[sr-dev] [kamailio/kamailio] Memory allocator was called from cdp: diameter_avp.c:365 (#1851)

15 Feb 2019

<!--
Kamailio Project uses GitHub Issues only for bugs in the code or feature requests. Please
use this template only for bug reports.

If you have questions about using Kamailio or related to its configuration file, ask on
sr-users mailing list:

  * http://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

If you have questions about developing extensions to Kamailio or its existing C code, ask
on sr-dev mailing list:

  * http://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev

Please try to fill this template as much as possible for any issue. It helps the
developers to troubleshoot the issue.

If there is no content to be filled in a section, the entire section can be removed.

You can delete the comments from the template sections when filling.

You can delete next line and everything above before submitting (it is a comment).
-->

### Description

<!--
Explain what you did, what you expected to happen, and what actually happened.
-->
Hello!
I have faced with Kamailio (5.1.7) crashes, probably it is connected to cdp module, please
check the source of issue.

### Troubleshooting

#### Reproduction

<!--
If the issue can be reproduced, describe how it can be done.
-->

#### Debugging Data

<!--
If you got a core dump, use gdb to extract troubleshooting data - full backtrace,
local variables and the list of the code at the issue location.

  gdb /path/to/kamailio /path/to/corefile
  bt full
  info locals
  list

If you are familiar with gdb, feel free to attach more of what you consider to
be relevant.
-->

```
GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-114.el7
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-redhat-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/sbin/kamailio...Reading symbols from
/usr/lib/debug/usr/sbin/kamailio.debug...done.
done.
[New LWP 5649]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `kamailio -f kamailio.cfg -E'.
Program terminated with signal 6, Aborted.
#0  0x00007fbde6015207 in raise () from /lib64/libc.so.6
Missing separate debuginfos, use: debuginfo-install glibc-2.17-260.el7_6.3.x86_64
keyutils-libs-1.5.8-3.el7.x86_64 krb5-libs-1.15.1-37.el7_6.x86_64
libcom_err-1.42.9-13.el7.x86_64 libgcc-4.8.5-36.el7.x86_64 libselinux-2.5-14.1.el7.x86_64
libstdc++-4.8.5-36.el7.x86_64 libxml2-2.9.1-6.el7_2.3.x86_64
mariadb-libs-5.5.60-1.el7_5.x86_64 openssl-libs-1.0.2k-16.el7.x86_64
pcre-8.32-17.el7.x86_64 xz-libs-5.2.2-1.el7.x86_64 zlib-1.2.7-18.el7.x86_64
(gdb) bt full
#0  0x00007fbde6015207 in raise () from /lib64/libc.so.6
No symbol table info available.
#1  0x00007fbde60168f8 in abort () from /lib64/libc.so.6
No symbol table info available.
#2  0x0000000000673469 in qm_debug_check_frag (qm=0x7fbdd94fd000, f=0x7fbdd97e0c98,
file=0x7fbdde6bb992 "cdp: diameter_avp.c", line=365, efile=0x7dc6b7
"core/mem/q_malloc.c", eline=504)
    at core/mem/q_malloc.c:151
        __FUNCTION__ = "qm_debug_check_frag"
#3  0x00000000006765ec in qm_free (qmp=0x7fbdd94fd000, p=0x7fbdd97e0cd0,
file=0x7fbdde6bb992 "cdp: diameter_avp.c", func=0x7fbdde6bd478
<__FUNCTION__.7016> "AAAFreeAVP", line=365, mname=0x7fbdde6bb7c0
"cdp")
    at core/mem/q_malloc.c:504
        qm = 0x7fbdd94fd000
        f = 0x7fbdd97e0c98
        size = 140730526467984
        next = 0x7a8db8
        prev = 0x7a8db8
        __FUNCTION__ = "qm_free"
#4  0x0000000000680148 in qm_shm_free (qmp=0x7fbdd94fd000, p=0x7fbdd97e0cd0,
file=0x7fbdde6bb992 "cdp: diameter_avp.c", func=0x7fbdde6bd478
<__FUNCTION__.7016> "AAAFreeAVP", line=365,
    mname=0x7fbdde6bb7c0 "cdp") at core/mem/q_malloc.c:1268
No locals.
#5  0x00007fbdde696e61 in AAAFreeAVP (avp=0x7ffe610a0860) at diameter_avp.c:365
        __FUNCTION__ = "AAAFreeAVP"
#6  0x00007fbdde65c88f in AAAFreeAVPList (avpList=0x7fbdd97e07d8) at diameter_msg.c:396
        avp_t = 0x7fbdd97e0cd0
