[sr-dev] crash with 4.0.4 - st_delete_ucontact()

[Dragos Oancea]

Hello Everyone,

Kamailio 4.0.4 crashes for us once a few weeks, apparently in the same point:


#0  st_delete_ucontact (_c=0x3a746361746e6f43) at ucontact.c:358
#1  0x00007f2c7a9b3836 in delete_ucontact (_r=0x7f2c37e1be40, _c=0x3a746361746e6f43) at urecord.c:509
#2  0x00007f2c7a373d52 in update_contacts (_m=0x7f2c7bc7e930, _r=0x7f2c37e1be40, _mode=1) at save.c:697
#3  0x00007f2c7a375782 in add_contacts (_m=0x7f2c7bc7e930, _d=0x7f2c35fbae20, _cflags=5, _uri=<value optimized out>) at save.c:800
#4  save (_m=0x7f2c7bc7e930, _d=0x7f2c35fbae20, _cflags=5, _uri=<value optimized out>) at save.c:876
#5  0x0000000000414ebf in do_action (h=0x7fff7c928790, a=0x7f2c7bb52e70, msg=0x7f2c7bc7e930) at action.c:1086
#6  0x000000000041c6e6 in run_actions (h=0x7fff7c928790, a=0x7f2c7bb52e70, msg=0x7f2c7bc7e930) at action.c:1573
#7  0x000000000041cdd4 in run_actions_safe (h=0x7fff7c92aaf0, a=<value optimized out>, msg=<value optimized out>) at action.c:1637
#8  0x00000000004be90d in rval_get_int (h=0x7fff7c92aaf0, msg=<value optimized out>, i=0x7fff7c928b8c, rv=<value optimized out>, cache=<value optimized out>) at rvalue.c:920
#9  0x00000000004c3074 in rval_expr_eval_int (h=0x7fff7c92aaf0, msg=0x7f2c7bc7e930, res=0x7fff7c928b8c, rve=0x7f2c7bb53790) at rvalue.c:1914
#10 0x00000000004c3139 in rval_expr_eval_int (h=0x7fff7c92aaf0, msg=0x7f2c7bc7e930, res=0x7fff7c928ff8, rve=0x7f2c7bb53010) at rvalue.c:1922
#11 0x0000000000415662 in do_action (h=0x7fff7c92aaf0, a=0x7f2c7bb54df0, msg=0x7f2c7bc7e930) at action.c:1050
#12 0x000000000041c6e6 in run_actions (h=0x7fff7c92aaf0, a=0x7f2c7bb32980, msg=0x7f2c7bc7e930) at action.c:1573
#13 0x00000000004174fa in do_action (h=0x7fff7c92aaf0, a=0x7f2c7bb60090, msg=0x7f2c7bc7e930) at action.c:1069
#14 0x000000000041c6e6 in run_actions (h=0x7fff7c92aaf0, a=0x7f2c7bb21c00, msg=0x7f2c7bc7e930) at action.c:1573
#15 0x00000000004174fa in do_action (h=0x7fff7c92aaf0, a=0x7f2c7bb60190, msg=0x7f2c7bc7e930) at action.c:1069
#16 0x000000000041c6e6 in run_actions (h=0x7fff7c92aaf0, a=0x7f2c7bb1a990, msg=0x7f2c7bc7e930) at action.c:1573
#17 0x00000000004174fa in do_action (h=0x7fff7c92aaf0, a=0x7f2c7bb60290, msg=0x7f2c7bc7e930) at action.c:1069
#18 0x000000000041c6e6 in run_actions (h=0x7fff7c92aaf0, a=0x7f2c7bb60290, msg=0x7f2c7bc7e930) at action.c:1573
#19 0x000000000041581a in do_action (h=0x7fff7c92aaf0, a=0x7f2c7bafbcb0, msg=0x7f2c7bc7e930) at action.c:690
#20 0x000000000041c6e6 in run_actions (h=0x7fff7c92aaf0, a=0x7f2c7bafbb10, msg=0x7f2c7bc7e930) at action.c:1573
#21 0x00000000004156bb in do_action (h=0x7fff7c92aaf0, a=0x7f2c7bafc050, msg=0x7f2c7bc7e930) at action.c:1065
#22 0x000000000041c6e6 in run_actions (h=0x7fff7c92aaf0, a=0x7f2c7badc5d0, msg=0x7f2c7bc7e930) at action.c:1573
#23 0x000000000041cd60 in run_top_route (a=0x7f2c7badc5d0, msg=0x7f2c7bc7e930, c=<value optimized out>) at action.c:1658
#24 0x000000000049f51e in receive_msg (buf=<value optimized out>, len=<value optimized out>, rcv_info=<value optimized out>) at receive.c:211
#25 0x0000000000532306 in udp_rcv_loop () at udp_server.c:557
#26 0x0000000000467a7a in main_loop () at main.c:1638
#27 0x000000000046a912 in main (argc=<value optimized out>, argv=<value optimized out>) at main.c:2566
(gdb) 


flags: STATS: Off, USE_IPV6, USE_TCP, USE_TLS, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 4MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: unknown 
compiled on 14:47:59 Dec  9 2013 with gcc 4.4.7

Output of `bt full` here:
http://pastebin.com/3qY8B1eC


Will upgrading to 4.0.5 solve this issue ? 

Regards,
Dragos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20140210/7b42cab7/attachment.html>