[sr-dev] Kamailio v4.3.2 crash in dialog module

Thu Oct 1 18:15:26 CEST 2015

OK, great. I will test the update tonight if possible (the issue happened
on production server and i couldn't reproduce it on test servers, so i have
to get a maintenance window from NOC to do the deployment).

Thank you for your quick response in addressing this issue.

On Thu, Oct 1, 2015 at 4:55 PM, Daniel-Constantin Mierla <miconda at gmail.com>
wrote:

> Can you try with latest branch 4.3? I pushed some patches, lets see if now
> this case is safe -- the trace showed an attempt to update dialog vars in
> db while call was already in terminated state.
>
> Let me know the results.
>
> Cheers,
> Daniel
>
>
> On 01/10/15 13:58, M S wrote:
>
> Here they are,
>
> --
> (gdb) frame 0
> #0  0xb59871c3 in update_dialog_vars_dbinfo (cell=0xa5be5888, var=0x1) at
> dlg_db_handler.c:651
>
> /usr/src/svn-src/kamailio/modules/dialog/dlg_db_handler.c:651:17602:beg:0xb59871c3
> (gdb) p *cell
> $1 = {ref = 0, next = 0x0, prev = 0x0, h_id = 22351, h_entry = 7403, state
> = 5, lifetime = 14400, init_ts = 1443690271, start_ts = 0, dflags = 640,
> iflags = 0, sflags = 2, toroute = 0, toroute_name = {s = 0x0, len = 0},
> from_rr_nb = 0, tl = {next = 0x0, prev = 0x0,
>     timeout = 0}, callid = {s = 0xa5be594c "00960ujf0kkljkb5v1losip:157102701100 at 172.16.171.16sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:
> 0\r\n\r\n00\r\n\r\n\nncL\002"
> <00960ujf0kkljkb5v1losip:157102701100 at 172.16.171.16sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:0%5Cr%5Cn%5Cr%5Cn00%5Cr%5Cn%5Cr%5Cn%5CnncL%5C002>,
> len = 20}, from_uri = {
>     s = 0xa5be5960 "sip:157102701100 at 172.16.171.16sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:
> 0\r\n\r\n00\r\n\r\n\nncL\002", len = 30}, to_uri = {
>     s = 0xa5be597e "sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:
> 0\r\n\r\n00\r\n\r\n\nncL\002", len = 29}, req_uri = {s = 0xa5be599b "sip:00695624404 at 172.16.171.1616ent-Length:
> 0\r\n\r\n00\r\n\r\n\nncL\002", len = 29}, tag = {{
>       s = 0xa5d64900
> "gp371jkh69sip:1eo0u04f at f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29~49274~6\245\204\002"
> <gp371jkh69sip:1eo0u04f at f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29~49274~6%5C245%5C204%5C002>,
> len = 10}, {s = 0x0, len = 0}}, cseq = {{s = 0xa597c6c4 "5715\f", len = 4},
> {s = 0x0, len = 0}}, route_set = {{s = 0x0, len = 0}, {s = 0x0,
>       len = 0}}, contact = {{s = 0xa5d6490a
> "sip:1eo0u04f at f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29~49274~6\245\204\002",
> len = 77}, {s = 0x0, len = 0}}, bind_addr = {0xb65b4044, 0x0}, cbs = {first
> = 0xa5d02974, types = 41172}, profile_links = 0x0,
>   vars = 0x0}
> --
>
> Thank you.
>
>
> On Thu, Oct 1, 2015 at 1:17 PM, Daniel-Constantin Mierla <
> <miconda at gmail.com>miconda at gmail.com> wrote:
>
>> Hello,
>>
>> can you get the content of cell in frame 0 -- in gdb:
>>
>> frame 0
>> p *cell
>>
>> Cheers,
>> Daniel
>>
>>
>> On 01/10/15 12:33, M S wrote:
>>
>> Hi,
>>
>> I am having kamailio crash in dialog module. I am using Kamailio v4.3.2
>> rev. 3763f6 on Debian Wheezy 32 bit. Here is back trace.
>>
>> --
>> #0  0xb59871c3 in update_dialog_vars_dbinfo (cell=0xa5be5888, var=0x1) at
>> dlg_db_handler.c:651
