[Devel] Bug in TM/timer.c:590

[Eliot Gable]

Program received signal SIGSEGV, Segmentation fault.
0xb7a82376 in remove_timer_unsafe (tl=0x815674c8) at timer.c:590
590       tl->prev_tl->next_tl = tl->next_tl;
(gdb) where
#0  0xb7a82376 in remove_timer_unsafe (tl=0x815674c8) at timer.c:590
#1  0xb7a82803 in set_timer (new_tl=0x815674c8,
list_id=FR_INV_TIMER_LIST, ext_timeout=0x0) at timer.c:768
#2  0xb7a7fab0 in reply_received (p_msg=0x8b26058) at t_reply.c:1326
#3  0x0805c76c in forward_reply (msg=0x8b26058) at forward.c:449
#4  0x0807918e in receive_msg (
    buf=0x80ff7a0 "SIP/2.0 180 Ringing\r\nVia: SIP/2.0/UDP
64.158.177.106;branch=z9hG4bKc544.2468f945.0\r\nVia: SIP/2.0/UDP
64.158.177.106:5061\r\nFrom: Sip_Tester
<sip:2163734699 at 64.158.177.106:5061>;tag=36881\r\nTo: 216373465"...,
len=374, rcv_info=0xbfb7f7dc) at receive.c:194
#5  0x08095fa0 in udp_rcv_loop () at udp_server.c:465
#6  0x08068741 in main_loop () at main.c:808
#7  0x0806a04b in main (argc=1, argv=0xbfb7f9c4) at main.c:1477
(gdb) print tl
$1 = (struct timer_link *) 0x815674c8
(gdb) print tl->prev_tl
$2 = (struct timer_link *) 0x0
(gdb) print is_in_timer_list2(tl)
$3 = 1
(gdb)

I have a core file I can send as well, but it is 13MB compressed, so I
will have to send off-list.


Eliot Gable
Operations Engineer
CCNA, CWNA, CWSP, Network+, Security+
Broadvox, LLC
1228 Euclid Avenue
Suite 390
Cleveland, OH 44115-1800
216-373-4808