[sr-dev] Kamailio v4.3.2 crash in dialog module
Daniel-Constantin Mierla
miconda at gmail.com
Thu Oct 1 16:55:03 CEST 2015
Can you try with latest branch 4.3? I pushed some patches, lets see if
now this case is safe -- the trace showed an attempt to update dialog
vars in db while call was already in terminated state.
Let me know the results.
Cheers,
Daniel
On 01/10/15 13:58, M S wrote:
> Here they are,
>
> --
> (gdb) frame 0
> #0 0xb59871c3 in update_dialog_vars_dbinfo (cell=0xa5be5888, var=0x1)
> at dlg_db_handler.c:651
> /usr/src/svn-src/kamailio/modules/dialog/dlg_db_handler.c:651:17602:beg:0xb59871c3
> (gdb) p *cell
> $1 = {ref = 0, next = 0x0, prev = 0x0, h_id = 22351, h_entry = 7403,
> state = 5, lifetime = 14400, init_ts = 1443690271, start_ts = 0,
> dflags = 640, iflags = 0, sflags = 2, toroute = 0, toroute_name = {s =
> 0x0, len = 0}, from_rr_nb = 0, tl = {next = 0x0, prev = 0x0,
> timeout = 0}, callid = {s = 0xa5be594c
> "00960ujf0kkljkb5v1losip:157102701100 at 172.16.171.16sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:
> 0\r\n\r\n00\r\n\r\n\nncL\002", len = 20}, from_uri = {
> s = 0xa5be5960
> "sip:157102701100 at 172.16.171.16sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:
> 0\r\n\r\n00\r\n\r\n\nncL\002", len = 30}, to_uri = {
> s = 0xa5be597e
> "sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:
> 0\r\n\r\n00\r\n\r\n\nncL\002", len = 29}, req_uri = {s = 0xa5be599b
> "sip:00695624404 at 172.16.171.1616ent-Length:
> 0\r\n\r\n00\r\n\r\n\nncL\002", len = 29}, tag = {{
> s = 0xa5d64900
> "gp371jkh69sip:1eo0u04f at f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29~49274~6\245\204\002",
> len = 10}, {s = 0x0, len = 0}}, cseq = {{s = 0xa597c6c4 "5715\f", len
> = 4}, {s = 0x0, len = 0}}, route_set = {{s = 0x0, len = 0}, {s = 0x0,
> len = 0}}, contact = {{s = 0xa5d6490a
> "sip:1eo0u04f at f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29~49274~6\245\204\002",
> len = 77}, {s = 0x0, len = 0}}, bind_addr = {0xb65b4044, 0x0}, cbs =
> {first = 0xa5d02974, types = 41172}, profile_links = 0x0,
> vars = 0x0}
> --
>
> Thank you.
>
>
> On Thu, Oct 1, 2015 at 1:17 PM, Daniel-Constantin Mierla
> <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>
> Hello,
>
> can you get the content of cell in frame 0 -- in gdb:
>
> frame 0
> p *cell
>
> Cheers,
> Daniel
>
>
> On 01/10/15 12:33, M S wrote:
>> Hi,
>>
>> I am having kamailio crash in dialog module. I am using Kamailio
>> v4.3.2 rev. 3763f6 on Debian Wheezy 32 bit. Here is back trace.
>>
>> --
>> #0 0xb59871c3 in update_dialog_vars_dbinfo (cell=0xa5be5888,
>> var=0x1) at dlg_db_handler.c:651
>> #1 0xb5987e66 in update_dialog_dbinfo_unsafe (cell=0xa5be5888)
>> at dlg_db_handler.c:724
>> #2 0xb59895cd in dialog_update_db (ticks=79670306, param=0x0) at
>> dlg_db_handler.c:891
>> #3 0x0821aebb in compat_old_handler (ti=1274724909,
>> tl=0xa54d3704, data=0xa54d3704) at timer.c:996
>> #4 0x0821b7be in slow_timer_main () at timer.c:1130
>> #5 0x080e2176 in main_loop () at main.c:1628
>> #6 0x080e7bb5 in main (argc=13, argv=0xbff13e54) at main.c:2533
>> --
>>
>> The 'bt full' of first entry point gives this,
>>
>> --
>> #0 0xb59871c3 in update_dialog_vars_dbinfo (cell=0xa5be5888,
>> var=0x1) at dlg_db_handler.c:651
>> values = {{type = DB1_INT, nul = 0, free = -1248330084,
>> val = {int_val = 7403, ll_val = -5359754473965085461, double_val
>> = -2.0264210675928217e-50, time_val = 7403, string_val = 0x1ceb
>> <Address 0x1ceb out of bounds>, str_val = {
>> s = 0x1ceb <Address 0x1ceb out of bounds>, len =
>> -1247915084}, blob_val = {s = 0x1ceb <Address 0x1ceb out of
>> bounds>, len = -1247915084}, bitmap_val = 7403}}, {type =
>> DB1_INT, nul = 0, free = -1232817552, val = {int_val = 22351,
>> ll_val = -5310283511641385137, double_val =
>> -4.1167425495098089e-47, time_val = 22351, string_val = 0x574f
>> <Address 0x574f out of bounds>, str_val = {s = 0x574f <Address
>> 0x574f out of bounds>, len = -1236396728}, blob_val = {
>> s = 0x574f <Address 0x574f out of bounds>, len =
>> -1236396728}, bitmap_val = 22351}}, {type = DB1_STR, nul = 0,
>> free = -1241051128, val = {int_val = -1512860372, ll_val =
>> 37141845292, double_val = 1.8350509781927642e-313, time_val =
>> -1512860372,
>> string_val = 0xa5d3952c "G", str_val = {s =
>> 0xa5d3952c "G", len = 8}, blob_val = {s = 0xa5d3952c "G", len =
>> 8}, bitmap_val = 2782106924}}, {type = DB1_STR, nul = 0, free =
>> -1074710904, val = {int_val = -1513070788, ll_val = 84386275132,
>> double_val = 4.1692359523228702e-313, time_val =
>> -1513070788, string_val = 0xa5d05f3c "L", str_val = {s =
>> 0xa5d05f3c "L", len = 19}, blob_val = {s = 0xa5d05f3c "L", len =
>> 19}, bitmap_val = 2781896508}}}
>> insert_keys = {0xb59e53c4, 0xb59e53bc, 0xb59e53cc,
>> 0xb59e53d4}
>> __FUNCTION__ = "update_dialog_vars_dbinfo"
>> --
>>
>> Let me know if you need more info.
>>
>> Thank you.
>>
>>
>>
>>
>> _______________________________________________
>> sr-dev mailing list
>> sr-dev at lists.sip-router.org <mailto:sr-dev at lists.sip-router.org>
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev
>
> --
> Daniel-Constantin Mierla
> http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
> Book: SIP Routing With Kamailio - http://www.asipto.com
> Kamailio Advanced Training, Sep 28-30, 2015, in Berlin - http://asipto.com/u/kat
>
>
> _______________________________________________
> sr-dev mailing list
> sr-dev at lists.sip-router.org <mailto:sr-dev at lists.sip-router.org>
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev
>
>
--
Daniel-Constantin Mierla
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Book: SIP Routing With Kamailio - http://www.asipto.com
Kamailio Advanced Training, Sep 28-30, 2015, in Berlin - http://asipto.com/u/kat
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20151001/0c942c56/attachment-0001.html>
More information about the sr-dev
mailing list