Menu
▾
▴
#233 Crash in update_subscription
On 1.5.3, I've experienced a crash in:
#0 0x003a4758 in core_hash (s1=0xbff2be18, s2=0xb0106438, size=512)
at ../../mem/../hash_func.h:56
#1 0x003a3c94 in update_subscription (msg=0x81814c8, subs=0xbff2be18,
init_req=0) at subscribe.c:305
#2 0x003a5895 in handle_subscribe (msg=0x81814c8, str1=0x0, str2=0x0)
at subscribe.c:699
#3 0x08054832 in do_action (a=0x817c960, msg=0x81814c8) at action.c:962
#4 0x0805178f in run_action_list (a=0x817c960, msg=0x81814c8) at action.c:139
....
(gdb) frame 1
#1 0x003a3c94 in update_subscription (msg=0x81814c8, subs=0xbff2be18,
init_req=0) at subscribe.c:305
305 hash_code= core_hash(&subs->pres_uri, &subs->event->name, shtable_size);
(gdb) print subs->pres_uri
$6 = {s = 0x0, len = 0}
The packet itself is not very special:
SUBSCRIBE sip:1.2.3.4:5060 SIP/2.0
Record-Route: <sip:xuser@1.2.3.5:5082;lr=on;ftag=4f14dbf6>
Via: SIP/2.0/UDP 1.2.3.4;branch=z9hG4bKcb3.50cbb994.0
Via: SIP/2.0/UDP 1.2.3.5:5082;branch=z9hG4bKcb3.daee2e26.0
Via: SIP/2.0/UDP 1.2.3.6:35466;received=2.3.4.5;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466
Max-Forwards: 68
Contact: <sip:ua4801b4b1a694a26ed2e-214270@1.2.3.5:5082>
To: "xxx"<sip:1234567@sip.domain:5060>;tag=074c644b03d489754716d14789f86fc8-a6d7
From: "yyy"<sip:2345678@sip.domain:5060>;tag=4f14dbf6
Call-ID: NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.
CSeq: 3 SUBSCRIBE
Expires: 3600
User-Agent: Bria release 2.5.4 stamp 53956
Event: presence
Content-Length: 0
Hi Stanislaw,
I have looked and looked through the code and it seems impossible to have in that point NULL pres_uri. Can you please run a 'bt full' on that core and send the output? Just to have more info as I am probably missing something out.
Regards,
Anca
Here it is... a bit ugly, but still :) (numbers and domains anonymised)
(gdb) bt full
#0 0x003a4758 in core_hash (s1=0xbff2be18, s2=0xb0106438, size=512) at ../../mem/../hash_func.h:56
p = 0x0
end = 0x0
v = 2953762100
h = 0
#1 0x003a3c94 in update_subscription (msg=0x81814c8, subs=0xbff2be18, init_req=0) at subscribe.c:305
hash_code = 33
reply_code = 200
__FUNCTION__ = "update_subscription"
#2 0x003a5895 in handle_subscribe (msg=0x81814c8, str1=0x0, str2=0x0) at subscribe.c:699
init_req = 0
subs = {pres_uri = {s = 0x0, len = 0}, to_user = {
s = 0x8154d2a "1234567@sip.domain:5060>;tag=074c644b03d489754716d14789f86fc8-a6d7\r\nFrom: \"xxx\"<sip:1234567@sip.domain:5060>;tag=4f14dbf6\r\nCall-ID: NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\n"..., len = 7}, to_domain = {
s = 0x8154d32 "sip.domain:5060>;tag=074c644b03d489754716d14789f86fc8-a6d7\r\nFrom: \"xxx\"<sip:1234567@sip.domain:5060>;tag=4f14dbf6\r\nCall-ID: NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3 "..., len = 16}, from_user = {
