[OpenSIPS-Devel] [opensips] opensips 1.11 seg fault (#193)

ktmdan notifications at github.com
Tue Apr 8 01:48:24 CEST 2014


Having a problem with a segmentation fault in avp.

---- Version info
version: opensips 1.11.0beta-notls (x86_64/linux)
flags: STATS: On, USE_TCP, DISABLE_NAGLE, SHM_MEM, SHM_MMAP, PKG_MALLOC, F_MALLOC, DBG_QM_MALLOC, DBG_F_MALLOC, FAST_LOCK-ADAPTIVE_WAIT
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
git revision: fad3491
@(#) $Id$
main.c compiled on 15:01:32 Apr  7 2014 with gcc 4.1.2

--- BT FULL
Program terminated with signal 11, Segmentation fault.
#0  destroy_avp_list_unsafe (list=0x2b85c692eb68) at usr_avp.c:438
438                     avp = avp->next;
(gdb) bt full
#0  destroy_avp_list_unsafe (list=0x2b85c692eb68) at usr_avp.c:438
        avp = 0x4030303033353332
        __FUNCTION__ = "destroy_avp_list_unsafe"
#1  0x00002b85c355fad1 in mi_tm_uac_dlg (cmd_tree=0x0, param=<value optimized out>) at mi.c:457
        rpl_tree = <value optimized out>
        node = 0x80ae60
        pruri = {user = {s = 0x0, len = 0}, passwd = {s = 0x0, len = -274025480}, host = {s = 0x7fffefaab588 "\001Ϫ\357\377\177", len = 4400917}, port = {s = 0x87b6678b <Address 0x87b6678b out of bounds>, len = -974857576}, params = {s = 0x2b85c5b9e420 "\003", len = 0}, headers = {
            s = 0x0, len = -274025088}, port_no = 10794, proto = 0, type = ERROR_URI_T, transport = {
            s = 0x43666d "\211D$$\351h\337\377\377\220\220\220\220\220\220\220\220\220\220H\213G\020\303H\205\377u\006\270\377\377\377\377\303H\205\366t\365H\211~\bH\213G\bH\211\006H\205\300u\005\353\vH\211\006H\213", len = -274025354}, ttl = {s = 0x7fffefaab477 "", len = 0},
          user_param = {s = 0xbdaa010 "\230$\255", <incomplete sequence \373>, len = 5571712}, maddr = {s = 0x40f89b "H\203\304\b\303\377\065B\t9", len = 1}, method = {s = 0x7fffefaacf62 "", len = -2018089077}, lr = {s = 0x3705a1cbc0 "", len = 0}, r2 = {s = 0x0, len = -274025088},
          gr = {s = 0x0, len = 0}, transport_val = {s = 0x3705c1d994 "\211\307\350uZ\001", len = 4260240}, ttl_val = {s = 0x7fffefaab588 "\001Ϫ\357\377\177", len = 0}, user_param_val = {s = 0x43342b "AWAVAUATUSH\203\354HA\211\376I\211\367\211=\307S<", len = 94489536}, maddr_val = {
            s = 0xab5d2627fddc67cb <Address 0xab5d2627fddc67cb out of bounds>, len = 0}, method_val = {s = 0x7fffefaab580 "\t", len = 0}, lr_val = {s = 0x0, len = 309777275}, r2_val = {s = 0xab5d2610f81dbe84 <Address 0xab5d2610f81dbe84 out of bounds>, len = 0}, gr_val = {s = 0x0,
            len = 0}, u_name = {{s = 0x550480 "L\211d$\340L\211l$\350L\215%o\373$", len = -274025080}, {s = 0x9 <Address 0x9 out of bounds>, len = 0}, {s = 0x0, len = 4260240}, {s = 0x7fffefaab580 "\t", len = 0}, {s = 0x4101b9 "\364\220\220H\203\354\bH\213\005\021",
              len = -274025096}}, u_val = {{s = 0x0, len = 9}, {s = 0x7fffefaacf01 "/usr/local/sbin/opensips", len = -274018534}, {s = 0x7fffefaacf1d "/var/run/opensips.pid", len = -274018509}, {s = 0x7fffefaacf36 "/usr/local/etc/opensips/opensips.cfg", len = -274018469}, {
              s = 0x7fffefaacf5e "4096", len = -274018461}}, u_params_no = 53094}
