[sr-dev] Kamailio v4.3.2 crash in dialog module

Daniel-Constantin Mierla miconda at gmail.com
Thu Oct 1 18:28:22 CEST 2015


Have you run the last version on testing instance? Or you couldn't
reproduce before there?

Daniel

On 01/10/15 18:15, M S wrote:
> OK, great. I will test the update tonight if possible (the issue
> happened on production server and i couldn't reproduce it on test
> servers, so i have to get a maintenance window from NOC to do the
> deployment).
>
> Thank you for your quick response in addressing this issue.
>
>
>
> On Thu, Oct 1, 2015 at 4:55 PM, Daniel-Constantin Mierla
> <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>
>     Can you try with latest branch 4.3? I pushed some patches, lets
>     see if now this case is safe -- the trace showed an attempt to
>     update dialog vars in db while call was already in terminated state.
>
>     Let me know the results.
>
>     Cheers,
>     Daniel
>
>
>     On 01/10/15 13:58, M S wrote:
>>     Here they are,
>>
>>     --
>>     (gdb) frame 0
>>     #0  0xb59871c3 in update_dialog_vars_dbinfo (cell=0xa5be5888,
>>     var=0x1) at dlg_db_handler.c:651
>>     /usr/src/svn-src/kamailio/modules/dialog/dlg_db_handler.c:651:17602:beg:0xb59871c3
>>     (gdb) p *cell
>>     $1 = {ref = 0, next = 0x0, prev = 0x0, h_id = 22351, h_entry =
>>     7403, state = 5, lifetime = 14400, init_ts = 1443690271, start_ts
>>     = 0, dflags = 640, iflags = 0, sflags = 2, toroute = 0,
>>     toroute_name = {s = 0x0, len = 0}, from_rr_nb = 0, tl = {next =
>>     0x0, prev = 0x0,
>>         timeout = 0}, callid = {s = 0xa5be594c
>>     "00960ujf0kkljkb5v1losip:157102701100 at 172.16.171.16sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:
>>     0\r\n\r\n00\r\n\r\n\nncL\002"
>>     <mailto:00960ujf0kkljkb5v1losip:157102701100 at 172.16.171.16sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:0%5Cr%5Cn%5Cr%5Cn00%5Cr%5Cn%5Cr%5Cn%5CnncL%5C002>,
>>     len = 20}, from_uri = {
>>         s = 0xa5be5960
>>     "sip:157102701100 at 172.16.171.16sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:
>>     0\r\n\r\n00\r\n\r\n\nncL\002", len = 30}, to_uri = {
>>         s = 0xa5be597e
>>     "sip:00695624404 at 172.16.171.16sip:00695624404 at 172.16.171.1616ent-Length:
>>     0\r\n\r\n00\r\n\r\n\nncL\002", len = 29}, req_uri = {s =
>>     0xa5be599b "sip:00695624404 at 172.16.171.1616ent-Length:
>>     0\r\n\r\n00\r\n\r\n\nncL\002", len = 29}, tag = {{
>>           s = 0xa5d64900
>>     "gp371jkh69sip:1eo0u04f at f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29~49274~6\245\204\002"
>>     <mailto:gp371jkh69sip:1eo0u04f at f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29%7E49274%7E6%5C245%5C204%5C002>,
>>     len = 10}, {s = 0x0, len = 0}}, cseq = {{s = 0xa597c6c4 "5715\f",
>>     len = 4}, {s = 0x0, len = 0}}, route_set = {{s = 0x0, len = 0},
>>     {s = 0x0,
>>           len = 0}}, contact = {{s = 0xa5d6490a
>>     "sip:1eo0u04f at f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29~49274~6\245\204\002",
>>     len = 77}, {s = 0x0, len = 0}}, bind_addr = {0xb65b4044, 0x0},
>>     cbs = {first = 0xa5d02974, types = 41172}, profile_links = 0x0,
>>       vars = 0x0}
>>     --
>>
>>     Thank you.
>>
>>
>>     On Thu, Oct 1, 2015 at 1:17 PM, Daniel-Constantin Mierla
>>     <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>>
>>         Hello,
>>
>>         can you get the content of cell in frame 0 -- in gdb:
>>
>>         frame 0
>>         p *cell
>>
>>         Cheers,
>>         Daniel
>>
>>
>>         On 01/10/15 12:33, M S wrote:
>>>         Hi,
>>>
>>>         I am having kamailio crash in dialog module. I am using
>>>         Kamailio v4.3.2 rev. 3763f6 on Debian Wheezy 32 bit. Here is
>>>         back trace.
>>>
>>>         --
>>>         #0  0xb59871c3 in update_dialog_vars_dbinfo
>>>         (cell=0xa5be5888, var=0x1) at dlg_db_handler.c:651
>>>         #1  0xb5987e66 in update_dialog_dbinfo_unsafe
>>>         (cell=0xa5be5888) at dlg_db_handler.c:724
>>>         #2  0xb59895cd in dialog_update_db (ticks=79670306,