        avp = 0x7fbdd97e0bb8
#7  0x00007fbdde65cc4c in AAAFreeMessage (msg=0x7ffe610a0910) at diameter_msg.c:416
        __FUNCTION__ = "AAAFreeMessage"
#8  0x00007fbdde63f05e in Process_CEA (p=0x7fbdd979e368, cea=0x7fbdd97e0788) at
peerstatemachine.c:804
        avp = 0x7fbdd97e10b0
#9  0x00007fbdde638223 in sm_process (p=0x7fbdd979e368, event=I_Rcv_CEA,
msg=0x7fbdd97e0788, peer_locked=0, sock=8) at peerstatemachine.c:166
        result_code = -563425872
        next_event = 32701
        msg_received = 0
        __FUNCTION__ = "sm_process"
#10 0x00007fbdde6874be in receive_message (msg=0x7fbdd97e0788, sp=0x7fbde59538b0) at
receiver.c:1147
        avp1 = 0xde6b2c50
        avp2 = 0x7fbdd97e0990
        __FUNCTION__ = "receive_message"
#11 0x00007fbdde67c5bb in do_receive (sp=0x7fbde59538b0) at receiver.c:598
        cnt = 152
        n = 152
        version = 1
        dst = 0x7fbdd97e1164 ""
        dmsg = 0x7fbdd97e0788
        __FUNCTION__ = "do_receive"
#12 0x00007fbdde68038e in receive_loop (original_peer=0x7fbdd979e368) at receiver.c:805
        rfds = {__fds_bits = {256, 0 <repeats 15 times>}}
        efds = {__fds_bits = {0 <repeats 16 times>}}
        tv = {tv_sec = 0, tv_usec = 999998}
        n = 1
        max = 21
        cnt = 1
        msg = 0x0
        sp = 0x7fbde59538b0
        sp2 = 0x7fbde59538b0
        p = 0x7fbdd979e368
        fd = 8
        fd_exchange_pipe_local = 21
        __FUNCTION__ = "receive_loop"
#13 0x00007fbdde679aec in receiver_process (p=0x7fbdd979e368) at receiver.c:464
---Type <return> to continue, or q <return> to quit---
        __FUNCTION__ = "receiver_process"
#14 0x00007fbdde62a7d5 in diameter_peer_start (blocking=0) at diameter_peer.c:289
        pid = 0
        k = -1
        p = 0x7fbdd979e368
        __FUNCTION__ = "diameter_peer_start"
#15 0x00007fbdde61c9a8 in cdp_child_init (rank=0) at cdp_mod.c:243
        __FUNCTION__ = "cdp_child_init"
#16 0x000000000053b6b1 in init_mod_child (m=0x7fbde5885150, rank=0) at
core/sr_module.c:943
        __FUNCTION__ = "init_mod_child"
#17 0x000000000053b353 in init_mod_child (m=0x7fbde5885dc8, rank=0) at
core/sr_module.c:939
        __FUNCTION__ = "init_mod_child"
#18 0x000000000053b353 in init_mod_child (m=0x7fbde5886190, rank=0) at
core/sr_module.c:939
        __FUNCTION__ = "init_mod_child"
#19 0x000000000053b353 in init_mod_child (m=0x7fbde58865d0, rank=0) at
core/sr_module.c:939
        __FUNCTION__ = "init_mod_child"
#20 0x000000000053ba85 in init_child (rank=0) at core/sr_module.c:970
No locals.
#21 0x0000000000424fe5 in main_loop () at main.c:1701
        i = 4
        pid = 5641
        si = 0x0
        si_desc = "udp receiver child=3
sock=10.10.10.10:5060\000\275\177\000\000\300\023\na\376\177\000\000\022\000\000\000\000\000\000\000\000\000\000\004\000\000\000\000\000\000\200\000\000\000\000\000\263\215z",
'\000' <repeats 13 times>,
"\220\026\na\376\177\000\000\207\"\003\346\275\177\000\000\260yw\000\000\000\000\000\060;\223\345\275\177\000"
        nrprocs = 4
        woneinit = 1
        __FUNCTION__ = "main_loop"
#22 0x000000000042b994 in main (argc=4, argv=0x7ffe610a1778) at main.c:2642
        cfg_stream = 0x103a020
        c = -1
        r = 0
        tmp = 0x0
        tmp_len = 0
        port = 0
        proto = 0
        options = 0x758c10
":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:"
        ret = -1
        seed = 1364069336
        rfd = 4
        debug_save = 0
        debug_flag = 0
        dont_fork_cnt = 0
        n_lst = 0x0
        p = 0x0
        st = {st_dev = 19, st_ino = 68292, st_nlink = 2, st_mode = 16832, st_uid = 995,
st_gid = 994, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0,
st_atim = {tv_sec = 1550156643,
            tv_nsec = 630000000}, st_mtim = {tv_sec = 1550158563, tv_nsec = 502470819},
st_ctim = {tv_sec = 1550158563, tv_nsec = 502470819}, __unused = {0, 0, 0}}
        __FUNCTION__ = "main"
(gdb)
```