        pnexthop = {user = {s = 0x6a8 <Address 0x6a8 out of bounds>, len = -1017699944}, passwd = {s = 0x400 <Address 0x400 out of bounds>, len = -1017701989}, host = {s = 0x100000002 <Address 0x100000002 out of bounds>, len = -1015415552}, port = {s = 0x7 <Address 0x7 out of bounds>,
            len = -977668636}, params = {s = 0x2b85c5b9e420 "\003", len = -963456288}, headers = {s = 0x2b85c63e8148 "нPƅ+", len = 8000888}, port_no = 34400, proto = 127, type = ERROR_URI_T, transport = {s = 0x2b85c357361c "\377\017\204", <incomplete sequence \375>,
            len = -1015415552}, ttl = {s = 0x2b85c6427d48 "\367\001", len = 8000900}, user_param = {s = 0x7f8660 "", len = -274025848}, maddr = {s = 0x7a1580 "", len = 8000900}, method = {s = 0x7fffefaab288 "", len = 8000896}, lr = {s = 0x7fffefaab288 "", len = 0}, r2 = {
            s = 0x205812992 <Address 0x205812992 out of bounds>, len = 1430}, gr = {s = 0x0, len = 0}, transport_val = {s = 0x0, len = -1294834576}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0x553ed0a0 <Address 0x553ed0a0 out of bounds>, len = 1430}, maddr_val = {
            s = 0x4af83f "H\213\025\"t1", len = 99963304}, method_val = {s = 0x8 <Address 0x8 out of bounds>, len = -974857448}, lr_val = {s = 0x2b85b2d26418 "\001", len = -1294627440}, r2_val = {s = 0xa0000000a <Address 0xa0000000a out of bounds>, len = 5662019}, gr_val = {
            s = 0x49002c "\205\300\017\205\257\366\377\377\351>\361\377\377H\211\372H\203\307 at H\211z\bH\211\370H\213t$0\374HcT$DH\203\372\av;\250\001t\b\244H\211\370H\203\352\001\250\002t\fH\211\307f\245H\211\370H\203\352\002\250\004t\vH\211ǥH\211\370H\203\352\004H\211\321H\301\351\003H\211\307\363H\245H\211\370\366\302\004t\aH\211ǥH\211\370\366\302\002t\bH\211\307f\245H\211\370\200\342\001\017\204\354\360\377\377H\211Ǥ\351\343\360\377\377H\211\372L\211\376I\213\071\350\004\376\367\377\205\300\017\205\267\356\377\377\351\236\360\377\377H\213T$\020L\211\376H\213;\350\347\375\367\377\205\300\017\205\356\356\377\377\351\201", <incomplete sequence \360>..., len = 0}, u_name = {{s = 0x2b85c5e4d8d0 " \035U", len = 4}, {s = 0x3705c9a78f "I\213\f$\360\377I(\017\224\300\204\300t\"\213A,\205\300t\033\272\001", len = 1430180000}, {
              s = 0x7fffefaab350 "\240\206\001", len = 1430180000}, {s = 0x3705c9a5c6 "H\203\354 H\215D$\017H\203\340\360H\211\030H\213\033L\211`\bH\205\333u\322I\211\304\353\003E1\344\350Q;\375\377dD\213\004%\224", len = 100000}, {s = 0x0, len = 100000}}, u_val = {{
              s = 0x3705c33b82 "\203=\237\063\062", len = 1430}, {s = 0x0, len = 5603214}, {s = 0x0, len = 0}, {s = 0x0, len = -274025080}, {s = 0x490762 "\205\300t at L\213\025\v\016\061", len = -2018089077}}, u_params_no = 8}
        sock = <value optimized out>
        method = <value optimized out>
        nexthop = 0x2b85c6cfa0d8
        body = <value optimized out>
        s = {s = 0x0, len = -274018454}
        sip_error = <value optimized out>
        proto = 0
        port = 199090928
        cseq = 0
        n = <value optimized out>
        err_buf = '\000' <repeats 127 times>
        tmp_msg = {id = 0, first_line = {type = 0, len = 0, u = {request = {method = {s = 0x0, len = 0}, uri = {s = 0x0, len = 0}, version = {s = 0x0, len = 0}, method_value = 0}, reply = {version = {s = 0x0, len = 0}, status = {s = 0x0, len = 0}, reason = {s = 0x0, len = 0},