>>>         param=0x0) at dlg_db_handler.c:891
>>>         #3  0x0821aebb in compat_old_handler (ti=1274724909,
>>>         tl=0xa54d3704, data=0xa54d3704) at timer.c:996
>>>         #4  0x0821b7be in slow_timer_main () at timer.c:1130
>>>         #5  0x080e2176 in main_loop () at main.c:1628
>>>         #6  0x080e7bb5 in main (argc=13, argv=0xbff13e54) at main.c:2533
>>>         --
>>>
>>>         The 'bt full' of first entry point gives this,
>>>
>>>         --
>>>         #0  0xb59871c3 in update_dialog_vars_dbinfo
>>>         (cell=0xa5be5888, var=0x1) at dlg_db_handler.c:651
>>>                 values = {{type = DB1_INT, nul = 0, free =
>>>         -1248330084, val = {int_val = 7403, ll_val =
>>>         -5359754473965085461, double_val = -2.0264210675928217e-50,
>>>         time_val = 7403, string_val = 0x1ceb <Address 0x1ceb out of
>>>         bounds>, str_val = {
>>>                         s = 0x1ceb <Address 0x1ceb out of bounds>,
>>>         len = -1247915084}, blob_val = {s = 0x1ceb <Address 0x1ceb
>>>         out of bounds>, len = -1247915084}, bitmap_val = 7403}},
>>>         {type = DB1_INT, nul = 0, free = -1232817552, val = {int_val
>>>         = 22351,
>>>                       ll_val = -5310283511641385137, double_val =
>>>         -4.1167425495098089e-47, time_val = 22351, string_val =
>>>         0x574f <Address 0x574f out of bounds>, str_val = {s = 0x574f
>>>         <Address 0x574f out of bounds>, len = -1236396728}, blob_val = {
>>>                         s = 0x574f <Address 0x574f out of bounds>,
>>>         len = -1236396728}, bitmap_val = 22351}}, {type = DB1_STR,
>>>         nul = 0, free = -1241051128, val = {int_val = -1512860372,
>>>         ll_val = 37141845292, double_val = 1.8350509781927642e-313,
>>>         time_val = -1512860372,
>>>                       string_val = 0xa5d3952c "G", str_val = {s =
>>>         0xa5d3952c "G", len = 8}, blob_val = {s = 0xa5d3952c "G",
>>>         len = 8}, bitmap_val = 2782106924}}, {type = DB1_STR, nul =
>>>         0, free = -1074710904, val = {int_val = -1513070788, ll_val
>>>         = 84386275132,
>>>                       double_val = 4.1692359523228702e-313, time_val
>>>         = -1513070788, string_val = 0xa5d05f3c "L", str_val = {s =
>>>         0xa5d05f3c "L", len = 19}, blob_val = {s = 0xa5d05f3c "L",
>>>         len = 19}, bitmap_val = 2781896508}}}
>>>                 insert_keys = {0xb59e53c4, 0xb59e53bc, 0xb59e53cc,
>>>         0xb59e53d4}
>>>                 __FUNCTION__ = "update_dialog_vars_dbinfo"
>>>         --
>>>
>>>         Let me know if you need more info.
>>>
>>>         Thank you.
>>>
>>>
>>>
>>>
>>>         _______________________________________________
>>>         sr-dev mailing list
>>>         sr-dev at lists.sip-router.org <mailto:sr-dev at lists.sip-router.org>
>>>         http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev
>>
>>         -- 
>>         Daniel-Constantin Mierla
>>         http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>>         Book: SIP Routing With Kamailio - http://www.asipto.com
>>         Kamailio Advanced Training, Sep 28-30, 2015, in Berlin - http://asipto.com/u/kat
>>
>>
>>         _______________________________________________
>>         sr-dev mailing list
>>         sr-dev at lists.sip-router.org <mailto:sr-dev at lists.sip-router.org>
>>         http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev
>>
>>
>
>     -- 
>     Daniel-Constantin Mierla
>     http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>     Book: SIP Routing With Kamailio - http://www.asipto.com
>     Kamailio Advanced Training, Sep 28-30, 2015, in Berlin - http://asipto.com/u/kat
>
>

-- 
Daniel-Constantin Mierla
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Book: SIP Routing With Kamailio - http://www.asipto.com
Kamailio Advanced Training, Sep 28-30, 2015, in Berlin - http://asipto.com/u/kat

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20151001/c31a37d9/attachment-0001.html>


More information about the sr-dev mailing list