[OpenSIPS-Devel] [ opensips-Bugs-3406104 ] Segmentation fault in stun module

[SourceForge.net]

Bugs item #3406104, was opened at 2011-09-08 13:50
Message generated for change (Settings changed) made by sybasesql
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1086410&aid=3406104&group_id=232389

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: modules
Group: 1.7.x
Status: Open
Resolution: None
Priority: 5
>Private: Yes
Submitted By: Sergey Lavrov (sybasesql)
Assigned to: Nobody/Anonymous (nobody)
Summary: Segmentation fault in stun module

Initial Comment:
Core was generated by `/usr/sbin/opensips'.
Program terminated with signal 11, Segmentation fault.
#0  0x00002b04b470ee38 in receive (sockfd=4, client=0x7fffeb2f5a20, buffer=0x7fffeb2e5a20 "", nRecv=40, param=<value optimized out>) at stun.c:367
367         sendto(ctl.sock_outbound, resp_buffer->buffer, resp_buffer->size, 0,
(gdb) bt
#0  0x00002b04b470ee38 in receive (sockfd=4, client=0x7fffeb2f5a20, buffer=0x7fffeb2e5a20 "", nRecv=40, param=<value optimized out>) at stun.c:367
#1  0x00002b04b470f7a7 in stun_loop (rank=<value optimized out>) at stun.c:258
#2  0x000000000046c3f3 in start_module_procs () at sr_module.c:585
#3  0x0000000000429db3 in main_loop (argc=<value optimized out>, argv=0x7fffeb2f5c28) at main.c:818
#4  main (argc=<value optimized out>, argv=0x7fffeb2f5c28) at main.c:1497
(gdb) bt full
#0  0x00002b04b470ee38 in receive (sockfd=4, client=0x7fffeb2f5a20, buffer=0x7fffeb2e5a20 "", nRecv=40, param=<value optimized out>) at stun.c:367
        recv_buffer = {buffer = 0x7fffeb2e5a20 "", size = 40}
        resp_buffer = 0x0
        recv_msg = 0x822050
        resp_msg = 0x822178
        ctl = {srs = 0x7fffeb2f5a20, srs_size = 16, sock_inbound = 4, dst = 0x970400, sock_outbound = 4, upd_tcp_tls = 0}
        s = "4 81.88.80.235 3478", '\000' <repeats 12 times>
        __FUNCTION__ = "receive"
#1  0x00002b04b470f7a7 in stun_loop (rank=<value optimized out>) at stun.c:258
        read_set = {__fds_bits = {16, 0 <repeats 15 times>}}
        all_set = {__fds_bits = {176, 0 <repeats 15 times>}}
        maxfd = 7
        buffer = "\000\001\000\024\001\023\304gG?\t\017\322)\217qXf\330d\000\002\000\b\000\001\023\302M%\364\n\000\003\000\004", '\000' <repeats 49236 times>, "@\000\000\000\000\000\000\000H:U\350\067\000\000\000 \033/\353\377\177\000\000\000\000\000\000\000\000\000\000!\000\000\000\000\000\000\000\020", '\000' <repeats 39 times>"\340, \071U\350\067\000\000\000\000:U\350\067\000\000\000\000:U\350\067", '\000' <repeats 11 times>, "8:U\350\067\000\000\000H:U\350\067\000\000\000\220\033/\353\004\000\000\000\000:U\350\067\000\000\000!\000\000\000\000\000\000\000\b\000\000\000\000\000\000\000\340\071U\350\067\000\000\000\200N/\353\377\177\000\000\060\223\021\022\000\000\000\000\340\071U\350\067\000\000\000\340\071U\350\067\000\000\000\020\b\000\000\000\000\000\000\274+'\350\067\000\000\000"...
        client = {sin_family = 2, sin_port = 50195, sin_addr = {s_addr = 183772493}, sin_zero = "\000\000\000\000\000\000\000"}
        clientAddrLen = 16
        __FUNCTION__ = "stun_loop"
#2  0x000000000046c3f3 in start_module_procs () at sr_module.c:585
        m = 0x7a86f8
        n = 0
        l = 0
        x = <value optimized out>
        __FUNCTION__ = "start_module_procs"
#3  0x0000000000429db3 in main_loop (argc=<value optimized out>, argv=0x7fffeb2f5c28) at main.c:818
        chd_rank = 0
        __FUNCTION__ = "main_loop"
#4  main (argc=<value optimized out>, argv=0x7fffeb2f5c28) at main.c:1497
        cfg_log_stderr = <value optimized out>
        cfg_stream = 0x120f65e0
        c = <value optimized out>
        r = 0
        tmp = 0x4e7967 "H\215\005\266g$"
        tmp_len = <value optimized out>
        port = 0
        proto = <value optimized out>
        ret = <value optimized out>
        seed = 2175878549
        rfd = 4
        __FUNCTION__ = "main"

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1086410&aid=3406104&group_id=232389