[sr-dev] [kamailio/kamailio] 5.5.1 crash processing INVITE and CANCEL at almost the same time (Issue #3156)

[Victor Seva]

### Description

While a INVITE is been processed the CANCEL of that transaction is been processed in other process almost at the same time

### Troubleshooting

#### Reproduction

Quite difficult to reproduce I would say

#### Debugging Data

```
Reading symbols from /usr/sbin/kamailio...
Reading symbols from /usr/lib/debug/.build-id/e3/9bd8ad0900c980149b00579cce26035c9cb118.debug...

warning: Can't open file /dev/zero (deleted) during file-backed mapping note processing
[New LWP 4136750]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/sbin/kamailio -P /run/kamailio/kamailio.proxy.pid -f /etc/kamailio/proxy/k'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  atomic_dec_and_test_int (var=0x20) at ../../core/parser/../mem/../atomic/atomic_x86.h:222
222     ../../core/parser/../mem/../atomic/atomic_x86.h: No such file or directory.
(gdb) backtrace
#0  atomic_dec_and_test_int (var=0x20) at ../../core/parser/../mem/../atomic/atomic_x86.h:222
0000001  t_unref (p_msg=<optimized out>) at t_lookup.c:1514
#2  0x000055eee962d69b in exec_post_script_cb (msg=msg at entry=0x7f7e265822c8, type=type at entry=REQUEST_CB_TYPE)
    at core/script_cb.c:182
0000003  0x000055eee95dfcbe in receive_msg (
    buf=buf at entry=0x55eee9a00740 <buf> "INVITE sip:... at fake.dom:5060;transport=udp SIP/2.0\r\nRecord-
Route: <sip:X.X.X.X;r2=on;lr=on;ftag=1E7F0816-6299BCF10003883E-7FFFF700;ngcplb=yes;socket=udp:Y.Y.Y.Y:5060>\r
\nRe"..., len=<optimized out>, rcv_info=rcv_info at entry=0x7ffc96d12af0) at core/receive.c:520
#4  0x000055eee96d4c40 in udp_rcv_loop () at core/udp_server.c:543
#5  0x000055eee94db634 in main_loop () at main.c:1730
#6  0x000055eee94d2d2c in main (argc=<optimized out>, argv=<optimized out>) at main.c:3053
```

#### Log Messages

Notice that both messages came in the same second ( IPs and numbers have been changed )

```
Jun  3 09:49:05 sipwise2-prx03a proxy[4136750]: NOTICE: DEFAULT_ROUTE <script>: New request on proxy - M=INVITE R=«sip:+49...... at X.X.X.X
:5060;transport=udp» F=«sip:+49... at fake.dom» T=«sip:+49... at Y.Y.Y.Z» IP=«Y.Y.Y.Z»:«5060» («Y.Y.Y.Y»:«5060»)
 ID=«31668-TN-030322e6-0904f8ba1 at fake.dom_b2b-1» UA='Cirpack/v4.88 (gw_sip)' DESTIP=«Y.Y.Y.G»:«5062»
```
```
Jun  3 09:49:05 sipwise2-prx03a proxy[4136755]: NOTICE: DEFAULT_ROUTE <script>: New request on proxy - M=CANCEL R=«sip:+49... at X.X.X.X
:5060;transport=udp» F=«sip:+49... at fake.dom» T=«sip:+49... at Y.Y.Y.Z» IP=«Y.Y.Y.Y»:«5060» («Y.Y.Y.Y»:«5060
») ID=«31668-TN-030322e6-0904f8ba1 at fake.dom_b2b-1» UA='<null>' DESTIP=«Z.Z.Z.Z»:«5062»
Jun  3 09:49:05 sipwise2-prx03a proxy[4136755]: NOTICE: DEFAULT_ROUTE <script>: Sending reply S=100 Trying M=CANCEL fs='«Z.Z.Z.Z»:«5062»' du
='«Y.Y.Y.Y»:«5060»' - R=«sip:+49... at X.X.X.X:5060;transport=udp» ID=«31668-TN-030322e6-0904f8ba1 at fake.dom_b2b-1» UA='<n
ull>'
```

### Additional Information

This is the Sipwise flavor 5.5.1-1+0~mr9.5.3.2

-- 
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/3156
You are receiving this because you are subscribed to this thread.

Message ID: <kamailio/kamailio/issues/3156 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-dev/attachments/20220620/ab9f0cc7/attachment-0001.htm>