The Problem is in tm/dlg.c in function free_dlg
its missing:
šš if (_d->loc_dname.s) shm_free(_d->loc_dname.s);
šš if (_d->rem_dname.s) shm_free(_d->rem_dname.s);
From: sr-users-bounces@lists.sip-router.org [mailto:sr-users-bounces@lists.sip-router.org] On Behalf Of ziad habchi
Sent: Monday, December 30, 2013 12:05 PM
To: 'Kamailio (SER) - Users Mailing List'; miconda@gmail.com
Subject: Re: [SR-Users] Memory Leaks with Kamailio using SEAS module
Any updates on the below?
From: sr-users-bounces@lists.sip-router.org [mailto:sr-users-bounces@lists.sip-router.org] On Behalf Of ziad habchi
Sent: Monday, December 23, 2013 2:55 PM
To: 'Kamailio (SER) - Users Mailing List'; miconda@gmail.com
Subject: Re: [SR-Users] Memory Leaks with Kamailio using SEAS module
Hi ,
I just upgraded to the 4.0.5 release hoping that the memory leak problem is solved. It appears that the problem persists.
I am getting an out of memory in the log after a while and then kamailio exit with a sig 11
Dec 23 12:30:54 peru kamailio[16492]: ERROR: seas [seas.c:444]: create_as_event_t(): Out Of Memory !!
Dec 23 12:30:54 peru kamailio[16492]: ERROR: seas [seas.c:303]: w_as_relay_t(): unable to create event code
Dec 23 12:30:54 peru kamailio[16529]: ERROR: tm [t_hooks.c:160]: insert_tmcb(): ERROR:tm:insert_tmcb: out of shm. mem
Dec 23 12:30:54 peru kamailio[16529]: ERROR: tm [uac.c:442]: t_uac_prepare(): t_uac: short of tmcb shmem
Dec 23 12:30:54 peru kamailio[16529]: ERROR: seas [seas_action.c:1110]: ac_uac_req(): failed to send the [MESSAGE] request
Dec 23 12:30:54 peru kamailio[16529]: ERROR: seas [seas_action.c:1111]: ac_uac_req(): Error on request_within No error (2/SEAS/UAC)
Dec 23 12:30:54 peru kamailio[16529]: ERROR: tm [t_hooks.c:160]: insert_tmcb(): ERROR:tm:insert_tmcb: out of shm. mem
Dec 23 12:30:54 peru kamailio[16529]: ERROR: tm [uac.c:442]: t_uac_prepare(): t_uac: short of tmcb shmem
Dec 23 12:30:54 peru kamailio[16529]: ERROR: seas [seas_action.c:1110]: ac_uac_req(): failed to send the [MESSAGE] request
Dec 23 12:30:54 peru kamailio[16529]: ERROR: seas [seas_action.c:1111]: ac_uac_req(): Error on request_within No error (2/SEAS/UAC)
Dec 23 12:30:54 peru kamailio[16492]: WARNING: tm [t_lookup.c:1564]: t_unref(): WARNING: script writer didn't release transaction
Dec 23 12:30:54 peru kamailio[16492]: WARNING: tm [t_lookup.c:1564]: t_unref(): WARNING: script writer didn't release transaction
Dec 23 12:30:54 peru kamailio[16492]: ERROR: <core> [sip_msg_clone.c:505]: sip_msg_shm_clone(): ERROR: sip_msg_cloner: cannot allocate memory
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [t_lookup.c:1359]: new_t(): ERROR: new_t: out of mem:
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [t_lookup.c:1499]: t_newtran(): ERROR: t_newtran: new_t failed
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [tm.c:1261]: w_t_reply(): ERROR: t_reply: cannot send a t_reply to a message for which no T-state has been established
Dec 23 12:30:54 peru kamailio[16492]: WARNING: tm [t_lookup.c:1564]: t_unref(): WARNING: script writer didn't release transaction
