[root@sip_proxy ~]# gdb ser /core.8946
GNU gdb Red Hat Linux (6.3.0.0-1.63rh)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db library "/lib/tls/libthread_db.so.1".

Core was generated by `/usr/local/sbin/ser'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/tls/libc.so.6...done.
Loaded symbols for /lib/tls/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/local/lib/ser/modules/mysql.so...done.
Loaded symbols for /usr/local/lib/ser/modules/mysql.so
Reading symbols from /usr/lib/mysql/libmysqlclient.so.14...done.
Loaded symbols for /usr/lib/mysql/libmysqlclient.so.14
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/libcrypt.so.1...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/tls/libm.so.6...done.
Loaded symbols for /lib/tls/libm.so.6
Reading symbols from /lib/libssl.so.4...done.
Loaded symbols for /lib/libssl.so.4
Reading symbols from /lib/libcrypto.so.4...done.
Loaded symbols for /lib/libcrypto.so.4
Reading symbols from /usr/lib/libgssapi_krb5.so.2...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /usr/lib/libkrb5.so.3...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /lib/libcom_err.so.2...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /usr/lib/libk5crypto.so.3...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /usr/local/lib/ser/modules/sl.so...done.
Loaded symbols for /usr/local/lib/ser/modules/sl.so
Reading symbols from /usr/local/lib/ser/modules/tm.so...done.
Loaded symbols for /usr/local/lib/ser/modules/tm.so
Reading symbols from /usr/local/lib/ser/modules/rr.so...done.
Loaded symbols for /usr/local/lib/ser/modules/rr.so
Reading symbols from /usr/local/lib/ser/modules/maxfwd.so...done.
Loaded symbols for /usr/local/lib/ser/modules/maxfwd.so
Reading symbols from /usr/local/lib/ser/modules/usrloc.so...done.
Loaded symbols for /usr/local/lib/ser/modules/usrloc.so
Reading symbols from /usr/local/lib/ser/modules/registrar.so...done.
Loaded symbols for /usr/local/lib/ser/modules/registrar.so
Reading symbols from /usr/local/lib/ser/modules/auth.so...done.
Loaded symbols for /usr/local/lib/ser/modules/auth.so
Reading symbols from /usr/local/lib/ser/modules/auth_db.so...done.
Loaded symbols for /usr/local/lib/ser/modules/auth_db.so
Reading symbols from /usr/local/lib/ser/modules/acc.so...done.
Loaded symbols for /usr/local/lib/ser/modules/acc.so
Reading symbols from /usr/local/lib/ser/modules/exec.so...done.
Loaded symbols for /usr/local/lib/ser/modules/exec.so
Reading symbols from /usr/local/lib/ser/modules/group.so...done.
Loaded symbols for /usr/local/lib/ser/modules/group.so
Reading symbols from /usr/local/lib/ser/modules/print.so...done.
Loaded symbols for /usr/local/lib/ser/modules/print.so
Reading symbols from /usr/local/lib/ser/modules/textops.so...done.
Loaded symbols for /usr/local/lib/ser/modules/textops.so
Reading symbols from /usr/local/lib/ser/modules/nathelper.so...done.
Loaded symbols for /usr/local/lib/ser/modules/nathelper.so
Reading symbols from /usr/local/lib/ser/modules/uri.so...done.
Loaded symbols for /usr/local/lib/ser/modules/uri.so
Reading symbols from /usr/local/lib/ser/modules/uri_db.so...done.
Loaded symbols for /usr/local/lib/ser/modules/uri_db.so
Reading symbols from /usr/local/lib/ser/modules/domain.so...done.
Loaded symbols for /usr/local/lib/ser/modules/domain.so
Reading symbols from /usr/local/lib/ser/modules/permissions.so...done.
Loaded symbols for /usr/local/lib/ser/modules/permissions.so
Reading symbols from /usr/local/lib/ser/modules/xlog.so...done.
Loaded symbols for /usr/local/lib/ser/modules/xlog.so
Reading symbols from /usr/local/lib/ser/modules/avpops.so...done.
Loaded symbols for /usr/local/lib/ser/modules/avpops.so
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /lib/libnss_dns.so.2...done.
