[asterisk-dev] chan_skinny crashes asterisk (1.4)

Pavel Jezek pavel.jezek at i.cz
Fri Sep 29 13:54:06 MST 2006


Hello, crash when calling phone, that is not available, still persist in 
current 1.4 branch,
asterisk probably doesn't correctly handle phone unregistering (look 
below at column R, where is still "Y", event if phone is off).
PJ


ipbx*CLI> skinny list devices
Name                 DeviceId         IP              Type            R NL
-------------------- ---------------- --------------- --------------- - --
PJ                   SEP000D288E664B  0.0.0.0         7920            Y  1



Asterisk SVN-branch-1.4-r43997

(gdb) bt full
#0  0xbfffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7d17fc0 in raise () from /lib/i686/libc.so.6
No symbol table info available.
#2  0xb7d19851 in abort () from /lib/i686/libc.so.6
No symbol table info available.
#3  0xb7d4d41b in __fsetlocking () from /lib/i686/libc.so.6
No symbol table info available.
#4  0xb7d54dad in mallopt () from /lib/i686/libc.so.6
No symbol table info available.
#5  0xb7d54f33 in free () from /lib/i686/libc.so.6
No symbol table info available.
#6  0xb78f21b8 in iax2_destroy (callno=28) at chan_iax2.c:1771
        frame = {data = 0xb793ad00, ts = -1224847976, ms = -1215410237, 
type = 3079908608, next = 0x2a, prev = 0xb78f1eeb}
        pvt = Variable "pvt" is not available.


(gdb) bt
#0  0xbfffe410 in __kernel_vsyscall ()
#1  0xb7d17fc0 in raise () from /lib/i686/libc.so.6
#2  0xb7d19851 in abort () from /lib/i686/libc.so.6
#3  0xb7d4d41b in __fsetlocking () from /lib/i686/libc.so.6
#4  0xb7d54dad in mallopt () from /lib/i686/libc.so.6
#5  0xb7d54f33 in free () from /lib/i686/libc.so.6
#6  0xb78f21b8 in iax2_destroy (callno=28) at chan_iax2.c:1771
#7  0xb78fb523 in iax2_hangup (c=0x81d5b40) at chan_iax2.c:2925
#8  0x0807f5ce in ast_hangup (chan=0x81d5b40) at channel.c:1560
#9  0x080bff0d in __ast_pbx_run (c=0x81d5b40) at pbx.c:2496
#10 0x080c093e in pbx_thread (data=0x81d5b40) at pbx.c:2556
#11 0x080ead1b in dummy_start (data=0x81c4a60) at utils.c:538
#12 0xb7f4d540 in start_thread () from /lib/i686/libpthread.so.0
#13 0xb7dba55e in clone () from /lib/i686/libc.so.6





