[OpenSIPS-Devel] [OpenSIPS/opensips] 0eda2f: event_kafka: fix double free when a job cannot be ...

Bogdan Andrei IANCU noreply at github.com
Fri Oct 2 10:09:13 UTC 2026


  Branch: refs/heads/master
  Home:   https://github.com/OpenSIPS/opensips
  Commit: 0eda2f7ad7a51fe24d6890622627fa2fc4ef3857
      https://github.com/OpenSIPS/opensips/commit/0eda2f7ad7a51fe24d6890622627fa2fc4ef3857
  Author: jarrodb <j at rrod.io>
  Date:   2026-10-01 (Thu, 01 Oct 2026)

  Changed paths:
    M modules/event_kafka/event_kafka.c

  Log Message:
  -----------
  event_kafka: fix double free when a job cannot be sent to the worker

kafka_send_job() already frees the job when the write to the worker pipe
fails, but kafka_evi_raise() and kafka_publish() freed it again. The pipe is
non-blocking, so once the Kafka worker falls behind and the pipe fills, every
failed send double-frees the job and corrupts shared memory (HP_MALLOC aborts
with "freeing already freed shm pointer" and the SIP workers segfault).


  Commit: 147ddf1e59727abd9ddcf06345b3c37ae2e8858f
      https://github.com/OpenSIPS/opensips/commit/147ddf1e59727abd9ddcf06345b3c37ae2e8858f
  Author: Bogdan Andrei IANCU <bogdan at opensips.org>
  Date:   2026-10-02 (Fri, 02 Oct 2026)

  Changed paths:
    M modules/event_kafka/event_kafka.c

  Log Message:
  -----------
  Merge pull request #4288 from jarrodb/fix/event-kafka-send-job-double-free

event_kafka: fix double free when a job cannot be sent to the worker


Compare: https://github.com/OpenSIPS/opensips/compare/6105901b2749...147ddf1e5972

To unsubscribe from these emails, change your notification settings at https://github.com/OpenSIPS/opensips/settings/notifications



More information about the Devel mailing list