Dec 23 12:30:54 peru kamailio[16529]: ERROR: tm [uac.c:290]: t_uac_prepare(): t_uac: short of cell shmem
Dec 23 12:30:54 peru kamailio[16529]: ERROR: seas [seas_action.c:1110]: ac_uac_req(): failed to send the [MESSAGE] request
Dec 23 12:30:54 peru kamailio[16529]: ERROR: seas [seas_action.c:1111]: ac_uac_req(): Error on request_within No error (2/SEAS/UAC)
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [t_lookup.c:1359]: new_t(): ERROR: new_t: out of mem:
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [t_lookup.c:1499]: t_newtran(): ERROR: t_newtran: new_t failed
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [tm.c:1261]: w_t_reply(): ERROR: t_reply: cannot send a t_reply to a message for which no T-state has been established
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [t_lookup.c:1359]: new_t(): ERROR: new_t: out of mem:
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [t_lookup.c:1499]: t_newtran(): ERROR: t_newtran: new_t failed
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [tm.c:1261]: w_t_reply(): ERROR: t_reply: cannot send a t_reply to a message for which no T-state has been established
Dec 23 12:30:54 peru kamailio[16492]: WARNING: tm [t_lookup.c:1564]: t_unref(): WARNING: script writer didn't release transaction
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [t_lookup.c:1359]: new_t(): ERROR: new_t: out of mem:
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [t_lookup.c:1499]: t_newtran(): ERROR: t_newtran: new_t failed
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [tm.c:1261]: w_t_reply(): ERROR: t_reply: cannot send a t_reply to a message for which no T-state has been established
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [t_lookup.c:1359]: new_t(): ERROR: new_t: out of mem:
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [t_lookup.c:1499]: t_newtran(): ERROR: t_newtran: new_t failed
Dec 23 12:30:54 peru kamailio[16492]: ERROR: tm [tm.c:1261]: w_t_reply(): ERROR: t_reply: cannot send a t_reply to a message for which no T-state has been established
Dec 23 12:30:54 peru kamailio[16529]: ERROR: tm [uac.c:290]: t_uac_prepare(): t_uac: short of cell shmem
Dec 23 12:30:54 peru kamailio[16529]: ERROR: seas [seas_action.c:1110]: ac_uac_req(): failed to send the [MESSAGE] request
Dec 23 12:30:54 peru kamailio[16529]: ERROR: seas [seas_action.c:1111]: ac_uac_req(): Error on request_within No error (2/SEAS/UAC)
Dec 23 12:30:54 peru kamailio[16492]: WARNING: tm [t_lookup.c:1564]: t_unref(): WARNING: script writer didn't release transaction
Dec 23 12:30:56 peru kamailio[16494]: : <core> [pass_fd.c:293]: receive_fd(): ERROR: receive_fd: EOF on 17
Dec 23 12:30:56 peru kamailio[16480]: ALERT: <core> [main.c:788]: handle_sigs(): child process 16486 exited by a signal 11
Dec 23 12:30:56 peru kamailio[16480]: ALERT: <core> [main.c:791]: handle_sigs(): core was generated
Dec 23 12:30:56 peru kamailio[16480]: INFO: <core> [main.c:803]: handle_sigs(): INFO: terminating due to SIGCHLD
Here is the full bt for the generated core:
#0 0x0816bdb8 in qm_free (qm=0xf53e0000, p=0x5739993d) at mem/q_malloc.c:476
