[sr-dev] [kamailio] jsonrpc-c notification does not free shm memory (#296)

[Daniel-Constantin Mierla]

Are the backtrace and the syslog messages from the same case? One is reporting a crash at line 551 and the other at 553.

```
(gdb) frame 3
#3  0x00007fe5d724f9ea in free_pipe_cmd (cmd=0x7fe5dca4a1d0) at jsonrpc_io.c:551
```

```
Aug 26 13:53:49 SIP-B03 /home/pkg/kamailio/sbin/kamailio[108633]: : <core> [mem/f_malloc.c:562]: fm_free(): BUG: fm_free: bad pointer 0x7fc30000000b (out of memory block!), called from jsonrpc-c: jsonrpc_io.c: free_pipe_cmd(553) - aborting
```

Also, rather interesting that pointer fields of the cmd are null (0x0), but the free is reporting a non-NULL pointer:

```
$1 = {method = 0x0, params = 0x0, cb_route = 0x0, err_route = 0x0, t_hash = 0, t_label = 0, notify_only = 1, cb_pv = 0x0, msg = 0x0}
```

Can you reproduce this crash easily?

---
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/296#issuecomment-135439537
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20150827/6df8f175/attachment.html>