#### Log Messages

<!--
Check the syslog file and if there are relevant log messages printed by Kamailio, add them
next, or attach to issue, or provide a link to download them (e.g., to a pastebin site).
-->

```
14(5649) INFO: cdp [receiver.c:455]: receiver_process(): receiver_process():
[diameter1.dev] Receiver process doing init on new process...
14(5649) INFO: cdp [receiver.c:188]: add_serviced_peer(): add_serviced_peer(): Adding
serviced_peer_t to receiver for peer [diameter1.dev]
14(5649) INFO: cdp [receiver.c:460]: receiver_process(): receiver_process():
[diameter1.dev] Receiver process starting up...
14(5649) DEBUG: cdp [receiver.c:106]: log_serviced_peers(): --- Receiver
cdp_receiver_peer=diameter1.dev Serviced Peers: ---
14(5649) DEBUG: cdp [receiver.c:112]: log_serviced_peers():  Peer: diameter1.dev  TCP
Socket: -1  Recv.State: 0
14(5649) DEBUG: cdp [receiver.c:114]: log_serviced_peers():
--------------------------------------------------------
14(5649) DEBUG: cdp [receiver.c:106]: log_serviced_peers(): --- Receiver
cdp_receiver_peer=diameter1.dev Serviced Peers: ---
14(5649) DEBUG: cdp [receiver.c:112]: log_serviced_peers():  Peer: diameter1.dev  TCP
Socket: -1  Recv.State: 0
14(5649) DEBUG: cdp [receiver.c:114]: log_serviced_peers():
--------------------------------------------------------
16(5651) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 16 rank 1001:
cdp [cdp_timer]
16(5651) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 16 rank 1001:
cdp_avp [cdp_timer]
16(5651) DEBUG: cdp_avp [cdp_avp_mod.c:211]: cdp_avp_child_init(): Initializing child in
module cdp_avp for rank [1001]
15(5650) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 15 rank 1000:
acc [cdp_acceptor]
15(5650) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 15 rank 1000:
uac [cdp_acceptor]
16(5651) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 16 rank 1001:
ims_charging [cdp_timer]
16(5651) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 16 rank 1001:
ims_dialog [cdp_timer]
15(5650) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 15 rank 1000:
htable [cdp_acceptor]
15(5650) DEBUG: htable [htable.c:236]: child_init(): rank is (1000)
15(5650) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 15 rank 1000:
carrierroute [cdp_acceptor]
15(5650) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 15 rank 1000:
dispatcher [cdp_acceptor]
16(5651) INFO: cdp [timer.c:205]: timer_process(): Timer process starting up...
15(5650) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 15 rank 1000:
cdp [cdp_acceptor]
15(5650) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 15 rank 1000:
cdp_avp [cdp_acceptor]
15(5650) DEBUG: cdp_avp [cdp_avp_mod.c:211]: cdp_avp_child_init(): Initializing child in
module cdp_avp for rank [1000]
15(5650) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 15 rank 1000:
ims_charging [cdp_acceptor]
15(5650) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 15 rank 1000:
ims_dialog [cdp_acceptor]
15(5650) INFO: cdp [acceptor.c:81]: acceptor_process(): Acceptor process starting up...
15(5650) DEBUG: cdp [tcp_accept.c:114]: create_socket(): create_sockets: create socket and
bind for IPv4...
15(5650) WARNING: cdp [tcp_accept.c:121]: create_socket(): create_socket(): Trying to
open/bind/listen on 10.10.10.10 port 38680
15(5650) WARNING: cdp [tcp_accept.c:146]: create_socket(): create_socket(): Successful
socket open/bind/listen on 10.10.10.10 port 38680
15(5650) INFO: cdp [acceptor.c:95]: acceptor_process(): Acceptor opened sockets. Entering
accept loop ...
[root@10-10-10-10 kamailio]# 17(5652) DEBUG: <core> [core/sr_module.c:942]:
