14 Sep
2023
14 Sep
'23
4:36 a.m.
### Description
See #3563
```
PID: 5617 (kamailio)
UID: 990 (kamailio)
GID: 988 (kamailio)
Signal: 11 (SEGV)
Timestamp: Thu 2023-09-14 01:27:07 UTC (4min 56s ago)
Command Line: /usr/sbin/kamailio -DD -P /run/kamailio/kamailio.pid -f
/etc/kamailio/kamailio.cfg -m 256 -M 8 --atexit=no
Executable: /usr/sbin/kamailio
Control Group: /system.slice/kamailio.service
Unit: kamailio.service
Slice: system.slice
Boot ID: 3fc4251c606f4c6183610573f44c46ba
Machine ID: 16e913e686424f13b970f9b1044cc6b3
Hostname: kamrtc01.voiceflex.com
Storage:
/var/lib/systemd/coredump/core.kamailio.990.3fc4251c606f4c6183610573f44c46ba.5617.1694654827000000.zst
(present)
Size on Disk: 3.0M
Message: Process 5617 (kamailio) of user 990 dumped core.
Stack trace of thread 5617:
#0 0x00007fc96739f707 EVP_PKEY_CTX_free (libcrypto.so.3 + 0x19f707)
#1 0x00007fc9673796f9 EVP_MD_CTX_reset (libcrypto.so.3 + 0x1796f9)
#2 0x00007fc967379722 EVP_MD_CTX_free (libcrypto.so.3 + 0x179722)
#3 0x00007fc967f7faaa ssl3_free.part.0 (libssl.so.3 + 0x26aaa)
#4 0x00007fc967f9312e SSL_free (libssl.so.3 + 0x3a12e)
#5 0x00007fc966b0e4a1 tls_h_tcpconn_clean_f (tls.so + 0x5f4a1)
#6 0x0000000000689b32 _tcpconn_free (kamailio + 0x289b32)
#7 0x000000000069e8b8 tcpconn_put_destroy (kamailio + 0x29e8b8)
#8 0x00000000006a3f65 handle_tcp_child (kamailio + 0x2a3f65)
#9 0x00000000006af79a handle_io (kamailio + 0x2af79a)
#10 0x000000000067639d io_wait_loop_epoll (kamailio + 0x27639d)
#11 0x00000000006b2cb1 tcp_main_loop (kamailio + 0x2b2cb1)
#12 0x000000000042fe53 main_loop (kamailio + 0x2fe53)
#13 0x0000000000439969 main (kamailio + 0x39969)
#14 0x00007fc96883feb0 __libc_start_call_main (libc.so.6 + 0x3feb0)
#15 0x00007fc96883ff60 __libc_start_main@@GLIBC_2.34 (libc.so.6 +
0x3ff60)
#16 0x000000000041dc65 _start (kamailio + 0x1dc65)
ELF object binary architecture: AMD x86-64
(gdb) bt full
#0 0x00007fc96739f707 in EVP_PKEY_CTX_free (ctx=0x100000001) at
crypto/evp/pmeth_lib.c:415
No locals.
#1 0x00007fc9673796f9 in evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fc957213dc8) at
crypto/evp/digest.c:86
No locals.
#2 evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fc957213dc8) at crypto/evp/digest.c:75
No locals.
#3 EVP_MD_CTX_reset (ctx=ctx@entry=0x7fc957213dc8) at crypto/evp/digest.c:101
No locals.
#4 0x00007fc967379722 in EVP_MD_CTX_free (ctx=0x7fc957213dc8) at crypto/evp/digest.c:140
No locals.
#5 EVP_MD_CTX_free (ctx=0x7fc957213dc8) at crypto/evp/digest.c:135
No locals.
#6 0x00007fc967f7faaa in ssl3_free_digest_list (s=0x7fc95725b558) at ssl/s3_enc.c:338
No locals.
#7 ssl3_free (s=0x7fc95725b558) at ssl/s3_lib.c:3364
No locals.
