[sr-dev] [kamailio] kamailio 4.3 crash in update_dialog_vars_dbinfo (#301)

[MayamaTakeshi]

I am testing commit cecdd0817052046e634152d6e512165451b5f6d4 in our lab.
The crash happened again, but this time, it was when processing "200 OK":
```
(gdb) bt
#0  0x00007f060c5ee5fc in update_dialog_vars_dbinfo (cell=0x7f05f919c150, var=0x3433) at dlg_db_handler.c:652
#1  0x00007f060c5ef449 in update_dialog_dbinfo_unsafe (cell=0x7f05f919c150) at dlg_db_handler.c:725
#2  0x00007f060c5f0eb3 in update_dialog_dbinfo (cell=0x7f05f919c150) at dlg_db_handler.c:874
#3  0x00007f060c635549 in pv_set_dlg_variable (msg=0x7f060f8de1f8, param=0x7f060f73ac40, op=254, val=0x7fffc9fbb670) at dlg_var.c:428
#4  0x00000000004a0744 in lval_pvar_assign (h=0x7fffc9fbc8d0, msg=0x7f060f8de1f8, lv=0x7f060f8a8de0, rv=0x7f060f8a9018) at lvalue.c:351
#5  0x00000000004a1149 in lval_assign (h=0x7fffc9fbc8d0, msg=0x7f060f8de1f8, lv=0x7f060f8a8de0, rve=0x7f060f8a9010) at lvalue.c:399
#6  0x00000000004292bb in do_action (h=0x7fffc9fbc8d0, a=0x7f060f8a9710, msg=0x7f060f8de1f8) at action.c:1429
#7  0x000000000042ac60 in run_actions (h=0x7fffc9fbc8d0, a=0x7f060f8a9710, msg=0x7f060f8de1f8) at action.c:1548
#8  0x000000000041e203 in do_action (h=0x7fffc9fbc8d0, a=0x7f060f8b33e8, msg=0x7f060f8de1f8) at action.c:1044
#9  0x000000000042ac60 in run_actions (h=0x7fffc9fbc8d0, a=0x7f060f8b33e8, msg=0x7f060f8de1f8) at action.c:1548
#10 0x000000000042b3ae in run_top_route (a=0x7f060f8b33e8, msg=0x7f060f8de1f8, c=0x7fffc9fbc8d0) at action.c:1634
#11 0x00007f060f419c50 in reply_received (p_msg=0x7f060f8de1f8) at t_reply.c:2315
#12 0x0000000000491a4f in do_forward_reply (msg=0x7f060f8de1f8, mode=0) at forward.c:747
#13 0x0000000000493132 in forward_reply (msg=0x7f060f8de1f8) at forward.c:849
#14 0x0000000000511d8e in receive_msg (
    buf=0xa851c0 "SIP/2.0 200 OK\r\nTo: <sip:09011112222 at 192.168.2.103:5060>;tag=2793SIPpTag0112907\r\nFrom: 0312341234 <sip:0312341234 at test1.com>;tag=2778SIPpTag0035787\r\nCall-ID: 35787-2778 at 192.168.0.104\r\nCSeq: 802 INVITE"..., len=810, rcv_info=0x7fffc9fbcea0) at receive.c:255
#15 0x0000000000618278 in udp_rcv_loop () at udp_server.c:495
#16 0x00000000004ac736 in main_loop () at main.c:1573
#17 0x00000000004b2d41 in main (argc=7, argv=0x7fffc9fbd338) at main.c:2533
```

Also, another instance stopped processing messages.
Then I checked dialog stats and got this (absurd value for active_dialogs):
```
[root at lab002185-flip-server ~]# kamctl fifo get_statistics dialog:
dialog:active_dialogs = 18446744073709551613
dialog:early_dialogs = 2
dialog:expired_dialogs = 9180
dialog:failed_dialogs = 860123
dialog:processed_dialogs = 4815738
```

I will prepare the DigitalOcean VMs again to try to reproduce the problem there with commit cecdd0817052046e634152d6e512165451b5f6d4



---
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/301#issuecomment-139923016
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20150913/f64fd374/attachment.html>