Bugs item #2116555, was opened at 2008-09-17 20:39 Message generated for change (Comment added) made by mzabaluev You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=756076&aid=2116555&group_id=143636
Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: None Group: None >Status: Pending >Resolution: Works For Me Priority: 5 Private: No Submitted By: Mikhail Zabaluev (mzabaluev) Assigned to: Nobody/Anonymous (nobody) Summary: Memory corruption in test_nta Initial Comment: Sometimes test_nta crashes with the following backtrace in my Maemo scratchbox for x86: (gdb) bt #0 0xb7d71314 in free () from /lib/libc.so.6 #1 0x080d4574 in _su_home_deinit (home=0x8148f38) at su_alloc.c:1016 #2 0x080d39b5 in su_home_unref (home=0x8148f38) at su_alloc.c:679 #3 0x080c043d in msg_destroy (msg=0x8148f38) at msg.c:168 #4 0x08086d8c in outgoing_reclaim (orq=0x8149928) at nta.c:7953 #5 0x08086aa2 in outgoing_free (orq=0x8149928) at nta.c:7912 #6 0x08071b87 in nta_agent_destroy (agent=0x80feb30) at nta.c:573 #7 0x08053d8a in test_deinit (ag=0xbfc3380c) at test_nta.c:782 #8 0x0806fe42 in main (argc=1, argv=0xbfc339a4) at test_nta.c:3954 (gdb) frame 1 #1 0x080d4574 in _su_home_deinit (home=0x8148f38) at su_alloc.c:1016 1016 free(b->sub_stats); Retraced to just before freeing, the data under the pointer look like garbage. Valgrind dumps earlier, with a possible culprit: ==15537== Access not within mapped region at address 0xAAAAAC16 ==15537== at 0x8086BCF: outgoing_htable_remove (nta.c:6470) ==15537== by 0x8086B00: outgoing_cut_off (nta.c:7925) ==15537== by 0x8086A93: outgoing_free (nta.c:7911) ==15537== by 0x8086F0C: outgoing_destroy (nta.c:8003) ==15537== by 0x8083DCC: nta_outgoing_destroy (nta.c:6887) ==15537== by 0x8066DE2: invite_client_deinit (test_nta.c:2878) ==15537== by 0x80514F5: client_deinit (test_nta.c:443) ==15537== by 0x805164B: client_run_with (test_nta.c:479) ==15537== by 0x80518E4: client_run_until_acked (test_nta.c:521) ==15537== by 0x806B985: test_prack (test_nta.c:3434) ==15537== by 0x806FDBA: main (test_nta.c:3951) ---------------------------------------------------------------------- >Comment By: Mikhail Zabaluev (mzabaluev) Date: 2008-09-18 14:50 Message: The test doesn't fail in the latest trunk. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=756076&aid=2116555&group_id=143636 ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Sofia-sip-devel mailing list Sofia-sip-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/sofia-sip-devel