#8 0x00007fc967f9312e in SSL_free (s=0x7fc95725b558) at ssl/ssl_lib.c:1249
i = <optimized out>
i = <optimized out>
#9 SSL_free (s=0x7fc95725b558) at ssl/ssl_lib.c:1172
i = <optimized out>
#10 0x00007fc966b0e4a1 in tls_h_tcpconn_clean_f (c=0x7fc957187c90) at tls_server.c:703
extra = 0x7fc957257d30
__func__ = "tls_h_tcpconn_clean_f"
#11 0x0000000000689b32 in _tcpconn_free (c=0x7fc957187c90) at core/tcp_main.c:1583
__func__ = "_tcpconn_free"
#12 0x000000000069e8b8 in tcpconn_put_destroy (tcpconn=0x7fc957187c90) at
core/tcp_main.c:3336
__func__ = "tcpconn_put_destroy"
#13 0x00000000006a3f65 in handle_tcp_child (tcp_c=0x7fc968144180, fd_i=-1) at
core/tcp_main.c:3806
tcpconn = 0x7fc957187c90
response = {140502726376592, -2}
cmd = -2
bytes = 16
n = 1745431896
t = 465547104
crt_timeout = 59
con_lifetime = 960
__func__ = "handle_tcp_child"
#14 0x00000000006af79a in handle_io (fm=0x7fc968199ca0, ev=1, idx=-1) at
core/tcp_main.c:4623
ret = 0
__func__ = "handle_io"
#15 0x000000000067639d in io_wait_loop_epoll (h=0x957040 <io_h>, t=5, repeat=0) at
core/io_wait.h:1070
n = 1
r = 0
fm = 0x7fc968199ca0
revents = 1
__func__ = "io_wait_loop_epoll"
#16 0x00000000006b2cb1 in tcp_main_loop () at core/tcp_main.c:4908
si = 0x0
r = 4
__func__ = "tcp_main_loop"
#17 0x000000000042fe53 in main_loop () at main.c:1859
i = 4
pid = 0
si = 0x0
si_desc = "udp receiver child=3
sock=172.16.128.55:5090\000fw\316\020\236\066\273\374\177\000\000\000\000\000\000\000\000\000\000p\243\066\273\374\177\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000X_\nh\311\177\000\000\000\000\000\020\000\000\000\000:|\224h\311\177\000\000\060\000\000\000\060\000\000\000(\237\066\273\374\177\000"
nrprocs = 4
woneinit = 1
__func__ = "main_loop"
#18 0x0000000000439969 in main (argc=11, argv=0x7ffcbb36a488) at main.c:3086
cfg_stream = 0x222f380
c = -1
r = 0
tmp = 0x7ffcbb36bea3 ""
tmp_len = 0
port = 0
proto = 0
ahost = 0x0
aport = 0
options = 0x8322d8
":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:"
ret = -1
seed = 953728182
rfd = 4
debug_save = 0
debug_flag = 0
dont_fork_cnt = 2
n_lst = 0x200000064
p = 0x0
st = {st_dev = 24, st_ino = 891, st_nlink = 2, st_mode = 16832, st_uid = 990,
st_gid = 988, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0,
st_atim = {tv_sec = 1694643229, tv_nsec = 729000000}, st_mtim = {tv_sec = 1694650829,
tv_nsec = 995827964}, st_ctim = {tv_sec = 1694650829, tv_nsec = 995827964},
__glibc_reserved = {0, 0, 0}}
tbuf =
"\331\f\307h\311\177\000\000\070\313\303h\311\177\000\000\000\241\066\273\374\177\000\000\a\000\000\000\000\000\000\000ظ\303h\311\177\000\000\a\000\000\000#\000\000\000\060\032\307h\311\177\000\000\245\346\304h\311\177\000\000\000\000\000\000\000\000\000\000\220\371\304h\311\177\000\000\070\000\201h\311\177\000\000\000*\303h\311\177\000\000\000\000\000\000\000\000\000\000Р6\273\374\177\000\000\360\016\307h\311\177\000\000\330\312\303h\311\177\000\000\330\312\303h\311\177\000\000\000\000\000\000\000\000\000\000\330\070\303h\311\177\000\000Р6\273\374\177\000\000\220%\307h\311\177\000\000\000\260\303h\311\177\000\000\022\274\303h\311\177\000\000\066\261\304h\311\177\000\000\344#\200h\311\177\000\000\272H\306"...