                statuscode = 0}}}, via1 = 0x0, via2 = 0x0, headers = 0x0, last_header = 0x0, parsed_flag = 0, h_via1 = 0x0, h_via2 = 0x0, callid = 0x0, to = 0x0, cseq = 0x0, from = 0x0, contact = 0x0, maxforwards = 0x0, route = 0x0, record_route = 0x0, path = 0x0, content_type = 0x0,
          content_length = 0x0, authorization = 0x0, expires = 0x0, proxy_auth = 0x0, supported = 0x0, proxy_require = 0x0, unsupported = 0x0, allow = 0x0, event = 0x0, accept = 0x0, accept_language = 0x0, organization = 0x0, priority = 0x0, subject = 0x0, user_agent = 0x0,
          content_disposition = 0x0, accept_disposition = 0x0, diversion = 0x0, rpid = 0x0, refer_to = 0x0, session_expires = 0x0, min_se = 0x0, ppi = 0x0, pai = 0x0, privacy = 0x0, call_info = 0x0, www_authenticate = 0x0, proxy_authenticate = 0x0, min_expires = 0x0, sdp = 0x0,
          multi = 0x0, eoh = 0x0, unparsed = 0x0, rcv = {src_ip = {af = 0, len = 0, u = {addrl = {0, 0}, addr32 = {0, 0, 0, 0}, addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, addr = '\000' <repeats 15 times>}}, dst_ip = {af = 0, len = 0, u = {addrl = {0, 0}, addr32 = {0, 0, 0, 0}, addr16 = {0, 0,
                  0, 0, 0, 0, 0, 0}, addr = '\000' <repeats 15 times>}}, src_port = 0, dst_port = 0, proto = 0, proto_reserved1 = 0, proto_reserved2 = 0, src_su = {s = {sa_family = 0, sa_data = '\000' <repeats 13 times>}, sin = {sin_family = 0, sin_port = 0, sin_addr = {s_addr = 0},
                sin_zero = "\000\000\000\000\000\000\000"}}, bind_address = 0x0}, buf = 0x0, len = 0, new_uri = {s = 0x0, len = 0}, dst_uri = {s = 0x0, len = 0}, parsed_uri_ok = 0, parsed_uri = {user = {s = 0x0, len = 0}, passwd = {s = 0x0, len = 0}, host = {s = 0x0, len = 0}, port = {
              s = 0x0, len = 0}, params = {s = 0x0, len = 0}, headers = {s = 0x0, len = 0}, port_no = 0, proto = 0, type = ERROR_URI_T, transport = {s = 0x0, len = 0}, ttl = {s = 0x0, len = 0}, user_param = {s = 0x0, len = 0}, maddr = {s = 0x0, len = 0}, method = {s = 0x0, len = 0},
            lr = {s = 0x0, len = 0}, r2 = {s = 0x0, len = 0}, gr = {s = 0x0, len = 0}, transport_val = {s = 0x0, len = 0}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0x0, len = 0}, maddr_val = {s = 0x0, len = 0}, method_val = {s = 0x0, len = 0}, lr_val = {s = 0x0, len = 0},
            r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x0, len = 0}, u_name = {{s = 0x0, len = 0}, {s = 0x0, len = 0}, {s = 0x0, len = 0}, {s = 0x0, len = 0}, {s = 0x0, len = 0}}, u_val = {{s = 0x0, len = 0}, {s = 0x0, len = 0}, {s = 0x0, len = 0}, {s = 0x0, len = 0}, {s = 0x0,
                len = 0}}, u_params_no = 0}, parsed_orig_ruri_ok = 0, parsed_orig_ruri = {user = {s = 0x0, len = 0}, passwd = {s = 0x0, len = 0}, host = {s = 0x0, len = 0}, port = {s = 0x0, len = 0}, params = {s = 0x0, len = 0}, headers = {s = 0x0, len = 0}, port_no = 0, proto = 0,
            type = ERROR_URI_T, transport = {s = 0x0, len = 0}, ttl = {s = 0x0, len = 0}, user_param = {s = 0x0, len = 0}, maddr = {s = 0x0, len = 0}, method = {s = 0x0, len = 0}, lr = {s = 0x0, len = 0}, r2 = {s = 0x0, len = 0}, gr = {s = 0x0, len = 0}, transport_val = {s = 0x0,