init_mod_child(): idx 17 rank -4: kex [tcp main process]
17(5652) DEBUG: kex [kex_mod.c:157]: child_init(): rank is (-4)
17(5652) DEBUG: <core> [sruid.c:106]: sruid_init(): root for sruid is
[srid-5c658bbb-1614-] (0 / 19)
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4:
corex [tcp main process]
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4: tm
[tcp main process]
17(5652) DEBUG: tm [callid.c:137]: child_init_callid(): callid:
&#39;46ac84cd57961b27-5652(a)10.10.10.10&#39;
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4: tmx
[tcp main process]
17(5652) DEBUG: tmx [tmx_mod.c:261]: child_init(): rank is (-4)
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4: sl
[tcp main process]
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4:
usrloc [tcp main process]
17(5652) DEBUG: <core> [sruid.c:106]: sruid_init(): root for sruid is
[ulcx-5c658bbb-1614-] (0 / 19)
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4:
registrar [tcp main process]
17(5652) DEBUG: <core> [sruid.c:106]: sruid_init(): root for sruid is
[uloc-5c658bbb-1614-] (0 / 19)
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4: ctl
[tcp main process]
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4: acc
[tcp main process]
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4: uac
[tcp main process]
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4:
htable [tcp main process]
17(5652) DEBUG: htable [htable.c:236]: child_init(): rank is (-4)
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4:
carrierroute [tcp main process]
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4:
dispatcher [tcp main process]
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4: cdp
[tcp main process]
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4:
cdp_avp [tcp main process]
17(5652) DEBUG: cdp_avp [cdp_avp_mod.c:211]: cdp_avp_child_init(): Initializing child in
module cdp_avp for rank [-4]
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4:
ims_charging [tcp main process]
17(5652) DEBUG: <core> [core/sr_module.c:942]: init_mod_child(): idx 17 rank -4:
ims_dialog [tcp main process]
17(5652) DEBUG: <core> [core/local_timer.c:61]: init_local_timer(): timer_list
between 0xa6e0a8 and 0xab20a8
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 7, 4, 0x7fbdd97d7bec), fd_no=0
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 8, 4, 0x7fbdd97d7c78), fd_no=1
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 9, 4, 0x7fbdd97d7d04), fd_no=2
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 10, 4, 0x7fbdd97d7d90), fd_no=3
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 11, 4, 0x7fbdd97d7e1c), fd_no=4
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 12, 4, 0x7fbdd97d7ea8), fd_no=5
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 13, 4, 0x7fbdd97d7f34), fd_no=6
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 15, 4, 0x7fbdd97d7fc0), fd_no=7
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 4, 4, 0x7fbdd97d804c), fd_no=8
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 16, 4, 0x7fbdd97d80d8), fd_no=9
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 17, 4, 0x7fbdd97d8164), fd_no=10
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 18, 4, 0x7fbdd97d81f0), fd_no=11
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 23, 4, 0x7fbdd97d827c), fd_no=12
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 24, 4, 0x7fbdd97d8308), fd_no=13
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 25, 4, 0x7fbdd97d8394), fd_no=14
17(5652) DEBUG: <core> [core/io_wait.h:380]: io_watch_add(): DBG:
io_watch_add(0xa6dee0, 26, 4, 0x7fbdd97d8420), fd_no=15
