[asterisk-dev] Coredump upon receipt of RTP with 183 session progress on

[Power, Paul C.]

Hello every body. 
 
I originally ran into the problem on * 1.4.10, but am able to replicate
quite nicly on 1.4.11.
 
I have asterisk installed on gentoo. Using a Polycom 601 phone, codec
g729. trying to dial out to the PSTN via an openSER proxy with an
Audiocodes gateway.
 
progressinband is set to yes.
 
When i dial out to the PSTN asterisk dies upon the receipt of the first
RTP packet from the phone. i have traced the problem to the ast_rtp_read
call in rtp.c.  i have looked into things to the point that i know when
an RTP packet comes from the phone and rtp->f.samples (line 1300) value
is set to 160 (in my case), the function call does not return to the
place it came from (asterisk crashes).  i have experimented a bit by
manulally setting rtp->f.samples to various values.
 
when set to 0 asterisk does not die, it contiues to run.
when set to 1 asterisk dies after receiving a few dozen RTP packets.
when set to 31 asterisk dies after receiving 3-4 RTP packets.
so, the higher the samples value the quicker the death.
 
(gdb) bt
#0  0x08267e69 in autocorr (r=0x869e6c4, x=0xc, N=-1228178720,
order=222647369) at helpfun.c:38
#1  0xb6f656fb in coder_ld8a () from
/usr/lib/asterisk/modules/codec_g729a.so
#2  0xb6f6562f in g729_coder () from
/usr/lib/asterisk/modules/codec_g729a.so
#3  0xb6eeb4de in ?? () from /usr/lib/asterisk/modules/codec_g729a.so
#4  0x0869e6c4 in ?? ()
#5  0x086a0688 in ?? ()
#6  0x086a4548 in ?? ()
#7  0xb6cb7dd8 in ?? ()
#8  0xb78e2ff4 in ?? () from /lib/libc.so.6
#9  0x00000000 in ?? ()
 
I am pretty much at a loss as to where to look or what to do to resolve
this issue.
Any suggestions would be welcomed.  If there is any additional
information that people would like to see, i will try to provide.
 
-PCPIII
 
 
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-dev/attachments/20070919/8bd52bc9/attachment.htm