From ynasida@gmail.com Mon Apr  3 16:31:36 2023
From: Yuriy Nasida <ynasida@gmail.com>
To: sr-users@lists.kamailio.org
Subject: [SR-Users] segfault during Identity verification (stirshaken)
Date: Mon, 03 Apr 2023 19:31:02 +0300
Message-ID:
 <CADihe3JLt-bh29dGUO9CRHqs1DUvYjhXk7wHAGDM81MZ0qTeUw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1010374063=="

--===============1010374063==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

Hello,

It's kamailio 5.6.4.

I can say that there is no segfault in case Identity is OK but bad attempts
sometimes are the reason for segfault. Not sure I can duplicate but it
happens several times per day.

Please look at logs.

in messages:
Apr  3 09:40:02 kam1 kernel: [6381565.762987] kamailio[9141]: segfault at
746c75616665 ip 00007f20c4cab6df sp 00007ffe7ec51470 error 4 in
libcrypto.so.1.1[7f20c4c3b000+19e000]

kamailio.log:
Apr  3 09:40:02 kam1 kamailio[9141]: NOTICE: <script>: it is INVITE with
Identity. Lets check Identity
Apr  3 09:40:02 kam1 kamailio[9141]: CRITICAL: <core>
[core/mem/q_malloc.c:501]: qm_free(): BUG: bad pointer 0x645f6d6574737973
(out of memory block!) called from tls: tls_init.c: ser_free(323) - ignoring
Apr  3 09:40:02 kam1 kamailio[9182]: CRITICAL: <core> [core/pass_fd.c:277]:
receive_fd(): EOF on 53
Apr  3 09:40:02 kam1 kamailio[9100]: ALERT: <core> [main.c:774]:
handle_sigs(): child process 9141 exited by a signal 11
Apr  3 09:40:02 kam1 kamailio[9100]: ALERT: <core> [main.c:777]:
handle_sigs(): core was not generated
Apr  3 09:40:02 kam1 kamailio[9100]: CRITICAL: <core>
[core/mem/q_malloc.c:501]: qm_free(): BUG: bad pointer 0x645f6d6574737973
(out of memory block!) called from tls: tls_init.c: ser_free(323) - ignoring


loadmodule "stirshaken.so"

####### STIRSHAKEN ######
modparam("stirshaken", "vs_verify_x509_cert_path", 1)
modparam("stirshaken", "vs_ca_dir", "/etc/kamailio/stir_CA")
#modparam("stirshaken", "vs_crl_dir", "/etc/kamailio/CRL")
modparam("stirshaken", "as_default_key",
"/etc/kamailio/key/private_key.pem")
modparam("stirshaken", "vs_cache_certificates", 1)
modparam("stirshaken", "vs_cache_dir", "/tmp/cert_cache")
modparam("stirshaken", "vs_cache_expire_s", 100)


       if (is_method("INVITE") && is_present_hf("Identity")) {
               xlog("L_NOTICE", "it is INVITE with Identity. Lets check
Identity\n");
               if (1 == stirshaken_check_identity()) {
                      xlog("L_NOTICE", "Shaken Identity is OK\n");
               } else {
                       xlog("L_NOTICE", "Shaken Identity is invalid\n");
               }
       }


Please give me some advice.



--===============1010374063==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0
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--===============1010374063==--