s = 0x8154d8e "1234567@sip.domain:5060>;tag=4f14dbf6\r\nCall-ID: NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3 SUBSCRIBE\r\nExpires: 3600\r\nUser-Agent: Bria release 2.5.4 stamp 53956\r\nEvent: presence\r\nConte"..., len = 7}, from_domain = {
s = 0x8154d96 "sip.domain:5060>;tag=4f14dbf6\r\nCall-ID: NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3 SUBSCRIBE\r\nExpires: 3600\r\nUser-Agent: Bria release 2.5.4 stamp 53956\r\nEvent: presence\r\nContent-Lengt"..., len = 16}, event = 0xb0106438, event_id = {s = 0x0, len = 0}, to_tag = {
s = 0x8154d4d "074c644b03d489754716d14789f86fc8-a6d7\r\nFrom: \"xxx\"<sip:1234567@sip.domain:5060>;tag=4f14dbf6\r\nCall-ID: NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3 SUBSCRIBE\r\nExpires: 3600\r\nU"..., len = 37}, from_tag = {
s = 0x8154db1 "4f14dbf6\r\nCall-ID: NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3 SUBSCRIBE\r\nExpires: 3600\r\nUser-Agent: Bria release 2.5.4 stamp 53956\r\nEvent: presence\r\nContent-Length: 0\r\n\r\n", len = 8}, callid = {
s = 0x8154dc4 "NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3 SUBSCRIBE\r\nExpires: 3600\r\nUser-Agent: Bria release 2.5.4 stamp 53956\r\nEvent: presence\r\nContent-Length: 0\r\n\r\n", len = 44}, sockinfo = 0x817a120, remote_cseq = 3, local_cseq = 0, contact = {
s = 0x8154ce5 "sip:ua4801b4b1a694a26ed2e-214270@79.135.125.160:5082>\r\nTo: \"yyy\"<sip:2345678@sip.domain:5060>;tag=074c644b03d489754716d14789f86fc8-a6d7\r\nFrom: \"xxx\"<sip:1234567@sip.domain:5060>;"..., len = 52}, local_contact = {s = 0x11ffe480 "sip:79.135.125.158:5060",
len = 23}, record_route = {s = 0x8182e88 "<sip:79.135.125.154;lr=on;ftag=0xepefsv3r>", len = 42}, expires = 3600, status = 1, reason = {s = 0x0,
len = 0}, version = 0, db_flag = 0, auth_rules_doc = 0x0, next = 0x0}
event = (pres_ev_t *) 0xb0106438
parsed_event = (event_t *) 0x8179c28
ev_param = (param_t *) 0x0
found = 0
reason = {s = 0x0, len = 0}
uri = {user = {s = 0xb014bf38 "�\206\001", len = -1340816032}, passwd = {s = 0xb014c560 "\r\n", len = -1340816804}, host = {
s = 0x1 <Address 0x1 out of bounds>, len = 0}, port = {s = 0x9 <Address 0x9 out of bounds>, len = 0}, params = {s = 0x0, len = -1340816051}, headers = {
s = 0xb014c55d "0\r\n\r\n", len = 13}, port_no = 51884, proto = 45076, type = 2954151156, transport = {s = 0xb014caac "\001", len = -1340816138},
ttl = {s = 0xb014c978 "\001", len = -1340816266}, user_param = {s = 0xb014c978 "\001", len = -1340816250}, maddr = {s = 0xb014c978 "\001",
len = -1340816266}, method = {s = 0xb014c978 "\001", len = -1340816211}, lr = {
