[sr-dev] [kamailio/kamailio] Kamailio crash with in-memory publ_cache = 2 (Issue #3008)

[Joe Mordica]

```
#0  0x00007f6ecceca4d7 in core_case_hash (s1=0x7ffc48039be8, s2=0x7ffc48039bf8, size=0) at ../../core/hashes.h:317
#1  0x00007f6ecced4fe9 in ps_ptable_search (ptm=0x7ffc48039be0, mmode=1, rmode=0) at hash.c:1250
#2  0x00007f6eccee6347 in ps_cache_get_p_notify_body (pres_uri=..., event=0x7f6dcc35da78, etag=0x0, contact=0x7ffc4803a730) at notify.c:894
#3  0x00007f6ecceea400 in get_p_notify_body (pres_uri=..., event=0x7f6dcc35da78, etag=0x0, contact=0x7ffc4803a730) at notify.c:1068
#4  0x00007f6eccef2841 in send_notify_request (subs=0x7ffc4803a660, watcher_subs=0x0, n_body=0x0, force_null_body=0) at notify.c:1658
#5  0x00007f6eccef577a in notify (subs=0x7ffc4803a660, watcher_subs=0x0, n_body=0x0, force_null_body=0, aux_body_processing=0) at notify.c:1817
#6  0x00007f6eccf77e3a in update_subscription (msg=0x7f6ed2abfdc0, subs=0x7ffc4803a660, to_tag_gen=1, sent_reply=0x7ffc4803a49c) at subscribe.c:679
#7  0x00007f6eccf7f541 in handle_subscribe (msg=0x7f6ed2abfdc0, watcher_user=..., watcher_domain=...) at subscribe.c:1216
#8  0x00007f6eccf7b17d in handle_subscribe0 (msg=0x7f6ed2abfdc0) at subscribe.c:993
#9  0x000000000043cab3 in do_action (h=0x7ffc4803d160, a=0x7f6ed29974f8, msg=0x7f6ed2abfdc0) at core/action.c:1076
#10 0x000000000044a137 in run_actions (h=0x7ffc4803d160, a=0x7f6ed29974f8, msg=0x7f6ed2abfdc0) at core/action.c:1581
#11 0x000000000043ca1c in do_action (h=0x7ffc4803d160, a=0x7f6ed2997880, msg=0x7f6ed2abfdc0) at core/action.c:1067
#12 0x000000000044a137 in run_actions (h=0x7ffc4803d160, a=0x7f6ed2997880, msg=0x7f6ed2abfdc0) at core/action.c:1581
#13 0x000000000043ca75 in do_action (h=0x7ffc4803d160, a=0x7f6ed29979d0, msg=0x7f6ed2abfdc0) at core/action.c:1071
#14 0x000000000044a137 in run_actions (h=0x7ffc4803d160, a=0x7f6ed297eea0, msg=0x7f6ed2abfdc0) at core/action.c:1581
#15 0x0000000000439032 in do_action (h=0x7ffc4803d160, a=0x7f6ed28e2e88, msg=0x7f6ed2abfdc0) at core/action.c:700
#16 0x000000000044a137 in run_actions (h=0x7ffc4803d160, a=0x7f6ed28d5ac8, msg=0x7f6ed2abfdc0) at core/action.c:1581
#17 0x000000000044a86e in run_top_route (a=0x7f6ed28d5ac8, msg=0x7f6ed2abfdc0, c=0x0) at core/action.c:1666
#18 0x000000000056d8c5 in receive_msg (
    buf=0xb6ed80 "SUBSCRIBE sip:mydomain SIP/2.0\r\nVia: SIP/2.0/UDP 10.10.0.54:5062;rport;branch=z9hG4bK1741788869\r\nFrom: \"Open Classroom\" <sip:230-midvt at mydomain>;tag=248246191\r\nTo: <sip:mydomain>\r\nCall-ID: 46"..., len=425, rcv_info=0x7ffc4803d8c0) at core/receive.c:423
#19 0x00000000006a3e7e in udp_rcv_loop () at core/udp_server.c:543
#20 0x0000000000429cfb in main_loop () at main.c:1683
#21 0x00000000004338ca in main (argc=13, argv=0x7ffc4803e1c8) at main.c:2856
```

It looks like that subscribe message above caused the issue?

