[OpenSIPS-Devel] [ opensips-Bugs-2914464 ] Crash in update_subscription

[SourceForge.net]

Bugs item #2914464, was opened at 2009-12-15 01:35
Message generated for change (Comment added) made by anca_vamanu
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1086410&aid=2914464&group_id=232389

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: modules
Group: 1.5.x
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Stanislaw Pitucha (viraptor)
>Assigned to: Anca Vamanu (anca_vamanu)
Summary: Crash in update_subscription

Initial Comment:
On 1.5.3, I've experienced a crash in:

#0  0x003a4758 in core_hash (s1=0xbff2be18, s2=0xb0106438, size=512)
    at ../../mem/../hash_func.h:56
#1  0x003a3c94 in update_subscription (msg=0x81814c8, subs=0xbff2be18, 
    init_req=0) at subscribe.c:305
#2  0x003a5895 in handle_subscribe (msg=0x81814c8, str1=0x0, str2=0x0)
    at subscribe.c:699
#3  0x08054832 in do_action (a=0x817c960, msg=0x81814c8) at action.c:962
#4  0x0805178f in run_action_list (a=0x817c960, msg=0x81814c8) at action.c:139
....

(gdb) frame 1
#1  0x003a3c94 in update_subscription (msg=0x81814c8, subs=0xbff2be18, 
    init_req=0) at subscribe.c:305
305		hash_code= core_hash(&subs->pres_uri, &subs->event->name, shtable_size);
(gdb) print subs->pres_uri
$6 = {s = 0x0, len = 0}

The packet itself is not very special:

SUBSCRIBE sip:1.2.3.4:5060 SIP/2.0
Record-Route: <sip:xuser at 1.2.3.5:5082;lr=on;ftag=4f14dbf6>
Via: SIP/2.0/UDP 1.2.3.4;branch=z9hG4bKcb3.50cbb994.0
Via: SIP/2.0/UDP 1.2.3.5:5082;branch=z9hG4bKcb3.daee2e26.0
Via: SIP/2.0/UDP 1.2.3.6:35466;received=2.3.4.5;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466
Max-Forwards: 68
Contact: <sip:ua4801b4b1a694a26ed2e-214270 at 1.2.3.5:5082>
To: "xxx"<sip:1234567 at sip.domain:5060>;tag=074c644b03d489754716d14789f86fc8-a6d7
From: "yyy"<sip:2345678 at sip.domain:5060>;tag=4f14dbf6
Call-ID: NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.
CSeq: 3 SUBSCRIBE
Expires: 3600
User-Agent: Bria release 2.5.4 stamp 53956
Event: presence
Content-Length: 0


----------------------------------------------------------------------

>Comment By: Anca Vamanu (anca_vamanu)
Date: 2009-12-15 17:11

Message:
Hi Stanislaw,

I have looked and looked through the code and it seems impossible to have
in that point NULL pres_uri. Can you please run a 'bt full' on that core
and send the output? Just to have more info as I am probably missing
something out.

Regards,
Anca

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1086410&aid=2914464&group_id=232389