Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 1.6
    • Fix Version/s: 1.6
    • Component/s: freeswitch-core
    • Labels:
      None
    • Environment:
      Debian 8.1 Jessie in OpenVZ container
    • CPU Architecture:
      x86
    • Kernel:
      Linux
    • Userland:
      GNU/Linux
    • Distribution:
      Debian
    • Distribution Version:
      Debian 8 jessie
    • Compiler:
      gcc
    • FreeSWITCH GIT Revision:
      FreeSWITCH version: 1.7.0+git~20150810T224801Z~28ae331c93~32bit (git 28ae331 2015-08-10 22:48:01Z 32bit)
    • GIT Master Revision hash::
      28ae331c93

      Description

      Hi,

      We use latest Kazoo platform with FreeSWITCH version: 1.4.15~64bit (CentOS)
      Few day ago FreeSWITCH started to crash several times per day without any logs/errors.

      We built a new server on Debian 8.1, and got the latest FS from git:
      FreeSWITCH version: 1.7.0+git~20150810T224801Z~28ae331c93~32bit (git 28ae331 2015-08-10 22:48:01Z 32bit)

      We built FS with these modules:
      applications/mod_commands
      applications/mod_conference
      applications/mod_dptools
      applications/mod_http_cache
      applications/mod_spandsp
      asr_tts/mod_flite
      codecs/mod_amr
      codecs/mod_g723_1
      codecs/mod_h26x
      codecs/mod_ilbc
      codecs/mod_opus
      codecs/mod_siren
      dialplans/mod_dialplan_xml
      endpoints/mod_loopback
      endpoints/mod_sofia
      event_handlers/mod_event_socket
      event_handlers/mod_kazoo
      formats/mod_local_stream
      formats/mod_shout
      formats/mod_sndfile
      formats/mod_tone_stream
      loggers/mod_console
      loggers/mod_logfile
      loggers/mod_syslog
      say/mod_say_en
      say/mod_say_ru

      Then we started the new server with coredumps enabled and got some segfault. Here are the details:

      [Thread debugging using libthread_db enabled]
      Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
      Core was generated by `/usr/local/freeswitch/bin/freeswitch -c -nonat -u freeswitch -g daemon'.
      Program terminated with signal SIGSEGV, Segmentation fault.
      #0 strlen () at ../sysdeps/i386/i586/strlen.S:51
      51 ../sysdeps/i386/i586/strlen.S: No such file or directory.

      (gdb) bt
      #0 strlen () at ../sysdeps/i386/i586/strlen.S:51
      #1 0xb0634513 in url_xtra (url=0xb5c16df0) at url.c:1039
      #2 0xb06367a3 in urltag_xtra (t=0xb64e3d5c, offset=237) at url_tag.c:72
      #3 0xb0615a14 in t_xtra (offset=237, t=0xb64e3d5c) at ./sofia-sip/su_tag_inline.h:94
      #4 t_filter_with (dst=0x0, t=0xb64e3874, src=0xb64e3d5c, bb=0xb64e37bc) at su_taglist.c:1058
      #5 0xb0616c11 in t_filter (dst=0x0, filter=0xb64e3874, src=0xb64e3d5c, bb=0xb64e37bc) at su_taglist.c:489
      #6 0xb0616e54 in tl_filter (b=0xb64e37bc, src=0xb64e37fc, filter=0xb64e3874, dst=0x0) at su_taglist.c:530
      #7 tl_afilter (home=0xb5c15800, filter=0xb64e3874, src=0xb64e37fc) at su_taglist.c:558
      #8 0xb06170a2 in tl_filtered_tlist (home=0xb5c15800, filter=0xb64e3874, tag=0xb06f00f4 <siptag_from>, value=-1236387576) at su_taglist.c:605
      #9 0xb05c53fa in nua_handle_save_tags (nh=0xb5c15800, tags=0xb64e3d5c) at nua_params.c:1286
      #10 0xb05bfa5e in nh_create_handle (nua=0xb1b11c30, hmagic=0x0, tags=0xb64e3d5c) at nua_common.c:120
      #11 0xb05b852f in nua_handle (nua=0xb1b11c30, hmagic=0x0, tag=0xb06ee284 <nutag_url>, value=-1245614608) at nua.c:315
      #12 0xb0529075 in general_event_handler (event=0xb3002170) at mod_sofia.c:5029
      #13 0xb752ee88 in switch_event_deliver (event=0xb64e42dc) at src/switch_event.c:403
      #14 0xb752f024 in switch_event_dispatch_thread (thread=0xb6563fb0, obj=0x8638470) at src/switch_event.c:332
      #15 0xb75ba45e in dummy_worker (opaque=0xb6563fb0) at threadproc/unix/thread.c:138
      #16 0xb7423d97 in start_thread (arg=0xb64e4b40) at pthread_create.c:309
      #17 0xb7155dfe in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:129
      (gdb)

      bt full:

      0 strlen () at ../sysdeps/i386/i586/strlen.S:51
      No locals.
      #1 0xb0634513 in url_xtra (url=0xb5c16df0) at url.c:1039
              len_host = <optimized out>
              len_params = <optimized out>
              len_fragment = <optimized out>
              len_scheme = 0
              len_user = <optimized out>
              len_password = <optimized out>
              len_port = <optimized out>
              len_path = <optimized out>
              len_headers = <optimized out>
              xtra = <optimized out>


      It seems to use it crashes on this:

      libs/sofia-sip/libsofia-sip-ua/url/url.c:

      len_user = url->url_user ? strlen(url->url_user) + 1 : 0;


      We are still waiting for a coredump on a main FS server, just to check whether they both crash on the same problem.

      Do you need extra info about that? Anyway, will try to provide as much info as possible, as soon as we get it. So we will post here later.

      Thank you in advance.

        Attachments

          Activity

            People

            • Assignee:
              mikej Mike Jerris
              Reporter:
              hiddenman Andrew Kornilov
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: