[OpenSIPS-Devel] [ opensips-Bugs-2914464 ] Crash in update_subscription

SourceForge.net noreply at sourceforge.net
Wed Dec 16 16:00:41 CET 2009


Bugs item #2914464, was opened at 2009-12-14 23:35
Message generated for change (Comment added) made by nobody
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1086410&aid=2914464&group_id=232389

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: modules
Group: 1.5.x
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Stanislaw Pitucha (viraptor)
Assigned to: Anca Vamanu (anca_vamanu)
Summary: Crash in update_subscription

Initial Comment:
On 1.5.3, I've experienced a crash in:

#0  0x003a4758 in core_hash (s1=0xbff2be18, s2=0xb0106438, size=512)
    at ../../mem/../hash_func.h:56
#1  0x003a3c94 in update_subscription (msg=0x81814c8, subs=0xbff2be18, 
    init_req=0) at subscribe.c:305
#2  0x003a5895 in handle_subscribe (msg=0x81814c8, str1=0x0, str2=0x0)
    at subscribe.c:699
#3  0x08054832 in do_action (a=0x817c960, msg=0x81814c8) at action.c:962
#4  0x0805178f in run_action_list (a=0x817c960, msg=0x81814c8) at action.c:139
....

(gdb) frame 1
#1  0x003a3c94 in update_subscription (msg=0x81814c8, subs=0xbff2be18, 
    init_req=0) at subscribe.c:305
305		hash_code= core_hash(&subs->pres_uri, &subs->event->name, shtable_size);
(gdb) print subs->pres_uri
$6 = {s = 0x0, len = 0}

The packet itself is not very special:

SUBSCRIBE sip:1.2.3.4:5060 SIP/2.0
Record-Route: <sip:xuser at 1.2.3.5:5082;lr=on;ftag=4f14dbf6>
Via: SIP/2.0/UDP 1.2.3.4;branch=z9hG4bKcb3.50cbb994.0
Via: SIP/2.0/UDP 1.2.3.5:5082;branch=z9hG4bKcb3.daee2e26.0
Via: SIP/2.0/UDP 1.2.3.6:35466;received=2.3.4.5;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466
Max-Forwards: 68
Contact: <sip:ua4801b4b1a694a26ed2e-214270 at 1.2.3.5:5082>
To: "xxx"<sip:1234567 at sip.domain:5060>;tag=074c644b03d489754716d14789f86fc8-a6d7
From: "yyy"<sip:2345678 at sip.domain:5060>;tag=4f14dbf6
Call-ID: NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.
CSeq: 3 SUBSCRIBE
Expires: 3600
User-Agent: Bria release 2.5.4 stamp 53956
Event: presence
Content-Length: 0


----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2009-12-16 15:00

Message:
No failback2db set. The only patches that we included were debugging logs
for some strange issues and a hotfix... nothing that should affect this
crash imho:
http://pastebin.ca/1717052

----------------------------------------------------------------------

Comment By: Anca Vamanu (anca_vamanu)
Date: 2009-12-16 10:35

Message:
Hi,

Thanks for the backtrace. It did not help to find the problem :( . It
still seems impossible to have null in pres_uri in that place in the code.
I noticed however that the line numbers are not exactly the same as in the
release 1.5.3. Can you please check if you have modified something in your
copy. 
Also, can you tell me if you have you set the module parameter
fallback2db?