 5(5640) DEBUG: ims_charging [ro_timer.c:252]: ro_timer_routine(): getting expired
ro-sessions 5(5640) DEBUG: ims_charging [ro_timer.c:211]: get_expired_ro_sessions(): my
ticks are [32829471]
13(5648) DEBUG: cdp [receiver.c:106]: log_serviced_peers(): --- Receiver cdp receiver peer
unknown Serviced Peers: ---
13(5648) DEBUG: cdp [receiver.c:114]: log_serviced_peers():
--------------------------------------------------------
16(5651) DEBUG: cdp [peermanager.c:263]: peer_timer(): peer_timer(): taking care of
peers...
16(5651) DEBUG: cdp [peermanager.c:280]: peer_timer(): peer_timer(): Peer diameter1.dev
State 0
16(5651) DEBUG: cdp [peerstatemachine.c:90]: sm_process(): sm_process(): Peer
diameter1.dev State Closed Event Start
16(5651) INFO: cdp [peerstatemachine.c:525]: I_Snd_Conn_Req(): I_Snd_Conn_Req(): Peer
diameter1.dev
14(5649) DEBUG: cdp [receiver.c:106]: log_serviced_peers(): --- Receiver
cdp_receiver_peer=diameter1.dev Serviced Peers: ---
14(5649) DEBUG: cdp [receiver.c:112]: log_serviced_peers():  Peer: diameter1.dev  TCP
Socket: -1  Recv.State: 0
14(5649) DEBUG: cdp [receiver.c:114]: log_serviced_peers():
--------------------------------------------------------
16(5651) INFO: cdp [receiver.c:875]: peer_connect(): peer_connect(): Trying to connect to
10.10.10.20 port 3868
16(5651) INFO: cdp [receiver.c:954]: peer_connect(): peer_connect(): Peer
diameter1.dev:3868 connected
14(5649) DEBUG: cdp [receiver.c:702]: receive_loop(): select_recv(): There is something on
the fd exchange pipe
14(5649) DEBUG: cdp [receiver.c:711]: receive_loop(): select_recv(): fd exchange pipe says
fd [8] for peer 0x7fbdd979e368:[diameter1.dev]
14(5649) DEBUG: cdp [peerstatemachine.c:90]: sm_process(): sm_process(): Peer
diameter1.dev State Wait_Conn_Ack Event I_Rcv_Conn_Ack
14(5649) DEBUG: cdp [diameter_msg.c:184]: AAANewMessage(): AAANewMessage: param session
received null and it's a request!!
14(5649) ERROR: cdp [peerstatemachine.c:634]: I_Snd_CER(): I_Snd_CER(): Error on finding
local host address > Socket operation on non-socket
14(5649) DEBUG: cdp [diameter_msg.c:81]: AAABuildMsgBuffer(): AAABuildMsgBuffer():
len=184
14(5649) DEBUG: cdp [receiver.c:1013]: peer_send_msg(): peer_send_msg(): Pipe push
[0x7fbdd97e0788]
14(5649) DEBUG: cdp [receiver.c:106]: log_serviced_peers(): --- Receiver
cdp_receiver_peer=diameter1.dev Serviced Peers: ---
14(5649) DEBUG: cdp [receiver.c:112]: log_serviced_peers():  Peer: diameter1.dev  TCP
Socket: 8  Recv.State: 0
14(5649) DEBUG: cdp [receiver.c:114]: log_serviced_peers():
--------------------------------------------------------
14(5649) DEBUG: cdp [receiver.c:756]: receive_loop(): select_recv(): There is something on
the send pipe
14(5649) DEBUG: cdp [receiver.c:769]: receive_loop(): select_recv(): Send pipe says
[0x7fbdd97e0788] 8
14(5649) DEBUG: cdp [diameter_msg.c:410]: AAAFreeMessage(): AAAFreeMessage: Freeing
message (0x7fbdd97e0788) 257
14(5649) DEBUG: cdp [receiver.c:106]: log_serviced_peers(): --- Receiver
cdp_receiver_peer=diameter1.dev Serviced Peers: ---
14(5649) DEBUG: cdp [receiver.c:112]: log_serviced_peers():  Peer: diameter1.dev  TCP
Socket: 8  Recv.State: 0
14(5649) DEBUG: cdp [receiver.c:114]: log_serviced_peers():
--------------------------------------------------------
16(5651) DEBUG: cdp [peermanager.c:143]: log_peer_list(): --- Peer List: ---
16(5651) DEBUG: cdp [peermanager.c:145]: log_peer_list(): State of peer: Wait_I_CEA FQDN:
diameter1.dev Port: 3868 Is dynamic
16(5651) DEBUG: cdp [peermanager.c:149]: log_peer_list(): ------------------
16(5651) DEBUG: cdp [session.c:396]: cdp_sessions_log(): ------- CDP Sessions
