[OpenSIPS-Users] Opensips crashes when retrieving AVPs from Radius requests
Samuel Muller
sml at l33.fr
Fri Sep 28 13:05:32 CEST 2012
Hello Bogdan,
i've a small update: it's not crashing with acc radius, only with
auth_aaa and aaa_radius.
Here's the result of (gdb) bt full :
└ /tmp $ sudo gdb --core=/tmp/core.opensips.sig11.1758
/usr/lib/debug/usr/sbin/opensips
GNU gdb (GDB) 7.0.1-debian
Core was generated by `/usr/sbin/opensips -P
/var/run/opensips/opensips.pid -m 512 -M 16 -u opensips -g opensips'.
Program terminated with signal 11, Segmentation fault.
#0 0x00007f51de596dd0 in ?? () from /lib/libc.so.6
(gdb)
(gdb) bt full
#0 0x00007f51de596dd0 in ?? () from /lib/libc.so.6
No symbol table info available.
#1 0x000000000042d34b in str_cmp (tree=<value optimized out>,
key=...) at map.c:62
No locals.
#2 map_find (tree=<value optimized out>, key=...) at map.c:101
cmp = 16
p = 0x7f51b46a1ab0
#3 0x00000000013615d0 in ?? ()
No symbol table info available.
#4 0x000000000000000c in ?? ()
No symbol table info available.
#5 0x0000000000000002 in ?? ()
No symbol table info available.
#6 0x00007f51d908abf0 in values.8998 () from
/usr/lib/opensips/modules/aaa_radius.so
No symbol table info available.
#7 0x00007f51d908abf0 in values.8998 () from
/usr/lib/opensips/modules/aaa_radius.so
No symbol table info available.
#8 0x00007f51b45576c8 in ?? ()
No symbol table info available.
#9 0x00000000ffffffff in ?? ()
No symbol table info available.
#10 0x000000000048db36 in __search_avp_map (alias=0xe, m=0xc) at usr_avp.c:482
id = <value optimized out>
__FUNCTION__ = '\000' <repeats 16 times>
#11 0x00000030ffffffff in ?? ()
No symbol table info available.
#12 0x00007fffd2b792a0 in ?? ()
No symbol table info available.
#13 0x00007fffd2b791d0 in ?? ()
No symbol table info available.
#14 0xd8a4b6eb360f80e6 in ?? ()
No symbol table info available.
#15 0xe13853fa7600e35f in ?? ()
No symbol table info available.
#16 0xd8a4b6eb360f80e6 in ?? ()
No symbol table info available.
#17 0x00007f51d8e8a1e1 in __FUNCTION__.9143 () from
/usr/lib/opensips/modules/aaa_radius.so
No symbol table info available.
#18 0x00007f51d908abf0 in values.8998 () from
/usr/lib/opensips/modules/aaa_radius.so
No symbol table info available.
#19 0x00007fffd2b7927c in ?? ()
No symbol table info available.
#20 0x0000000000000001 in ?? ()
No symbol table info available.
#21 0x00000000ffffffff in ?? ()
No symbol table info available.
---Type <return> to continue, or q <return> to quit---
#22 0x00007f51dd339148 in ?? ()
No symbol table info available.
#23 0x000000000000002a in ?? ()
No symbol table info available.
#24 0x000000000048de78 in lookup_avp_alias_str (name=0x7f51b46a1ab0,
avp_name=0xe, extra=12) at usr_avp.c:499
No locals.
#25 parse_avp_spec_aux (name=0x7f51b46a1ab0, avp_name=0xe, extra=12)
at usr_avp.c:559
id = 20321744
__FUNCTION__ = '\000' <repeats 18 times>
#26 0x000000000136171e in ?? ()
No symbol table info available.
#27 0x5d9e214c00000001 in ?? ()
No symbol table info available.
#28 0x00007fffd2b792a0 in ?? ()
No symbol table info available.
#29 0x0000000000000002 in ?? ()
No symbol table info available.
#30 0x0000000000000002 in ?? ()
No symbol table info available.
#31 0x0000000000000002 in ?? ()
No symbol table info available.
#32 0x0000000000000002 in ?? ()
No symbol table info available.
