[sr-dev] Crash in free_sip_msg -> reset_ruid

[Hugh Waite]

Hi,
We've had some more crashes on the current master build.
(gdb) bt
#0  qm_insert_free (qm=0x7fc1e1b9e010, p=<value optimized out>) at 
mem/q_malloc.c:181
#1  qm_free (qm=0x7fc1e1b9e010, p=<value optimized out>) at 
mem/q_malloc.c:527
#2  0x000000000055027f in reset_ruid (msg=0x7fc1e1c35360) at 
parser/msg_parser.c:911
#3  free_sip_msg (msg=0x7fc1e1c35360) at parser/msg_parser.c:730
#4  0x00000000004a4012 in receive_msg (buf=<value optimized out>, 
len=<value optimized out>, rcv_info=<value optimized out>) at receive.c:297
#5  0x000000000052a251 in tcp_read_req (con=0x7fc1ca4c6e00, 
bytes_read=0x7fff041b327c, read_flags=0x7fff041b3274) at tcp_read.c:1387
#6  0x000000000052c53b in handle_io (fm=<value optimized out>, events=1, 
idx=-1) at tcp_read.c:1617
#7  0x000000000052eb69 in io_wait_loop_epoll (unix_sock=<value optimized 
out>) at io_wait.h:1092
#8  tcp_receive_loop (unix_sock=<value optimized out>) at tcp_read.c:1728
#9  0x00000000004fc0eb in tcp_init_children () at tcp_main.c:4959
#10 0x000000000046c3d5 in main_loop () at main.c:1702
#11 0x000000000046dec9 in main (argc=<value optimized out>, argv=<value 
optimized out>) at main.c:2533

(gdb) frame 2
#2  0x000000000055027f in reset_ruid (msg=0x7fc1e1c35360) at 
parser/msg_parser.c:911
911                     pkg_free(msg->ruid.s);
(gdb) p msg->ruid
$7 = {s = 0x845d20 "", len = 20}

Might this be related to the changes made on Sept 19th to the 
free_sip_msg functions?

Regards,
Hugh

-- 
Hugh Waite
Principal Design Engineer
Crocodile RCS Ltd.