----------------
16(5651) DEBUG: cdp [session.c:431]: cdp_sessions_log():
-------------------------------------
14(5649) DEBUG: cdp [receiver.c:106]: log_serviced_peers(): --- Receiver
cdp_receiver_peer=diameter1.dev Serviced Peers: ---
14(5649) DEBUG: cdp [receiver.c:112]: log_serviced_peers():  Peer: diameter1.dev  TCP
Socket: 8  Recv.State: 1
14(5649) DEBUG: cdp [receiver.c:114]: log_serviced_peers():
--------------------------------------------------------
14(5649) DEBUG: cdp [receiver.c:579]: do_receive(): receive_loop(): [diameter1.dev] Recv
Version 1 Length 172
14(5649) DEBUG: cdp [receiver.c:106]: log_serviced_peers(): --- Receiver
cdp_receiver_peer=diameter1.dev Serviced Peers: ---
14(5649) DEBUG: cdp [receiver.c:112]: log_serviced_peers():  Peer: diameter1.dev  TCP
Socket: 8  Recv.State: 2
14(5649) DEBUG: cdp [receiver.c:114]: log_serviced_peers():
--------------------------------------------------------
14(5649) DEBUG: cdp [receiver.c:1107]: receive_message(): receive_message():
[diameter1.dev] Recv msg 257
14(5649) DEBUG: cdp [peerstatemachine.c:90]: sm_process(): sm_process(): Peer
diameter1.dev State Wait_I_CEA Event I_Rcv_CEA
14(5649) DEBUG: cdp [peerstatemachine.c:698]: count_Supported_Vendor_Id_AVPS(): Found 1
Supported_Vendor AVPS14(5649) DEBUG: cdp [peerstatemachine.c:681]: add_peer_application():
Application 0 of maximum 1
14(5649) DEBUG: cdp [peerstatemachine.c:750]: save_peer_applications(): Found Supported
Vendor for Application 0: 10415
14(5649) DEBUG: cdp [peerstatemachine.c:681]: add_peer_application(): Application 1 of
maximum 1
14(5649) DEBUG: cdp [diameter_msg.c:410]: AAAFreeMessage(): AAAFreeMessage: Freeing
message (0x7fbdd97e0788) 257
14(5649) CRITICAL: <core> [core/mem/q_malloc.c:149]: qm_debug_check_frag(): BUG: qm:
prev. fragm. tail overwritten(28af, abcdefed)[0x7fbdd97e0c98:0x7fbdd97e0cd0]! Memory
allocator was called from cdp: diameter_avp.c:365. Fragment marked by cdp:
diameter_avp.c:142. Exec from core/mem/q_malloc.c:504.
 5(5640) DEBUG: ims_charging [ro_timer.c:252]: ro_timer_routine(): getting expired
ro-sessions 5(5640) DEBUG: ims_charging [ro_timer.c:211]: get_expired_ro_sessions(): my
ticks are [32829472]
13(5648) DEBUG: cdp [receiver.c:106]: log_serviced_peers(): --- Receiver cdp receiver peer
unknown Serviced Peers: ---
13(5648) DEBUG: cdp [receiver.c:114]: log_serviced_peers():
--------------------------------------------------------
15(5650) DEBUG: cdp [tcp_accept.c:221]: accept_loop(): accept_loop(): No connection
attempts
 5(5640) DEBUG: ims_charging [ro_timer.c:252]: ro_timer_routine(): getting expired
ro-sessions 5(5640) DEBUG: ims_charging [ro_timer.c:211]: get_expired_ro_sessions(): my
ticks are [32829473]
13(5648) DEBUG: cdp [receiver.c:106]: log_serviced_peers(): --- Receiver cdp receiver peer
unknown Serviced Peers: ---
13(5648) DEBUG: cdp [receiver.c:114]: log_serviced_peers():
--------------------------------------------------------
17(5652) CRITICAL: <core> [core/pass_fd.c:277]: receive_fd(): EOF on 24
17(5652) DEBUG: <core> [core/tcp_main.c:3513]: handle_ser_child(): dead child 14,
pid 5649 (shutting down?)
17(5652) DEBUG: <core> [core/io_wait.h:602]: io_watch_del(): DBG: io_watch_del
(0xa6dee0, 24, -1, 0x0) fd_no=16 called
 0(5635) ALERT: <core> [main.c:739]: handle_sigs(): child process 5649 exited by a
signal 6
 0(5635) ALERT: <core> [main.c:742]: handle_sigs(): core was generated
 0(5635) INFO: <core> [main.c:764]: handle_sigs(): terminating due to SIGCHLD
 0(5635) DEBUG: <core> [main.c:766]: handle_sigs(): terminating due to SIGCHLD
16(5651) INFO: <core> [main.c:819]: sig_usr(): signal 15 received