              len = 0}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0x0, len = 0}, maddr_val = {s = 0x0, len = 0}, method_val = {s = 0x0, len = 0}, lr_val = {s = 0x0, len = 0}, r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x0, len = 0}, u_name = {{s = 0x0, len = 0}, {s = 0x0,
                len = 0}, {s = 0x0, len = 0}, {s = 0x0, len = 0}, {s = 0x0, len = 0}}, u_val = {{s = 0x0, len = 0}, {s = 0x0, len = 0}, {s = 0x0, len = 0}, {s = 0x0, len = 0}, {s = 0x0, len = 0}}, u_params_no = 0}, add_rm = 0x0, body_lumps = 0x0, reply_lump = 0x0,
          add_to_branch_s = '\000' <repeats 57 times>, add_to_branch_len = 0, hash_index = 0, flags = 0, msg_flags = 0, set_global_address = {s = 0x0, len = 0}, set_global_port = {s = 0x0, len = 0}, force_send_socket = 0x0, path_vec = {s = 0x0, len = 0}, msg_cb = 0x0}
        dlg = {id = {call_id = {s = 0x0, len = 0}, rem_tag = {s = 0x0, len = 0}, loc_tag = {s = 0x0, len = 0}}, loc_seq = {value = 0, is_set = 0 '\000'}, rem_seq = {value = 0, is_set = 0 '\000'}, loc_uri = {s = 0x0, len = 0}, rem_uri = {s = 0x0, len = 0}, obp = {s = 0x0, len = 0},
          forced_to_su = {s = {sa_family = 0, sa_data = '\000' <repeats 13 times>}, sin = {sin_family = 0, sin_port = 0, sin_addr = {s_addr = 0}, sin_zero = "\000\000\000\000\000\000\000"}}, rem_target = {s = 0x0, len = 0}, loc_dname = {s = 0x0, len = 0}, rem_dname = {s = 0x0,
            len = 0}, T_flags = 0, state = DLG_NEW, route_set = 0x0, hooks = {ru = {s = 0x0, len = 0}, nh = {s = 0x0, len = 0}, request_uri = 0x0, next_hop = 0x0, first_route = 0x0, last_route = 0x0}, send_sock = 0x0, avps = 0x0}
#2  0x0000000000001000 in ?? ()
No symbol table info available.
#3  0x0000000000000011 in ?? ()
No symbol table info available.
#4  0x0000000000000064 in ?? ()
No symbol table info available.
#5  0x0000000000000003 in ?? ()
No symbol table info available.
#6  0x0000000000400040 in ?? ()
No symbol table info available.
#7  0x0000000000000004 in ?? ()
No symbol table info available.
#8  0x0000000000000038 in ?? ()
No symbol table info available.
#9  0x0000000000000005 in ?? ()
No symbol table info available.
#10 0x0000000000000008 in ?? ()
No symbol table info available.
#11 0x0000000000000007 in ?? ()
No symbol table info available.
#12 0x0000000000000000 in ?? ()
No symbol table info available.

-- BT for threads
(gdb) thread apply all bt

Thread 1 (Thread 0x2b85b2d1cfb0 (LWP 10825)):
#0  destroy_avp_list_unsafe (list=0x2b85c692eb68) at usr_avp.c:438
#1  0x00002b85c355fad1 in mi_tm_uac_dlg (cmd_tree=0x0, param=<value optimized out>) at mi.c:457
#2  0x0000000000001000 in ?? ()
#3  0x0000000000000011 in ?? ()
#4  0x0000000000000064 in ?? ()
#5  0x0000000000000003 in ?? ()
#6  0x0000000000400040 in ?? ()
#7  0x0000000000000004 in ?? ()
#8  0x0000000000000038 in ?? ()
#9  0x0000000000000005 in ?? ()
#10 0x0000000000000008 in ?? ()
#11 0x0000000000000007 in ?? ()
#12 0x0000000000000000 in ?? ()



Please let me know if you need any other info.  Thanks! 
-Dan


---
Reply to this email directly or view it on GitHub:
https://github.com/OpenSIPS/opensips/issues/193
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/devel/attachments/20140407/4746cb61/attachment-0001.htm>


More information about the Devel mailing list