[sr-dev] a new master crash in tm module

Daniel-Constantin Mierla miconda at gmail.com
Wed Sep 23 13:58:02 CEST 2015 

This time was no longer in a free operations.

Can you the test repeat with last master branch? I pushed a cleanup
patch there.

Daniel


On 23/09/15 13:04, Juha Heinanen wrote:
> Daniel-Constantin Mierla writes:
>
>> This one looks like a double free of the transaction structure.
>>
>> I pushed a patch to master branch that will print a WARN message for
>> each of transaction free operations. Can you test with it, wait for
>> crash and then send me all the logs containing:
>>
>> ===== freeing transaction
>>
>> Also, send the bt of the corefiles.
> below, juha
>
> (gdb) bt
> #0  0x00007f01cae89302 in init_branches (t=0x7f01c5e55248) at h_table.c:274
> #1  0x00007f01cae89765 in build_cell (p_msg=0x7f01cd361fd8) at h_table.c:369
> #2  0x00007f01cae97708 in new_t (p_msg=0x7f01cd361fd8) at t_lookup.c:1269
> #3  0x00007f01cae989b4 in t_newtran (p_msg=0x7f01cd361fd8) at t_lookup.c:1409
> #4  0x00007f01caf24b80 in w_t_newtran (p_msg=0x7f01cd361fd8, foo=0x0, bar=0x0)
>     at tm.c:1364
> #5  0x0000000000465936 in do_action (h=0x7ffec9ce60f0, a=0x7f01cd5b2160, 
>     msg=0x7f01cd361fd8) at action.c:1053
> #6  0x0000000000472419 in run_actions (h=0x7ffec9ce60f0, a=0x7f01cd5b2160, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #7  0x0000000000472a86 in run_actions_safe (h=0x7ffec9ceb960, 
>     a=0x7f01cd5b2160, msg=0x7f01cd361fd8) at action.c:1613
> #8  0x000000000042255f in rval_get_int (h=0x7ffec9ceb960, msg=0x7f01cd361fd8, 
>     i=0x7ffec9ce6434, rv=0x7f01cd5b3120, cache=0x0) at rvalue.c:912
> #9  0x0000000000426b2b in rval_expr_eval_int (h=0x7ffec9ceb960, 
>     msg=0x7f01cd361fd8, res=0x7ffec9ce6434, rve=0x7f01cd5b3118)
>     at rvalue.c:1910
> #10 0x0000000000426f53 in rval_expr_eval_int (h=0x7ffec9ceb960, 
>     msg=0x7f01cd361fd8, res=0x7ffec9ce6568, rve=0x7f01cd5b3818)
>     at rvalue.c:1918
> #11 0x000000000042710f in rval_expr_eval_int (h=0x7ffec9ceb960, 
>     msg=0x7f01cd361fd8, res=0x7ffec9ce6688, rve=0x7f01cd5b3f18)
>     at rvalue.c:1958
> #12 0x000000000046541b in do_action (h=0x7ffec9ceb960, a=0x7f01cd5b4c10, 
> ---Type <return> to continue, or q <return> to quit---
>     msg=0x7f01cd361fd8) at action.c:1029
> #13 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd5b1db0, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #14 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd588cc8, 
>     msg=0x7f01cd361fd8) at action.c:677
> #15 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd556920, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #16 0x000000000046eec5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd5895d0, 
>     msg=0x7f01cd361fd8) at action.c:1219
> #17 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd5895d0, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #18 0x00000000004658a5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd5896f0, 
>     msg=0x7f01cd361fd8) at action.c:1044
> #19 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd48f798, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #20 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd814938, 
>     msg=0x7f01cd361fd8) at action.c:677
> #21 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd80dd40, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #22 0x00000000004658a5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd814b78, 
>     msg=0x7f01cd361fd8) at action.c:1044
> #23 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd814b78, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #24 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd2565b8, 
> ---Type <return> to continue, or q <return> to quit---
>     msg=0x7f01cd361fd8) at action.c:677
> #25 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd2565b8, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #26 0x00000000004658a5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd25f678, 
>     msg=0x7f01cd361fd8) at action.c:1044
> #27 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd249008, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #28 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd1fd628, 
>     msg=0x7f01cd361fd8) at action.c:677
> #29 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd1e6d40, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #30 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd0ce3c0, 
>     msg=0x7f01cd361fd8) at action.c:677
> #31 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd0ce3c0, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #32 0x00000000004658a5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd0ce600, 
>     msg=0x7f01cd361fd8) at action.c:1044
> #33 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd08ecf0, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #34 0x00000000004622cf in do_action (h=0x7ffec9ceb960, a=0x7f01cd08d9e8, 
>     msg=0x7f01cd361fd8) at action.c:677
> #35 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd08d9e8, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #36 0x00000000004658a5 in do_action (h=0x7ffec9ceb960, a=0x7f01cd08dce0, 
> ---Type <return> to continue, or q <return> to quit---
>     msg=0x7f01cd361fd8) at action.c:1044
> #37 0x0000000000472419 in run_actions (h=0x7ffec9ceb960, a=0x7f01cd078578, 
>     msg=0x7f01cd361fd8) at action.c:1548
> #38 0x0000000000472b92 in run_top_route (a=0x7f01cd078578, msg=0x7f01cd361fd8, 
>     c=0x0) at action.c:1634
> #39 0x0000000000578c47 in receive_msg (
>     buf=0x12e8090 "INVITE sip:+35892345678 at test.tutpro.com SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.43.192:55121;branch=z9hG4bK8bc1730673082e90;rport\r\nContact: <sip:test at test.tutpro.com;gr=urn:uuid:47759291-c9db-4eb3-a540-5e68"..., len=1393, 
>     rcv_info=0x7f01c5e23080) at receive.c:195
> #40 0x000000000060986b in receive_tcp_msg (
>     tcpbuf=0x7f01c5e23358 "INVITE sip:+35892345678 at test.tutpro.com SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.43.192:55121;branch=z9hG4bK8bc1730673082e90;rport\r\nContact: <sip:test at test.tutpro.com;gr=urn:uuid:47759291-c9db-4eb3-a540-5e68"..., 
>     len=1393, rcv_info=0x7f01c5e23080, con=0x7f01c5e23068) at tcp_read.c:1247
> #41 0x000000000060b14f in tcp_read_req (con=0x7f01c5e23068, 
>     bytes_read=0x7ffec9cebd94, read_flags=0x7ffec9cebd9c) at tcp_read.c:1401
> #42 0x000000000060e2ae in handle_io (fm=0x7f01cda72790, events=1, idx=-1)
>     at tcp_read.c:1624
> #43 0x000000000060165d in io_wait_loop_epoll (h=0xa68780 <io_w>, t=2, repeat=0)
>     at io_wait.h:1061
> #44 0x000000000060f33f in tcp_receive_loop (unix_sock=45) at tcp_read.c:1733
> #45 0x00000000004f129b in tcp_init_children () at tcp_main.c:4788
> #46 0x000000000052f93b in main_loop () at main.c:1664
> ---Type <return> to continue, or q <return> to quit---
> #47 0x00000000005354e8 in main (argc=17, argv=0x7ffec9cec378) at main.c:2566
>

-- 
Daniel-Constantin Mierla
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Book: SIP Routing With Kamailio - http://www.asipto.com
Kamailio Advanced Training, Sep 28-30, 2015, in Berlin - http://asipto.com/u/kat

More information about the sr-dev mailing list