[sr-dev] [kamailio/kamailio] Segfault when working as sipcapture node (#723)

[Sebastian Damm]

We are running Kamailio 4.4.2 as a sipcapture node and every now and then it crashes. This is what the backtrace says:

```
(gdb) bt
#0  get_str_fparam (dst=dst at entry=0x7ffe50aa0610, msg=msg at entry=0x7f105b8654b8, param=param at entry=0x1a) at sr_module.c:1650
#1  0x00007f1059213346 in w_report_capture (_m=0x7f105b8654b8, _table=0x7f105b8648b8 " \250q[\020\177", _corr=0x7f105b864938 "\230\237q[\020\177",
    _data=0x1a <Address 0x1a out of bounds>) at sipcapture.c:1040
#2  0x000000000042b618 in do_action (h=h at entry=0x7ffe50aa3ab0, a=a at entry=0x7f105b719640, msg=msg at entry=0x7f105b8654b8) at action.c:1060
#3  0x000000000042a10a in run_actions (h=h at entry=0x7ffe50aa3ab0, a=0x7f105b718530, msg=msg at entry=0x7f105b8654b8) at action.c:1549
#4  0x000000000042bcf2 in do_action (h=h at entry=0x7ffe50aa3ab0, a=a at entry=0x7f105b71a1e8, msg=msg at entry=0x7f105b8654b8) at action.c:1049
#5  0x000000000042a10a in run_actions (h=h at entry=0x7ffe50aa3ab0, a=0x7f105b71a1e8, msg=msg at entry=0x7f105b8654b8) at action.c:1549
#6  0x000000000042bcf2 in do_action (h=h at entry=0x7ffe50aa3ab0, a=a at entry=0x7f105b71a318, msg=msg at entry=0x7f105b8654b8) at action.c:1049
#7  0x000000000042a10a in run_actions (h=h at entry=0x7ffe50aa3ab0, a=0x7f105b71a318, msg=msg at entry=0x7f105b8654b8) at action.c:1549
#8  0x000000000042bcf2 in do_action (h=h at entry=0x7ffe50aa3ab0, a=a at entry=0x7f105b71a448, msg=msg at entry=0x7f105b8654b8) at action.c:1049
#9  0x000000000042a10a in run_actions (h=h at entry=0x7ffe50aa3ab0, a=0x7f105b71a448, msg=msg at entry=0x7f105b8654b8) at action.c:1549
#10 0x000000000042bcf2 in do_action (h=h at entry=0x7ffe50aa3ab0, a=a at entry=0x7f105b71a578, msg=msg at entry=0x7f105b8654b8) at action.c:1049
#11 0x000000000042a10a in run_actions (h=h at entry=0x7ffe50aa3ab0, a=0x7f105b71a578, msg=msg at entry=0x7f105b8654b8) at action.c:1549
#12 0x000000000042bcf2 in do_action (h=h at entry=0x7ffe50aa3ab0, a=a at entry=0x7f105b719888, msg=msg at entry=0x7f105b8654b8) at action.c:1049
#13 0x000000000042a10a in run_actions (h=h at entry=0x7ffe50aa3ab0, a=0x7f105b719888, msg=msg at entry=0x7f105b8654b8) at action.c:1549
#14 0x000000000042bcf2 in do_action (h=h at entry=0x7ffe50aa3ab0, a=a at entry=0x7f105b7199b8, msg=msg at entry=0x7f105b8654b8) at action.c:1049
#15 0x000000000042a10a in run_actions (h=h at entry=0x7ffe50aa3ab0, a=0x7f105b7199b8, msg=msg at entry=0x7f105b8654b8) at action.c:1549
#16 0x000000000042bcf2 in do_action (h=h at entry=0x7ffe50aa3ab0, a=a at entry=0x7f105b719ae8, msg=msg at entry=0x7f105b8654b8) at action.c:1049
#17 0x000000000042a10a in run_actions (h=h at entry=0x7ffe50aa3ab0, a=0x7f105b719ae8, msg=msg at entry=0x7f105b8654b8) at action.c:1549
#18 0x000000000042bcf2 in do_action (h=h at entry=0x7ffe50aa3ab0, a=a at entry=0x7f105b719c18, msg=msg at entry=0x7f105b8654b8) at action.c:1049
#19 0x000000000042a10a in run_actions (h=h at entry=0x7ffe50aa3ab0, a=a at entry=0x7f105b6abc80, msg=msg at entry=0x7f105b8654b8) at action.c:1549
#20 0x00000000004375d0 in run_top_route (a=0x7f105b6abc80, msg=msg at entry=0x7f105b8654b8, c=c at entry=0x0) at action.c:1635
#21 0x0000000000504386 in receive_msg (
    buf=buf at entry=0xa366b7 "PUBLISH sip:collector at 109.68.96.98:5099 SIP/2.0\r\nVia: SIP/2.0/UDP 192.168.178.32:5060;branch=z9hG4bK122ceb41cd4777873\r\nRoute: <sip:proxy.live.sipgate.de:5060;lr>\r\nMax-Forwards: 70\r\nFrom: \"2362760e6\" <"..., len=<optimized out>, len at entry=728, rcv_info=rcv_info at entry=0x7ffe50aa3e80) at receive.c:240
#22 0x00007f105920ce17 in parsing_hepv3_message (buf=<optimized out>, len=<optimized out>) at hep.c:498
#23 0x00007f105920e80d in hepv3_received (buf=<optimized out>, len=<optimized out>, ri=<optimized out>) at hep.c:230
#24 0x00000000005f6e17 in udp_rcv_loop () at udp_server.c:446
#25 0x00000000004b2625 in main_loop () at main.c:1600
#26 0x0000000000427e2b in main (argc=<optimized out>, argv=<optimized out>) at main.c:2616
(gdb)
```

Does anybody see anything already? We can provide more info if needed. 

(And since it's the sipcapture module: @adubovikov)

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/723
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20160722/b7545e36/attachment-0001.html>