s = 0xb014c4a9 "tag=4f14dbf6\r\nCall-ID: NDJkNWJhZWNlYTYyZjY0Yzk2NTYyY2U3YjIwNDU2MTA.\r\nCSeq: 3 SUBSCRIBE\r\nExpires: 3600\r\nUser-Agent: Bria release 2.5.4 stamp 53956\r\nEvent: presence\r\nContent-Length: 0\r\n\r\n", len = -1340816211}, r2 = {s = 0x11b651 "\205�u�\203�\024[]�U\211�\203�\020�E�\001",
len = -1342756620}, transport_val = {s = 0x0, len = -1340814508}, ttl_val = {s = 0xc1c <Address 0xc1c out of bounds>, len = 0}, user_param_val = {
s = 0xb014cb30 "\r", len = -1340814544}, maddr_val = {s = 0x0, len = 0}, method_val = {s = 0x0, len = -1340814772}, lr_val = {
s = 0xb014bf38 "�\206\001", len = 0}, r2_val = {s = 0xb014c1f0 "", len = -1074610424}}
reply_code = 500
reply_str = {s = 0x3b68b7 "Server Internal Error", len = 21}
ret = 0
__FUNCTION__ = "handle_subscribe"
#3 0x08054832 in do_action (a=0x817c960, msg=0x81814c8) at action.c:962
val_s = {s = 0x81814c8 "�\206\001", len = 1273421}
expires = -1074609848
aux = {s = 0xbff2bf58 "�����z", len = 8822813}
ret = -5
v = -1074608032
to = (union sockaddr_union *) 0xbff2c108
p = (struct proxy_l *) 0x8092051
tmp = 0x817c888 "\002"
new_uri = 0x81814c8 "�\206\001"
end = 0x0
crt = 0x322fe0 "�\2350"
len = 12
user = 301981592
uri = {user = {s = 0x8a8a <Address 0x8a8a out of bounds>, len = 134986645}, passwd = {s = 0x8175a80 "", len = 135800216}, host = {
s = 0x24d271 "\201�\203m\r", len = 5}, port = {
s = 0x8154c71 ";received=1.2.3.4;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466\r\nMax-Forwards: 68\r\nContact: <sip:ua4801b4b1a694a26ed2e-214270@79.135.125.160:5082>\r\nTo: \"yyy\"<sip:2345678@sip.gra"..., len = 1}, params = {
s = 0x8154c71 ";received=1.2.3.4;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466\r\nMax-Forwards: 68\r\nContact: <sip:ua4801b4b1a694a26ed2e-214270@79.135.125.160:5082>\r\nTo: \"yyy\"<sip:234567@sip.gra"..., len = 0}, headers = {s = 0x309d99 "/etc/localtime", len = 135800256},
port_no = 57296, proto = 2071, type = 135068003, transport = {s = 0x266e0d "\201���\v", len = 3293172}, ttl = {s = 0x308cfe "%H:%M:%S", len = 302097236},
user_param = {s = 0xbff2c06c "\210���u�&", len = 2521421}, maddr = {s = 0x323ff4 "\234=2", len = -1074609784}, method = {
s = 0x26d875 "�L���\213E�\211t$\b�D$\0040", len = 302097242}, lr = {s = 0xbff2c17a "\001", len = 2}, r2 = {s = 0x1 <Address 0x1 out of bounds>,
len = 0}, transport_val = {s = 0x0, len = 0}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0xe4d <Address 0xe4d out of bounds>, len = 0},
maddr_val = {s = 0x1000 <Address 0x1000 out of bounds>, len = 8}, method_val = {s = 0x1 <Address 0x1 out of bounds>, len = 1260532815}, lr_val = {
s = 0x0, len = 1243530678}, r2_val = {s = 0x0, len = 31477}}
next_hop = {user = {s = 0x817c820 "\017", len = 135795912}, passwd = {s = 0x0, len = 3661}, host = {s = 0x0, len = 4096}, port = {
s = 0x8 <Address 0x8 out of bounds>, len = 1}, params = {s = 0x0, len = 31477}, headers = {s = 0xbff2c0c8 "\b���Q \t\b\210�\027\b�\024\030\b",
