[OpenSER-Devel] unsubscribe crash

[Juha Heinanen]

trunk openser crashed gain in db_mode 3 when i quited twinkle, which
sent unsubscribe to openser.

syslog shows this:

Mar 25 20:52:13 test /usr/sbin/openser[16696]: LOG: Handling in-dialog SUBSCRIBE <sip:192.90.10.100:5060> from <sip:test at test.fi> 
Mar 25 20:52:13 test /usr/sbin/openser[16697]: ERROR:presence:get_database_info: No matching subscription dialog found in database 
Mar 25 20:52:13 test /usr/sbin/openser[16697]: ERROR:presence:handle_subscribe: getting stored info 
Mar 25 20:52:13 test /usr/sbin/openser[16697]: ERROR: SUBSCRIBE to <sip:192.90.10.100:5060> failed 
Mar 25 20:52:13 test /usr/sbin/openser[16696]: ERROR:presence:get_database_info: wrong sequence number received: 772 - stored: 1206472568 
Mar 25 20:52:13 test /usr/sbin/openser[16696]: ERROR:presence:handle_subscribe: getting stored info 
Mar 25 20:52:13 test /usr/sbin/openser[16696]: ERROR: SUBSCRIBE to <sip:192.90.10.100:5060> failed 

and gdb shows this:

Program terminated with signal 11, Segmentation fault.
#0  0xb7d4c43b in strlen () from /lib/tls/i686/cmov/libc.so.6
(gdb) where
#0  0xb7d4c43b in strlen () from /lib/tls/i686/cmov/libc.so.6
#1  0xb786fced in get_database_info (msg=0x8213f00, subs=0xbf83b748, 
    reply_code=0xbf83b7f0, reply_str=0xbf83b7e0) at subscribe.c:1198
#2  0xb787127d in get_stored_info (msg=0x8213f00, subs=0xbf83b748, 
    reply_code=0xbf83b7f0, reply_str=0xbf83b7e0) at subscribe.c:984
#3  0xb7873cc7 in handle_subscribe (msg=0x8213f00, str1=0x0, str2=0x0)
    at subscribe.c:559
#4  0x08054385 in do_action (a=0x81aba58, msg=0x8213f00) at action.c:833
#5  0x08056ada in run_action_list (a=0x81aba58, msg=0x8213f00) at action.c:132
#6  0x0809f7c2 in eval_expr (e=0x81abac0, msg=0x8213f00, val=0x0)
    at route.c:1072
#7  0x0809f253 in eval_expr (e=0x81abae8, msg=0x8213f00, val=0x0)
    at route.c:1379
#8  0x0809f1e7 in eval_expr (e=0x81abb10, msg=0x8213f00, val=0x0)
    at route.c:1384
#9  0x080544f1 in do_action (a=0x81abd38, msg=0x8213f00) at action.c:688
#10 0x08056ada in run_action_list (a=0x81ab768, msg=0x8213f00) at action.c:132
#11 0x08056017 in do_action (a=0x81abef8, msg=0x8213f00) at action.c:705
#12 0x08056ada in run_action_list (a=0x81a8ba0, msg=0x8213f00) at action.c:132
#13 0x080551e7 in do_action (a=0x819c2d0, msg=0x8213f00) at action.c:112
#14 0x08056ada in run_action_list (a=0x819c2d0, msg=0x8213f00) at action.c:132
#15 0x08056017 in do_action (a=0x819c3a0, msg=0x8213f00) at action.c:705
#16 0x08056ada in run_action_list (a=0x819ad00, msg=0x8213f00) at action.c:132
---Type <return> to continue, or q <return> to quit--- 
#17 0x08056e93 in run_top_route (a=0x819ad00, msg=0x8213f00) at action.c:112
#18 0x080915ca in receive_msg (
    buf=0x816e180 "SUBSCRIBE sip:192.90.10.100:5060 SIP/2.0\r\nVia: SIP/2.0/UDP 192.98.100.3:5066;rport;branch=z9hG4bKmbwczjzz\r\nMax-Forwards: 69\r\nTo: <sip:test at test.fi>;tag=25.14021.1206458184.1\r\nFrom: \"Juha Heinanen\" "..., 
    len=452, rcv_info=0xbf83cb60) at receive.c:156
#19 0x080cf89e in udp_rcv_loop () at udp_server.c:438
#20 0x0806d0a4 in main (argc=15, argv=Cannot access memory at address 0x7
) at main.c:779

-- juha