sr-dev

sr-dev@lists.kamailio.org

17 participants
45426 discussions

[kamailio/kamailio] Segfault when using kamailio 5.8.4 as a presence proxy (Issue #4102)
by Joe Mordica 28 Jul '25

28 Jul '25

### Description We are now using kamailio on the edge as a presence proxy to scale presence. We have 3 internal kamailio instances handling the actual subscriptions and publishing. This works well, however, once per 24-36hours we experience a crash on the border proxy instance. We did not experience this when using the border proxy as a presence server (there was no proxying SUBSCRIBE). ### Troubleshooting #### Reproduction I believe this is happening when a customers network randomly experiences issues where it doesn't receive our replies to subscribes (and continues to send a subscribe). Logs are below. #### Debugging Data  Here's the output while replacing any sensitive info in the payload. ``` GNU gdb (Debian 13.1-3) 13.1 Copyright (C) 2023 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <https://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/sbin/kamailio... Reading symbols from /usr/lib/debug/.build-id/ce/c19d0ed1a928e4e25a84ae20d77e9c904a4892.debug... warning: Can't open file /dev/zero (deleted) during file-backed mapping note processing [New LWP 26] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `kamailio -DD -E -m 8000 -M 512 -f /etc/kamailio/kamailio.cfg -P /var/run/kamail'. Program terminated with signal SIGSEGV, Segmentation fault. #0 via_builder (len=len@entry=0x7ffed7e3ecb8, msg=msg@entry=0x7ff9529548b0, send_info=send_info@entry=0x7ff764d20bb0, branch=branch@entry=0x7ffed7e3ecc0, extra_params=0x0, hp=hp@entry=0x7ffed7e3ebb0) at core/msg_translator.c:2910 2910 core/msg_translator.c: No such file or directory. (gdb) bt full #0 via_builder (len=len@entry=0x7ffed7e3ecb8, msg=msg@entry=0x7ff9529548b0, send_info=send_info@entry=0x7ff764d20bb0, branch=branch@entry=0x7ffed7e3ecc0, extra_params=0x0, hp=hp@entry=0x7ffed7e3ebb0) at core/msg_translator.c:2910 via_len = <optimized out> extra_len = <optimized out> line_buf = <optimized out> max_len = <optimized out> via_prefix_len = <optimized out> address_str = <optimized out> port_str = 0x0 send_sock = 0x0 comp_len = <optimized out> comp_name_len = <optimized out> port = <optimized out> proto = <optimized out> ip = {af = 536870912, len = 0, u = {addrl = {534820896, 1586192}, addr32 = {534820896, 0, 1586192, 0}, addr16 = {47136, 8160, 0, 0, 13328, 24, 0, 0}, addr = " \270\340\037\000\000\000\000\0204\030\000\000\000\000"}} from = 0x0 local_addr = {s = {sa_family = 16, sa_data = "#\000\000\000\000\000\020\000\000\000\000\000\000"}, sin = {sin_family = 16, sin_port = 35, sin_addr = {s_addr = 0}, sin_zero = "\020\000\000\000\000\000\000"}, sin6 = {sin6_family = 16, sin6_port = 35, sin6_flowinfo = 0, sin6_addr = {__in6_u = { __u6_addr8 = "\020\000\000\000\000\000\000\000\003\000\000\000\000\000\000", __u6_addr16 = {16, 0, 0, 0, 3, 0, 0, 0}, __u6_addr32 = {16, 0, 3, 0}}}, sin6_scope_id = 3000082688}, sas = {ss_family = 16, __ss_padding = "#\000\000\000\000\000\020\000\000\000\000\000\000\000\003\000\000\000\000\000\000\000\000\241\321\262cg\357`@\000\000\000\000\000\000\000X\f-\177!V\000\000\020\016\217R\371\177\000\000\001\000\000\000!V\000\000*\000\000\000\000\000\000\000\001\000\000\000\376\177\000\000\004\360;\177!V\000\000\250,A\177!V\000\000\000\355\343\327\376\177\000\000\000\241\321\262cg\357`h\256\006R\371\177\000", __ss_align = 94701866020241}} con = 0x0 rxavp = 0x0 xname = {s = 0x0, len = -2141140176} __func__ = "via_builder" #1 0x000056217f155030 in create_via_hf (len=len@entry=0x7ffed7e3ecb8, msg=msg@entry=0x7ff9529548b0, send_info=send_info@entry=0x7ff764d20bb0, branch=branch@entry=0x7ffed7e3ecc0) at core/msg_translator.c:3232 via = <optimized out> extra_params = {s = 0x0, len = 0} hp = {host = 0x56217f4fb380 <default_global_address>, port = 0x56217f4fb370 <default_global_port>} sbuf = "\331\023\000\000\001", '\000' <repeats 18 times> --Type <RET> for more, q to quit, c to continue without paging--info locals slen = <optimized out> xparams = <optimized out> id_buf = <optimized out> id_len = 0 __func__ = "create_via_hf" __llevel = <optimized out> __kld = <optimized out> #2 0x000056217f1592f7 in build_req_buf_from_sip_req (msg=msg@entry=0x7ff9529548b0, returned_len=returned_len@entry=0x7ffed7e3eeac, send_info=send_info@entry=0x7ff764d20bb0, mode=mode@entry=128) at core/msg_translator.c:2096 len = 581 new_len = <optimized out> received_len = 0 rport_len = 0 uri_len = 0 via_len = 0 body_delta = 0 line_buf = 0x0 received_buf = 0x0 rport_buf = 0x0 new_buf = 0x0 buf = 0x56217f5866c0 <buf> "SUBSCRIBE sip:74@sip.domain.co SIP/2.0\r\nVia: SIP/2.0/UDP 12.171.207.82:25744;branch=z9hG4bK1805670803;rport\r\nFrom: \"Heather Myers\" <sip:1086448@sip.domain.co>;tag=1805518213\r\nTo: <sip:74@sip.domain.co>\r\nCa"... path_buf = {s = 0x0, len = 0} offset = 0 s_offset = 0 size = <optimized out> via_anchor = 0x7ff952951300 via_lump = <optimized out> via_rm = <optimized out> via_insert_param = 0x0 path_anchor = <optimized out> path_lump = <optimized out> branch = {s = 0x7ff952954ed8 "z9hG4bKc7ed.5819b4295fe83f981a2fc19b7f739d7e.0", len = 46} flags = 262273 --Type <RET> for more, q to quit, c to continue without paging--list udp_mtu = <optimized out> di = {send_sock = 0x0, to = {s = {sa_family = 18608, sa_data = "\225R\371\177\000\000\002\000\023\331\n4\001\r"}, sin = {sin_family = 18608, sin_port = 21141, sin_addr = { s_addr = 32761}, sin_zero = "\002\000\023\331\n4\001\r"}, sin6 = {sin6_family = 18608, sin6_port = 21141, sin6_flowinfo = 32761, sin6_addr = {__in6_u = { __u6_addr8 = "\002\000\023\331\n4\001\r\000\000\000\000\000\000\000", __u6_addr16 = {2, 55571, 13322, 3329, 0, 0, 0, 0}, __u6_addr32 = {3641901058, 218182666, 0, 0}}}, sin6_scope_id = 0}, sas = {ss_family = 18608, __ss_padding = "\225R\371\177\000\000\002\000\023\331\n4\001\r", '\000' <repeats 103 times>, __ss_align = 0}}, id = 0, send_flags = {f = 0, blst_imask = 0}, proto = 0 '\000', proto_pad0 = 0 '\000', proto_pad1 = 0} ret = <optimized out> __func__ = "build_req_buf_from_sip_req" error00 = <optimized out> #3 0x00007ff951fbe90d in prepare_new_uac (t=t@entry=0x7ff764d20880, i_req=i_req@entry=0x7ff9529548b0, branch=branch@entry=0, uri=<optimized out>, uri@entry=0x7ff9529548e8, path=<optimized out>, path@entry=0x7ff952954f60, next_hop=<optimized out>, fsocket=0x7ff9528f0e10, snd_flags=..., fproto=<optimized out>, flags=<optimized out>, instance=<optimized out>, ruid=<optimized out>, location_ua=<optimized out>) at ./src/modules/tm/t_fwd.c:482 shbuf = 0x0 add_rm_backup = <optimized out> body_lumps_backup = <optimized out> parsed_uri_bak = {user = { s = 0x56217f5866ce <buf+14> "74(a)sip.domain.co SIP/2.0\r\nVia: SIP/2.0/UDP 12.171.207.82:25744;branch=z9hG4bK1805670803;rport\r\nFrom: \"Heather Myers\" <sip:1086448@sip.domain.co>;tag=1805518213\r\nTo: <sip:74@sip.domain.co>\r\nCall-ID: 0_18056"..., len = 2}, passwd = {s = 0x0, len = 0}, host = { s = 0x56217f5866d1 <buf+17> "sip.domain.co SIP/2.0\r\nVia: SIP/2.0/UDP 12.171.207.82:25744;branch=z9hG4bK1805670803;rport\r\nFrom: \"Heather Myers\" <sip:1086448@sip.domain.co>;tag=1805518213\r\nTo: <sip:74@sip.domain.co>\r\nCall-ID: 0_18056078"..., len = 11}, port = {s = 0x0, len = 0}, params = {s = 0x0, len = 0}, sip_params = {s = 0x0, len = 0}, headers = { s = 0x0, len = 0}, port_no = 0, proto = 0, type = SIP_URI_T, flags = 0, transport = {s = 0x0, len = 0}, ttl = {s = 0x0, len = 0}, user_param = {s = 0x0, len = 0}, maddr = { s = 0x0, len = 0}, method = {s = 0x0, len = 0}, lr = {s = 0x0, len = 0}, r2 = {s = 0x0, len = 0}, gr = {s = 0x0, len = 0}, transport_val = {s = 0x0, len = 0}, ttl_val = { s = 0x0, len = 0}, user_param_val = {s = 0x0, len = 0}, maddr_val = {s = 0x0, len = 0}, method_val = {s = 0x0, len = 0}, lr_val = {s = 0x0, len = 0}, r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x0, len = 0}} ret = -1 len = 32761 parsed_uri_ok_bak = <optimized out> free_new_uri = 1 msg_uri_bak = {s = 0x0, len = 0} dst_uri_bak = {s = 0x7ff9529525f0 "sip:10.52.1.13:5081", len = 19} dst_uri_backed_up = 1 path_bak = {s = 0x0, len = 0} free_path = 1 instance_bak = {s = 0x0, len = 0} ``` #### Log Messages  ``` ERROR 2025-01-10T06:00:31.847348563Z [resource.labels.containerName: kamailio] 8(28) CRITICAL: {1 1 SUBSCRIBE 0_1907143137(a)192.168.100.28} tm [timer.h:188]: _set_fr_retr(): already added: 0x7ff763e62250 , tl=0x7ff763e62270!!! ERROR 2025-01-10T06:00:31.847388483Z [resource.labels.containerName: kamailio] 8(28) CRITICAL: {1 1 SUBSCRIBE 0_1907143137(a)192.168.100.28} tm [t_fwd.c:1613]: t_send_branch(): BUG: retransmission already started for: 0x7ff763e62250 ERROR 2025-01-10T06:00:31.847394809Z [resource.labels.containerName: kamailio] 8(28) ERROR: {1 1 SUBSCRIBE 0_1907143137(a)192.168.100.28} sl [sl_funcs.c:428]: sl_reply_error(): stateless error reply used: No error (0/SL) ERROR 2025-01-10T06:00:31.847400738Z [resource.labels.containerName: kamailio] 8(28) BUG: {1 1 SUBSCRIBE 0_1907143137(a)192.168.100.28} tm [t_lookup.c:2052]: t_unref(): REQ_ERR DELAYED should have been caught much earlier for 0x7ff763e61f70: 24 (hex 18) ERROR 2025-01-10T06:00:47.346744773Z [resource.labels.containerName: kamailio] 45(65) ERROR: <core> [core/tcp_main.c:4818]: tcpconn_main_timeout(): connect 64.63.142.90:12190 failed (timeout) ERROR 2025-01-10T06:00:58.274915089Z [resource.labels.containerName: kamailio] 45(65) CRITICAL: <core> [core/pass_fd.c:281]: receive_fd(): EOF on 20 ERROR 2025-01-10T06:01:02.715789076Z [resource.labels.containerName: kamailio] 0(1) ALERT: <core> [main.c:805]: handle_sigs(): child process 26 exited by a signal 11 ERROR 2025-01-10T06:01:02.715827333Z [resource.labels.containerName: kamailio] 0(1) ALERT: <core> [main.c:809]: handle_sigs(): core was generated ERROR 2025-01-10T06:01:02.718815287Z [resource.labels.containerName: kamailio] 45(65) CRITICAL: <core> [core/pass_fd.c:281]: receive_fd(): EOF on 25 ERROR 2025-01-10T06:01:02.720985493Z [resource.labels.containerName: kamailio] 45(65) CRITICAL: <core> [core/pass_fd.c:281]: receive_fd(): EOF on 23 ERROR 2025-01-10T06:01:02.725450552Z [resource.labels.containerName: kamailio] 45(65) CRITICAL: <core> [core/pass_fd.c:281]: receive_fd(): EOF on 30 ``` #### SIP Traffic  ``` (paste your sip traffic here) ``` ### Possible Solutions I can atleast say that when this segfault happens that these logs are always present right before the crash. However, I also see instances of these logs without a crash immediately following. On the proxy we are doing this is withindlg route to send subscribes to the presence route: ``` if KSR.is_SUBSCRIBE() and KSR.is_myself_ruri() then -- in-dialog subscribe requests ksr_route_presence(); KSR.x.exit(); end ``` Any then this is our ksr_route_presence(): ``` function ksr_route_presence() if not KSR.is_SUBSCRIBE() then return 1; end local fuser = KSR.kx.get_fuser(); if fuser=='' then KSR.xlog.xinfo('Subscription attempt without username from IP ' .. KSR.kx.get_srcip() .. ' - Rejecting\n'); KSR.sl.sl_send_reply(404, 'Not Found'); KSR.x.exit(); end KSR.pv.sets('$avp(s:tenant)', string.match(fuser, '-(.*)')); local setId = '6' .. KSR.kx.get_def('DEFAULT_DISPATCH_SET'); local modeId = '7'; if KSR.dispatcher.ds_select_dst(setId, modeId)<0 then KSR.sl.send_reply(404, 'No destination'); KSR.x.exit(); end KSR.corex.set_send_socket(KSR.kx.get_def('PRIVATE_LISTEN_IP') .. ':' .. KSR.kx.get_def('INTERNAL_PORT')); KSR.tm.t_on_failure('ksr_route_rtf_dispatch'); ksr_route_relay(); end ``` ### Additional Information * **Kamailio Version** - output of `kamailio -v` ``` version: kamailio 5.8.4 (x86_64/linux) flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, MEM_JOIN_FREE, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_SEND_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: unknown compiled with gcc 12.2.0 ``` * **Operating System**:  ``` PRETTY_NAME="Debian GNU/Linux 12 (bookworm)" NAME="Debian GNU/Linux" VERSION_ID="12" VERSION="12 (bookworm)" VERSION_CODENAME=bookworm ID=debian HOME_URL="https://www.debian.org/" SUPPORT_URL="https://www.debian.org/support" BUG_REPORT_URL="https://bugs.debian.org/" ``` ``` Linux gke-us-south1-external-sip-800ca69e-qyb3 5.15.0-1048-gke #53-Ubuntu SMP Tue Nov 28 00:39:01 UTC 2023 x86_64 GNU/Linux ``` -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/4102 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/4102(a)github.com>

