[sr-dev] [kamailio/kamailio] crash after t_resume() when calling msg_apply_changes() (#676)

[Daniel-Constantin Mierla]

The msg_apply_changes() must be used only before the transaction is created. A related discussion was few months on mailing list:

  * http://lists.sip-router.org/pipermail/sr-users/2015-December/091059.html

I guess there was a race in this particular case, because:

```
#2  0x00000000005ec6e7 in qm_free (qm=0x7efc5c71c010, p=0x0, file=0x6f2c25 "<core>: parser/hf.c", func=0x0, line=10007232) at mem/q_malloc.c:441
```

But th p==0 is checked for safety in the function:

  * https://github.com/kamailio/kamailio/blob/master/mem/q_malloc.c#L458

Setting mem_safety=1 in kamailio.cfg would have prevented this particular crash, but perhaps it is still vulnerable to crash because of other pointers being invalid later.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/676#issuecomment-226766865
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20160617/b4de058c/attachment.html>