Loaded symbols for /lib/libnss_dns.so.2
#0  0x00c754d3 in matching_3261 (p_msg=0x8161450, trans=0xbfebfc58, skip_method=4294967294) at t_lookup.c:222
222             if (memcmp(get_to(ack)->tag_value.s,p_cell->uas.local_totag.s,
(gdb) bt
#0  0x00c754d3 in matching_3261 (p_msg=0x8161450, trans=0xbfebfc58, skip_method=4294967294) at t_lookup.c:222
#1  0x00c75aff in t_lookup_request (p_msg=0x8161450, leave_new_locked=1) at t_lookup.c:421
#2  0x00c782a0 in t_newtran (p_msg=0x8161450) at t_lookup.c:1085
#3  0x00c7016a in t_relay_to (p_msg=0x8161450, proxy=0x0, proto=0, replicate=0) at t_funcs.c:224
#4  0x00c7b410 in w_t_relay (p_msg=0x8161450, _foo=0x0, _bar=0x0) at tm.c:889
#5  0x0804fc81 in do_action (a=0x81175d8, msg=0x8161450) at action.c:610
#6  0x0805099d in run_actions (a=0x81175d8, msg=0x8161450) at action.c:718
#7  0x08073f08 in eval_elem (e=0x8117600, msg=0x8161450) at route.c:605
#8  0x08074392 in eval_expr (e=0x8117600, msg=0x8161450) at route.c:654
#9  0x080743ce in eval_expr (e=0x8117620, msg=0x8161450) at route.c:670
#10 0x0804ec95 in do_action (a=0x8117988, msg=0x8161450) at action.c:586
#11 0x0805099d in run_actions (a=0x81173f0, msg=0x8161450) at action.c:718
#12 0x0804ffdf in do_action (a=0x8114d30, msg=0x8161450) at action.c:375
#13 0x0805099d in run_actions (a=0x8114d30, msg=0x8161450) at action.c:718
#14 0x0804ecd3 in do_action (a=0x8114d80, msg=0x8161450) at action.c:603
#15 0x0805099d in run_actions (a=0x8114d80, msg=0x8161450) at action.c:718
#16 0x0804ecd3 in do_action (a=0x8114da8, msg=0x8161450) at action.c:603
#17 0x0805099d in run_actions (a=0x8114da8, msg=0x8161450) at action.c:718
#18 0x0804ecd3 in do_action (a=0x8114dd0, msg=0x8161450) at action.c:603
#19 0x0805099d in run_actions (a=0x8114dd0, msg=0x8161450) at action.c:718
#20 0x0804ecd3 in do_action (a=0x8114df8, msg=0x8161450) at action.c:603
#21 0x0805099d in run_actions (a=0x8114df8, msg=0x8161450) at action.c:718
#22 0x0804ecd3 in do_action (a=0x8114e20, msg=0x8161450) at action.c:603
#23 0x0805099d in run_actions (a=0x810fc48, msg=0x8161450) at action.c:718
#24 0x0806d062 in receive_msg (
    buf=0x80d61e0 "ACK sip:called_nb@ourdomaine.fr:5060 SIP/2.0\r\nMax-Forwards: 16\r\nContent-Length: 0\r\nVia: SIP/2.0/UDP 10.0.140.55:5060;branch=z9hG4bK25172cd1a\r\nCall-ID: 9c938b669c56ba80e30d30f8f0c56120@10.0.140.55\r\nFro"..., len=588, rcv_info=0xbfec1060) at receive.c:165
#25 0x080843cc in udp_rcv_loop () at udp_server.c:472
#26 0x0805cdaf in main_loop () at main.c:1056
#27 0x0805e40b in main (argc=1, argv=0xbfec1224) at main.c:1592
(gdb) frame 0
#0  0x00c754d3 in matching_3261 (p_msg=0x8161450, trans=0xbfebfc58, skip_method=4294967294) at t_lookup.c:222
222             if (memcmp(get_to(ack)->tag_value.s,p_cell->uas.local_totag.s,
(gdb) print p_cell
$1 = (struct cell *) 0xb682afa8
(gdb) print p_msg
$2 = (struct sip_msg *) 0x8161450
(gdb) print p_msg->buf
$3 = 0x80d61e0 "ACK sip:called_nb@ourdomaine.fr:5060 SIP/2.0\r\nMax-Forwards: 16\r\nContent-Length: 0\r\nVia: SIP/2.0/UDP 10.0.140.55:5060;branch=z9hG4bK25172cd1a\r\nCall-ID: 9c938b669c56ba80e30d30f8f0c56120@10.0.140.55\r\nFro"...
(gdb) print p_cell->uas.local_totag.len
$4 = 12
(gdb) print p_cell->uas.local_totag.s
$5 = 0xae03d5fa <Address 0xae03d5fa out of bounds>
(gdb) print p_msg->to
$6 = (struct hdr_field *) 0x814d2e8
(gdb) print p_msg->to->parsed
$7 = (void *) 0x814ff80
(gdb) print *((struct to_body*)(p_msg->to->parsed))
$8 = {error = 1, body = {
    s = 0x80d62e5 "sip:called_nb@ourdomaine.fr:5060;tag=EDB8C004-590\r\nCSeq: 155799441 ACK\r\nProxy-Authorization:Digest response=\"3fde33962e5e5a59a81df692ae0b0892\",username=\"calling_nb\",realm=\"ourdomaine.fr\",nonce=\"4aab5be"..., len = 32}, uri = {
    s = 0x80d62e5 "sip:called_nb@ourdomaine.fr:5060;tag=EDB8C004-590\r\nCSeq: 155799441 ACK\r\nProxy-Authorization:Digest response=\"3fde33962e5e5a59a81df692ae0b0892\",username=\"calling_nb\",realm=\"ourdomaine.fr\",nonce=\"4aab5be"..., len = 32}, display = {s = 0x0, len = 0}, tag_value = {
    s = 0x80d630a "EDB8C004-590\r\nCSeq: 155799441 ACK\r\nProxy-Authorization:Digest response=\"3fde33962e5e5a59a81df692ae0b0892\",username=\"calling_nb\",realm=\"ourdomaine.fr\",nonce=\"4aab5be3ffdca620edce514dd81e02e22c52cae4\",ur"..., len = 12}, param_lst = 0x8150130, last_param = 0x8150130}
(gdb) print ((struct to_body*) (p_msg->to->parsed))->tag_value.len
$9 = 12
(gdb) print ((struct to_body*) (p_msg->to->parsed))->tag_value.s
$10 = 0x80d630a "EDB8C004-590\r\nCSeq: 155799441 ACK\r\nProxy-Authorization:Digest response=\"3fde33962e5e5a59a81df692ae0b0892\",username=\"calling_nb\",realm=\"ourdomaine.fr\",nonce=\"4aab5be3ffdca620edce514dd81e02e22c52cae4\",ur"...
(gdb)