5 42

git:master:2f3f38d5: core: rpc function to set integer modparam stored in shared memory
by Daniel-Constantin Mierla 28 Jul '25

28 Jul '25

Module: kamailio Branch: master Commit: 2f3f38d552667e392dadf45aa92f73b9a5647029 URL: https://github.com/kamailio/kamailio/commit/2f3f38d552667e392dadf45aa92f73b… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: 2025-07-28T15:06:38+02:00 core: rpc function to set integer modparam stored in shared memory - kamcli modparam.setn modname paramname ival --- Modified: src/core/core_cmd.c --- Diff: https://github.com/kamailio/kamailio/commit/2f3f38d552667e392dadf45aa92f73b… Patch: https://github.com/kamailio/kamailio/commit/2f3f38d552667e392dadf45aa92f73b… --- diff --git a/src/core/core_cmd.c b/src/core/core_cmd.c index 779d77bf847..f368850d420 100644 --- a/src/core/core_cmd.c +++ b/src/core/core_cmd.c @@ -1169,12 +1169,55 @@ static void rpc_modparam_getn(rpc_t *rpc, void *c) return; } +static const char *rpc_modparam_setn_doc[] = { + "Set the value of an integer parameter kept in shared memory.", 0}; + +static void rpc_modparam_setn(rpc_t *rpc, void *c) +{ + char *mname; + char *pname; + int oval; + int nval; + sr_module_t *mod = NULL; + void *pp = NULL; + modparam_t param_type = 0; + void *h = NULL; + + if(rpc->scan(c, "ssd", &mname, &pname, &nval) < 3) { + rpc->fault(c, 400, "Module, Parameter And Value Expected"); + return; + } + + mod = find_module_by_name(mname); + if(mod == NULL) { + rpc->fault(c, 404, "Module Not Found"); + return; + } + pp = find_param_export(mod, pname, PARAM_INT, &param_type); + if(pp == NULL) { + rpc->fault(c, 404, "Parameter Not Found"); + return; + } + if(!(param_type & PARAM_USE_SHM)) { + rpc->fault(c, 488, "Not Acceptable Here"); + return; + } + oval = *(*((int **)pp)); + *(*((int **)pp)) = nval; + + rpc->add(c, "{", &h); + rpc->struct_add(h, "sssdd", "module", mname, "param", pname, "shm", "yes", + "ovalue", oval, "value", nval); + return; +} + /* * RPC Methods exported by core for modparam operations */ /* clang-format off */ static rpc_export_t core_modparam_rpc_methods[] = { {"modparam.getn", rpc_modparam_getn, rpc_modparam_getn_doc, 0}, + {"modparam.setn", rpc_modparam_setn, rpc_modparam_setn_doc, 0}, {0, 0, 0, 0} };

1 0

git:master:92f1f955: ims_registrar_scscf: remove commented code
by Victor Seva 28 Jul '25

28 Jul '25

Module: kamailio Branch: master Commit: 92f1f9550c47874ead9dd287e30eaffa2d04d6ff URL: https://github.com/kamailio/kamailio/commit/92f1f9550c47874ead9dd287e30eaff… Author: Victor Seva <linuxmaniac(a)torreviejawireless.org> Committer: Victor Seva <linuxmaniac(a)torreviejawireless.org> Date: 2025-07-28T14:40:16+02:00 ims_registrar_scscf: remove commented code It's been commented since 2015 > commit 88a7b00cf964993151a76051dd0fded46c3bf61e > Author: jaybeepee jason.penton(a)gmail.cddom > Date: Mon Sep 14 09:04:03 2015 +0200 --- Modified: src/modules/ims_registrar_scscf/save.c --- Diff: https://github.com/kamailio/kamailio/commit/92f1f9550c47874ead9dd287e30eaff… Patch: https://github.com/kamailio/kamailio/commit/92f1f9550c47874ead9dd287e30eaff…

1 0

[kamailio/kamailio] rtpengine: timer ping nodes outside locks (PR #4305)
by Stefan Mititelu 28 Jul '25

28 Jul '25

#### Pre-Submission Checklist    - [X] Commit message has the format required by CONTRIBUTING guide - [X] Commits are split per component (core, individual modules, libs, utils, ...) - [X] Each component has a single commit (if not, squash them into one commit) - [X] No commits to README files for modules (changes must be done to docbook files in `doc/` subfolder, the README file is autogenerated) #### Type Of Change - [ ] Small bug fix (non-breaking change which fixes an issue) - [X] New feature (non-breaking change which adds new functionality) - [ ] Breaking change (fix or feature that would change existing functionality) #### Checklist:  - [ ] PR should be backported to stable branches - [X] Tested changes locally - [ ] Related to issue #XXXX (replace XXXX with an open issue number) #### Description  Move pinging of rtpengines outside locks, by making a pkg copy of the list. Update shm list afterwards, under locks. Basically tested by doing "kamcmd rtpengine.reload" while the timer was pinging the rtpengines. More testing will come. You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/4305 -- Commit Summary -- * rtpengine: timer ping nodes outside locks -- File Changes -- M src/modules/rtpengine/rtpengine.c (121) -- Patch Links -- https://github.com/kamailio/kamailio/pull/4305.patch https://github.com/kamailio/kamailio/pull/4305.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/4305 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/4305(a)github.com>

