[sr-dev] seeing segfaults in get_profile_size()

[Eugene Oden]

no segfault if i use the 3 parameter invocation of get_profile_size(),
 flagging the profile as "with value" and passing a static value to
get_profile_size() and set_dlg_profile()

On Wed, Oct 27, 2010 at 12:07 PM, Eugene Oden
<eugeneoden+list at gmail.com<eugeneoden%2Blist at gmail.com>
> wrote:

> one more clue:
>
> 767             if(sp_dest->setf(msg, &sp_dest->pvp, (int)EQ_T, &val)<0)
> (gdb) p sp_dest->setf
> $1 = (pv_setf_t) 0xffffffff
>
>
> On Wed, Oct 27, 2010 at 11:38 AM, Eugene Oden <eugeneoden+list at gmail.com<eugeneoden%2Blist at gmail.com>
> > wrote:
>
>> hello,
>>
>> just started using the dialog module with kamailio 3.1.0 and getting
>> segfaults whenever get_profile_size() is executed.  here's a stack trace:
>>
>> Core was generated by `kamailio'.
>> Program terminated with signal 11, Segmentation fault.
>> #0  0x003c729e in w_get_profile_size (msg=0x834d8b4, profile=0xb60823f8
>> "\224$\b\266\t", value=0x831cb40 "\004",
>>     result=0x8340900 "\001") at dialog.c:767
>> 767             if(sp_dest->setf(msg, &sp_dest->pvp, (int)EQ_T, &val)<0)
>> (gdb) bt
>> #0  0x003c729e in w_get_profile_size (msg=0x834d8b4, profile=0xb60823f8
>> "\224$\b\266\t", value=0x831cb40 "\004",
>>     result=0x8340900 "\001") at dialog.c:767
>> #1  0x08057770 in do_action (h=0xbff5fcb8, a=0x8328f2c, msg=0x834d8b4) at
>> action.c:1105
>> #2  0x0805ea3c in run_actions (h=0xbff5fcb8, a=0x8328f2c, msg=0x834d8b4)
>> at action.c:1553
>> #3  0x080576c0 in do_action (h=0xbff5fcb8, a=0x832c794, msg=0x834d8b4) at
>> action.c:711
>> #4  0x0805ea3c in run_actions (h=0xbff5fcb8, a=0x832c794, msg=0x834d8b4)
>> at action.c:1553
>> #5  0x0805ed71 in run_actions_safe (h=0xbff606e8, a=0x832c794,
>> msg=0x834d8b4) at action.c:1605
>> #6  0x080f5d44 in rval_get_int (h=0xbff606e8, msg=0x0, i=0xbff600d8,
>> rv=0xbff5f694, cache=0x0) at rvalue.c:904
>> #7  0x080fb4fb in rval_expr_eval_int (h=0xbff606e8, msg=0x834d8b4,
>> res=0xbff600d8, rve=0x832c9c4) at rvalue.c:1866
>> #8  0x080fb5d0 in rval_expr_eval_int (h=0xbff606e8, msg=0x834d8b4,
>> res=0xbff60394, rve=0x832cdac) at rvalue.c:1873
>> #9  0x08057511 in do_action (h=0xbff606e8, a=0x832db7c, msg=0x834d8b4) at
>> action.c:1069
>> #10 0x0805ea3c in run_actions (h=0xbff606e8, a=0x832be40, msg=0x834d8b4)
>> at action.c:1553
>> #11 0x080576c0 in do_action (h=0xbff606e8, a=0x8313b88, msg=0x834d8b4) at
>> action.c:711
>> #12 0x0805ea3c in run_actions (h=0xbff606e8, a=0x83003cc, msg=0x834d8b4)
>> at action.c:1553
>> #13 0x0805ecf4 in run_top_route (a=0x83003cc, msg=0x834d8b4, c=0x0) at
>> action.c:1626
>> #14 0x080dceab in receive_msg (
>>     buf=0x82a7740 "INVITE sip:*98 at pipeline.bbpsphone.netSIP/2.0\r\nCall-ID: 6fb1466b73075c7ad55f278f86ff6b27 at 0:0:0:0:0:0:0:0\r\nCSeq:
>> 2 INVITE\r\nFrom: \"Eugene Oden\" <sip:goden.atl1 at pipeline.bbpsphone.net<sip%3Agoden.atl1 at pipeline.bbpsphone.net>>;tag=56dc2460\r\nTo:
>> "..., len=1538, rcv_info=0xbff608f8)
>>     at receive.c:205
>> #15 0x0816eef7 in udp_rcv_loop () at udp_server.c:532
>> #16 0x080ad9e1 in main_loop () at main.c:1554
>> #17 0x080b1126 in main (argc=1, argv=0xbff60bd4) at main.c:2398
>>
>> and the relevant bits of configuration - not sure if its correct:
>>
>> ...
>>
>> loadmodule "dialog.so"
>> modparam("dialog", "dlg_flag", 4);
>> modparam("dialog", "profiles_no_value", "voicemail");
>>
>> ...
>>
>> route {
>>    ...
>>
>>    if (is_method("INVITE")) {
>>       dlg_manage();
>>       setflag(4);
>>    }
>>
>>    ...
>>
>>    if (! route(LIMIT_VOICEMAIL)) {
>>       xdbg("   SCRIPT: Voicemail limit exceeded\n");
>>       sl_send_reply("503", "Service Unavailable");
>>       exit;
>>    }
>>
>>    ...
>> }
>>
>> ...
>>
>> route[LIMIT_VOICEMAIL] {
>>    get_profile_size("voicemail", "$avp(size)");
>>    if ($avp(size) >= 1) {
>>       return -1;
>>    }
>>
>>    set_dlg_profile("voicemail");
>>
>>    return 1;
>> }
>>
>>
>> any thoughts?
>>
>> gene
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20101027/86ac4bf9/attachment.htm>