full of each core)

Most of the time, it looks like an error in 0x08097913 in 
ast_rtp_destroy at rtp.c:1819.

Now, I can't reproduce this at will (it seems random), so should I raise 
a bug report and attach all of the bt full traces ?

Julian.

#0  0x08097913 in ast_rtp_destroy (rtp=0x9f67550) at rtp.c:1819
No locals.
#1  0x05662994 in __sip_destroy (p=0xa3ee748, lockowner=1) at 
chan_sip.c:2787
         cur = (struct sip_pvt *) 0x56ac8e8
         prev = (struct sip_pvt *) 0x0
         cp = (struct sip_pkt *) 0x85a5108
         __PRETTY_FUNCTION__ = "__sip_destroy"
#2  0x0566397c in sip_destroy (p=0xa3ee748) at chan_sip.c:2982
         __PRETTY_FUNCTION__ = "sip_destroy"
#3  0x0569551c in sip_request_call (type=0x85a5350 "SIP", format=4, 
data=0x85a5d70, cause=0x85a5dc4) at chan_sip.c:14689
         oldformat = 4
         p = (struct sip_pvt *) 0xa3ee748
         tmpc = (struct ast_channel *) 0x0
         ext = 0x0
         host = 0x85a5180 "5644"
         tmp = "5644", '\0' <repeats 104 times>, "$_l", '\0' <repeats 13 
times>, "$_l", '\0' <repeats 128 times>
         dest = 0x85a5d70 "5644"
         __PRETTY_FUNCTION__ = "sip_request_call"

#################
#0  0x08097913 in ast_rtp_destroy (rtp=0xa03db48) at rtp.c:1819
No locals.
#1  0x05fac994 in __sip_destroy (p=0xa039a70, lockowner=1) at 
chan_sip.c:2787
         cur = (struct sip_pvt *) 0x5ff68e8
         prev = (struct sip_pvt *) 0x0
         cp = (struct sip_pkt *) 0xa4ba78
         __PRETTY_FUNCTION__ = "__sip_destroy"
#2  0x05fad97c in sip_destroy (p=0xa039a70) at chan_sip.c:2982
         __PRETTY_FUNCTION__ = "sip_destroy"
#3  0x05fdf51c in sip_request_call (type=0xa4c060 "SIP", format=64, 
data=0xa4c064, cause=0xa4bde8) at chan_sip.c:14689
         oldformat = 64
         p = (struct sip_pvt *) 0xa039a70
         tmpc = (struct ast_channel *) 0x0
         ext = 0x0
         host = 0xa4baf0 "5639"
####################
#0  0x08097913 in ast_rtp_destroy (rtp=0xad20f8f0) at rtp.c:1819
No locals.
#1  0x04226994 in __sip_destroy (p=0xad20e398, lockowner=1) at 
chan_sip.c:2787
         cur = (struct sip_pvt *) 0x42708e8
         prev = (struct sip_pvt *) 0x0
         cp = (struct sip_pkt *) 0x59d40a8
         __PRETTY_FUNCTION__ = "__sip_destroy"
#2  0x0422797c in sip_destroy (p=0xad20e398) at chan_sip.c:2982
         __PRETTY_FUNCTION__ = "sip_destroy"
#3  0x0425951c in sip_request_call (type=0x59d42f0 "SIP", format=8, 
data=0x59d4d70, cause=0x59d4dc4) at chan_sip.c:14689
         oldformat = 8
         p = (struct sip_pvt *) 0xad20e398
         tmpc = (struct ast_channel *) 0x0
         ext = 0x0
         host = 0x59d4120 "5638"
         tmp = "5638", '\0' <repeats 120 times>, "$_l", '\0' <repeats 77 
times>, "$_l", '\0' <repeats 48 times>
         dest = 0x59d4d70 "5638"
         __PRETTY_FUNCTION__ = "sip_request_call"