3 7

git:master:cdfe4961: ims_usrloc_pcscf: reformat exported structures
by Victor Seva 28 Jul '25

28 Jul '25

Module: kamailio Branch: master Commit: cdfe496115bf21cc1cfc43792e2108d9068153a7 URL: https://github.com/kamailio/kamailio/commit/cdfe496115bf21cc1cfc43792e2108d… Author: Victor Seva <linuxmaniac(a)torreviejawireless.org> Committer: Victor Seva <linuxmaniac(a)torreviejawireless.org> Date: 2025-07-28T11:58:48+02:00 ims_usrloc_pcscf: reformat exported structures --- Modified: src/modules/ims_usrloc_pcscf/ims_usrloc_pcscf_mod.c --- Diff: https://github.com/kamailio/kamailio/commit/cdfe496115bf21cc1cfc43792e2108d… Patch: https://github.com/kamailio/kamailio/commit/cdfe496115bf21cc1cfc43792e2108d… --- diff --git a/src/modules/ims_usrloc_pcscf/ims_usrloc_pcscf_mod.c b/src/modules/ims_usrloc_pcscf/ims_usrloc_pcscf_mod.c index 443b478e08e..15e2063277d 100644 --- a/src/modules/ims_usrloc_pcscf/ims_usrloc_pcscf_mod.c +++ b/src/modules/ims_usrloc_pcscf/ims_usrloc_pcscf_mod.c @@ -101,52 +101,54 @@ int match_contact_host_port = db1_con_t *ul_dbh = 0; db_func_t ul_dbf; +/* clang-format off */ /*! \brief * Exported functions */ static cmd_export_t cmds[] = { - {"ul_bind_ims_usrloc_pcscf", (cmd_function)bind_usrloc, 1, 0, 0, 0}, - {0, 0, 0, 0, 0, 0}}; + {"ul_bind_ims_usrloc_pcscf", (cmd_function)bind_usrloc, 1, 0, 0, 0}, + {0, 0, 0, 0, 0, 0} +}; /*! \brief * Exported parameters */ -static param_export_t params[] = {{"hash_size", PARAM_INT, &ul_hash_size}, - {"timer_interval", PARAM_INT, &timer_interval}, - {"usrloc_debug_file", PARAM_STR, &usrloc_debug_file}, - {"enable_debug_file", PARAM_INT, &usrloc_debug}, - - {"db_url", PARAM_STR, &db_url}, - {"timer_interval", PARAM_INT, &timer_interval}, - {"db_mode", PARAM_INT, &db_mode}, - - {"match_contact_host_port", PARAM_INT, &match_contact_host_port}, - {"audit_expired_pcontacts_timeout", PARAM_INT, - &audit_expired_pcontacts_timeout}, - {"audit_expired_pcontacts_interval", PARAM_INT, - &audit_expired_pcontacts_interval}, - {"expires_grace", PARAM_INT, &expires_grace}, - - {0, 0, 0}}; - -stat_export_t mod_stats[] = {{"registered_contacts", STAT_IS_FUNC, - (stat_var **)get_number_of_contacts}, - {"registered_impus", STAT_IS_FUNC, (stat_var **)get_number_of_impu}, - {"expired_contacts", STAT_IS_FUNC, (stat_var **)get_number_of_expired}, - {0, 0, 0}}; +static param_export_t params[] = { + {"hash_size", PARAM_INT, &ul_hash_size}, + {"timer_interval", PARAM_INT, &timer_interval}, + {"usrloc_debug_file", PARAM_STR, &usrloc_debug_file}, + {"enable_debug_file", PARAM_INT, &usrloc_debug}, + {"db_url", PARAM_STR, &db_url}, + {"timer_interval", PARAM_INT, &timer_interval}, + {"db_mode", PARAM_INT, &db_mode}, + {"match_contact_host_port", PARAM_INT, &match_contact_host_port}, + {"audit_expired_pcontacts_timeout", PARAM_INT, + &audit_expired_pcontacts_timeout}, + {"audit_expired_pcontacts_interval", PARAM_INT, + &audit_expired_pcontacts_interval}, + {"expires_grace", PARAM_INT, &expires_grace}, + {0, 0, 0} +}; -struct module_exports exports = { - "ims_usrloc_pcscf", DEFAULT_DLFLAGS, /* dlopen flags */ - cmds, /* exported functions */ - params, /* export parameters */ - 0, /* exported RPC functions */ - 0, /* exported pseudo-variables */ - 0, /* response·function */ - mod_init, /* module initialization function */ - child_init, /* per-child·init·function*/ - destroy /* destroy function */ +stat_export_t mod_stats[] = { + {"registered_contacts", STAT_IS_FUNC, (stat_var **)get_number_of_contacts}, + {"registered_impus", STAT_IS_FUNC, (stat_var **)get_number_of_impu}, + {"expired_contacts", STAT_IS_FUNC, (stat_var **)get_number_of_expired}, + {0, 0, 0} }; +struct module_exports exports = { + "ims_usrloc_pcscf", DEFAULT_DLFLAGS, /* dlopen flags */ + cmds, /* exported functions */ + params, /* export parameters */ + 0, /* exported RPC functions */ + 0, /* exported pseudo-variables */ + 0, /* response·function */ + mod_init, /* module initialization function */ + child_init, /* per-child·init·function*/ + destroy /* destroy function */ +}; +/* clang-format on */ /*! \brief * Module initialization function