#33 0x00000000013615a0 in ?? ()
No symbol table info available.
#34 0x00007f51d8433620 in ?? () from /usr/lib/opensips/modules/auth_aaa.so
No symbol table info available.
#35 0x000000000048e164 in get_avp_id (name=0x13615d0) at usr_avp.c:580
id = <value optimized out>
__FUNCTION__ = "\000\000\000\000\000\000\000\000\000\000"
#36 0x000000000136171e in ?? ()
No symbol table info available.
#37 0x0000004100000001 in ?? ()
No symbol table info available.
#38 0x0000000000000002 in ?? ()
No symbol table info available.
#39 0x00007f51d8e882b0 in extract_avp (vp=<value optimized out>) at rad.c:201
names = {s = 0x13615d0 "caller_stime:none", len = 12}
values = {s = 0x13615dd "none", len = 4}
name = <value optimized out>
r = <value optimized out>
p = 0x0
end = <value optimized out>
value = {n = 20321757, s = {s = 0x13615dd "none", len = 4}}
flags = <value optimized out>
__FUNCTION__ = "extract_avp"
---Type <return> to continue, or q <return> to quit---
#40 0x00007f51d8e888ee in rad_send_message (rh=<value optimized out>,
request=<value optimized out>, reply=<value optimized out>) at
rad.c:262
msg = "\000\224\267\322\377\177\000\000\000\000\000\000\000\000\000\000藷\322\377\177\000\000\000\000\000\000\000\000\000\000p\230\267\322\377\177\000\000䗷\322\322\006\000\000X\377o\332Q\177\000\000\377\377\377\377\377\377\377\377d\227\267\322",
'\000' <repeats 24 times>"\377, \177\000\000
\224\267\322\377\177\000\000\000\000\000\000藷\322H\230\267\322\377\177\000\000\300\260U\336\n\000\000\000_\"\000\000\000\000\000\000G\230\267\322\003\000\000\000\331\bP\000\000\000\000\000\377\377\377\377\377\377\377\377䗷\322\377\177",
'\000' <repeats 18 times>"\320,
q3\335Q\177\000\000䗷\322\377\177\000\000\000\000\000\000H\230\267\322d\000\000\000\004\000\000\000藷\322\377\177\000\000
\377\065\001\000\000\000\000\260\232\267\322\377\177\000\000\005\000\000\000\000\000\000\000\300\232\267\322\377\177\000\000\017c[\336Q\177\000\000\270\022M\336Q\177\000\000\001\000\000\000\000\000\000\000\020c[\336Q\177\000\000\020c[\336Q\177\000\000\002\000\000\000\000\000\000\000d6j\264Q\177\000\000"...
vp = <value optimized out>
attr = <value optimized out>
result = 0
__FUNCTION__ = "rad_send_message"
#41 0x00007f51d8230c3f in aaa_authorize_sterman (_msg=<value optimized
out>, _cred=0x7f51dd3394f8, _method=<value optimized out>,
_user=<value optimized out>) at sterman.c:253
send = <value optimized out>
received = 0x7f51dd338c90
service = 15
ruri = <value optimized out>
__FUNCTION__ = "aaa_authorize_sterman"
#42 0x00007f51d82301fe in authorize (_msg=0x7f51dd335cc0,
_realm=<value optimized out>, _uri_user=<value optimized out>,
_hftype=5) at authorize.c:132
res = <value optimized out>
ret = <value optimized out>
h = 0x7f51dd338ff0
cred = 0x7f51dd3368b0
user = {s = 0x7f51dd310248 "10907", len = 5}
domain = {
s = 0x76631d "ibtel.vp.ibrowse.com>;tag=1c1314559488\r\nTo:
<sip:00344745615 at 192.168.1.50>\r\nCall-ID:
131455892322420100263 at 192.168.1.55\r\nCSeq: 2 INVITE\r\nContact:
<sip:10907 at 192.168.1.55:5060>\r\nRecord-Route: <sip:192."..., len =
20}
pv_val = {rs = {s = 0x7fffd2b7a930 "\300\251\267\322\377\177",
len = 0}, ri = 1758, flags = 0}
__FUNCTION__ = "authorize"
#43 0x00000000004160c7 in do_action (a=0x7f51dd2ac640,
msg=0x7f51dd335cc0) at action.c:1483
val_s = {s = 0x0, len = -562115008}
increment = <value optimized out>
decrement = <value optimized out>
aux = {s = 0x0, len = -1}
adv_addr = {s = 0x1360170 "`\002", len = 96}
ret = <value optimized out>
v = <value optimized out>
to = <value optimized out>
p = <value optimized out>
tmp = <value optimized out>
new_uri = <value optimized out>
end = <value optimized out>
crt = <value optimized out>
len = <value optimized out>
i = <value optimized out>
user = <value optimized out>
expires = <value optimized out>
vals = {{s = 0x3000000010 <Address 0x3000000010 out of
bounds>, len = -759714864}, {s = 0x7fffd2b7ab10 "\200\001\066\001",
len = 0}, {s = 0xffffffffffffffa8 <Address 0xffffffffffffffa8 out of
bounds>, len = 20316528}, {
---Type <return> to continue, or q <return> to quit---
s = 0x2010 <Address 0x2010 out of bounds>, len =
20324736}, {s = 0x7f51de7ece40 "", len = 96}}
result = {s = 0x7fffd2b7aaf0 "\030", len = -565159604}
uri = {user = {s = 0x50ffd8 "", len = 0}, passwd = {s =
0x7fffd2b7acb8 "(Α\332Q\177", len = -759714664}, host = {s =
0x7f51d79fbd20 "DBG:permissions:%s: subnet table is empty\n", len =
-759714692}, port = {
s = 0x7fffd2b7ab04 "\377\177", len = 0}, params = {s =
0x0, len = -565017482}, headers = {s = 0x7fffd2b7a800
"0\251\267\322\377\177", len = 0}, port_no = 42997, proto = 53943,
type = 32767, transport = {s = 0x0,
len = -759714704}, ttl = {s = 0x2 <Address 0x2 out of
bounds>, len = -759715424}, user_param = {s = 0x1ffffffff <Address
0x1ffffffff out of bounds>, len = -759715850}, maddr = {
s = 0xffffffff00000000 <Address 0xffffffff00000000 out of
bounds>, len = -759715872}, method = {s = 0x7f51de528476
"L\213L$(\351\030\355\377\377Hc\355L\211\357\276\060", len =
-562130912}, lr = {
s = 0x7fff00000000 <Address 0x7fff00000000 out of bounds>,
len = -759715755}, r2 = {s = 0x7fff00000000 <Address 0x7fff00000000
out of bounds>, len = 16}, gr = {s = 0x2 <Address 0x2 out of bounds>,
len = -759715328},
transport_val = {s = 0x1d2b7ad3c <Address 0x1d2b7ad3c out of
bounds>, len = -759715754}, ttl_val = {s = 0x0, len = -759715776},
user_param_val = {s = 0x7fffd2b7a856 "58樷\322\377\177", len =
-562130912}, maddr_val = {
s = 0x7fffd2b7a9df "", len = 19093424}, method_val = {s =
0x7fffd2b7a800 "0\251\267\322\377\177", len = 16}, lr_val = {s =
0x7fffd2b7a9f0 "\020 ", len = -759715536}, r2_val = {
s = 0x7f5100000000 <Address 0x7f5100000000 out of bounds>,
len = -759715611}, gr_val = {s = 0x7f5100000000 <Address
0x7f5100000000 out of bounds>, len = 20316556}, u_name = {{s = 0x2
<Address 0x2 out of bounds>,
len = -759715184}, {s = 0x166666666 <Address 0x166666666
out of bounds>, len = -759715610}, {s = 0x0, len = -759715632}, {s =
0x7fffd2b7a8e6 "", len = -562130912}, {s = 0x7f51de5b6309 "T ", len =
20316556}},
u_val = {{s = 0x7f51de7e93e0 " \215~\336Q\177", len =
20316556}, {s = 0x7 <Address 0x7 out of bounds>, len = 8187}, {s =
0x7f51de527289 "HcD$@D\213\\$\bH\215D\005", len = -562115008}, {s =