```

#### SIP Traffic

<!--
If the issue is exposed by processing specific SIP messages, grab them with ngrep or save
in a pcap file, then add them next, or attach to issue, or provide a link to download them
(e.g., to a pastebin site).
-->

```
It happens on startup
```

### Possible Solutions

<!--
If you found a solution or workaround for the issue, describe it. Ideally, provide a pull
request with a fix.
-->

### Additional Information

  * **Kamailio Version** - output of `kamailio -v`

```

version: kamailio 5.1.7 (x86_64/linux) 567df3
flags: STATS: Off, USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE,
USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC,
DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER,
USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144 MAX_URI_SIZE 1024, BUF_SIZE 65535,
DEFAULT PKG_SIZE 8MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: 567df3
compiled on 02:06:09 Feb  2 2019 with gcc 4.8.5
```

* **Operating System**:

<!--
Details about the operating system, the type: Linux (e.g.,: Debian 8.4, Ubuntu 16.04,
CentOS 7.1, ...), MacOS, xBSD, Solaris, ...;
Kernel details (output of `uname -a`)
-->

```
uname -a
Linux 10-60-28-127.ams.kwebbl.dev 3.10.0-957.5.1.el7.x86_64 #1 SMP Fri Feb 1 14:54:57 UTC
2019 x86_64 x86_64 x86_64 GNU/Linux

CentOS Linux release 7.6.1810 (Core)

```

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/1851

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

[sr-dev] [kamailio/kamailio] Memory allocator was called from cdp: diameter_avp.c:365 (#1851)