[asterisk-dev] [Asterisk 0017686]: Asterisk crashing in ast_readaudio_callback at file.c:762

[Dave WOOLLEY]

> [[djw]]
> Thanks for identifying the change (directly on the issues tracker).
> Unfortunately, in our case, res_timing_pthread shouldn't loaded, and
> isn't loaded on the, unchanged, currently running system, so I guess
we
> will have to wait until we get a more complete backtrace.  (There is
> some possibility that we can extract that from the original dump.)
> 
[[djw]] 
OK, ours crashed because the start of the frame structure, for the frame
containing the audio from the beep file, got overwritten, and, in
particular, datalen got set very very large.  The whennext value is
plausible, so the damage was after the frame was created.

We use res_timing_dahdi, not res_timing_pthread.  Either there has been
memory corruption in almost the same place for totally un-related
reasons, or it looks like the corruption is caused by something that is
being synchronised to the timing stream, rather than by the timing
stream code itself.

Unfortunately, ours is on 1.6.1.0 and there is no way we will risk
changing to a later 1.6.x version on the customer's system.

Note, for some reason, we don't get concurrent thread dumps for a kernel
initiated core dumps (only for gcore, or when running under gdb), so I
can't look for concurrent activity that might be suspicious.

As this is a public list, the confidentiality part of the following
does not apply.
-- 
David Woolley
BTS Holdings Plc
Tel: +44 (0)20 8401 9000 Fax: +44 (0)20 8401 9100
http://www.bts.co.uk
This email and its attachments may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of the company. If you are not the intended recipient of this email, you must take no action based upon it, nor must you copy or show it to anyone. Please contact the sender if you believe you have received this email in error. In accordance with English Law, email communications may be monitored. All reasonable precautions have been taken to ensure that no viruses are present in this email; however, the company cannot accept responsibility for loss or damage arising from the use of this email. We recommend that you subject this email to your own virus checking procedures. BTS Holdings PLC is registered in England 1517630, VAT No 523 5092 66. Registered office, BTS House, Manor Road, Wallington, SM6 0DD