0x0, len = 8192}, {
s = 0x7f5100000000 <Address 0x7f5100000000 out of
bounds>, len = 3}}, u_params_no = 2}
next_hop = {user = {s = 0x7f51d5331cdd "%s: nothing to
trace...\n", len = 0}, passwd = {s = 0x7fffd2b7aa20
"\220\\3\335Q\177", len = 0}, host = {s = 0x7f51de5b630c "[%d]", len =
-759715220}, port = {s = 0x0, len = 0},
params = {s = 0x0, len = 0}, headers = {s = 0x7fffd2b7a937
"", len = 5248458}, port_no = 0, proto = 0, type = ERROR_URI_T,
transport = {s = 0xa00000002 <Address 0xa00000002 out of bounds>, len
= -759715529}, ttl = {
s = 0x7f51de4ff326 "H\211E(\353\277\017\037@", len =
20316004}, user_param = {s = 0x7fffd2b7a938 "@\316~\336Q\177", len =
-627974649}, maddr = {s = 0x0, len = 5308380}, method = {
s = 0x7f51de4d12b8
"L\213\205p\371\377\377H\213\215\200\371\377\377L\213\215x\371\377\377I9\300\017\205\017\373\377\377IcԸ\377\377\377\177H)\320I9\300\017\207\373\372\377\377E)\364A\001\314A\200\071",
len = 0},
lr = {s = 0x50ffdc "", len = 5308380}, r2 = {s = 0xa00000000
<Address 0xa00000000 out of bounds>, len = 1758}, gr = {s = 0xd2b7ac40
<Address 0xd2b7ac40 out of bounds>, len = -759715104}, transport_val =
{
s = 0x7fffd2b7ac50 "\001", len = -759714936}, ttl_val = {s
= 0x7fffd2b7ab68 "x\254\267\322\377\177", len = 5308376},
user_param_val = {s = 0x7fffd2b7ab4c "", len = -759715372}, maddr_val
= {s = 0x0, len = 0},
method_val = {s = 0x7fff00000000 <Address 0x7fff00000000 out
of bounds>, len = -759716144}, lr_val = {s = 0x0, len = -759715144},
r2_val = {s = 0x7fffd2b7abb8 "", len = -759715008}, gr_val = {
s = 0x6d200000000 <Address 0x6d200000000 out of bounds>,
len = -564436212}, u_name = {{s = 0xffffffffffffffff <Address
0xffffffffffffffff out of bounds>, len = 0}, {s = 0x0, len = 0}, {
s = 0x7f5100000000 <Address 0x7f5100000000 out of
bounds>, len = -759715040}, {s = 0x0, len = -759714928}, {s =
0xde4ff326 <Address 0xde4ff326 out of bounds>, len = 0}}, u_val = {{
s = 0xd2b7ad20 <Address 0xd2b7ad20 out of bounds>, len =
34}, {s = 0x7fffd2b7ae30 "\200\263\267\322\377\177", len = 0}, {s =
0xde4d12b8 <Address 0xde4d12b8 out of bounds>, len = 0}, {s =
0x7f51d79fbd4a "",
len = 42}, {s = 0xad79fbc9f <Address 0xad79fbc9f out of
bounds>, len = 1651}}, u_params_no = 43704}
u = <value optimized out>
port = <value optimized out>
cmatch = <value optimized out>
aitem = <value optimized out>
adefault = <value optimized out>
spec = <value optimized out>
model = <value optimized out>
val = {rs = {s = 0x2010 <Address 0x2010 out of bounds>, len =
-565156589}, ri = -759715392, flags = 32767}
pve = <value optimized out>
name_s = {s = 0x0, len = -88}
start = {tv_sec = 1348751368, tv_usec = 690416}
end_time = <value optimized out>
__FUNCTION__ = "\000\000\000\000\000\000\000\000\000"
#44 0x0000000000000000 in ?? ()
No symbol table info available.
(gdb)
hope it helps ...
Samuel MULLER
Telecom & Media Consultant
co-owner
L33 NETWORKS
+33 663 128 505
sml at l33.fr
www.l33.fr
On Fri, Sep 28, 2012 at 12:52 PM, Bogdan-Andrei Iancu
<bogdan at opensips.org> wrote:
> Hi Samuel,
>
> If you have the core file, could you get a backtrace and post it ?
>
> Regards,
>
> Bogdan-Andrei Iancu
> OpenSIPS Founder and Developer
> http://www.opensips-solutions.com
>
>
>
> On 09/27/2012 03:43 PM, Samuel Muller wrote:
>>
>> Hello,
>>
>> I see something really strange in v.1.8.x that not happened in
>> v.1.7.x, concerning radius request.
>>
>> I'm using aaa_radius, acct and auth_aaa modules.
>> I've 2 radius requests where i need to retrieve AVPs : one for the
>> auth, antoher one to check the callee's stuff using "call-check"
>> custom request (radius_sent_auth().
>>
>> my sets are correctly defined, freeradius is sent back exactly what i
>> expect to, and the process looks really clean (PostgreSQL ok, ...).
>>
>> but it crashes randomly when the function tries to extract AVPs:
>>
>> 2012-09-27T08:14:24.231112+00:00 vpp-scp [1296]:
>> 31235822142010193058 at 192.168.1.55: - AUTH
>> 2012-09-27T08:14:24.231120+00:00 vpp-scp [1296]:
>> DBG:core:parse_headers: flags=ffffffffffffffff
>> 2012-09-27T08:14:24.231675+00:00 vpp-scp [1296]:
>> DBG:sl:run_sl_callbacks: callback id 0 entered
>> 2012-09-27T08:14:24.231692+00:00 vpp-scp [1296]:
>> DBG:siptrace:trace_sl_onreply_out: trace slonreply out
>> 2012-09-27T08:14:24.231703+00:00 vpp-scp [1296]:
>> DBG:siptrace:trace_sl_onreply_out: nothing to trace...
>> 2012-09-27T08:14:24.231714+00:00 vpp-scp [1296]: DBG:auth:check_nonce:
>> comparing [50640afe000000033e97d5256be5383c2ea043e416ed4559] and
>> [50640afe000000033e97d5256be5383c2ea043e416ed4559]
>> ...
>> 2012-09-27T08:14:24.247104+00:00 vpp-scp [1296]:
>> DBG:core:__search_avp_map: looking for [caller_username] avp - found
>> 43
>> 2012-09-27T08:14:24.247114+00:00 vpp-scp [1296]:
>> DBG:aaa_radius:extract_avp: AVP 'caller_username'='10907'/0 has been
>> added
>> 2012-09-27T08:14:24.248501+00:00 vpp-scp [1296]:
>> DBG:core:__search_avp_map: looking for [caller_stimeout] avp - found
>> 40
>> 2012-09-27T08:14:24.248513+00:00 vpp-scp [1296]:
>> DBG:aaa_radius:extract_avp: AVP 'caller_stimeout'='3600'/0 has been
>> added
>> 2012-09-27T08:14:24.248581+00:00 vpp-scp [1296]:
>> DBG:core:__search_avp_map: looking for [caller_stime] avp - found -1
>> 2012-09-27T08:14:32.802250+00:00 vpp-scp [1290]: DBG:core:handle_sigs:
>> status = 139
>> 2012-09-27T08:14:32.802279+00:00 vpp-scp [1290]:
>> INFO:core:handle_sigs: child process 1296 exited by a signal 11
>> 2012-09-27T08:14:32.802284+00:00 vpp-scp [1290]:
>> INFO:core:handle_sigs: core was generated
>> 2012-09-27T08:14:32.802288+00:00 vpp-scp [1290]:
>> INFO:core:handle_sigs: terminating due to SIGCHLD
>> 2012-09-27T08:14:32.802291+00:00 vpp-scp [1300]: INFO:core:sig_usr:
>> signal 15 received
>>
>>
>> I've core dumps, but nothing usefull ...
>>
>> this happens with all radius modules (acct, auth_aaa, aaa_radius), and
>> only since I use the v.1.8.0 and now 1.8.1 too. (from 1.7.2, no
>> problems)
>>
>> Any clues ?
>>
>>
>> Samuel MULLER
>> sml at l33.fr
>> www.l33.fr
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>
More information about the Users
mailing list