len = 134800445}, port_no = 51232, proto = 2071, type = 135795912, transport = {s = 0x0, len = 0}, ttl = {s = 0x0, len = 0}, user_param = {s = 0x0,
len = 13}, maddr = {s = 0x325140 "", len = 15}, method = {s = 0x323ff4 "\234=2", len = 15}, lr = {s = 0x309d99 "/etc/localtime", len = 1}, r2 = {
s = 0x2536f6 "\211�\213]�\211�\213u�\213}�\211�]�\220\220\220\220\220\220\220\220\220U\211�\203�\030\211]�\213E\f��e��\201��\b\r", len = 301981544},
---Type <return> to continue, or q <return> to quit---
transport_val = {s = 0x309d99 "/etc/localtime", len = 2522475}, ttl_val = {s = 0x323ff4 "\234=2", len = 1}, user_param_val = {
s = 0x11ffdf68 "/etc/localtime", len = -1}, maddr_val = {s = 0x0, len = 3186073}, method_val = {s = 0x0, len = 0}, lr_val = {
s = 0x309d99 "/etc/localtime", len = -1074610068}, r2_val = {s = 0x0, len = 0}}
u = (struct sip_uri *) 0x8
port = 48
cmatch = 0
aitem = (struct action *) 0x0
adefault = (struct action *) 0x2
spec = (pv_spec_t *) 0x1
model = (pv_elem_p) 0x7af5
val = {rs = {s = 0x1e0ca0 "", len = -1074608032}, ri = -1074610280, flags = 134551439}
pve = (pv_elem_t *) 0x1e0ca0
name_s = {s = 0xbff2c1a8 "����\217\027\005\bо\027\b�\024\030\b�?2", len = 31477}
__FUNCTION__ = "do_action"
#4 0x0805178f in run_action_list (a=0x817c960, msg=0x81814c8) at action.c:139
ret = -1
t = (struct action *) 0x817c960
__FUNCTION__ = "run_action_list"
#5 0x080538b8 in do_action (a=0x817cdf8, msg=0x81814c8) at action.c:706
val_s = {s = 0x0, len = 31477}
expires = -1074609208
aux = {
s = 0x24ed63 "\213U������\213E�\203�\0049E�\017\203����\213E�\203�\a\211D$\004\213}\b\211<$�����\205�\211�tw\213E�\203�\b\211D$\b\213E\f\2114$\211D$\004��b", len = 1}
ret = 1
v = 1
to = (union sockaddr_union *) 0xbff2c388
p = (struct proxy_l *) 0x8092051
tmp = 0x817c2e8 "\002"
new_uri = 0x81814c8 "�\206\001"
end = 0x0
crt = 0xbff2c378 "����"
len = 2825610
user = 181
uri = {user = {s = 0x0, len = 21}, passwd = {s = 0x1201a1d0 "pQ2", len = -1074609316}, host = {s = 0x2b19e5 "\201Ĥ", len = 302097224}, port = {
s = 0x1201a348 "<181>Dec 11 12:23:25 opensips[31487]: ***** SUBSCRIBE sip:2345678@sip.domain:5060 -> sip:2345678@sip.domain:5060 [sip:79.135.125.158:5060]\n", len = 151}, params = {s = 0x4000 <Address 0x4000 out of bounds>, len = 1}, headers = {s = 0x7af5 <Address 0x7af5 out of bounds>,
len = 1969312}, port_no = 49928, proto = 49138, type = 134816086, transport = {s = 0x817bae8 "\002", len = 135795912}, ttl = {s = 0x0, len = 12},
user_param = {s = 0xb <Address 0xb out of bounds>, len = 11}, maddr = {s = 0x1 <Address 0x1 out of bounds>, len = 3}, method = {
s = 0x158 <Address 0x158 out of bounds>, len = 0}, lr = {s = 0x0, len = 31477}, r2 = {s = 0x1e0ca0 "", len = -1074608032}, transport_val = {