Regards,
Anca

----------------------------------------------------------------------

Comment By: Stanislaw Pitucha (viraptor)
Date: 2009-12-15 15:53

Message:
SF made it even worse... one with original formatting is available at
http://pastebin.ca/1715791

----------------------------------------------------------------------

Comment By: Stanislaw Pitucha (viraptor)
Date: 2009-12-15 15:48

Message:
Here it is... a bit ugly, but still :) (numbers and domains anonymised)

(gdb) bt full
#0  0x003a4758 in core_hash (s1=0xbff2be18, s2=0xb0106438, size=512) at
../../mem/../hash_func.h:56
	p = 0x0
	end = 0x0
	v = 2953762100
	h = 0
#1  0x003a3c94 in update_subscription (msg=0x81814c8, subs=0xbff2be18,
init_req=0) at subscribe.c:305
	hash_code = 33
	reply_code = 200
	__FUNCTION__ = "update_subscription"
#2  0x003a5895 in handle_subscribe (msg=0x81814c8, str1=0x0, str2=0x0) at
subscribe.c:699
	init_req = 0
	subs = {pres_uri = {s = 0x0, len = 0}, to_user = {
    s = 0x8154d2a
"1234567 at sip.domain:5060>;tag=074c644b03d489754716d14789f86fc8-a6d7\r\nFrom:
\"xxx\"<sip:1234567 at sip.domain:5060>;tag=4f14dbf6\r\nCall-ID:
NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\n"..., len = 7}, to_domain =
{
    s = 0x8154d32
"sip.domain:5060>;tag=074c644b03d489754716d14789f86fc8-a6d7\r\nFrom:
\"xxx\"<sip:1234567 at sip.domain:5060>;tag=4f14dbf6\r\nCall-ID:
NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3 "..., len = 16},
from_user = {
    s = 0x8154d8e "1234567 at sip.domain:5060>;tag=4f14dbf6\r\nCall-ID:
NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3
SUBSCRIBE\r\nExpires: 3600\r\nUser-Agent: Bria release 2.5.4 stamp
53956\r\nEvent: presence\r\nConte"..., len = 7}, from_domain = {
    s = 0x8154d96 "sip.domain:5060>;tag=4f14dbf6\r\nCall-ID:
NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3
SUBSCRIBE\r\nExpires: 3600\r\nUser-Agent: Bria release 2.5.4 stamp
53956\r\nEvent: presence\r\nContent-Lengt"..., len = 16}, event =
0xb0106438, event_id = {s = 0x0, len = 0}, to_tag = {
    s = 0x8154d4d "074c644b03d489754716d14789f86fc8-a6d7\r\nFrom:
\"xxx\"<sip:1234567 at sip.domain:5060>;tag=4f14dbf6\r\nCall-ID:
NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3
SUBSCRIBE\r\nExpires: 3600\r\nU"..., len = 37}, from_tag = {
    s = 0x8154db1 "4f14dbf6\r\nCall-ID:
NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3
SUBSCRIBE\r\nExpires: 3600\r\nUser-Agent: Bria release 2.5.4 stamp
53956\r\nEvent: presence\r\nContent-Length: 0\r\n\r\n", len = 8}, callid =
{
    s = 0x8154dc4 "NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3
SUBSCRIBE\r\nExpires: 3600\r\nUser-Agent: Bria release 2.5.4 stamp
53956\r\nEvent: presence\r\nContent-Length: 0\r\n\r\n", len = 44}, sockinfo
= 0x817a120, remote_cseq = 3, local_cseq = 0, contact = {
    s = 0x8154ce5
"sip:ua4801b4b1a694a26ed2e-214270 at 79.135.125.160:5082>\r\nTo:
\"yyy\"<sip:2345678 at sip.domain:5060>;tag=074c644b03d489754716d14789f86fc8-a6d7\r\nFrom:
\"xxx\"<sip:1234567 at sip.domain:5060>;"..., len = 52}, local_contact = {s =
0x11ffe480 "sip:79.135.125.158:5060", 
    len = 23}, record_route = {s = 0x8182e88
"<sip:79.135.125.154;lr=on;ftag=0xepefsv3r>", len = 42}, expires = 3600,
status = 1, reason = {s = 0x0, 
    len = 0}, version = 0, db_flag = 0, auth_rules_doc = 0x0, next = 0x0}
	event = (pres_ev_t *) 0xb0106438
	parsed_event = (event_t *) 0x8179c28
	ev_param = (param_t *) 0x0
	found = 0
	reason = {s = 0x0, len = 0}
	uri = {user = {s = 0xb014bf38 "�\206\001", len = -1340816032}, passwd =
{s = 0xb014c560 "\r\n", len = -1340816804}, host = {
    s = 0x1 <Address 0x1 out of bounds>, len = 0}, port = {s = 0x9
<Address 0x9 out of bounds>, len = 0}, params = {s = 0x0, len =
-1340816051}, headers = {
    s = 0xb014c55d "0\r\n\r\n", len = 13}, port_no = 51884, proto = 45076,
type = 2954151156, transport = {s = 0xb014caac "\001", len = -1340816138},

  ttl = {s = 0xb014c978 "\001", len = -1340816266}, user_param = {s =
0xb014c978 "\001", len = -1340816250}, maddr = {s = 0xb014c978 "\001", 
    len = -1340816266}, method = {s = 0xb014c978 "\001", len =
-1340816211}, lr = {
    s = 0xb014c4a9 "tag=4f14dbf6\r\nCall-ID:
NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3
SUBSCRIBE\r\nExpires: 3600\r\nUser-Agent: Bria release 2.5.4 stamp
53956\r\nEvent: presence\r\nContent-Length: 0\r\n\r\n", len = -1340816211},
r2 = {s = 0x11b651
"\205�u�\203�\024[]�U\211�\203�\020�E�\001", 
    len = -1342756620}, transport_val = {s = 0x0, len = -1340814508},
ttl_val = {s = 0xc1c <Address 0xc1c out of bounds>, len = 0},
user_param_val = {
    s = 0xb014cb30 "\r", len = -1340814544}, maddr_val = {s = 0x0, len =
0}, method_val = {s = 0x0, len = -1340814772}, lr_val = {
    s = 0xb014bf38 "�\206\001", len = 0}, r2_val = {s = 0xb014c1f0 "",
len = -1074610424}}
	reply_code = 500
	reply_str = {s = 0x3b68b7 "Server Internal Error", len = 21}
	ret = 0
	__FUNCTION__ = "handle_subscribe"
#3  0x08054832 in do_action (a=0x817c960, msg=0x81814c8) at action.c:962
	val_s = {s = 0x81814c8 "�\206\001", len = 1273421}
	expires = -1074609848
	aux = {s = 0xbff2bf58 "�����z", len = 8822813}
	ret = -5
	v = -1074608032
	to = (union sockaddr_union *) 0xbff2c108
	p = (struct proxy_l *) 0x8092051
	tmp = 0x817c888 "\002"
	new_uri = 0x81814c8 "�\206\001"
	end = 0x0
	crt = 0x322fe0 "�\2350"
	len = 12
	user = 301981592
	uri = {user = {s = 0x8a8a <Address 0x8a8a out of bounds>, len =
134986645}, passwd = {s = 0x8175a80 "", len = 135800216}, host = {
    s = 0x24d271 "\201�\203m\r", len = 5}, port = {
    s = 0x8154c71
";received=1.2.3.4;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466\r\nMax-Forwards:
68\r\nContact:
<sip:ua4801b4b1a694a26ed2e-214270 at 79.135.125.160:5082>\r\nTo:
\"yyy\"<sip:2345678 at sip.gra"..., len = 1}, params = {
    s = 0x8154c71
";received=1.2.3.4;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466\r\nMax-Forwards:
68\r\nContact:
<sip:ua4801b4b1a694a26ed2e-214270 at 79.135.125.160:5082>\r\nTo:
\"yyy\"<sip:234567 at sip.gra"..., len = 0}, headers = {s = 0x309d99
"/etc/localtime", len = 135800256}, 
  port_no = 57296, proto = 2071, type = 135068003, transport = {s =
0x266e0d "\201���\v", len = 3293172}, ttl = {s = 0x308cfe "%H:%M:%S",
len = 302097236}, 
  user_param = {s = 0xbff2c06c "\210���u�&", len = 2521421}, maddr
= {s = 0x323ff4 "\234=2", len = -1074609784}, method = {
    s = 0x26d875 "�L���\213E�\211t$\b�D$\0040", len =
302097242}, lr = {s = 0xbff2c17a "\001", len = 2}, r2 = {s = 0x1 <Address
0x1 out of bounds>, 
    len = 0}, transport_val = {s = 0x0, len = 0}, ttl_val = {s = 0x0, len
= 0}, user_param_val = {s = 0xe4d <Address 0xe4d out of bounds>, len = 0},

  maddr_val = {s = 0x1000 <Address 0x1000 out of bounds>, len = 8},
method_val = {s = 0x1 <Address 0x1 out of bounds>, len = 1260532815},
lr_val = {
    s = 0x0, len = 1243530678}, r2_val = {s = 0x0, len = 31477}}
	next_hop = {user = {s = 0x817c820 "\017", len = 135795912}, passwd = {s =
0x0, len = 3661}, host = {s = 0x0, len = 4096}, port = {
    s = 0x8 <Address 0x8 out of bounds>, len = 1}, params = {s = 0x0, len
= 31477}, headers = {s = 0xbff2c0c8 "\b���Q
\t\b\210�\027\b�\024\030\b", 
    len = 134800445}, port_no = 51232, proto = 2071, type = 135795912,
transport = {s = 0x0, len = 0}, ttl = {s = 0x0, len = 0}, user_param = {s =
0x0, 
    len = 13}, maddr = {s = 0x325140 "", len = 15}, method = {s = 0x323ff4
"\234=2", len = 15}, lr = {s = 0x309d99 "/etc/localtime", len = 1}, r2 = {
    s = 0x2536f6
"\211�\213]�\211�\213u�\213}�\211�]�\220\220\220\220\220\220\220\220\220U\211�\203�\030\211]�\213E\f��e��\201��\b\r",
len = 301981544}, 
---Type <return> to continue, or q <return> to quit---
  transport_val = {s = 0x309d99 "/etc/localtime", len = 2522475}, ttl_val
= {s = 0x323ff4 "\234=2", len = 1}, user_param_val = {
    s = 0x11ffdf68 "/etc/localtime", len = -1}, maddr_val = {s = 0x0, len
= 3186073}, method_val = {s = 0x0, len = 0}, lr_val = {
    s = 0x309d99 "/etc/localtime", len = -1074610068}, r2_val = {s = 0x0,
len = 0}}
	u = (struct sip_uri *) 0x8
	port = 48
	cmatch = 0
	aitem = (struct action *) 0x0
	adefault = (struct action *) 0x2
	spec = (pv_spec_t *) 0x1
	model = (pv_elem_p) 0x7af5
	val = {rs = {s = 0x1e0ca0 "", len = -1074608032}, ri = -1074610280, flags
= 134551439}
	pve = (pv_elem_t *) 0x1e0ca0
	name_s = {s = 0xbff2c1a8
"����\217\027\005\bо\027\b�\024\030\b�?2", len = 31477}
	__FUNCTION__ = "do_action"
#4  0x0805178f in run_action_list (a=0x817c960, msg=0x81814c8) at
action.c:139
	ret = -1
	t = (struct action *) 0x817c960
	__FUNCTION__ = "run_action_list"
#5  0x080538b8 in do_action (a=0x817cdf8, msg=0x81814c8) at action.c:706
	val_s = {s = 0x0, len = 31477}
	expires = -1074609208
	aux = {
  s = 0x24ed63
