[sr-dev] crash at f_malloc.c

i noticed that my sip proxy running quite recent master had crashed. perhaps this has something to do with recent memory allocation changes? -- juha (gdb) where #0 fm_split_frag (size=104, frag=0x7fa1e3879fe8, qm=0x7fa1e187a000) at mem/f_malloc.c:285 #1 fm_malloc (qmp=0x7fa1e187a000, size=<optimized out>) at mem/f_malloc.c:497 #2 0x00000000005f94eb in fm_shm_malloc (qmp=0x7fa1e187a000, size=97) at mem/f_malloc.c:1059 #3 0x000000000055a67d in create_avp (flags=275, name=..., val=...) at usr_avp.c:175 #4 0x000000000055af4c in add_avp_list (list=0x9faa60 <def_list>, flags=<optimized out>, name=..., val=...) at usr_avp.c:232 #5 0x00007fa1dc898f3d in pv_set_avp (msg=0x7fa1e9ad0ef0, param=0x0, op=-128, val=0x7fff3dbcf7b0) at pv_core.c:1954 #6 0x00000000005444b1 in lval_pvar_assign (lv=<optimized out>, rv=<optimized out>, msg=<optimized out>, h=<optimized out>) at lvalue.c:351 #7 lval_assign (h=0x1, msg=0x7fa1e9ad0ef0, lv=0x7fa1e931fa70, rve=0x7fa1e93202e8) at lvalue.c:399 #8 0x0000000000459a53 in do_action (h=0x7fff3dbd17a0, a=0x7fa1e93209c8, msg=0x7fa1e9ad0ef0) at action.c:1429 #9 0x0000000000458d05 in run_actions (h=0x7fa1e387a068, a=0x68, msg=0xffffffffffffff80) at action.c:1548 #10 0x000000000045a7b6 in do_action (h=0x7fff3dbd17a0, a=0x7fa1e9320ac8, msg=0x7fa1e9ad0ef0) at action.c:1048 #11 0x0000000000458d05 in run_actions (h=0x7fa1e387a068, a=0x68, msg=0xffffffffffffff80) at action.c:1548 #12 0x000000000045a98d in do_action (h=0x7fff3dbd17a0, a=0x7fa1e99442b8, msg=0x7fa1e9ad0ef0) at action.c:677 #13 0x0000000000458d05 in run_actions (h=0x7fa1e387a068, a=0x68, msg=0xffffffffffffff80) at action.c:1548 #14 0x000000000045a7b6 in do_action (h=0x7fff3dbd17a0, a=0x7fa1e920d088, msg=0x7fa1e9ad0ef0) at action.c:1048 #15 0x0000000000458d05 in run_actions (h=0x7fa1e387a068, a=0x68, msg=0xffffffffffffff80) at action.c:1548 #16 0x000000000045a98d in do_action (h=0x7fff3dbd17a0, a=0x7fa1e99442b8, msg=0x7fa1e9ad0ef0) at action.c:677 #17 0x0000000000458d05 in run_actions (h=0x7fa1e387a068, a=0x68, msg=0xffffffffffffff80) at action.c:1548 #18 0x000000000045a7b6 in do_action (h=0x7fff3dbd17a0, a=0x7fa1e91d0b70, msg=0x7fa1e9ad0ef0) at action.c:1048 #19 0x0000000000458d05 in run_actions (h=0x7fa1e387a068, h@entry=0x7fff3dbd17a0, a=0x68, a@entry=0x7fa1e91bc958, msg=0xffffffffffffff80, msg@entry=0x7fa1e9ad0ef0) at action.c:1548 #20 0x0000000000465575 in run_top_route (a=0x7fa1e91bc958, msg=0x7fa1e9ad0ef0, c=<optimized out>) at action.c:1634 ---Type <return> to continue, or q <return> to quit--- #21 0x000000000054692e in receive_msg (buf=0x0, len=104, rcv_info=0x7fa1e1f09e10) at receive.c:195 #22 0x00000000005c28b5 in tcp_read_req (con=0x7fa1e1f09df8, bytes_read=0x7fff3dbd1ae0, read_flags=0x7fff3dbd1ae8) at tcp_read.c:1382 #23 0x00000000005c4d29 in handle_io (fm=0x0, events=104, idx=-1) at tcp_read.c:1624 #24 0x00000000005c994b in io_wait_loop_epoll (h=<optimized out>, t=<optimized out>, repeat=<optimized out>) at io_wait.h:1061 #25 tcp_receive_loop (unix_sock=-477650840) at tcp_read.c:1733 #26 0x00000000004e1f67 in tcp_init_children () at tcp_main.c:4787 #27 0x0000000000513bfb in main_loop () at main.c:1664 #28 0x000000000041c92b in main (argc=0, argv=0x6) at main.c:2566