[OpenSIPS-Devel] [ opensips-Bugs-3576387 ] segfault on dlg_ping_routine

[SourceForge.net]

Bugs item #3576387, was opened at 2012-10-11 10:18
Message generated for change (Settings changed) made by vladut-paiu
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1086410&aid=3576387&group_id=232389

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: modules
Group: 1.8.x
>Status: Closed
>Resolution: Fixed
Priority: 5
Private: No
Submitted By: Flavio Goncalves (flaviogoncalves)
Assigned to: Vladut-Stefan Paiu (vladut-paiu)
Summary: segfault on dlg_ping_routine

Initial Comment:
I'm reopening the case, It happened again after the patch. 

Program terminated with signal 11, Segmentation fault.
#0  dlg_ping_routine (ticks=<value optimized out>, attr=<value optimized out>) at dlg_timer.c:525

525                     dlg->pl = 0;
(gdb) bt full
#0  dlg_ping_routine (ticks=<value optimized out>, attr=<value optimized out>) at dlg_timer.c:525
        expired = <value optimized out>
        it = <value optimized out>
        curr = 0x7fba18391c18
        dlg = 0x5d
        __FUNCTION__ = "dlg_ping_routine"
#1  0x00000000004b53dc in timer_ticker () at timer.c:360
        t = 0x7fba5e562d58
#2  run_timer_process () at timer.c:430
        multiple = 10
        cnt = <value optimized out>
        tv = {tv_sec = 0, tv_usec = 0}
#3  start_timer_processes () at timer.c:527
        tpl = 0x7fba5e5614d0
        pid = <value optimized out>
        __FUNCTION__ = "start_timer_processes"
#4  0x00000000004327d3 in main_loop (argc=<value optimized out>, argv=<value optimized out>) at main.c:933
        i = 8
        pid = 24
        si = 0x0
        startup_done = 0x7fba16a1f598
        chd_rank = 16
        load_p = 0x7fba16a1f8e8
#5  main (argc=<value optimized out>, argv=<value optimized out>) at main.c:1520
        cfg_log_stderr = 8
        cfg_stream = <value optimized out>
        c = <value optimized out>
        r = <value optimized out>
        tmp = 0x7fff5461eea0 ""
        tmp_len = <value optimized out>
        port = <value optimized out>
        proto = <value optimized out>
        ret = <value optimized out>
        seed = 2170505229
        rfd = <value optimized out>
        __FUNCTION__ = "main"

----------------------------------------------------------------------

Comment By: Flavio Goncalves (flaviogoncalves)
Date: 2012-11-03 09:45

Message:
(gdb) f 0 
#0  dlg_ping_routine (ticks=<value optimized out>, attr=<value optimized
out>) at dlg_timer.c:525
525			dlg->pl = 0;
(gdb) p dlg
$1 = (struct dlg_cell *) 0x5d
(gdb) p *dlg
Cannot access memory at address 0x5d

----------------------------------------------------------------------

Comment By: Vladut-Stefan Paiu (vladut-paiu)
Date: 2012-10-30 07:11

Message:
Hello,

Could you please run, in GDB, the following, and post here the output ?

f 0
p dlg
p *dlg

Regards,
Vlad

----------------------------------------------------------------------

Comment By: Dragos Oancea (dragosoancea)
Date: 2012-10-12 04:41

Message:
Hi


This did not happened to me after I applied the patches ( tls_init.c patch
and dialog module patch - see bug ID 3570495  ) .
I use :
modparam("dialog", "ping_interval", 40)
modparam("tm", "fr_timer", 15)

Cheers,
Dragos



----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1086410&aid=3576387&group_id=232389