"\213U������\213E�\203�\0049E�\017\203����\213E�\203�\a\211D$\004\213}\b\211<$�����\205�\211�tw\213E�\203�\b\211D$\b\213E\f\2114$\211D$\004��b",
len = 1}
	ret = 1
	v = 1
	to = (union sockaddr_union *) 0xbff2c388
	p = (struct proxy_l *) 0x8092051
	tmp = 0x817c2e8 "\002"
	new_uri = 0x81814c8 "�\206\001"
	end = 0x0
	crt = 0xbff2c378 "����"
	len = 2825610
	user = 181
	uri = {user = {s = 0x0, len = 21}, passwd = {s = 0x1201a1d0 "pQ2", len =
-1074609316}, host = {s = 0x2b19e5 "\201Ĥ", len = 302097224}, port = {
    s = 0x1201a348 "<181>Dec 11 12:23:25 opensips[31487]: ***** SUBSCRIBE
sip:2345678 at sip.domain:5060 -> sip:2345678 at sip.domain:5060
[sip:79.135.125.158:5060]\n", len = 151}, params = {s = 0x4000 <Address
0x4000 out of bounds>, len = 1}, headers = {s = 0x7af5 <Address 0x7af5 out
of bounds>, 
    len = 1969312}, port_no = 49928, proto = 49138, type = 134816086,
transport = {s = 0x817bae8 "\002", len = 135795912}, ttl = {s = 0x0, len =
12}, 
  user_param = {s = 0xb <Address 0xb out of bounds>, len = 11}, maddr = {s
= 0x1 <Address 0x1 out of bounds>, len = 3}, method = {
    s = 0x158 <Address 0x158 out of bounds>, len = 0}, lr = {s = 0x0, len
= 31477}, r2 = {s = 0x1e0ca0 "", len = -1074608032}, transport_val = {
    s = 0xbff2c348 "\210���Q \t\b��\027\b�\024\030\b", len =
134815825}, ttl_val = {s = 0x817bf38 "\002", len = 135795912},
user_param_val = {s = 0x0, 
    len = 232}, maddr_val = {s = 0x11ffffb0 "\210V\001\022", len =
135802008}, method_val = {s = 0x0, len = 1}, lr_val = {
    s = 0x17 <Address 0x17 out of bounds>, len = 0}, r2_val = {s = 0x4
<Address 0x4 out of bounds>, len = 31477}}
	next_hop = {user = {s = 0x817c280 "\017", len = 135795912}, passwd = {s =
0x322fe0 "�\2350", len = 13}, host = {s = 0x24c8f1 "\201�\003w\r", 
    len = 160}, port = {s = 0x30b97c "double free or corruption (!prev)",
len = -1}, params = {s = 0x0, len = 31477}, headers = {
    s = 0xbff2c348 "\210���Q \t\b��\027\b�\024\030\b", len =
134800445}, port_no = 49792, proto = 2071, type = 135795912, transport = {
    s = 0x30b97c "double free or corruption (!prev)", len = 3293172}, ttl
= {s = 0x1201a1d0 "pQ2", len = 302096848}, user_param = {s = 0xbff2c250 "",