>> #1  0xb5987e66 in update_dialog_dbinfo_unsafe (cell=0xa5be5888) at
>> dlg_db_handler.c:724
>> #2  0xb59895cd in dialog_update_db (ticks=79670306, param=0x0) at
>> dlg_db_handler.c:891
>> #3  0x0821aebb in compat_old_handler (ti=1274724909, tl=0xa54d3704,
>> data=0xa54d3704) at timer.c:996
>> #4  0x0821b7be in slow_timer_main () at timer.c:1130
>> #5  0x080e2176 in main_loop () at main.c:1628
>> #6  0x080e7bb5 in main (argc=13, argv=0xbff13e54) at main.c:2533
>> --
>>
>> The 'bt full' of first entry point gives this,
>>
>> --
>> #0  0xb59871c3 in update_dialog_vars_dbinfo (cell=0xa5be5888, var=0x1) at
>> dlg_db_handler.c:651
>>         values = {{type = DB1_INT, nul = 0, free = -1248330084, val =
>> {int_val = 7403, ll_val = -5359754473965085461, double_val =
>> -2.0264210675928217e-50, time_val = 7403, string_val = 0x1ceb <Address
>> 0x1ceb out of bounds>, str_val = {
>>                 s = 0x1ceb <Address 0x1ceb out of bounds>, len =
>> -1247915084}, blob_val = {s = 0x1ceb <Address 0x1ceb out of bounds>, len =
>> -1247915084}, bitmap_val = 7403}}, {type = DB1_INT, nul = 0, free =
>> -1232817552, val = {int_val = 22351,
>>               ll_val = -5310283511641385137, double_val =
>> -4.1167425495098089e-47, time_val = 22351, string_val = 0x574f <Address
>> 0x574f out of bounds>, str_val = {s = 0x574f <Address 0x574f out of
>> bounds>, len = -1236396728}, blob_val = {
>>                 s = 0x574f <Address 0x574f out of bounds>, len =
>> -1236396728}, bitmap_val = 22351}}, {type = DB1_STR, nul = 0, free =
>> -1241051128, val = {int_val = -1512860372, ll_val = 37141845292, double_val
>> = 1.8350509781927642e-313, time_val = -1512860372,
>>               string_val = 0xa5d3952c "G", str_val = {s = 0xa5d3952c "G",
>> len = 8}, blob_val = {s = 0xa5d3952c "G", len = 8}, bitmap_val =
>> 2782106924}}, {type = DB1_STR, nul = 0, free = -1074710904, val = {int_val
>> = -1513070788, ll_val = 84386275132,
>>               double_val = 4.1692359523228702e-313, time_val =
>> -1513070788, string_val = 0xa5d05f3c "L", str_val = {s = 0xa5d05f3c "L",
>> len = 19}, blob_val = {s = 0xa5d05f3c "L", len = 19}, bitmap_val =
>> 2781896508}}}
>>         insert_keys = {0xb59e53c4, 0xb59e53bc, 0xb59e53cc, 0xb59e53d4}
>>         __FUNCTION__ = "update_dialog_vars_dbinfo"
>> --
>>
>> Let me know if you need more info.
>>
>> Thank you.
>>
>>
>>
>>
>> _______________________________________________
>> sr-dev mailing listsr-dev at lists.sip-router.orghttp://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev
>>
>>
>> --
>> Daniel-Constantin Mierlahttp://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
>> Book: SIP Routing With Kamailio - http://www.asipto.com
>> Kamailio Advanced Training, Sep 28-30, 2015, in Berlin - http://asipto.com/u/kat
>>
>>
>> _______________________________________________
>> sr-dev mailing list
>> sr-dev at lists.sip-router.org
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev
>>
>>
>
> --
> Daniel-Constantin Mierlahttp://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
> Book: SIP Routing With Kamailio - http://www.asipto.com
> Kamailio Advanced Training, Sep 28-30, 2015, in Berlin - http://asipto.com/u/kat
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20151001/7800a077/attachment.html>