[Devel] crash when handling subscribe

[Juha Heinanen]

today while testing mwi stuff, i got a crash while openser was handling
subscribe request.  this was with latest trunk version of openser.

-- juha

(gdb) where
#0  0xb7fe4410 in ?? ()
#1  0xbfaa9dac in ?? ()
#2  0x00000006 in ?? ()
#3  0x000057d9 in ?? ()
#4  0xb7d3b811 in raise () from /lib/tls/i686/cmov/libc.so.6
#5  0xb7d3cfb9 in abort () from /lib/tls/i686/cmov/libc.so.6
#6  0xb7d70d3a in __fsetlocking () from /lib/tls/i686/cmov/libc.so.6
#7  0xb7d785cf in mallopt () from /lib/tls/i686/cmov/libc.so.6
#8  0xb7d78672 in free () from /lib/tls/i686/cmov/libc.so.6
#9  0xb7863434 in notify (subs=0xbfaaa830, watcher_subs=0x0, n_body=0x0,
    force_null_body=0) at notify.c:1427
#10 0xb786cc01 in update_subscription (msg=0x818ec00, subs=0xbfaaa830,
    rtag=0xbfaaa968, to_tag_gen=1, remote_cseq=135807448) at subscribe.c:442
#11 0xb786e0c0 in handle_subscribe (msg=0x818ec00, str1=0x0, str2=0x0)
    at subscribe.c:1495
#12 0x080524f6 in do_action (a=0x81849b0, msg=0x818ec00) at action.c:883
#13 0x080542ea in run_action_list (a=0x81849b0, msg=0x818ec00) at action.c:131
#14 0x0808a002 in eval_expr (e=0x8184a08, msg=0x818ec00, val=0x0)
    at route.c:1058
#15 0x08089c3d in eval_expr (e=0x8184a30, msg=0x818ec00, val=0x0)
    at route.c:1374
#16 0x08089bd4 in eval_expr (e=0x8184a58, msg=0x818ec00, val=0x0)
    at route.c:1379
---Type <return> to continue, or q <return> to quit---
#17 0x080522ad in do_action (a=0x8184e60, msg=0x818ec00) at action.c:783
#18 0x080542ea in run_action_list (a=0x8183730, msg=0x818ec00) at action.c:131
#19 0x08053478 in do_action (a=0x8185378, msg=0x818ec00) at action.c:801
#20 0x080542ea in run_action_list (a=0x8182438, msg=0x818ec00) at action.c:131
#21 0x08053478 in do_action (a=0x8185808, msg=0x818ec00) at action.c:801
#22 0x080542ea in run_action_list (a=0x81693e8, msg=0x818ec00) at action.c:131
#23 0x0805457b in run_top_route (a=0x81693e8, msg=0x818ec00) at action.c:111
#24 0x0807f441 in receive_msg (
    buf=0x8130200 "SUBSCRIBE sip:jh at vm.test.fi SIP/2.0\r\nRecord-Route: <sip:192.98.101.10;lr>\r\nVia: SIP/2.0/UDP 192.98.101.10;branch=z9hG4bK1ecd.3728e887.0\r\nVia: SIP/2.0/UDP 192.98.101.3:5066;rport=5066;branch=z9hG4bK"...,
    len=612, rcv_info=0xbfaab544) at receive.c:156
#25 0x080ab1c7 in udp_rcv_loop () at udp_server.c:451
#26 0x0806e61b in main_loop () at main.c:834
#27 0x08070185 in main (argc=17, argv=Cannot access memory at address 0x57dd
) at main.c:1393