f = 0x57399935
size = 3264
next = 0x0
prev = 0x15287b
__FUNCTION__ = "qm_free"
#1 0x00151f88 in free_cell (dead_cell=0xf5508f88) at h_table.c:157
b = 0x0
i = 0
rpl = 0x0
tt = 0x0
foo = 0xf53e0000
cbs = 0x0
cbs_tmp = 0xf6a9fbf8
__FUNCTION__ = "free_cell"
#2 0x0015365b in free_hash_table () at h_table.c:443
p_cell = 0xf5508f88
tmp_cell = 0xf5508f88
i = 8634
#3 0x00164dd2 in tm_shutdown () at t_funcs.c:122
__FUNCTION__ = "tm_shutdown"
#4 0x08122d39 in destroy_modules () at sr_module.c:790
t = 0xf73eb1e8
foo = 0x0
#5 0x080a0cab in cleanup (show_status=1) at main.c:573
memlog = -1
__FUNCTION__ = "cleanup"
#6 0x080a216d in shutdown_children (sig=15, show_status=1) at main.c:715
__FUNCTION__ = "shutdown_children"
#7 0x080a36f7 in handle_sigs () at main.c:806
chld = 0
chld_status = 139
memlog = 0
__FUNCTION__ = "handle_sigs"
#8 0x080a76d5 in main_loop () at main.c:1767
i = 4
pid = 16494
si = 0x0
si_desc = "udp receiver child=3 sock=193.100.200.18:5070\000\000\000\000\000\000\000\b\263>\367\001\000\000\000H&\310\377\320g\f\b8E?\367\020\000\000\000\000\000\000\000\220'\310\377\257\070\310\377\017\000\000\000h&\310\377X\304\016\bHO?\367\000\000\000\000\210&\310\377\326H\n\b\001\000\000\000\000\000\000\000\210&\310\377"
nrprocs = 4
__FUNCTION__ = "main_loop"
#9 0x080a9d39 in main (argc=5, argv=0xffc82834) at main.c:2566
cfg_stream = 0x900a008
c = -1
r = 0
tmp = 0x4711e4 ""
tmp_len = 12276
port = 194
proto = 1
options = 0x81f0928 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:"
ret = -1
seed = 2563865969
rfd = 4
debug_save = 0
debug_flag = 0
dont_fork_cnt = 0
n_lst = 0x4711e4
p = 0x8051327 "__libc_start_main"
__FUNCTION__ = "main"
My kamailio version is :
version: kamailio 4.0.5 (i386/linux) 7eea50
flags: STATS: Off, USE_IPV6, USE_TCP, USE_TLS, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 4MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: 7eea50
compiled on 12:03:52 Dec 23 2013 with gcc 4.1.2
I appreciate your support
Ziad Habchi
From: sr-users-bounces@lists.sip-router.org [mailto:sr-users-bounces@lists.sip-router.org] On Behalf Of ziad habchi
Sent: Thursday, December 5, 2013 3:23 PM
To: 'Kamailio (SER) - Users Mailing List'; miconda@gmail.com
Subject: Re: [SR-Users] Memory Leaks with Kamailio using SEAS module
Any news regarding the below ?
I am running kamailio with a constant traffic and monitoring the free shm with kamcmd core.shmmem , the free memory keep on decreasing until I get “Out of Memory” error. I am able to replicate the issue. Any help would be great .
Regards,
Ziad Habchi
From: sr-users-bounces@lists.sip-router.org [mailto:sr-users-bounces@lists.sip-router.org] On Behalf Of ziad habchi
Sent: Tuesday, December 3, 2013 10:37 AM
To: miconda@gmail.com; 'Kamailio (SER) - Users Mailing List'
Subject: Re: [SR-Users] Memory Leaks with Kamailio using SEAS module
Hi ,
I do have other core files;
Below is the trace:
#0 0x00ba7430 in __kernel_vsyscall ()
No symbol table info available.
#1 0x0030ab11 in raise () from /lib/libc.so.6
No symbol table info available.
#2 0x0030c3ea in abort () from /lib/libc.so.6
No symbol table info available.