1 0

[kamailio/kamailio] kamailio SEGV on 5.5.6 in debian12 (Issue #4313)
by descartin 28 Jul '25

28 Jul '25

descartin created an issue (kamailio/kamailio#4313)  ### Description Hello how are you, we are deploying a kamailio instance on 5.5.6 version ``` version: kamailio 5.5.6 (x86_64/linux) 0125f8-dirty flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 32MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: 0125f8 -dirty compiled on 12:01:31 May 21 2025 with gcc 12.2.0 ``` and after some minutes processing calls we are seeing some core like this ``` (gdb) bt #0 __strlen_evex () at ../sysdeps/x86_64/multiarch/strlen-evex.S:79 #1 0x00007f5753edc258 in __vfprintf_internal (s=s@entry=0x7ffc848f6aa0, format=format@entry=0x5570eb867da8 "%s: %.*s%s%s%sBUG: qm: fragm. %p (address %p) beginning overwritten (%lx)! Memory allocator was called from %s:%u. Fragment marked by %s:%lu. Exec from %s:%u.\n", ap=ap@entry=0x7ffc848f6cc8, mode_flags=mode_flags@entry=0) at ./stdio-common/vfprintf-process-arg.c:397 #2 0x00007f5753efc758 in __vsnprintf_internal ( string=0x7ffc848f6d40 "CRITICAL: <core> [core/mem/q_malloc.c:123]: qm_debug_check_frag(): BUG: qm: fragm. 0x7f569357aae0 (address 0x7f569357ab18) beginning overwritten (663d610a0d303030)! Memory allocator was called from co"..., maxlen=<optimized out>, maxlen@entry=960, format=format@entry=0x5570eb867da8 "%s: %.*s%s%s%sBUG: qm: fragm. %p (address %p) beginning overwritten (%lx)! Memory allocator was called from %s:%u. Fragment marked by %s:%lu. Exec from %s:%u.\n", args=args@entry=0x7ffc848f6cc8, mode_flags=mode_flags@entry=0) at ./libio/vsnprintf.c:114 #3 0x00007f5753f7ef2c in __vsyslog_internal (pri=138, fmt=<optimized out>, ap=ap@entry=0x7ffc848f7150, mode_flags=mode_flags@entry=0) at ./misc/syslog.c:218 #4 0x00007f5753f7f536 in __syslog (pri=<optimized out>, fmt=<optimized out>) at ./misc/syslog.c:91 #5 0x00005570eb6d8f25 in qm_debug_check_frag (qm=0x7f5692cd8000, f=0x7f569357aae0, file=0x5570eb861995 "core: core/usr_avp.c", line=627, efile=0x5570eb867c25 "core/mem/q_malloc.c", eline=511) at core/mem/q_malloc.c:123 #6 0x00005570eb6dd50f in qm_free (qmp=0x7f5692cd8000, p=0x7f569357ab18, file=0x5570eb861995 "core: core/usr_avp.c", func=0x5570eb863260 <__func__.8> "destroy_avp_list_unsafe", line=627, mname=0x5570eb861990 "core") at core/mem/q_malloc.c:511 #7 0x00005570eb6b32c3 in destroy_avp_list_unsafe (list=0x7f5693545238) at core/usr_avp.c:627 #8 0x00007f57524b3ba9 in free_cell_helper (dead_cell=0x7f5693545038, silent=1, fname=0x7f57525b7bdf "h_table.c", fline=466) at h_table.c:255 #9 0x00007f57524b49a2 in free_hash_table () at h_table.c:466 #10 0x00007f57524e8772 in tm_shutdown () at t_funcs.c:88 #11 0x00005570eb6081a0 in destroy_modules () at core/sr_module.c:842 #12 0x00005570eb3d8161 in cleanup (show_status=1) at main.c:575 #13 0x00005570eb3d9da8 in shutdown_children (sig=15, show_status=1) at main.c:718 #14 0x00005570eb3dd0bc in handle_sigs () at main.c:816 #15 0x00005570eb3ea5d1 in main_loop () at main.c:1903 #16 0x00005570eb3f3f9c in main (argc=15, argv=0x7ffc848f8168) at main.c:3061 ``` we are using debian12, and we see this log on the system when the crash ``` 2025-07-08T06:21:55.874670+00:00 mad-proxy-4 kernel: [4744966.979706] traps: kamailio[3282034] general protection fault ip:7f18c2a719d8 sp:7ffde5c84d68 error:0 in libc.so.6[7f18c2930000+155000] 2025-07-08T06:21:55.910639+00:00 mad-proxy-4 kernel: [4744967.018138] traps: kamailio[3282015] general protection fault ip:561437233f64 sp:7ffde5c859a0 error:0 in kamailio[561436f31000+425000] 2025-07-08T06:21:55.919781+00:00 mad-proxy-4 systemd[1]: theseus.service: Main process exited, code=killed, status=11/SEGV 2025-07-08T06:21:55.919880+00:00 mad-proxy-4 systemd[1]: theseus.service: Failed with result 'signal'. ``` The traffic which seems is causing the issue may be using sipt module, functions sipt_set_calling and sipt_destination the libc version we have in the system is ``` ii libc6:amd64 2.36-9+deb12u10 amd64 GNU C Library: Shared libraries ii libc6-dbg:amd64 2.36-9+deb12u10 amd64 GNU C Library: detached debugging symbols ii libc6-dev:amd64 