    len = 13}, maddr = {s = 0x323ff4 "\234=2", len = 3297600}, method = {s
= 0x1201a1d0 "pQ2", len = -1074609532}, lr = {s = 0x0, len = 0}, r2 = {
    s = 0x1201a1d0 "pQ2", len = 0}, transport_val = {s = 0x323ff4
"\234=2", len = 3297600}, ttl_val = {s = 0x1 <Address 0x1 out of bounds>, 
    len = -1074609500}, user_param_val = {s = 0x250bc0 "e\203=\f", len =
3297600}, maddr_val = {
    s = 0x1201a348 "<181>Dec 11 12:23:25 opensips[31487]: ***** SUBSCRIBE
sip:2345678 at sip.domain:5060 -> sip:2345678 at sip.domain:5060
[sip:79.135.125.158:5060]\n", len = 31477}, method_val = {s = 0x1e0ca0 "",
len = -1074608032}, lr_val = {s = 0xbff2c2c8
"\b���V!\t\b��\027\b�\024\030\b", 
    len = 134815825}, r2_val = {s = 0x817bae8 "\002", len = 135795912}}
	u = (struct sip_uri *) 0xffffffff
	port = 0
	cmatch = -1074609272
	aitem = (struct action *) 0xbff2c388
	adefault = (struct action *) 0xbff2c3c8
	spec = (pv_spec_t *) 0x0
	model = (pv_elem_p) 0x7af5
	val = {rs = {s = 0x1e0ca0 "", len = -1074608032}, ri = -1074609640, flags
= 134551439}
	pve = (pv_elem_t *) 0x1e0ca0
	name_s = {s = 0xbff2c308 "H���Q \t\b8�\027\b�\024\030\b", len =
31477}
	__FUNCTION__ = "do_action"
#6  0x0805178f in run_action_list (a=0x817cdf8, msg=0x81814c8) at
action.c:139
	ret = -1
	t = (struct action *) 0x817cdf8
	__FUNCTION__ = "run_action_list"
#7  0x08053901 in do_action (a=0x817ce60, msg=0x81814c8) at action.c:712
	val_s = {s = 0xaff68000 "", len = 135613394}
	expires = -1074608600
	aux = {s = 0xbff2c478 "\017", len = 16}
	ret = 1
	v = 0
	to = (union sockaddr_union *) 0xbff2c680
	p = (struct proxy_l *) 0x8154b8b
	tmp = 0x8175ab8 ""
	new_uri = 0x4 <Address 0x4 out of bounds>
	end = 0xbff2c608 "(����z"
	crt = 0x0
	len = 2
	user = 0
	uri = {user = {s = 0xf2c528 <Address 0xf2c528 out of bounds>, len =
-1074608856}, passwd = {s = 0x400 <Address 0x400 out of bounds>, 
    len = 1368624}, host = {s = 0xbff2c538 "H�򿪶\021", len = 1160897},
port = {s = 0xaff8e26c "", len = -1340803360}, params = {
    s = 0xbff2c548 "\210����0\023", len = 1160874}, headers = {s =
0xaff8e26c "", len = 1240714}, port_no = 50568, proto = 49138, type =
1257645, 
  transport = {s = 0x0, len = 135613322}, ttl = {s = 0xbff2c588
"\030���B�\v\b�K\025\bfN\025\b\230\233\027\b\210Q\f\b\211K\025\b�\002",
len = 134986645}, 
  user_param = {s = 0x8175a80 "", len = 135764880}, maddr = {
    s = 0x8154c0c "Via: SIP/2.0/UDP
79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVia: SIP/2.0/UDP
192.168.0.5:35466;received=1.2.3.4;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466\r\nMax-Forward"...,
len = 135613390}, method = {s = 0x8182690 "\001", len = 135764888}, lr = {
    s = 0x2dd <Address 0x2dd out of bounds>, len = 0}, r2 = {s = 0x1e0ca0
"", len = 135764924}, transport_val = {
    s = 0xbff2c618 "H���\217\027\005\b`�\027\b�\024\030\b", len
= 135001154}, ttl_val = {
    s = 0x8154bce "Via: SIP/2.0/UDP
79.135.125.154;branch=z9hG4bKcb3.50cbb994.0\r\nVia: SIP/2.0/UDP
79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVia: SIP/2.0/UDP
192.168.0.5:35466;received=1.2.3.4;branch=z9hG4b"..., len = 135614054},
user_param_val = {s = 0x8179b98 "\001", len = 135025032}, 
  maddr_val = {
    s = 0x8154b89 "\r\nRecord-Route:
<sip:xuser at 79.135.125.160:5082;lr=on;ftag=4f14dbf6>\r\nVia: SIP/2.0/UDP
79.135.125.154;branch=z9hG4bKcb3.50cbb994.0\r\nVia: SIP/2.0/UDP
79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVi"..., len = 733},
method_val = {s = 0x81814ec "", len = 1972148}, lr_val = {
    s = 0x8175ac0 "�\030\030\b\003", len = 5}, r2_val = {s = 0xbff2c5e8
"\030���\230\233\027\bjK\025\b\fL\025\b\fL\025\bfN\025\b", len =
134987015}}
	next_hop = {user = {s = 0x10 <Address 0x10 out of bounds>, len = 5},
passwd = {s = 0xf <Address 0xf out of bounds>, len = 135613342}, host = {
    s = 0x8154c0c "Via: SIP/2.0/UDP
79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVia: SIP/2.0/UDP
192.168.0.5:35466;received=1.2.3.4;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466\r\nMax-Forward"...,
len = -1341094024}, port = {s = 0x7 <Address 0x7 out of bounds>, len = 7},