#3 0x081a155a in qm_debug_frag (qm=0xf72e8008, f=<value optimized out>) at mem/q_malloc.c:161
__FUNCTION__ = "qm_debug_frag"
#4 0x081a18d2 in qm_malloc (qm=0xf72e8008, size=<value optimized out>, file=0x826b443 "<core>: parser/parse_rr.c", func=0x826bc00 "do_parse_rr_body", line=72) at mem/q_malloc.c:384
f = 0xf7336d18
hash = 25391
list_cntr = 1
__FUNCTION__ = "qm_malloc"
#5 0x081c06cb in do_parse_rr_body (buf=0x20 <Address 0x20 out of bounds>, len=33, head=0xfff46750) at parser/parse_rr.c:72
r = <value optimized out>
last = 0x0
s = {
s = 0xf7335421 "<sip:qatar:5073;transport=TCP;lr>\r\nRoute: <sip:qatar:5073;transport=TCP;lr>\r\nFrom: <sip:+9613010005@peru>;tag=1672649062\r\nTo: <sip:+9613414332@peru>\r\nCall-ID: 883711576\r\nCSeq: 20 MESSAGE\r\nContent-Type"..., len = 33}
hooks = {contact = {expires = 0x8264900, q = 0xfff466f8, methods = 0xfff46758, received = 0x81a1bf5, instance = 0x9f, reg_id = 0x8264900, ob = 0x823b9dc}, uri = {transport = 0x8264900, lr = 0xfff466f8,
r2 = 0xfff46758, maddr = 0x81a1bf5, ttl = 0x9f, dstip = 0x8264900, dstport = 0x823b9dc, ftag = 0x8263e72, ob = 0x826515a}, event_dialog = {call_id = 0x8264900, from_tag = 0xfff466f8, to_tag = 0xfff46758,
include_session_description = 0x81a1bf5, sla = 0x9f, ma = 0x8264900}}
__FUNCTION__ = "do_parse_rr_body"
#6 0x081c1fe1 in parse_rr (_h=0xf732f7e0) at parser/parse_rr.c:176
r = 0x0
__FUNCTION__ = "parse_rr"
#7 0x00e2ef1c in ac_uac_req (the_as=0xf54cb6e0, processor_id=1 '\001', flags=0,
action=0xf73353b2 "4\254^XMESSAGE sip:+9613414332@peru SIP/2.0\r\nVia: SIP/2.0/TCP 193.100.200.18:5070;branch=z9hG4bK649641154\r\nRoute: <sip:qatar:5073;transport=TCP;lr>\r\nRoute: <sip:qatar:5073;transport=TCP;lr>\r\nFrom: <sip:+"..., len=545) at seas_action.c:1067
cseq = <value optimized out>
err_buf = "\240CG\000\370\247\360\b\364/G\000\025\000\000\000\350\245\360\b\220i\364\377\227\354;\000\000\000\000\000`\247\360\b\230\000\000\000\000@\000\000\000$G\000\000\000\000\000.^5\000\002\000\000\000;\000\000\000\020\000\000\000\002\000\000\000\v\000\000\000q\000\000\000\001\000\000\000O\001\000\000\000\000\000\000 \034\000\000\310T\354\b\204i\364\377\254a5\000v/5\000\350\245\360\bLj\364\377li\364\377\373\361\064"
my_msg = 0xf7336378
my_dlg = 0xf54e0624
retval = <value optimized out>
uac_id = 883711576
sip_error = -759384
ret = <value optimized out>
err_ret = <value optimized out>
headers = {
s = 0xf7336ef4 "Content-Type: text/plain\r\nContent-Encoding: sip:qatar:5073\r\nMax-Forwards: 70\r\nUser-Agent: Jinny SIP Client\r\nDate: Mon, 2 Dec 2013 16:59:2 GMT\r\nExpires: 30\r\nP-Asserted-Identity: sip:ip-sm-gw.ims-core:5"..., len = 205}
body = {s = 0xf7336cf0 "Hi I'm Alice !\r\n", len = 16}
fake_uri = {s = 0x0, len = 149989216}
uac_r = {method = 0x8f0a5e8, headers = 0x8f0a5e8, body = 0x472ff4, dialog = 0x352f76, cb_flags = -759420, cb = 0x8f0a760, cbp = 0x0}
__FUNCTION__ = "ac_uac_req"
#8 0x00e32def in process_action (the_as=0xf54cb6e0) at seas_action.c:309
ac_len = 555
processor_id = 1 '\001'
type = 4 '\004'
---Type <return> to continue, or q <return> to quit---
flags = 0
__FUNCTION__ = "process_action"
#9 0x00e33b18 in process_input (fd=11) at seas_action.c:194
j = 136947160
__FUNCTION__ = "process_input"
#10 0x00e3451b in dispatch_actions () at seas_action.c:161