2.36-9+deb12u10 amd64 GNU C Library: Development Libraries and Header Files ii libc6-i386 2.36-9+deb12u10 amd64 GNU C Library: 32-bit shared libraries for AMD64 ``` could be possible any issue with the module sipt related to the library we are using? I checked commits between 5.5.6 and 6.0 and I think the difference is related to kemi support and some format changes only thanks a lot and regards david escartin  ### Troubleshooting #### Reproduction  #### Debugging Data  ``` #0 __strlen_evex () at ../sysdeps/x86_64/multiarch/strlen-evex.S:79 79 ../sysdeps/x86_64/multiarch/strlen-evex.S: No existe el fichero o el directorio. (gdb) bt #0 __strlen_evex () at ../sysdeps/x86_64/multiarch/strlen-evex.S:79 #1 0x00007f5753edc258 in __vfprintf_internal (s=s@entry=0x7ffc848f6aa0, format=format@entry=0x5570eb867da8 "%s: %.*s%s%s%sBUG: qm: fragm. %p (address %p) beginning overwritten (%lx)! Memory allocator was called from %s:%u. Fragment marked by %s:%lu. Exec from %s:%u.\n", ap=ap@entry=0x7ffc848f6cc8, mode_flags=mode_flags@entry=0) at ./stdio-common/vfprintf-process-arg.c:397 #2 0x00007f5753efc758 in __vsnprintf_internal ( string=0x7ffc848f6d40 "CRITICAL: <core> [core/mem/q_malloc.c:123]: qm_debug_check_frag(): BUG: qm: fragm. 0x7f569357aae0 (address 0x7f569357ab18) beginning overwritten (663d610a0d303030)! Memory allocator was called from co"..., maxlen=<optimized out>, maxlen@entry=960, format=format@entry=0x5570eb867da8 "%s: %.*s%s%s%sBUG: qm: fragm. %p (address %p) beginning overwritten (%lx)! Memory allocator was called from %s:%u. Fragment marked by %s:%lu. Exec from %s:%u.\n", args=args@entry=0x7ffc848f6cc8, mode_flags=mode_flags@entry=0) at ./libio/vsnprintf.c:114 #3 0x00007f5753f7ef2c in __vsyslog_internal (pri=138, fmt=<optimized out>, ap=ap@entry=0x7ffc848f7150, mode_flags=mode_flags@entry=0) at ./misc/syslog.c:218 #4 0x00007f5753f7f536 in __syslog (pri=<optimized out>, fmt=<optimized out>) at ./misc/syslog.c:91 #5 0x00005570eb6d8f25 in qm_debug_check_frag (qm=0x7f5692cd8000, f=0x7f569357aae0, file=0x5570eb861995 "core: core/usr_avp.c", line=627, efile=0x5570eb867c25 "core/mem/q_malloc.c", eline=511) at core/mem/q_malloc.c:123 #6 0x00005570eb6dd50f in qm_free (qmp=0x7f5692cd8000, p=0x7f569357ab18, file=0x5570eb861995 "core: core/usr_avp.c", func=0x5570eb863260 <__func__.8> "destroy_avp_list_unsafe", line=627, mname=0x5570eb861990 "core") at core/mem/q_malloc.c:511 #7 0x00005570eb6b32c3 in destroy_avp_list_unsafe (list=0x7f5693545238) at core/usr_avp.c:627 #8 0x00007f57524b3ba9 in free_cell_helper (dead_cell=0x7f5693545038, silent=1, fname=0x7f57525b7bdf "h_table.c", fline=466) at h_table.c:255 #9 0x00007f57524b49a2 in free_hash_table () at h_table.c:466 #10 0x00007f57524e8772 in tm_shutdown () at t_funcs.c:88 #11 0x00005570eb6081a0 in destroy_modules () at core/sr_module.c:842 #12 0x00005570eb3d8161 in cleanup (show_status=1) at main.c:575 #13 0x00005570eb3d9da8 in shutdown_children (sig=15, show_status=1) at main.c:718 #14 0x00005570eb3dd0bc in handle_sigs () at main.c:816 #15 0x00005570eb3ea5d1 in main_loop () at main.c:1903 #16 0x00005570eb3f3f9c in main (argc=15, argv=0x7ffc848f8168) at main.c:3061 ``` #### Log Messages  ``` (paste your log messages here) ``` #### SIP Traffic  ``` (paste your sip traffic here) ``` ### Possible Solutions  ### Additional Information * **Kamailio Version** - output of `kamailio -v` ``` version: kamailio 5.5.6 (x86_64/linux) 0125f8-dirty flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 32MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: 0125f8 -dirty compiled on 12:01:31 May 21 2025 with gcc 12.2.0 ``` * **Operating System**:  ``` No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 12 (bookworm) Release: 12 Codename: bookworm Linux mad-proxy-4.bts.io 6.1.0-30-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.124-1 (2025-01-12) x86_64 GNU/Linux ``` -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/4313 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/4313(a)github.com>

3 2

git:master:4b2bef64: modules: readme files regenerated - dialog ... [skip ci]
by Kamailio Dev 28 Jul '25

