[sr-dev] a new master crash in tm module

Juha Heinanen jh at tutpro.com
Wed Sep 23 13:04:11 CEST 2015 

Daniel-Constantin Mierla writes:

> This one looks like a double free of the transaction structure.
> 
> I pushed a patch to master branch that will print a WARN message for
> each of transaction free operations. Can you test with it, wait for
> crash and then send me all the logs containing:
> 
> ===== freeing transaction
> 
> Also, send the bt of the corefiles.

below, juha

(gdb) bt
#0  0x00007f01cae89302 in init_branches (t=0x7f01c5e55248) at h_table.c:274
#1  0x00007f01cae89765 in build_cell (p_msg=0x7f01cd361fd8) at h_table.c:369
#2  0x00007f01cae97708 in new_t (p_msg=0x7f01cd361fd8) at t_lookup.c:1269
#3  0x00007f01cae989b4 in t_newtran (p_msg=0x7f01cd361fd8) at t_lookup.c:1409
#4  0x00007f01caf24b80 in w_t_newtran (p_msg=0x7f01cd361fd8, foo=0x0, bar=0x0)
    at tm.c:1364
#5  0x0000000000465936 in do_action (h=0x7ffec9ce60f0, a=0x7f01cd5b2160, 
    msg=0x7f01cd361fd8) at action.c:1053
#6  0x0000000000472419 in run_actions (h=0x7ffec9ce60f0, a=0x7f01cd5b2160, 
    msg=0x7f01cd361fd8) at action.c:1548
#7  0x0000000000472a86 in run_actions_safe (h=0x7ffec9ceb960, 
    a=0x7f01cd5b2160, msg=0x7f01cd361fd8) at action.c:1613
#8  0x000000000042255f in rval_get_int (h=0x7ffec9ceb960, msg=0x7f01cd361fd8, 
    i=0x7ffec9ce6434, rv=0x7f01cd5b3120, cache=0x0) at rvalue.c:912
#9  0x0000000000426b2b in rval_expr_eval_int (h=0x7ffec9ceb960, 
    msg=0x7f01cd361fd8, res=0x7ffec9ce6434, rve=0x7f01cd5b3118)
    at rvalue.c:1910
#10 0x0000000000426f53 in rval_expr_eval_int (h=0x7ffec9ceb960, 
    msg=0x7f01cd361fd8, res=0x7ffec9ce6568, rve=0x7f01cd5b3818)
    at rvalue.c:1918
#11 0x000000000042710f in rval_expr_eval_int (h=0x7ffec9ceb960, 
    msg=0x7f01cd361fd8, res=0x7ffec9ce6688, rve=0x7f01cd5b3f18)
    at rvalue.c:1958
#12 0x000000000046541b in do_action (h=0x7ffec9ceb960, a=0x7f01cd5b4c10, 
---Type <return> to continue, or q <return> to quit---
    msg=0x7f01cd361fd8) at action.c:1029
#13 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd5b1db0, 
    msg=0x7f01cd361fd8) at action.c:1548
#14 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd588cc8, 
    msg=0x7f01cd361fd8) at action.c:677
#15 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd556920, 
    msg=0x7f01cd361fd8) at action.c:1548
#16 0x000000000046eec5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd5895d0, 
    msg=0x7f01cd361fd8) at action.c:1219
#17 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd5895d0, 
    msg=0x7f01cd361fd8) at action.c:1548
#18 0x00000000004658a5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd5896f0, 
    msg=0x7f01cd361fd8) at action.c:1044
#19 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd48f798, 
    msg=0x7f01cd361fd8) at action.c:1548
#20 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd814938, 
    msg=0x7f01cd361fd8) at action.c:677
#21 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd80dd40, 
    msg=0x7f01cd361fd8) at action.c:1548
#22 0x00000000004658a5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd814b78, 
    msg=0x7f01cd361fd8) at action.c:1044
#23 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd814b78, 
    msg=0x7f01cd361fd8) at action.c:1548
#24 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd2565b8, 
---Type <return> to continue, or q <return> to quit---
    msg=0x7f01cd361fd8) at action.c:677
#25 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd2565b8, 
    msg=0x7f01cd361fd8) at action.c:1548
#26 0x00000000004658a5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd25f678, 
    msg=0x7f01cd361fd8) at action.c:1044
#27 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd249008, 
    msg=0x7f01cd361fd8) at action.c:1548
#28 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd1fd628, 
    msg=0x7f01cd361fd8) at action.c:677
#29 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd1e6d40, 
    msg=0x7f01cd361fd8) at action.c:1548
#30 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd0ce3c0, 
    msg=0x7f01cd361fd8) at action.c:677
#31 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd0ce3c0, 
    msg=0x7f01cd361fd8) at action.c:1548
#32 0x00000000004658a5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd0ce600, 
    msg=0x7f01cd361fd8) at action.c:1044
#33 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd08ecf0, 
    msg=0x7f01cd361fd8) at action.c:1548
#34 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd08d9e8, 
    msg=0x7f01cd361fd8) at action.c:677
#35 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd08d9e8, 
    msg=0x7f01cd361fd8) at action.c:1548
#36 0x00000000004658a5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd08dce0, 
---Type <return> to continue, or q <return> to quit---
    msg=0x7f01cd361fd8) at action.c:1044
#37 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd078578, 
    msg=0x7f01cd361fd8) at action.c:1548
#38 0x0000000000472b92 in run_top_route (a=0x7f01cd078578, msg=0x7f01cd361fd8, 
    c=0x0) at action.c:1634
#39 0x0000000000578c47 in receive_msg (
    buf=0x12e8090 "INVITE sip:+35892345678 at test.tutpro.com SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.43.192:55121;branch=z9hG4bK8bc1730673082e90;rport\r\nContact: <sip:test at test.tutpro.com;gr=urn:uuid:47759291-c9db-4eb3-a540-5e68"..., len=1393, 
    rcv_info=0x7f01c5e23080) at receive.c:195
#40 0x000000000060986b in receive_tcp_msg (
    tcpbuf=0x7f01c5e23358 "INVITE sip:+35892345678 at test.tutpro.com SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.43.192:55121;branch=z9hG4bK8bc1730673082e90;rport\r\nContact: <sip:test at test.tutpro.com;gr=urn:uuid:47759291-c9db-4eb3-a540-5e68"..., 
    len=1393, rcv_info=0x7f01c5e23080, con=0x7f01c5e23068) at tcp_read.c:1247
#41 0x000000000060b14f in tcp_read_req (con=0x7f01c5e23068, 
    bytes_read=0x7ffec9cebd94, read_flags=0x7ffec9cebd9c) at tcp_read.c:1401
#42 0x000000000060e2ae in handle_io (fm=0x7f01cda72790, events=1, idx=-1)
    at tcp_read.c:1624
#43 0x000000000060165d in io_wait_loop_epoll (h=0xa68780 <io_w>, t=2, repeat=0)
    at io_wait.h:1061
#44 0x000000000060f33f in tcp_receive_loop (unix_sock=45) at tcp_read.c:1733
#45 0x00000000004f129b in tcp_init_children () at tcp_main.c:4788
#46 0x000000000052f93b in main_loop () at main.c:1664
---Type <return> to continue, or q <return> to quit---
#47 0x00000000005354e8 in main (argc=17, argv=0x7ffec9cec378) at main.c:2566

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: warnings
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20150923/59e4f91e/attachment-0001.ksh>

More information about the sr-dev mailing list