s = 0xbff2c348 "\210���Q \t\b��\027\b�\024\030\b", len = 134815825}, ttl_val = {s = 0x817bf38 "\002", len = 135795912}, user_param_val = {s = 0x0,
len = 232}, maddr_val = {s = 0x11ffffb0 "\210V\001\022", len = 135802008}, method_val = {s = 0x0, len = 1}, lr_val = {
s = 0x17 <Address 0x17 out of bounds>, len = 0}, r2_val = {s = 0x4 <Address 0x4 out of bounds>, len = 31477}}
next_hop = {user = {s = 0x817c280 "\017", len = 135795912}, passwd = {s = 0x322fe0 "�\2350", len = 13}, host = {s = 0x24c8f1 "\201�\003w\r",
len = 160}, port = {s = 0x30b97c "double free or corruption (!prev)", len = -1}, params = {s = 0x0, len = 31477}, headers = {
s = 0xbff2c348 "\210���Q \t\b��\027\b�\024\030\b", len = 134800445}, port_no = 49792, proto = 2071, type = 135795912, transport = {
s = 0x30b97c "double free or corruption (!prev)", len = 3293172}, ttl = {s = 0x1201a1d0 "pQ2", len = 302096848}, user_param = {s = 0xbff2c250 "",
len = 13}, maddr = {s = 0x323ff4 "\234=2", len = 3297600}, method = {s = 0x1201a1d0 "pQ2", len = -1074609532}, lr = {s = 0x0, len = 0}, r2 = {
s = 0x1201a1d0 "pQ2", len = 0}, transport_val = {s = 0x323ff4 "\234=2", len = 3297600}, ttl_val = {s = 0x1 <Address 0x1 out of bounds>,
len = -1074609500}, user_param_val = {s = 0x250bc0 "e\203=\f", len = 3297600}, maddr_val = {
s = 0x1201a348 "<181>Dec 11 12:23:25 opensips[31487]: ***** SUBSCRIBE sip:2345678@sip.domain:5060 -> sip:2345678@sip.domain:5060 [sip:79.135.125.158:5060]\n", len = 31477}, method_val = {s = 0x1e0ca0 "", len = -1074608032}, lr_val = {s = 0xbff2c2c8 "\b���V!\t\b��\027\b�\024\030\b",
len = 134815825}, r2_val = {s = 0x817bae8 "\002", len = 135795912}}
u = (struct sip_uri *) 0xffffffff
port = 0
cmatch = -1074609272
aitem = (struct action *) 0xbff2c388
adefault = (struct action *) 0xbff2c3c8
spec = (pv_spec_t *) 0x0
model = (pv_elem_p) 0x7af5
val = {rs = {s = 0x1e0ca0 "", len = -1074608032}, ri = -1074609640, flags = 134551439}
pve = (pv_elem_t *) 0x1e0ca0
name_s = {s = 0xbff2c308 "H���Q \t\b8�\027\b�\024\030\b", len = 31477}
__FUNCTION__ = "do_action"
#6 0x0805178f in run_action_list (a=0x817cdf8, msg=0x81814c8) at action.c:139
ret = -1
t = (struct action *) 0x817cdf8
__FUNCTION__ = "run_action_list"
#7 0x08053901 in do_action (a=0x817ce60, msg=0x81814c8) at action.c:712
val_s = {s = 0xaff68000 "", len = 135613394}
expires = -1074608600
aux = {s = 0xbff2c478 "\017", len = 16}
ret = 1
v = 0
to = (union sockaddr_union *) 0xbff2c680
p = (struct proxy_l *) 0x8154b8b
tmp = 0x8175ab8 ""
new_uri = 0x4 <Address 0x4 out of bounds>
end = 0xbff2c608 "(����z"
crt = 0x0
len = 2
user = 0
uri = {user = {s = 0xf2c528 <Address 0xf2c528 out of bounds>, len = -1074608856}, passwd = {s = 0x400 <Address 0x400 out of bounds>,