option_index = 12
long_options = {{name = 0x834976 "help", has_arg = 0, flag = 0x0, val =
104}, {name = 0x82f4f4 "version", has_arg = 0, flag = 0x0, val = 118}, {name =
0x83497b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x834981
"subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x834987
"substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x834990
"substdefs", has_arg = 1, flag = 0x0, val = 1027}, {
name = 0x83499a "server-id", has_arg = 1, flag = 0x0, val = 1028},
{name = 0x8349a4 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name =
0x8349af "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x8349b8
"log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x8349c3
"debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x8349c9
"cfg-print", has_arg = 0, flag = 0x0, val = 1033}, {
name = 0x8349d3 "atexit", has_arg = 1, flag = 0x0, val = 1034},
{name = 0x8349da "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name =
0x0, has_arg = 0, flag = 0x0, val = 0}}
__func__ = "main"
```
#### Log Messages
```
Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: CRITICAL: <core>
[core/mem/q_malloc.c:519]: qm_free(): BUG: freeing already freed pointer (0x7fc957213e40),
called from tls: tls_init.c: ser_free(405), first free tls: tls_init.c: ser_free(405) -
ignoring
Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: tls [tls_server.c:1332]:
tls_h_read_f(): protocol level error
Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: tls [tls_util.h:50]:
tls_err_ret(): TLS accept:error:0300009F:digital envelope routines::message digest is null
(sni: webrtc.nebulaip.com)
Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: tls [tls_util.h:50]:
tls_err_ret(): TLS accept:error:0A0C0103:SSL routines::internal error (sni:
webrtc.nebulaip.com)
Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: tls [tls_server.c:1336]:
tls_h_read_f(): src addr: 87.80.226.25:60622
Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: tls [tls_server.c:1339]:
tls_h_read_f(): dst addr: 93.95.124.6:7443
Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: <core>
[core/tcp_read.c:1476]: tcp_read_req(): ERROR: tcp_read_req: error reading - c:
0x7fc957187c90 r: 0x7fc957187db8 (-1)
Sep 14 01:27:07 kamrtc01 kernel: kamailio[5617]: segfault at 100000079 ip 00007fc96739f707
sp 00007ffcbb3697d0 error 4 in libcrypto.so.3.0.7[7fc9672ad000+25b000]
Sep 14 01:27:07 kamrtc01 kernel: Code: ff ff e9 1e ff ff ff 66 66 2e 0f 1f 84 00 00 00 00
00 90 f3 0f 1e fa 48 85 ff 0f 84 c3 00 00 00 41 54 55 48 89 fd 48 83 ec 08 <48> 8b
47 78 48 85 c0 74 0b 48 8b 40 18 48 85 c0 74 02 ff d0 48 89
Sep 14 01:27:08 kamrtc01 systemd-coredump[7848]: Process 5617 (kamailio) of user 990
dumped core.#012#012Stack trace of thread 5617:#012#0 0x00007fc96739f707
EVP_PKEY_CTX_free (libcrypto.so.3 + 0x19f707)#012#1 0x00007fc9673796f9 EVP_MD_CTX_reset
(libcrypto.so.3 + 0x1796f9)#012#2 0x00007fc967379722 EVP_MD_CTX_free (libcrypto.so.3 +
0x179722)#012#3 0x00007fc967f7faaa ssl3_free.part.0 (libssl.so.3 + 0x26aaa)#012#4
0x00007fc967f9312e SSL_free (libssl.so.3 + 0x3a12e)#012#5 0x00007fc966b0e4a1
tls_h_tcpconn_clean_f (tls.so + 0x5f4a1)#012#6 0x0000000000689b32 _tcpconn_free (kamailio
+ 0x289b32)#012#7 0x000000000069e8b8 tcpconn_put_destroy (kamailio + 0x29e8b8)#012#8
0x00000000006a3f65 handle_tcp_child (kamailio + 0x2a3f65)#012#9 0x00000000006af79a
handle_io (kamailio + 0x2af79a)#012#10 0x000000000067639d io_wait_loop_epoll (kamailio +
0x27639d)#012#11 0x00000000006b2cb1 tcp_main_loop (kamailio + 0x2b2cb1)#012#12
0x000000000042fe53 main_loop (kamailio + 0x2fe53)#012#13 0x0000000000439969 main (kamailio
+ 0x39969)#012#14 0x00007fc96883feb0 __libc_start_call_main (libc.so.6 + 0x3feb0)#012#15
0x00007fc96883ff60 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3ff60)#012#16
0x000000000041dc65 _start (kamailio + 0x1dc65)#012ELF object binary architecture: AMD
x86-64
```
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/3567
You are receiving this because you are subscribed to this thread.
Message ID: <kamailio/kamailio/issues/3567(a)github.com>