28 Jul '25

Module: kamailio Branch: master Commit: 4b2bef648525ea4336bdd24aad57b91d6618d973 URL: https://github.com/kamailio/kamailio/commit/4b2bef648525ea4336bdd24aad57b91… Author: Kamailio Dev <kamailio.dev(a)kamailio.org> Committer: Kamailio Dev <kamailio.dev(a)kamailio.org> Date: 2025-07-28T10:01:09+02:00 modules: readme files regenerated - dialog ... [skip ci] --- Modified: src/modules/dialog/README --- Diff: https://github.com/kamailio/kamailio/commit/4b2bef648525ea4336bdd24aad57b91… Patch: https://github.com/kamailio/kamailio/commit/4b2bef648525ea4336bdd24aad57b91…

1 0

[kamailio/kamailio] rtpengine: don't ping permanent disabled nodes (PR #4295)
by Stefan Mititelu 28 Jul '25

28 Jul '25

Fix for original commit: 3202dc9d8e26620fe642e474e5cf8632ab6bc3a7   #### Pre-Submission Checklist    - [X] Commit message has the format required by CONTRIBUTING guide - [X] Commits are split per component (core, individual modules, libs, utils, ...) - [X] Each component has a single commit (if not, squash them into one commit) - [X] No commits to README files for modules (changes must be done to docbook files in `doc/` subfolder, the README file is autogenerated) #### Type Of Change - [X] Small bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds new functionality) - [ ] Breaking change (fix or feature that would change existing functionality) #### Checklist:  - [ ] PR should be backported to stable branches - [X] Tested changes locally - [ ] Related to issue #XXXX (replace XXXX with an open issue number) #### Description  Skip rtpengine node pinging in timer process only if node is *permanent* disabled. You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/4295 -- Commit Summary -- * rtpengine: don't ping manually disabled nodes -- File Changes -- M src/modules/rtpengine/rtpengine.c (5) -- Patch Links -- https://github.com/kamailio/kamailio/pull/4295.patch https://github.com/kamailio/kamailio/pull/4295.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/4295 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/4295(a)github.com>

3 4

git:master:d4801119: rtpengine: don't ping manually disabled nodes
by Henning Westerholt 28 Jul '25

28 Jul '25

Module: kamailio Branch: master Commit: d48011199c1c262271efa63430f6e4a982b6052c URL: https://github.com/kamailio/kamailio/commit/d48011199c1c262271efa63430f6e4a… Author: Stefan Mititelu <stefan.mititelu(a)net2phone.com> Committer: Henning Westerholt <hw(a)gilawa.com> Date: 2025-07-28T09:51:42+02:00 rtpengine: don't ping manually disabled nodes Fix for original commit: 3202dc9d8e26620fe642e474e5cf8632ab6bc3a7 --- Modified: src/modules/rtpengine/rtpengine.c --- Diff: https://github.com/kamailio/kamailio/commit/d48011199c1c262271efa63430f6e4a… Patch: https://github.com/kamailio/kamailio/commit/d48011199c1c262271efa63430f6e4a… --- diff --git a/src/modules/rtpengine/rtpengine.c b/src/modules/rtpengine/rtpengine.c index d3e38e0b84f..6fcb15d22e7 100644 --- a/src/modules/rtpengine/rtpengine.c +++ b/src/modules/rtpengine/rtpengine.c @@ -4148,7 +4148,10 @@ static void rtpengine_ping_check_timer(unsigned int ticks, void *param) for(crt_rtpp = rtpp_list->rn_first; crt_rtpp != NULL; crt_rtpp = crt_rtpp->rn_next) { - if(!crt_rtpp->rn_displayed || crt_rtpp->rn_disabled) { + if(!crt_rtpp->rn_displayed + || (crt_rtpp->rn_disabled + && crt_rtpp->rn_recheck_ticks + == RTPENGINE_MAX_RECHECK_TICKS)) { continue; }

1 0

[kamailio/kamailio] cmake glitches (Issue #4317)
by Дилян Палаузов 28 Jul '25

28 Jul '25

dilyanpalauzov created an issue (kamailio/kamailio#4317) In the 6.0 branch the FLAVOUR option allows in cmake-gui (ccmake) setting `kamailio` as only option. As it is no-op, it should not be displayed in cmake-gui. The option MODULE_GROUP_NAME is documented as „Group of modules to build (one or multiple space seperated group)“. In cmake-gui it allows with enter to toggle between several values: DEFAULT, STANDARD, COMMON, KSTANDARD, KMINI, KPCRE, KMYSQL, KPOSTGRES, …. Using ccmake it is not possible to to set multiple values. The help string should mention all possible values. It should be plural: groups. The options in ccmake-gui `XSLT_VALIDATE,` and `XSLT_VERBOSE,` have a comma in their names too much. The option `CMAKE_BUILD_TYPE` allows in Kamailio toggling between four possible values: Debug, Release, MinSizeRel and RelWithDebInfo. ClamAV adds one more value for cmake-gui: `None`. This toggling is not yet available in the build system of cmake (when building cmake using cmake) - https://gitlab.kitware.com/cmake/cmake/-/issues/26434 . Is it reasonable to have for CMAKE_BUILD_TYPE also `None` as permitted value? I do not know the answer, that is why I am raising this question. -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/4317 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/4317(a)github.com>

3 7

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

sr-dev