THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

A new Flyspray task has been opened. Details are below. User who did this - Bayan Towfiq (btowfiq)
Attached to Project - sip-router
Summary - segfault in tm/timers?
Task Type - Bug Report
Category - tm
Status - Assigned
Assigned To - Andrei Pelinescu-Onciul
Operating System - All
Severity - High
Priority - Normal
Reported Version - 3.1
Due in Version - Undecided
Due Date - Undecided
Details - Running kamailio 3.1.4 (x86_64/linux)

Log messages and backtraces posted below


Nov 21 01:18:55 localhost /usr/local/sbin/kamailio[3389]: ERROR: tm 
[t_reply.c:1169]: ERROR: t_should_relay_response: status rewrite by UAS: 
stored: 408, received: 200
Nov 21 01:18:55 localhost /usr/local/sbin/kamailio[3393]: ERROR: tm 
[t_reply.c:1169]: ERROR: t_should_relay_response: status rewrite by UAS: 
stored: 408, received: 200
Nov 21 01:18:55 localhost /usr/local/sbin/kamailio[3398]: ERROR: tm 
[t_reply.c:1169]: ERROR: t_should_relay_response: status rewrite by UAS: 
stored: 408, received: 200
Nov 21 01:18:55 localhost /usr/local/sbin/kamailio[3388]: ERROR: tm 
[t_reply.c:1169]: ERROR: t_should_relay_response: status rewrite by UAS: 
stored: 408, received: 200
Nov 21 01:18:55 localhost /usr/local/sbin/kamailio[3399]: ERROR: tm 
[t_reply.c:1169]: ERROR: t_should_relay_response: status rewrite by UAS: 
stored: 408, received: 200
Nov 21 01:21:53 localhost /usr/local/sbin/kamailio[3402]: ERROR: <core> 
[timer.c:972]: ERROR: slow timer too slow: overflow (44155 - 43132 = 1023)
Nov 21 01:23:18 localhost /usr/local/sbin/kamailio[3402]: last message repeated 
3 times
Nov 21 01:33:45 localhost /usr/local/sbin/kamailio[3401]: WARNING: db_flatstore 
[km_flatstore.c:240]: error number: 110
Nov 21 01:33:47 localhost /usr/local/sbin/kamailio[3402]: WARNING: db_flatstore 
[km_flatstore.c:240]: error number: 110
Nov 21 01:34:06 localhost /usr/local/sbin/kamailio[3401]: ERROR: db_flatstore 
[km_tcp_connection.c:105]: unable to connect to host: Connection timed out
Nov 21 01:34:06 localhost /usr/local/sbin/kamailio[3401]: WARNING: db_flatstore 
[km_flatstore.c:242]: unable to connect to send over tcp
Nov 21 01:34:06 localhost kernel: [14918465.360194] kamailio[3401] general 
protection ip:7fab7d6307bf sp:7fff8ae30f20 error:0 in tm.so[7fab7d601000+7a000]
Nov 21 01:34:07 localhost /usr/local/sbin/kamailio[3422]: : <core> 
[pass_fd.c:293]: ERROR: receive_fd: EOF on 41
Nov 21 01:34:07 localhost /usr/local/sbin/kamailio[3367]: ALERT: <core> 
[main.c:741]: child process 3401 exited by a signal 11
Nov 21 01:34:07 localhost /usr/local/sbin/kamailio[3367]: ALERT: <core> 
[main.c:744]: core was generated
Nov 21 01:34:13 localhost /usr/local/sbin/kamailio[3367]: ERROR: ctl 
[ctl.c:379]: ERROR: ctl: could not delete unix socket /tmp/ser_ctl: Operation 
not permitted (1)
Nov 21 01:34:13 localhost init: kamailio main process ended, respawning





Core was generated by `/usr/local/sbin/kamailio -P 
/var/run/kamailio/kamailio.pid -m 256 -u kamailio -'.
Program terminated with signal 11, Segmentation fault.
#0  run_trans_callbacks_internal (cb_lst=<value optimized out>, type=128, 
trans=0x7fab66fceae0, params=0x7fff8ae30fc0) at t_hooks.c:286
286                     if ( (cbp->types)&type ) {
(gdb) bt
#0  run_trans_callbacks_internal (cb_lst=<value optimized out>, type=128, 
trans=0x7fab66fceae0, params=0x7fff8ae30fc0) at t_hooks.c:286
#1  0x00007fab7d630be3 in run_trans_callbacks (type=0, trans=<value optimized out>, 
req=<value optimized out>, rpl=0x4000, code=2016588416) at t_hooks.c:317
#2 0x00007fab7d65cee2 in relay_reply (t=0x7fab66fceae0, p_msg=<value optimized out>, branch=2106131784, msg_status=<value optimized out>, cancel_data=<value optimized out>, do_put_on_wait=<value optimized out>) at t_reply.c:1808
#3  0x00007fab7d632172 in fake_reply (t=0x7fab66fceae0, branch=1, code=<value 
optimized out>) at timer.c:316
#4  0x00007fab7d6324fb in final_response_handler (ticks=360, tl=0x7fab66fcedd8, 
p=<value optimized out>) at timer.c:490
#5  retr_buf_handler (ticks=360, tl=0x7fab66fcedd8, p=<value optimized out>) at 
timer.c:547
#6  0x0000000000514d51 in slow_timer_main () at timer.c:1149
#7  0x0000000000463601 in main_loop () at main.c:1602
#8  0x00000000004649c3 in main (argc=11, argv=0x7fff8ae314c8) at main.c:2398






