[SR-Users] crash in timer

[Juha Heinanen]

Any idea what could cause the crash shown in the bt below?  This is with
Kamailio 5.5.

-- Juha

[New LWP 12061]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
bt Core was generated by `/usr/bin/sip-proxy -f /etc/sip-proxy/sip-proxy.cfg -P /run/sip-proxy/sip-proxy.'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x0000563d3b390c5d in timer_list_expire (t=1584008014, h=0x7f7a1e76bb40, slow_l=0x7f7a1e76d680, slow_mark=63909) at core/timer.c:846
846	core/timer.c: No such file or directory.
(gdb) bt full
#0  0x0000563d3b390c5d in timer_list_expire (t=1584008014, h=0x7f7a1e76bb40, slow_l=0x7f7a1e76d680, slow_mark=63909) at core/timer.c:846
        tl = 0x7f7a226ecbd8
        ret = 0
#1  0x0000563d3b391219 in timer_handler () at core/timer.c:922
        saved_ticks = 1584008014
        run_slow_timer = 0
        i = 421
        __func__ = "timer_handler"
#2  0x0000563d3b391742 in timer_main () at core/timer.c:961
No locals.
#3  0x0000563d3b2c94de in main_loop () at main.c:1839
        i = 8
        pid = 0
        si = 0x0
        si_desc = "udp receiver child=7 sock=46.182.160.20:5060\000\000\000\000\003\000\000\000 \000\000\000\000\071CU\356xL\375\000\000\000\000\000\000\000\000\210\300m;=V\000\000\000\000\000\000\000\000\000\000\260\334\371Jz\177\000\000\263\331r;=V\000\000\000\000\000 \000\000\000\000\340\b3;\374\177\000\000\t\365U;=V\000"
        nrprocs = 8
        woneinit = 1
        __func__ = "main_loop"
#4  0x0000563d3b2d44aa in main (argc=17, argv=0x7ffc3b330e28) at main.c:3053
        cfg_stream = 0x563d3b9ea290
        c = -1
        r = 0
        tmp = 0x7ffc3b331f3f ""
        tmp_len = 1260628273
        port = 32634
        proto = 0
        ahost = 0x0
        aport = 0
--Type <RET> for more, q to quit, c to continue without paging--c
        options = 0x563d3b6dece0 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:"
        ret = -1
        seed = 1970794883
        rfd = 4
        debug_save = 0
        debug_flag = 0
        dont_fork_cnt = 0
        n_lst = 0x0
        p = 0xffff00001f80 <error: Cannot access memory at address 0xffff00001f80>
        st = {st_dev = 21, st_ino = 21649, st_nlink = 2, st_mode = 16832, st_uid = 109, st_gid = 115, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1620846563, tv_nsec = 71986646}, st_mtim = {tv_sec = 1628122861, tv_nsec = 116913769}, st_ctim = {tv_sec = 1628122861, tv_nsec = 616909103}, __glibc_reserved = {0, 0, 0}}
        tbuf = "\000\000\000\000\000\000\000\000\b\000\000\000\000\000\000\000\060\067&Kz\177\000\000\000\000\000\000\000\000\000\000\240\241>;\374\177\000\000\364:$Kz\177\000\000\b\000\000\000\000\000\000\000\230\242>;\374\177\000\000\060\067&Kz\177\000\000\310\v3;\374\177\000\000\304\v3;\374\177", '\000' <repeats 18 times>, "\230\242>;\374\177\000\000\250\241>;\374\177\000\000'\256\002Kz\177\000\000&\260be\000\000\000\000\060\r3;\374\177\000\000\300\212\225\001\000\000\000\000\220\f3;\374\177\000\000\200\f3;\374\177\000\000\310\v3;\374\177\000\000X7&Kz\177\000\000\001", '\000' <repeats 31 times>...
        option_index = 0
        long_options = {{name = 0x563d3b6e0f3f "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x563d3b6dc4e1 "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x563d3b6e0f44 "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x563d3b6e0f4a "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x563d3b6e0f50 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x563d3b6e0f59 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, {name = 0x563d3b6e0f63 "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x563d3b6e0f6d "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x563d3b6e0f78 "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x563d3b6e0f81 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x563d3b6e0f8c "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x563d3b6e0f92 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, {name = 0x563d3b6e0f9c "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
        __func__ = "main"