len = 1368624}, host = {s = 0xbff2c538 "H�\021", len = 1160897}, port = {s = 0xaff8e26c "", len = -1340803360}, params = {
s = 0xbff2c548 "\210����0\023", len = 1160874}, headers = {s = 0xaff8e26c "", len = 1240714}, port_no = 50568, proto = 49138, type = 1257645,
transport = {s = 0x0, len = 135613322}, ttl = {s = 0xbff2c588 "\030���B�\v\b�K\025\bfN\025\b\230\233\027\b\210Q\f\b\211K\025\b�\002", len = 134986645},
user_param = {s = 0x8175a80 "", len = 135764880}, maddr = {
s = 0x8154c0c "Via: SIP/2.0/UDP 79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVia: SIP/2.0/UDP 192.168.0.5:35466;received=1.2.3.4;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466\r\nMax-Forward"..., len = 135613390}, method = {s = 0x8182690 "\001", len = 135764888}, lr = {
s = 0x2dd <Address 0x2dd out of bounds>, len = 0}, r2 = {s = 0x1e0ca0 "", len = 135764924}, transport_val = {
s = 0xbff2c618 "H���\217\027\005\b`�\027\b�\024\030\b", len = 135001154}, ttl_val = {
s = 0x8154bce "Via: SIP/2.0/UDP 79.135.125.154;branch=z9hG4bKcb3.50cbb994.0\r\nVia: SIP/2.0/UDP 79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVia: SIP/2.0/UDP 192.168.0.5:35466;received=1.2.3.4;branch=z9hG4b"..., len = 135614054}, user_param_val = {s = 0x8179b98 "\001", len = 135025032},
maddr_val = {
s = 0x8154b89 "\r\nRecord-Route: <sip:xuser@79.135.125.160:5082;lr=on;ftag=4f14dbf6>\r\nVia: SIP/2.0/UDP 79.135.125.154;branch=z9hG4bKcb3.50cbb994.0\r\nVia: SIP/2.0/UDP 79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVi"..., len = 733}, method_val = {s = 0x81814ec "", len = 1972148}, lr_val = {
s = 0x8175ac0 "�\030\030\b\003", len = 5}, r2_val = {s = 0xbff2c5e8 "\030���\230\233\027\bjK\025\b\fL\025\b\fL\025\bfN\025\b", len = 134987015}}
next_hop = {user = {s = 0x10 <Address 0x10 out of bounds>, len = 5}, passwd = {s = 0xf <Address 0xf out of bounds>, len = 135613342}, host = {
s = 0x8154c0c "Via: SIP/2.0/UDP 79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVia: SIP/2.0/UDP 192.168.0.5:35466;received=1.2.3.4;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466\r\nMax-Forward"..., len = -1341094024}, port = {s = 0x7 <Address 0x7 out of bounds>, len = 7},
params = {s = 0x0, len = 1969312}, headers = {s = 0xbff2c4c8 "\210���/�\v\b�K\025\bfN\025\b\220&\030\b0�\024", len = 134986645}, port_no = 23168,
proto = 2071, type = 84223624, transport = {
s = 0x8154c0c "Via: SIP/2.0/UDP 79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVia: SIP/2.0/UDP 192.168.0.5:35466;received=1.2.3.4;branch=z9hG4bK-d8754z-cc72a5545da17301-1---d8754z-;rport=35466\r\nMax-Forward"..., len = 135613422}, ttl = {s = 0x0, len = 135800464}, user_param = {
s = 0x8181ae8 "�", len = 0}, maddr = {s = 0x1e0ca0 "", len = 135764924}, method = {