Here is also a full backtrace with the phone number modified to zeros and the 
IP in the from field changed to xx.xx.xxx.xxx

(gdb) bt full
#0  run_trans_callbacks_internal (cb_lst=<value optimized out>, type=128, 
trans=0x7fab66fceae0, params=0x7fff8ae30fc0) at t_hooks.c:286
       cbp = 0x732d336c6576656c
       backup_from = 0x8ae150
       backup_to = 0x8ae158
       backup_dom_from = 0x8ae160
       backup_dom_to = 0x8ae168
       backup_uri_from = 0x8ae140
       backup_uri_to = 0x8ae148
#1  0x00007fab7d630be3 in run_trans_callbacks (type=0, trans=<value optimized out>, 
req=<value optimized out>, rpl=0x4000, code=2016588416) at t_hooks.c:317
       params = {req = 0x7fab672dca88, rpl = 0xffffffffffffffff, param = 
0x7fab67049e40, code = 408, flags = 0, branch = 0, t_rbuf = 0x0, dst = 0x0, 
send_buf = {s = 0x0, len = 0}}
#2 0x00007fab7d65cee2 in relay_reply (t=0x7fab66fceae0, p_msg=<value optimized out>, branch=2106131784, msg_status=<value optimized out>, cancel_data=<value optimized out>, do_put_on_wait=<value optimized out>) at t_reply.c:1808
       relay = 1
       save_clone = 0
       buf = <value optimized out>
       res_len = 371
       relayed_code = 408
       relayed_msg = 0xffffffffffffffff
       reply_bak = 0x0
       bm = {to_tag_val = {
           s = 0xa4d254 "b834aad01f286c898b2a5685a5823214-9083\r\nFrom: 
<sip:[email protected]>;tag=3530827147-842404\r\nCall-ID: 
[email protected]\r\nCSeq: 1 INVITE\r\nVia: SIP/2.0/UDP 
6"..., len = 37}}
       totag_retr = 0
       reply_status = RPS_COMPLETED
       uas_rb = 0x7fab66fceba0
       to_tag = <value optimized out>
       reason = {s = 0x5903db "Request Timeout", len = 15}
       onsend_params = {req = 0x7fab7fd24480, rpl = 0x7fff8ae31110, param = 
0x7fff8ae31128, code = -1964830432, flags = 1, branch = 0, t_rbuf = 
0x7fff8ae31138, dst = 0x40d959, send_buf = {
           s = 0x7fab7cfc9240 "AWAVAUATUSH\211\373H\203\354HL\213-H\275!", len 
= 1727496864}}
       __FUNCTION__ = "relay_reply"
#3  0x00007fab7d632172 in fake_reply (t=0x7fab66fceae0, branch=1, code=<value 
optimized out>) at timer.c:316
       cancel_data = {cancel_bitmap = 0, reason = {cause = 0, u = {text = {s = 
0x0, len = 362111}, e2e_cancel = 0x0, packed_hdrs = {s = 0x0, len = 362111}}}}
       reply_status = <value optimized out>
#4  0x00007fab7d6324fb in final_response_handler (ticks=360, tl=0x7fab66fcedd8, 
p=<value optimized out>) at timer.c:490
       prev_branch = 8333648
       now = 0
#5  retr_buf_handler (ticks=360, tl=0x7fab66fcedd8, p=<value optimized out>) at 
timer.c:547
       rbuf = 0x7fab66fcedb8
       retr_remainder = <value optimized out>
       retr_interval = <value optimized out>
       new_retr_interval = <value optimized out>
#6  0x0000000000514d51 in slow_timer_main () at timer.c:1149
       n = 0
       ret = <value optimized out>
       tl = 0x7fab66fcedd8
#7  0x0000000000463601 in main_loop () at main.c:1602
       i = 16
       pid = <value optimized out>
       si = 0x0
       si_desc = "udp receiver child=15 sock=70.167.153.134:5060\000\000Pޏ", '\000' <repeats 13 
times>, 
"P\215Y\000\000\000\000\000\016\b\000\000\001\000\000\000&\000\000\000\000\000\000\000\030\325\307f\253\177\000\000\030\325\307f\253\177\000\000\000\234\037\n\372\220X\363\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000"
#8  0x00000000004649c3 in main (argc=11, argv=0x7fff8ae314c8) at main.c:2398
---Type <return> to continue, or q <return> to quit---
       cfg_stream = 0x22
       c = <value optimized out>
       r = <value optimized out>
       tmp = 0x7fff8ae32e76 ""
       tmp_len = 0
       port = <value optimized out>
       proto = <value optimized out>
       ret = <value optimized out>
       seed = 3237932148
       rfd = <value optimized out>
       debug_save = 0
       debug_flag = <value optimized out>
       dont_fork_cnt = 0
       n_lst = 0x22
       p = <value optimized out>
(gdb)


More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=179

You are receiving this message because you have requested it from the Flyspray 
bugtracking system.  If you did not expect this message or don't want to 
receive mails in future, you can change your notification settings at the URL 
shown above.

_______________________________________________
sr-dev mailing list
[email protected]
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev

Reply via email to