[sr-dev] [tracker] Comment added: Crash in core when freeing shm dup'ed request

[sip-router]

THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

The following task has a new comment added:

FS#454 - Crash in core when freeing shm dup'ed request
User who did this - Hugh Waite (hugh.waite)

----------
(gdb) frame 5
#5  0x000000000054fea1 in clean_hdr_field (hf=0x7fd11837aa18) at parser/hf.c:114
114                             free_to(hf->parsed);
(gdb) p *hf
$18 = {type = HDR_FROM_T, name = {
    s = 0x7fd11837a7b6 "From: <sip:nm at nm>;tag=root\r\nTo: <sip:nm2 at nm2>\r\nCall-ID: 1-9712 at 127.0.0.1\r\nCSeq: 42 OPTIONS\r\nMax-Forwards: 15\r\nContent-Length: 0\r\nContact: <sip:nm at nm>\r\nAccept: application/sdp\r\n\r\n", len = 4},
  body = {s = 0x7fd11837a7bc "<sip:nm at nm>;tag=root\r\nTo: <sip:nm2 at nm2>\r\nCall-ID: 1-9712 at 127.0.0.1\r\nCSeq: 42 OPTIONS\r\nMax-Forwards: 15\r\nContent-Length: 0\r\nContact: <sip:nm at nm>\r\nAccept: application/sdp\r\n\r\n", len = 20},
  len = 28, **parsed = 0x7fd12559ee28**, next = 0x7fd11837aa58}

In the shared memory structure, **parsed = 0x7fd12559ee28** which is in pkg memory.

I did a different test by adding 'xlog("L_WARN", "  From tag is $ft")' to the cfg file. Because this forces parsing of the from body before duplicating, it did not cause a crash.
----------

More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=454#comment1564

You are receiving this message because you have requested it from the Flyspray bugtracking system.  If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.