[asterisk-dev] Segfault under 1.4.23.1 and 1.4.23.2 (ast_do_masquerade)

[Iñaki Baz Castillo]

Hi, I've experimented a segmentfault running 1.4.23.1 and 1.4.23.2
versions of Asterisk in a 64 bits host with no TDM/analog cards (just
SIP).

However both hosts have been running for long weeks in a heavy testing
scenario without crashing. The crashes have occured under production
with same configuration (perhaps due to some feature not so strongly
checked in the test environment, as call pickup or call transfer).

I've reported the crash but the report has been quicky closed because
"it's not the last 1.4.X version":
  https://issues.asterisk.org/view.php?id=16656

The coredump (single back trace) looks at follows. I just would like
to know if somebody can identify this coredump as some known issue
which perhaps it's fixed in a later version.

Thanks a lot in advance.


-------------------------------------------------------
Program terminated with signal 11, Segmentation fault.
#0  0x000000000044a405 in ast_do_masquerade (original=0x2aaab82ce4f0)
at channel.c:3675
3675                    AST_LIST_APPEND_LIST(&original->datastores,
&clone->datastores, entry);
(gdb) bt
#0  0x000000000044a405 in ast_do_masquerade (original=0x2aaab82ce4f0)
at channel.c:3675
#1  0x0000000000444577 in __ast_read (chan=0x2aaab82ce4f0,
dropaudio=0) at channel.c:2040
#2  0x000000000044609f in ast_read (chan=0x2aaab82ce4f0) at channel.c:2434
#3  0x000000000044b447 in ast_generic_bridge (c0=0x2aaab82ce4f0,
c1=0x9ed980, config=0x418594e0, fo=0x418590d8, rc=0x418590d0,
bridge_end={tv_sec = 0, tv_usec = 0}) at channel.c:3962
#4  0x000000000044cd35 in ast_channel_bridge (c0=0x2aaab82ce4f0,
c1=0x9ed980, config=0x418594e0, fo=0x418590d8, rc=0x418590d0) at
channel.c:4285
#5  0x00002aaaab5c2349 in ast_bridge_call (chan=0x2aaab82ce4f0,
peer=0x9ed980, config=0x418594e0) at res_features.c:1551
#6  0x00002aaaaea0a97b in dial_exec_full (chan=0x2aaab82ce4f0,
data=0x4185a530, peerflags=0x4185a3c0, continue_exec=0x0) at
app_dial.c:1835
#7  0x00002aaaaea0ab84 in dial_exec (chan=0x2aaab82ce4f0,
data=0x4185a530) at app_dial.c:1874
#8  0x0000000000484fae in pbx_exec (c=0x2aaab82ce4f0,
app=0x2aaaab753b70, data=0x4185a530) at pbx.c:537
#9  0x00002aaaae3ded92 in realtime_exec (chan=0x2aaab82ce4f0,
context=0x2aaab82ce740 "pbx1", exten=0x2aaab82ce790 "19002",
priority=2, callerid=0x2aaab851a910 "`����*",
    data=0x2aaaab73f431 "pbx1 at extensions") at pbx_realtime.c:216
#10 0x00000000004888ea in pbx_extension_helper (c=0x2aaab82ce4f0,
con=0x0, context=0x2aaab82ce740 "pbx1", exten=0x2aaab82ce790 "19002",
priority=2, label=0x0,
    callerid=0x2aaab851a910 "`����*", action=E_SPAWN) at pbx.c:1874
#11 0x0000000000489a06 in ast_spawn_extension (c=0x2aaab82ce4f0,
context=0x2aaab82ce740 "pbx1", exten=0x2aaab82ce790 "19002",
priority=2, callerid=0x2aaab851a910 "`����*")
    at pbx.c:2318
#12 0x0000000000489e8d in __ast_pbx_run (c=0x2aaab82ce4f0) at pbx.c:2407
#13 0x000000000048ad4c in pbx_thread (data=0x2aaab82ce4f0) at pbx.c:2622
#14 0x00000000004cc2fe in dummy_start (data=0x2aaab889ff90) at utils.c:856
#15 0x00002ac794d5af1a in start_thread () from /lib/libpthread.so.0
#16 0x00002ac7953275d2 in clone () from /lib/libc.so.6
#17 0x0000000000000000 in ?? ()
-------------------------------------------------------