[OpenSIPS-Users] SIGABRT at runtime

[Bobby Smith]

Ran into a crash on latest opensips_1_6 branch from svn (r 7038).  Not
exactly sure what happened, it looks like in trying to relay a cancel (which
we wouldn't alter).  Contents of core are below.  Also, modules in use:

loadmodule "db_postgres.so"
loadmodule "sl.so"
loadmodule "tm.so"
loadmodule "rr.so"
loadmodule "maxfwd.so"
loadmodule "textops.so"
loadmodule "mi_fifo.so"
loadmodule "xlog.so"
loadmodule "nathelper.so"
loadmodule "uri.so"
loadmodule "avpops.so"
loadmodule "signaling.so"
loadmodule "dialog.so"
loadmodule "load_balancer.so"
loadmodule "siptrace.so"

Core was generated by `/usr/local/opensips/sbin/opensips -P
/var/run/opensips.pid'.
Program terminated with signal 6, Aborted.
#0  0x00a17402 in __kernel_vsyscall ()
(gdb) bt full
#0  0x00a17402 in __kernel_vsyscall ()
No symbol table info available.
#1  0x00651df0 in raise () from /lib/libc.so.6
No symbol table info available.
#2  0x00653701 in abort () from /lib/libc.so.6
No symbol table info available.
#3  0x00162f80 in t_check (p_msg=0x81a3ae4, param_branch=0xbf91f768) at
t_lookup.c:922
        local_branch = -1474669952
        __FUNCTION__ = "t_check"
#4  0x001715c1 in reply_received (p_msg=0x81a3ae4) at t_reply.c:1379
        msg_status = 135032812
        last_uac_status = 135829064
        branch = 0
        reply_status = 1
        timer = 4430796376
        cancel_bitmap = 135032812
        uac = 0xbf91f7a8
        t = 0x16a6
        backup_list = 0x625ca0
        has_reply_route = 3214014944
        __FUNCTION__ = "reply_received"
#5  0x080626cc in forward_reply (msg=0x81a3ae4) at forward.c:561
        new_buf = 0x0
        to = 0x0
        new_len = 816
        mod = 0x818dfec
        proto = -1080952808
        id = 0
        send_sock = 0x819e1f8
        s = 0x81a3ae4 "\034\005"
        len = -1080952808
        __FUNCTION__ = "forward_reply"
#6  0x0808d401 in receive_msg (
    buf=0x8167da0 "SIP/2.0 200 canceling\r\nVia: SIP/2.0/UDP
69.61.97.121;branch=z9hG4bKcc3f.adecd464.0\r\nFrom: \"Extension\" <
sip:VHEN1159 at sip-25016.accounts-lab01.vocalocity.com<sip%3AVHEN1159 at sip-25016.accounts-lab01.vocalocity.com>>;tag=7f8d85949a1a0c98o1\r\nCall-ID:
cf60644-7d"...,
    len=406, rcv_info=0xbf91f888) at receive.c:200
        msg = 0x81a3ae4
        __FUNCTION__ = "receive_msg"
#7  0x080c3105 in udp_rcv_loop () at udp_server.c:492
        len = 406
        tmp = 0x13 <Address 0x13 out of bounds>
        from = 0x81a3ab8
        fromlen = 16
        ri = {src_ip = {af = 2, len = 4, u = {addrl = {2036415813,
3214014944, 3214014664, 0}, addr32 = {2036415813, 3214014944, 3214014664,
0}, addr16 = {15685, 31073, 63968, 49041, 63688, 49041, 0, 0},
              addr = "E=ay\340\371\221\277\310\370\221\277\000\000\000"}},
dst_ip = {af = 2, len = 4, u = {addrl = {2036415813, 0, 0, 0}, addr32 =
{2036415813, 0, 0, 0}, addr16 = {15685, 31073, 0, 0, 0, 0, 0, 0},
              addr = "E=ay", '\000' <repeats 11 times>}}, src_port = 5060,
dst_port = 5060, proto = 1, proto_reserved1 = 0, proto_reserved2 = 0, src_su
= {s = {sa_family = 2, sa_data =
"\023\304E=ay\000\000\000\000\000\000\000"},
            sin = {sin_family = 2, sin_port = 50195, sin_addr = {s_addr =
2036415813}, sin_zero = "\000\000\000\000\000\000\000"}, sin6 = {sin6_family
= 2, sin6_port = 50195, sin6_flowinfo = 2036415813, sin6_addr = {in6_u = {
                  u6_addr8 = '\000' <repeats 15 times>, u6_addr16 = {0, 0,
0, 0, 0, 0, 0, 0}, u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}},
bind_address = 0x819e878}
        p = 0x0
        buf = "SIP/2.0 200 canceling\r\nVia: SIP/2.0/UDP
69.61.97.121;branch=z9hG4bKcc3f.adecd464.0\r\nFrom: \"Extension\" <
sip:VHEN1159 at sip-25016.accounts-lab01.vocalocity.com<sip%3AVHEN1159 at sip-25016.accounts-lab01.vocalocity.com>>;tag=7f8d85949a1a0c98o1\r\nCall-ID:
cf60644-7d"...
        __FUNCTION__ = "udp_rcv_loop"
#8  0x08066b9a in main_loop () at main.c:818
        i = 0
        pid = 0
        si = 0x819e878
        startup_done = 0x0
        chd_rank = 9
        __FUNCTION__ = "main_loop"
#9  0x08068c3b in main (argc=3, argv=0xbf91fa64) at main.c:1388
        cfg_log_stderr = 0
        cfg_stream = 0x95b8008
        c = -1
        r = 0
        tmp = 0xbf91f9a8 ""
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.opensips.org/pipermail/users/attachments/20100721/a43b3efa/attachment.htm