[Sep 29 22:42:44]     -- Executing [s at macro-call_local_lines:2] 
Dial("IAX2/bill-gw-28", "Skinny/324 at PJ") in new stack
[Sep 29 22:42:44]     -- skinny_request(324 at PJ)
[Sep 29 22:42:44] WARNING[22305]: chan_skinny.c:1354 transmit_response: 
Transmit: write only sent -1 out of 24 bytes: Bad file descriptor
[Sep 29 22:42:44] WARNING[22305]: chan_skinny.c:1354 transmit_response: 
Transmit: write only sent -1 out of 24 bytes: Bad file descriptor
[Sep 29 22:42:44] WARNING[22305]: chan_skinny.c:1354 transmit_response: 
Transmit: write only sent -1 out of 16 bytes: Bad file descriptor
[Sep 29 22:42:44] WARNING[22305]: chan_skinny.c:1354 transmit_response: 
Transmit: write only sent -1 out of 216 bytes: Bad file descriptor
[Sep 29 22:42:44] WARNING[22305]: chan_skinny.c:1354 transmit_response: 
Transmit: write only sent -1 out of 24 bytes: Bad file descriptor
[Sep 29 22:42:44] WARNING[22305]: chan_skinny.c:1354 transmit_response: 
Transmit: write only sent -1 out of 56 bytes: Bad file descriptor
[Sep 29 22:42:44] WARNING[22305]: chan_skinny.c:1354 transmit_response: 
Transmit: write only sent -1 out of 28 bytes: Bad file descriptor
[Sep 29 22:42:44]     -- Called 324 at PJ
[Sep 29 22:42:44]     -- Skinny/324 at PJ-4 is ringing
[Sep 29 22:42:44] NOTICE[21557]: sched.c:283 ast_sched_del: Attempted to 
delete nonexistent schedule entry 0!
ipbx*CLI> *** glibc detected *** asterisk: double free or corruption 
(!prev): 0x081c0ec0 ***
======= Backtrace: =========
/lib/i686/libc.so.6[0xb7d54dad]
/lib/i686/libc.so.6(__libc_free+0x83)[0xb7d54f33]
/usr/lib/asterisk/modules/chan_iax2.so[0xb78f21b8]
/usr/lib/asterisk/modules/chan_iax2.so[0xb78fb523]
asterisk(ast_hangup+0x31e)[0x807f5ce]
asterisk[0x80bff0d]
asterisk[0x80c093e]
asterisk[0x80ead1b]
/lib/i686/libpthread.so.0[0xb7f4d540]
/lib/i686/libc.so.6(__clone+0x5e)[0xb7dba55e]
======= Memory map: ========
08048000-08139000 r-xp 00000000 03:02 326366     /usr/sbin/asterisk
08139000-08146000 rwxp 000f1000 03:02 326366     /usr/sbin/asterisk
08146000-081df000 rwxp 08146000 00:00 0          [heap]
b6f64000-b6f65000 ---p b6f64000 00:00 0
b6f65000-b6fa5000 rwxp b6f65000 00:00 0
b6fa5000-b6fa6000 ---p b6fa5000 00:00 0
b6fa6000-b6fe6000 rwxp b6fa6000 00:00 0
b6fe6000-b6fe7000 ---p b6fe6000 00:00 0
b6fe7000-b7027000 rwxp b6fe7000 00:00 0
b7027000-b7028000 ---p b7027000 00:00 0
b7028000-b7068000 rwxp b7028000 00:00 0
b7068000-b7069000 ---p b7068000 00:00 0
b7069000-b70a9000 rwxp b7069000 00:00 0
b70a9000-b70aa000 ---p b70a9000 00:00 0
b70aa000-b70ea000 rwxp b70aa000 00:00 0
b70ea000-b70eb000 ---p b70ea000 00:00 0
b70eb000-b712b000 rwxp b70eb000 00:00 0
b712b000-b712c000 r-xp 00000000 03:02 263246     
/usr/lib/asterisk/modules/func_uri.so
b712c000-b712d000 rwxp 00001000 03:02 263246     
/usr/lib/asterisk/modules/func_uri.so
b712d000-b712f000 r-xp 00000000 03:02 263245     
/usr/lib/asterisk/modules/func_timeout.so
b712f000-b7130000 rwxp 00001000 03:02 263245     
/usr/lib/asterisk/modules/func_timeout.so
b7130000-b7134000 r-xp 00000000 03:02 263244     
/usr/lib/asterisk/modules/func_strings.so
b7134000-b7135000 rwxp 00003000 03:02 263244     
/usr/lib/asterisk/modules/func_strings.so
b7135000-b7136000 r-xp 00000000 03:02 263243     
/usr/lib/asterisk/modules/func_sha1.so
b7136000-b7137000 rwxp 00000000 03:02 263243     
/usr/lib/asterisk/modules/func_sha1.so
b7137000-b7139000 r-xp 00000000 03:02 263242     
/usr/lib/asterisk/modules/func_realtime.so
b7139000-b713a000 rwxp 00001000 03:02 263242     
/usr/lib/asterisk/modules/func_realtime.so
b713a000-b713c000 r-xp 00000000 03:02 263241     
/usr/lib/asterisk/modules/func_rand.so
b713c000-b713d000 rwxp 00001000 03:02 263241     
/usr/lib/asterisk/modules/func_rand.so
b713d000-b713e000 r-xp 00000000 03:02 263240     
/usr/lib/asterisk/modules/func_moh.so
b713e000-b713f000 rwxp 00001000 03:02 263240     
/usr/lib/asterisk/modules/func_moh.so
b713f000-b7141000 r-xp 00000000 03:02 263239     
/usr/lib/asterisk/modules/func_md5.so
b7141000-b7142000 rwxp 00001000 03:02 263239     
/usr/lib/asterisk/modules/func_md5.so
b7142000-b7144000 r-xp 00000000 03:02 263238     
/usr/lib/asterisk/modules/func_math.so
b7144000-b7145000 rwxp 00001000 03:02 263238     
/usr/lib/asterisk/modules/func_math.so
b7145000-b7147000 r-xp 00000000 03:02 263237     
/usr/lib/asterisk/modules/func_logic.so
b7147000-b7148000 rwxp 00001000 03:02 263237     
/usr/lib/asterisk/modules/func_logic.so
b7148000-b7149000 r-xp 00000000 03:02 263236     
/usr/lib/asterisk/modules/func_language.so
b7149000-b714a000 rwxp 00001000 03:02 263236     
/usr/lib/asterisk/modules/func_language.so
b714a000-b714c000 r-xp 00000000 03:02 263235     
/usr/lib/asterisk/modules/func_groupcount.so
b714c000-b714d000 rwxp 00001000 03:02 263235     
/usr/lib/asterisk/modules/func_groupcount.so
b714d000-b714e000 r-xp 00000000 03:02 263234     
/usr/lib/asterisk/modules/func_global.so
b714e000-b714f000 rwxp 00000000 03:02 263234     
/usr/lib/asterisk/modules/func_global.so
b714f000-b7151000 r-xp 00000000 03:02 263233     
/usr/lib/asterisk/modules/func_env.so
b7151000-b7152000 rwxp 00001000 03:02 263233     
/usr/lib/asterisk/modules/func_env.so
b7152000-b7154000 r-xp 00000000 03:02 263232     
/usr/lib/asterisk/modules/func_enum.so
b7154000-b7155000 rwxp 00001000 03:02 263232     
/usr/lib/asterisk/modules/func_enum.so
[Sep 29 22:42:54] NOTICE[21551]: sched.c:283 ast_sched_del: Attempted to 
delete nonexistent schedule entry 0!
[Sep 29 22:42:54] NOTICE[21551]: sched.c:283 ast_sched_del: Attempted to 
delete nonexistent schedule entry 0!
[Sep 29 22:42:54] NOTICE[21551]: sched.c:283 ast_sched_del: Attempted to 
delete nonexistent schedule entry 0!
[Sep 29 22:42:54] NOTICE[21551]: sched.c:283 ast_sched_del: Attempted to 
delete nonexistent schedule entry 0!
ipbx*CLI>
Disconnected from Asterisk server
[Sep 29 22:42:54] Executing last minute cleanups





More information about the asterisk-dev mailing list