  params = {s = 0x0, len = 1969312}, headers = {s = 0xbff2c4c8
"\210���/�\v\b�K\025\bfN\025\b\220&\030\b0�\024", len =
134986645}, port_no = 23168, 
  proto = 2071, type = 84223624, transport = {
    s = 0x8154c0c "Via: SIP/2.0/UDP
79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVia: SIP/2.0/UDP
192.168.0.5:35466;received=1.2.3.4;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466\r\nMax-Forward"...,
len = 135613422}, ttl = {s = 0x0, len = 135800464}, user_param = {
    s = 0x8181ae8 "�", len = 0}, maddr = {s = 0x1e0ca0 "", len =
135764924}, method = {
    s = 0xbff2c588
"\030���B�\v\b�K\025\bfN\025\b\230\233\027\b\210Q\f\b\211K\025\b�\002",
len = 134997295}, lr = {
    s = 0x8154bd3 "SIP/2.0/UDP
79.135.125.154;branch=z9hG4bKcb3.50cbb994.0\r\nVia: SIP/2.0/UDP
79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVia: SIP/2.0/UDP
192.168.0.5:35466;received=1.2.3.4;branch=z9hG4bK-d87"..., len =
135614054}, r2 = {s = 0x8182690 "\001", len = 1368624}, transport_val = {
    s = 0x1e0ca0 "", len = 1240714}, ttl_val = {s = 0xbff2c528
"8�����\021", len = 1230189}, user_param_val = {s = 0xb014f698
"", len = 0}, maddr_val = {
    s = 0xbff2c518 "(��", len = 1233809}, method_val = {s = 0x8c429
<Address 0x8c429 out of bounds>, len = 135613452}, lr_val = {
    s = 0x1 <Address 0x1 out of bounds>, len = 1160785}, r2_val = {s =
0xaff8e26c "", len = -1341206552}}
	u = (struct sip_uri *) 0xbff2c618
	port = 2071
	cmatch = 135613290
	aitem = (struct action *) 0x8154c0c
	adefault = (struct action *) 0x8154c0c
	spec = (pv_spec_t *) 0x8154e66
	model = (pv_elem_p) 0x0
	val = {rs = {s = 0xaff6c0b8 "", len = 3908152}, ri = -1074609000, flags =
14}
	pve = (pv_elem_t *) 0x0
	name_s = {s = 0x1 <Address 0x1 out of bounds>, len = 3731001}
	__FUNCTION__ = "do_action"
#8  0x0805178f in run_action_list (a=0x817b5c8, msg=0x81814c8) at
action.c:139
	ret = 1
	t = (struct action *) 0x817ce60
	__FUNCTION__ = "run_action_list"
#9  0x080519f5 in run_actions (a=0x817b5c8, msg=0x81814c8) at
action.c:119
	ret = 134839835
	__FUNCTION__ = "run_actions"
#10 0x08051a95 in run_top_route (a=0x817b5c8, msg=0x81814c8) at
action.c:180
	bk_action_flags = 0
	bk_rec_lev = 0
	ret = 0
#11 0x08086d5b in receive_msg (
    buf=0x8154b60 "SUBSCRIBE sip:79.135.125.158:5060
SIP/2.0\r\nRecord-Route:
<sip:xuser at 79.135.125.160:5082;lr=on;ftag=4f14dbf6>\r\nVia: SIP/2.0/UDP
79.135.125.154;branch=z9hG4bKcb3.50cbb994.0\r\nVia: SIP/2.0/UDP
79.135.125."..., len=774, rcv_info=0xbff2c70c) at receive.c:165
	msg = (struct sip_msg *) 0x81814c8
