[sr-dev] a new master crash in tm module

[Juha Heinanen]

Juha Heinanen writes:

> after the domain module fix, my proxy started, but after handling a few
> messages, it crashed like this:
> 
> (gdb) where
> #0  0x00007f916bcd8b92 in relay_reply (t=0x7f9166c6af98, 
>     p_msg=0xffffffffffffffff, branch=0, msg_status=408, 
>     cancel_data=0x7fff4a6b44a0, do_put_on_wait=0) at t_reply.c:1786
> #1  0x00007f916bd0aa50 in fake_reply (t=0x7f9166c6af98, branch=0, code=408)
>     at timer.c:328
> #2  0x00007f916bd0aeeb in final_response_handler (r_buf=0x7f9166c6b1b0, 
>     t=0x7f9166c6af98) at timer.c:500
> #3  0x00007f916bd0af94 in retr_buf_handler (ticks=1738640990, 
>     tl=0x7f9166c6b1d0, p=0xfffffffe) at timer.c:558
> #4  0x00000000004ac2d0 in slow_timer_main () at timer.c:1130
> #5  0x000000000052f397 in main_loop () at main.c:1634
> #6  0x00000000005354e8 in main (argc=17, argv=0x7fff4a6b4968) at main.c:2566

this morning i have had three cashes:

46476 -rw------- 1 root root 59711488 Sep 23 08:09 core.sip-proxy.sig11.25403
46476 -rw------- 1 root root 59752448 Sep 23 08:09 core.sip-proxy.sig11.25434
46488 -rw------- 1 root root 59752448 Sep 23 07:23 core.sip-proxy.sig11.24546

the one in above is from the last one.  the first two go like this:

(gdb) where
#0  0x00007fc34d8218db in free_cell (dead_cell=0x7fc3488173b0) at h_table.c:133
#1  0x00007fc34d823635 in free_hash_table () at h_table.c:432
#2  0x00007fc34d8a9ef6 in tm_shutdown () at t_funcs.c:90
#3  0x000000000053dea9 in destroy_modules () at sr_module.c:805
#4  0x0000000000524039 in cleanup (show_status=1) at main.c:519
#5  0x000000000052564d in shutdown_children (sig=15, show_status=1)
    at main.c:661
#6  0x0000000000527cf5 in handle_sigs () at main.c:752
#7  0x0000000000530288 in main_loop () at main.c:1707
#8  0x00000000005354e8 in main (argc=17, argv=0x7fff4b7e6a48) at main.c:2566

(gdb) where
#0  0x00000000004aaf1b in timer_list_expire (t=478423712, h=0x7fc348081360, 
    slow_l=0x7fc348082948, slow_mark=330) at timer.c:862
#1  0x00000000004ab3e5 in timer_handler () at timer.c:938
#2  0x00000000004ab853 in timer_main () at timer.c:977
#3  0x000000000052f690 in main_loop () at main.c:1650
#4  0x00000000005354e8 in main (argc=17, argv=0x7fff4b7e6a48) at main.c:2566

-- juha