[asterisk-dev] Possible PJSIP Issue

[Ross Beer]

Hi All,

I think I've found an issue in PJSIP which may require the bundled PJSIP to be updated. This morning I had the following segfault which I believe to be fixed in PJPROJECT commit (https://trac.pjsip.org/repos/changeset/5316). Can you please confirm if this looks to be related?

Core was generated by `/usr/sbin/asterisk -f -vvvg -c'.

Program terminated with signal 11, Segmentation fault.

#0  0x00002ad124e77d1d in pjsip_ua_unregister_dlg (ua=0x2ad12508bc60, dlg=0x2ad4996c3f58) at ../src/pjsip/sip_ua_layer.c:378

378    d = dlg_set->dlg_list.next;

#0  0x00002ad124e77d1d in pjsip_ua_unregister_dlg (ua=0x2ad12508bc60, dlg=0x2ad4996c3f58) at ../src/pjsip/sip_ua_layer.c:378

        dlg_set = 0x0

        d = 0x2ad1a80ee188

#1  0x00002ad124e7567a in unregister_and_destroy_dialog (dlg=0x2ad4996c3f58, unlock_mutex=1) at ../src/pjsip/sip_dialog.c:791

        status = 0

#2  0x00002ad124e758d8 in pjsip_dlg_dec_lock (dlg=0x2ad4996c3f58) at ../src/pjsip/sip_dialog.c:941

No locals.

#3  0x00002ad124e75139 in create_uas_dialog (ua=0x2ad12508bc60, rdata=0x2ad1a80ec378, contact=0x2acffc9c2980, inc_lock=1, p_dlg=0x2acffc9c2998) at ../src/pjsip/sip_dialog.c:563

        status = 70015

        pos = 0x0

        contact_hdr = 0x2ad4ab49f220

        rr = 0x0

        tsx = 0x0

        tmp = {ptr = 0x2ad4b16ac6c0 "<sip:**INFO REMOVED>;user=phone>", slen = 46}

        len = 46

        dlg = 0x2ad4996c3f58

#4  0x00002ad124e75195 in pjsip_dlg_create_uas_and_inc_lock (ua=0x2ad12508bc60, rdata=0x2ad1a80ec378, contact=0x2acffc9c2980, p_dlg=0x2acffc9c2998) at ../src/pjsip/sip_dialog.c:595

No locals.

#5  0x00002ad12c87053d in ast_sip_create_dialog_uas (endpoint=0x2e06960, rdata=0x2ad1a80ec378, status=0x2acffc9c2a00) at res_pjsip.c:2895

        dlg = 0x2acffc9c2a10

        contact = {ptr = 0x2ad4b16ac4c0 "<sip:37.157.54.200:5060>", slen = 24}

        type = PJSIP_TRANSPORT_UDP

        selector = {type = PJSIP_TPSELECTOR_TRANSPORT, u = {transport = 0x2dc39b8, listener = 0x2dc39b8, ptr = 0x2dc39b8}}

        transport = 0x2dc39b8

        __PRETTY_FUNCTION__ = "ast_sip_create_dialog_uas"

#6  0x00002ad124289d48 in pre_session_setup (rdata=0x2ad1a80ec378, endpoint=0x2e06960) at res_pjsip_session.c:1977

        tdata = 0x0

        dlg = 0x2ad1a80ec378

        inv_session = 0x2ad12c88d75f

        options = 3

        dlg_status = -56874448

#7  0x00002ad12428a4c0 in handle_new_invite_request (rdata=0x2ad1a80ec378) at res_pjsip_session.c:2139

        endpoint = 0x2e06960

        tdata = 0x0

        inv_session = 0x0

        session = 0x2ad12caa6870

        invite = 0x2ad12c895fe0

#8  0x00002ad12428a793 in session_on_rx_request (rdata=0x2ad1a80ec378) at res_pjsip_session.c:2225

        handled = 1

        dlg = 0x0

        inv_session = 0x2ad1a80ec378

        __PRETTY_FUNCTION__ = "session_on_rx_request"

#9  0x00002ad124e58ee1 in pjsip_endpt_process_rx_data (endpt=0x18afd38, rdata=0x2ad1a80ec378, p=0x2ad12caa7f80, p_handled=0x2acffc9c2b64) at ../src/pjsip/sip_endpoint.c:886

        msg = 0x2ad1a80ed670

        def_prm = {start_prio = 3247671623, start_mod = 0x6e1beb, idx_after_start = 4238093200, silent = 10959}

        mod = 0x2ad1244909a0

        handled = 0

        i = 1

        status = 0

#10 0x00002ad12c88d6a0 in distribute (data=0x2ad1a80ec378) at res_pjsip/pjsip_distributor.c:637

        param = {start_prio = 0, start_mod = 0x2ad12caa7de0, idx_after_start = 1, silent = 0}

        handled = 0

        rdata = 0x2ad1a80ec378

        is_request = 1

        is_ack = 0

        endpoint = 0x0

#11 0x00000000005ec1df in ast_taskprocessor_execute (tps=0x18adfa8) at taskprocessor.c:850

        local = {local_data = 0x2acffc9c39c0, data = 0x5ff34a}

        t = 0x2ad1a80b58a0

        size = 9883536

        __PRETTY_FUNCTION__ = "ast_taskprocessor_execute"

#12 0x00000000005f52da in execute_tasks (data=0x18adfa8) at threadpool.c:1320

        tps = 0x18adfa8

#13 0x00000000005ec1df in ast_taskprocessor_execute (tps=0x18ad918) at taskprocessor.c:850

        local = {local_data = 0x57457095, data = 0x0}

        t = 0x2ad1a80a4e10

        size = 0

        __PRETTY_FUNCTION__ = "ast_taskprocessor_execute"

#14 0x00000000005f35e9 in threadpool_execute (pool=0x18ab108) at threadpool.c:351

        __PRETTY_FUNCTION__ = "threadpool_execute"

#15 0x00000000005f4bf8 in worker_active (worker=0x2ad134001d28) at threadpool.c:1103

        alive = 0

#16 0x00000000005f49a8 in worker_start (arg=0x2ad134001d28) at threadpool.c:1023

        worker = 0x2ad134001d28

        __PRETTY_FUNCTION__ = "worker_start"

#17 0x0000000000600c12 in dummy_start (data=0x2ad134005820) at utils.c:1235

        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {0, 8464671100452439244, 47077928585856, 47072784693696, 47092863030288, 3, 8464671100410496204, 2370991808755893452}, __mask_was_saved = 0}}, __pad = {0x2acffc9c2e30, 0x0, 0xfc9c3a10, 0x0}}

        __cancel_routine = 0x451391 <ast_unregister_thread>

        __cancel_arg = 0x2acffc9c3700

        not_first_call = 0

        ret = 0x2acfc2a69858

        a = {start_routine = 0x5f4921 <worker_start>, data = 0x2ad134001d28, name = 0x2ad134003190 "worker_start         started at [ 1077] threadpool.c worker_thread_start()"}

#18 0x00002acfc1935aa1 in start_thread () from /lib64/libpthread.so.0

No symbol table info available.

#19 0x00002acfc27c793d in clone () from /lib64/libc.so.6

No symbol table info available.


If this is an Asterisk issue, I will raise this on the bug tracker.


Kind regards,


Ross
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20160525/f48bbcc0/attachment.html>