	__FUNCTION__ = "receive_msg"
#12 0x080b8a2d in udp_rcv_loop () at udp_server.c:449
	len = 774
	tmp = 0x7 <Address 0x7 out of bounds>
	from = (union sockaddr_union *) 0x817d540
	fromlen = 16
	ri = {src_ip = {af = 2, len = 4, u = {addrl = {2591917903, 3220358984,
31477, 1969312}, addr32 = {2591917903, 3220358984, 31477, 1969312}, 
      addr16 = {34639, 39549, 51016, 49138, 31477, 0, 3232, 30}, addr =
"O\207}\232H����z\000\000�\f\036"}}, dst_ip = {af = 2, len = 4, u
= {addrl = {
        2659026767, 0, 0, 0}, addr32 = {2659026767, 0, 0, 0}, addr16 =
{34639, 40573, 0, 0, 0, 0, 0, 0}, addr = "O\207}\236", '\0' <repeats 11
times>}}, 
  src_port = 5060, dst_port = 5060, proto = 1, proto_reserved1 = 0,
proto_reserved2 = 0, src_su = {s = {sa_family = 2, 
      sa_data = "\023�O\207}\232\000\000\000\000\000\000\000"}, sin =
{sin_family = 2, sin_port = 50195, sin_addr = {s_addr = 2591917903}, 
      sin_zero = "\000\000\000\000\000\000\000"}, sin6 = {sin6_family = 2,
sin6_port = 50195, sin6_flowinfo = 2591917903, sin6_addr = {in6_u = {
          u6_addr8 = '\0' <repeats 15 times>, u6_addr16 = {0, 0, 0, 0, 0,
0, 0, 0}, u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}}, 
  bind_address = 0x817a120}
	buf = "SUBSCRIBE sip:79.135.125.158:5060 SIP/2.0\r\nRecord-Route:
<sip:xuser at 79.135.125.160:5082;lr=on;ftag=4f14dbf6>\r\nVia: SIP/2.0/UDP
79.135.125.154;branch=z9hG4bKcb3.50cbb994.0\r\nVia: SIP/2.0/UDP
79.135.125."...
	__FUNCTION__ = "udp_rcv_loop"
#13 0x080646b5 in main_loop () at main.c:779
	i = 6
	pid = 0
	si = (struct socket_info *) 0x817a120
	chd_rank = 7
	__FUNCTION__ = "main_loop"
---Type <return> to continue, or q <return> to quit---
#14 0x08066535 in main (argc=9, argv=0xbff2c8e4) at main.c:1318
	cfg_log_stderr = 0
	cfg_stream = (FILE *) 0x11ff4008
	c = -1
	r = 0
	tmp = 0xbff2dc13 ""
	tmp_len = 135483632
	port = 0
	proto = 134551232
	options = 0x8100154 "f:cCm:b:l:n:N:rRvdDETSVhw:t:u:g:P:G:W:"
	ret = -1
	seed = 1776766230
	rfd = 4
	__FUNCTION__ = "main"


----------------------------------------------------------------------

Comment By: Anca Vamanu (anca_vamanu)
Date: 2009-12-15 15:11

Message:
Hi Stanislaw,

I have looked and looked through the code and it seems impossible to have
in that point NULL pres_uri. Can you please run a 'bt full' on that core
and send the output? Just to have more info as I am probably missing
something out.

Regards,
Anca

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1086410&aid=2914464&group_id=232389



More information about the Devel mailing list