fd = 11
n = <value optimized out>
ret = <value optimized out>
timeout = <value optimized out>
elapsed_ms = <value optimized out>
fds = {{fd = 11, events = 17, revents = 0}}
last = {tv_sec = -143742160, tv_usec = 0}
now = {tv_sec = 136726784, tv_usec = 25334}
ktimeout = 0
__FUNCTION__ = "dispatch_actions"
#11 0x00e18be2 in spawn_action_dispatcher (the_as=0xf54cb6d0) at event_dispatcher.c:1122
pid = <value optimized out>
__FUNCTION__ = "spawn_action_dispatcher"
#12 0x00e1b617 in add_new_as (event_idx=<value optimized out>, action_idx=<value optimized out>, as=0xf54cb6d0) at event_dispatcher.c:575
ev = <value optimized out>
j = 0
the_as = 0xf54cb6e0
tmp = 0x0
__FUNCTION__ = "add_new_as"
#13 0x00e1d348 in handle_unc_as_data (fd=<value optimized out>) at event_dispatcher.c:988
i = 5
j = 0
k = 5
len = 7
name1 = 0xe4aacc "smsc_as"
as = 0xf54cb6d0
__FUNCTION__ = "handle_unc_as_data"
#14 0x00e1ec6c in dispatcher_main_loop () at event_dispatcher.c:295
poll_fds = {{fd = 5, events = 1, revents = 0}, {fd = 7, events = 1, revents = 0}, {fd = 6, events = 1, revents = 0}, {fd = 11, events = 17, revents = 0}, {fd = 12, events = 17, revents = 0}, {fd = 3206374,
events = 28792, revents = -12}, {fd = 95421144, events = 0, revents = 0}, {fd = 3876636, events = -13429, revents = 2061}}
poll_tmp = <value optimized out>
i = -757768
j = <value optimized out>
k = <value optimized out>
fd = 0
poll_events = 0
socks = {5, 7}
chld_status = 14803099
as_nr = 0
unc_as_nr = 1
chld = 137409248
as = <value optimized out>
__FUNCTION__ = "dispatcher_main_loop"
#15 0x00e35ea5 in seas_child_init (rank=0) at seas.c:741
---Type <return> to continue, or q <return> to quit---
pid = <value optimized out>
__FUNCTION__ = "seas_child_init"
#16 0x0813a622 in init_mod_child (m=0xf732b550, rank=0) at sr_module.c:893
__FUNCTION__ = "init_mod_child"
#17 0x080b7ea5 in main_loop () at main.c:1715
i = 4
pid = 0
si = <value optimized out>
si_desc = "udp receiver child=3 sock=193.100.200.18:5070\000\063\367\030\311\341\001\001\000\000\000\234\266L\365ÖL\365\v\020\000\000l\302\061\365\270\266L\365\270q\364\377\000\000\000\000X\243\360\b\000\000\000\000\203\000\000\000X\243\360\b\001", '\000' <repeats 23 times>"\270, q\364\377"
nrprocs = 4
__FUNCTION__ = "main_loop"
#18 0x080bb57e in main (argc=5, argv=0xfff47364) at main.c:2566
cfg_stream = 0x8ebf008
c = <value optimized out>
r = 0
tmp = 0x80512dd "__libc_start_main"
tmp_len = 4657636
port = 136523065
proto = -757064
ret = <value optimized out>
seed = 3203921318
rfd = 4
debug_save = 136559068
debug_flag = 0
dont_fork_cnt = 0
n_lst = 0x823b9dc
p = 0x804aea8 "E\005"
__FUNCTION__ = "main"
From: Daniel-Constantin Mierla [mailto:miconda@gmail.com]
Sent: Tuesday, December 3, 2013 10:00 AM
To: ziad habchi; 'Kamailio (SER) - Users Mailing List'
Subject: Re: [SR-Users] Memory Leaks with Kamailio using SEAS module
Hello,
that backtrace is from shutdown, if you don't have another core file, then the initial one was overwritten. You have to enable one core per process. In most of system it is:
echo "1" > /proc/sys/kernel/core_uses_pid
You have to reproduce the issue again and get the backtrace from all core files.
Cheers,
Daniel
On 12/3/13 8:42 AM, ziad habchi wrote: