[sr-dev] [kamailio] kamailio 4.3 crash in update_dialog_vars_dbinfo (#301)

[MayamaTakeshi]

One of the VM hosts in our lab got a hardware failure so i could not keep the tests running.
I could not reproduce the problem with kamailio stopping processing messages.
But i got the same crash again in one of the remaining VMs in the lab:

Core was generated by `/usr/local/src/git/kamailio-4.4/kamailio -x qm -m 256 -M 16 -P /var/run/kamaili'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007f889edb82d6 in update_dialog_vars_dbinfo (cell=0x7f888b80f5d0, var=0x3433) at dlg_db_handler.c:652
652		SET_STR_VALUE(values+2, var->key);
Missing separate debuginfos, use: debuginfo-install bzip2-libs-1.0.5-7.el6_0.x86_64 db4-4.7.25-19.el6_6.x86_64 elfutils-libelf-0.161-3.el6.x86_64 glibc-2.12-1.166.el6_7.1.x86_64 keyutils-libs-1.4-5.el6.x86_64 krb5-libs-1.10.3-42.el6.x86_64 libacl-2.2.49-6.el6.x86_64 libattr-2.4.44-7.el6.x86_64 libcap-2.16-5.5.el6.x86_64 libcom_err-1.41.12-22.el6.x86_64 libgcc-4.4.7-16.el6.x86_64 libselinux-2.0.94-5.8.el6.x86_64 lm_sensors-libs-3.1.1-17.el6.x86_64 lua-5.1.4-4.1.el6.x86_64 mysql-libs-5.1.73-5.el6_6.x86_64 net-snmp-libs-5.5-54.el6_7.1.x86_64 nspr-4.10.8-1.el6_6.x86_64 nss-3.19.1-3.el6_6.x86_64 nss-softokn-freebl-3.14.3-22.el6_6.x86_64 nss-util-3.19.1-1.el6_6.x86_64 openssl-1.0.1e-42.el6.x86_64 pcre-7.8-7.el6.x86_64 perl-libs-5.10.1-141.el6.x86_64 popt-1.13-7.el6.x86_64 rpm-libs-4.8.0-47.el6.x86_64 tcp_wrappers-libs-7.6-57.el6.x86_64 xz-libs-4.999.9-0.5.beta.20091007git.el6.x86_64 zlib-1.2.3-29.el6.x86_64
(gdb) bt
#0  0x00007f889edb82d6 in update_dialog_vars_dbinfo (cell=0x7f888b80f5d0, var=0x3433) at dlg_db_handler.c:652
#1  0x00007f889edb9123 in update_dialog_dbinfo_unsafe (cell=0x7f888b80f5d0) at dlg_db_handler.c:725
#2  0x00007f889edbab8d in update_dialog_dbinfo (cell=0x7f888b80f5d0) at dlg_db_handler.c:874
#3  0x00007f889edfe93a in pv_set_dlg_variable (msg=0x7f88a2102998, param=0x7f88a1f37120, op=254, val=0x7ffe0d5c19d0) at dlg_var.c:428
#4  0x00000000004a092c in lval_pvar_assign (h=0x7ffe0d5c2c30, msg=0x7f88a2102998, lv=0x7f88a20c8d30, rv=0x7f88a20c9008) at lvalue.c:351
#5  0x00000000004a1331 in lval_assign (h=0x7ffe0d5c2c30, msg=0x7f88a2102998, lv=0x7f88a20c8d30, rve=0x7f88a20c9000) at lvalue.c:399
#6  0x0000000000429a7f in do_action (h=0x7ffe0d5c2c30, a=0x7f88a20c9728, msg=0x7f88a2102998) at action.c:1429
#7  0x000000000042b429 in run_actions (h=0x7ffe0d5c2c30, a=0x7f88a20c9728, msg=0x7f88a2102998) at action.c:1548
#8  0x000000000041e93b in do_action (h=0x7ffe0d5c2c30, a=0x7f88a20d3d10, msg=0x7f88a2102998) at action.c:1044
#9  0x000000000042b429 in run_actions (h=0x7ffe0d5c2c30, a=0x7f88a20d3d10, msg=0x7f88a2102998) at action.c:1548
#10 0x000000000042bb77 in run_top_route (a=0x7f88a20d3d10, msg=0x7f88a2102998, c=0x7ffe0d5c2c30) at action.c:1634
#11 0x00007f88a1bdbe80 in reply_received (p_msg=0x7f88a2102998) at t_reply.c:2317
#12 0x0000000000491c1b in do_forward_reply (msg=0x7f88a2102998, mode=0) at forward.c:747
#13 0x0000000000493308 in forward_reply (msg=0x7f88a2102998) at forward.c:849
#14 0x00000000005119de in receive_msg (
    buf=0xa92340 "SIP/2.0 200 OK\r\nTo: <sip:09011112222 at 192.168.2.107:5060>;tag=4754SIPpTag0114640\r\nFrom: 0312341234 <sip:0312341234 at test1.com>;tag=4729SIPpTag0049083\r\nCall-ID: 49083-4729 at 192.168.0.108\r\nCSeq: 802 INVITE"..., len=811, rcv_info=0x7ffe0d5c3200) at receive.c:255
#15 0x0000000000617928 in udp_rcv_loop () at udp_server.c:495
#16 0x00000000004ac857 in main_loop () at main.c:1579
#17 0x00000000004b2f11 in main (argc=9, argv=0x7ffe0d5c3698) at main.c:2566

Meanwhile, I am running load tests against two DigitalOcean VMs so that when a crash happens there I can give access to them to you (but there, for some unknown reason, it takes more time to reproduce the problem (actually, it happened only once, after one week of load)).

---
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/301#issuecomment-141332714
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20150917/d21a515d/attachment.html>