[Asterisk-video] Crash when multiple call out made

[Reza Fatahillah]

Hi Sergio,
Another core dump report :)

Here are bt full result:
#0  0x00483908 in memcpy () from
/lib/tls/i686/libc.so.6
No symbol table info available.
#1  0x003fd719 in create_ast_frame (frame=0x9e090e8,
vt=0xb7779740) at app_h324m.c:284
        header = 9 '\t'
        mode = 221 'Y'
        stuf = 9105473
        bs = 3078067912
        mark = 1
        i = 66
        found = 1
        len = 226
        send = (struct ast_frame *) 0x9e5da08
        framedata = (unsigned char *) 0x9e11e08
"A5T\tu\aY\te\220a\t)"
        framelength = 1
        __PRETTY_FUNCTION__ = "create_ast_frame"
#2  0x003fea96 in app_h324m_call (chan=0x1000000,
data=0x19000000) at app_h324m.c:986
        f = (struct ast_frame *) 0x90005368
        send = (struct ast_frame *) 0x0
        u = (struct ast_module_user *) 0x11000000
        pak = {framedata = 0xa8000000 <Address
0xa8000000 out of bounds>, offset = 0xf80192a2
<Address 0xf80192a2 out of bounds>, framelength =
67756092,
  num = 0, max = 16777216}
        vt = {tv = {tv_sec = 1190165794, tv_usec =
216729}, tvnext = {tv_sec = 1190165794, tv_usec =
296615}, samples = 7200, first = 0 '\0',
  buffer =
"\000\000\201\003\000\000\bEF\a\001\000\000\000\000\000\000\000\020\000\000\000evF\aHoa\tXoa\tEF\221\001\000\000\000\000\000\000\000\000\003\000\000\000\002",
'\0' <repeats 15 times>,
"¨w\222\001\200oa\t\001\000\000\000\000\000\000\000\001\000\000\000\002\000\000\000\000\000\000\000EF\221\001\000\000\000\000\000\000\000\000\003",
'\0' <repeats 11 times>,
"yyyy\002\000\000\000¨w\222\0018\aa\t\001\000\000\000H\aa\t\001\000\000\000\000\000\000\000eD\221\001\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000eD\221\001\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000eD\221\001\000\000\000\000\000\000\000\000\001\000\000\000"...,
bufferLength = 647227}
        frame = (void *) 0x9e090e8
        input = 0x0
        reason = 0
        ms = -1
        channels = {0x9dbc868, 0x9dc5ac0}
        pseudo = (struct ast_channel *) 0x9dc5ac0
        where = (struct ast_channel *) 0x9dc5ac0
        __PRETTY_FUNCTION__ = "app_h324m_call"
        id = (void *) 0x9e02da0
#3  0x01000000 in ?? () from
/usr/lib/asterisk/modules/chan_iax2.so
No symbol table info available.

Here are the result as you requested
(gdb) print vt
$1 = (struct video_creator *) 0xb7779740
(gdb) print *vt
$2 = {tv = {tv_sec = 1190165794, tv_usec = 216729},
tvnext = {tv_sec = 1190165794, tv_usec = 296615},
samples = 7200, first = 0 '\0',
  buffer =
"\000\000\201\003\000\000\bEF\a\001\000\000\000\000\000\000\000\020\000\000\000evF\aHoa\tXoa\tEF\221\001\000\000\000\000\000\000\000\000\003\000\000\000\002",
'\0' <repeats 15 times>,
"¨w\222\001\200oa\t\001\000\000\000\000\000\000\000\001\000\000\000\002\000\000\000\000\000\000\000EF\221\001\000\000\000\000\000\000\000\000\003",
'\0' <repeats 11 times>,
"yyyy\002\000\000\000¨w\222\0018\aa\t\001\000\000\000H\aa\t\001\000\000\000\000\000\000\000eD\221\001\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000eD\221\001\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000eD\221\001\000\000\000\000\000\000\000\000\001\000\000\000"...,
bufferLength = 647227}
(gdb) print framedata
$3 = (unsigned char *) 0x9e11e08
"A5T\tu\aY\te\220a\t)"
(gdb) print framelength
$4 = 1
(gdb) print i
$5 = 66

--- Sergio Garcia <sergio.garcia at fontventa.com> wrote:

> Hi Reza, the line is then
> 
> 284 memcpy(vt->buffer,framedata+i,framelength-i);
> 
> Could you go up in the stack into the
> create_ast_frame function and
> print the values of
> 
> vt
> *vt
> framedata
> framelength
> i
> 
> Thank you
> Sergio



      ____________________________________________________________________________________
Tonight's top picks. What will you watch tonight? Preview the hottest shows on Yahoo! TV.
http://tv.yahoo.com/