I also have another core dump which shows a subscribe from another endpoint:
```
#0  0x00007f6ecceca4d7 in core_case_hash (s1=0x7ffc48039be8, s2=0x7ffc48039bf8, size=0) at ../../core/hashes.h:317
#1  0x00007f6ecced4fe9 in ps_ptable_search (ptm=0x7ffc48039be0, mmode=1, rmode=0) at hash.c:1250
#2  0x00007f6eccee6347 in ps_cache_get_p_notify_body (pres_uri=..., event=0x7f6dcc35da78, etag=0x0, contact=0x7ffc4803a730) at notify.c:894
#3  0x00007f6ecceea400 in get_p_notify_body (pres_uri=..., event=0x7f6dcc35da78, etag=0x0, contact=0x7ffc4803a730) at notify.c:1068
#4  0x00007f6eccef2841 in send_notify_request (subs=0x7ffc4803a660, watcher_subs=0x0, n_body=0x0, force_null_body=0) at notify.c:1658
#5  0x00007f6eccef577a in notify (subs=0x7ffc4803a660, watcher_subs=0x0, n_body=0x0, force_null_body=0, aux_body_processing=0) at notify.c:1817
#6  0x00007f6eccf77e3a in update_subscription (msg=0x7f6ed2abfdc0, subs=0x7ffc4803a660, to_tag_gen=1, sent_reply=0x7ffc4803a49c) at subscribe.c:679
#7  0x00007f6eccf7f541 in handle_subscribe (msg=0x7f6ed2abfdc0, watcher_user=..., watcher_domain=...) at subscribe.c:1216
#8  0x00007f6eccf7b17d in handle_subscribe0 (msg=0x7f6ed2abfdc0) at subscribe.c:993
#9  0x000000000043cab3 in do_action (h=0x7ffc4803d160, a=0x7f6ed29974f8, msg=0x7f6ed2abfdc0) at core/action.c:1076
#10 0x000000000044a137 in run_actions (h=0x7ffc4803d160, a=0x7f6ed29974f8, msg=0x7f6ed2abfdc0) at core/action.c:1581
#11 0x000000000043ca1c in do_action (h=0x7ffc4803d160, a=0x7f6ed2997880, msg=0x7f6ed2abfdc0) at core/action.c:1067
#12 0x000000000044a137 in run_actions (h=0x7ffc4803d160, a=0x7f6ed2997880, msg=0x7f6ed2abfdc0) at core/action.c:1581
#13 0x000000000043ca75 in do_action (h=0x7ffc4803d160, a=0x7f6ed29979d0, msg=0x7f6ed2abfdc0) at core/action.c:1071
#14 0x000000000044a137 in run_actions (h=0x7ffc4803d160, a=0x7f6ed297eea0, msg=0x7f6ed2abfdc0) at core/action.c:1581
#15 0x0000000000439032 in do_action (h=0x7ffc4803d160, a=0x7f6ed28e2e88, msg=0x7f6ed2abfdc0) at core/action.c:700
#16 0x000000000044a137 in run_actions (h=0x7ffc4803d160, a=0x7f6ed28d5ac8, msg=0x7f6ed2abfdc0) at core/action.c:1581
#17 0x000000000044a86e in run_top_route (a=0x7f6ed28d5ac8, msg=0x7f6ed2abfdc0, c=0x0) at core/action.c:1666
#18 0x000000000056d8c5 in receive_msg (
    buf=0xb6ed80 "SUBSCRIBE sip:mydomain:8060 SIP/2.0\r\nVia: SIP/2.0/UDP 10.10.0.34:5062;rport;branch=z9hG4bK2447480306\r\nFrom: \"Cherie Blessing\" <sip:229-midvt at mydomain:8060>;tag=3505784675\r\nTo: <sip:mydomain:8"..., len=444, rcv_info=0x7ffc4803d8c0) at core/receive.c:423
#19 0x00000000006a3e7e in udp_rcv_loop () at core/udp_server.c:543
#20 0x0000000000429cfb in main_loop () at main.c:1683
#21 0x00000000004338ca in main (argc=13, argv=0x7ffc4803e1c8) at main.c:2856
```

I replaced my actual domain with `mydomain` above. Let me know if you need more info. I also have the `bt full` but seems to verbose to post here?

Thanks!

-- 
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/3008#issuecomment-1023873028
You are receiving this because you are subscribed to this thread.

Message ID: <kamailio/kamailio/issues/3008/1023873028 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-dev/attachments/20220127/6fe50522/attachment-0001.htm>