s = 0xbff2c588 "\030���B�\v\b�K\025\bfN\025\b\230\233\027\b\210Q\f\b\211K\025\b�\002", len = 134997295}, lr = {
s = 0x8154bd3 "SIP/2.0/UDP 79.135.125.154;branch=z9hG4bKcb3.50cbb994.0\r\nVia: SIP/2.0/UDP 79.135.125.160:5082;branch=z9hG4bKcb3.daee2e26.0\r\nVia: SIP/2.0/UDP 192.168.0.5:35466;received=1.2.3.4;branch=z9hG4bK-d87"..., len = 135614054}, r2 = {s = 0x8182690 "\001", len = 1368624}, transport_val = {
s = 0x1e0ca0 "", len = 1240714}, ttl_val = {s = 0xbff2c528 "8�����\021", len = 1230189}, user_param_val = {s = 0xb014f698 "", len = 0}, maddr_val = {
s = 0xbff2c518 "(��", len = 1233809}, method_val = {s = 0x8c429 <Address 0x8c429 out of bounds>, len = 135613452}, lr_val = {
s = 0x1 <Address 0x1 out of bounds>, len = 1160785}, r2_val = {s = 0xaff8e26c "", len = -1341206552}}
u = (struct sip_uri *) 0xbff2c618
port = 2071
cmatch = 135613290
aitem = (struct action *) 0x8154c0c
adefault = (struct action *) 0x8154c0c
spec = (pv_spec_t *) 0x8154e66
model = (pv_elem_p) 0x0
val = {rs = {s = 0xaff6c0b8 "", len = 3908152}, ri = -1074609000, flags = 14}
pve = (pv_elem_t *) 0x0
name_s = {s = 0x1 <Address 0x1 out of bounds>, len = 3731001}
__FUNCTION__ = "do_action"
#8 0x0805178f in run_action_list (a=0x817b5c8, msg=0x81814c8) at action.c:139
ret = 1
t = (struct action *) 0x817ce60
__FUNCTION__ = "run_action_list"
#9 0x080519f5 in run_actions (a=0x817b5c8, msg=0x81814c8) at action.c:119
ret = 134839835
__FUNCTION__ = "run_actions"
#10 0x08051a95 in run_top_route (a=0x817b5c8, msg=0x81814c8) at action.c:180
bk_action_flags = 0
bk_rec_lev = 0
ret = 0
#11 0x08086d5b in receive_msg (
buf=0x8154b60 "SUBSCRIBE sip:79.135.125.158:5060 SIP/2.0\r\nRecord-Route: <sip:xuser@79.135.125.160:5082;lr=on;ftag=4f14dbf6>\r\nVia: SIP/2.0/UDP 79.135.125.154;branch=z9hG4bKcb3.50cbb994.0\r\nVia: SIP/2.0/UDP 79.135.125."..., len=774, rcv_info=0xbff2c70c) at receive.c:165
msg = (struct sip_msg *) 0x81814c8
__FUNCTION__ = "receive_msg"
#12 0x080b8a2d in udp_rcv_loop () at udp_server.c:449
len = 774
tmp = 0x7 <Address 0x7 out of bounds>
from = (union sockaddr_union *) 0x817d540
fromlen = 16
ri = {src_ip = {af = 2, len = 4, u = {addrl = {2591917903, 3220358984, 31477, 1969312}, addr32 = {2591917903, 3220358984, 31477, 1969312},
addr16 = {34639, 39549, 51016, 49138, 31477, 0, 3232, 30}, addr = "O\207}\232H����z\000\000�\f\036"}}, dst_ip = {af = 2, len = 4, u = {addrl = {
2659026767, 0, 0, 0}, addr32 = {2659026767, 0, 0, 0}, addr16 = {34639, 40573, 0, 0, 0, 0, 0, 0}, addr = "O\207}\236", '\0' <repeats 11 times>}},
src_port = 5060, dst_port = 5060, proto = 1, proto_reserved1 = 0, proto_reserved2 = 0, src_su = {s = {sa_family = 2,
sa_data = "\023�O\207}\232\000\000\000\000\000\000\000"}, sin = {sin_family = 2, sin_port = 50195, sin_addr = {s_addr = 2591917903},
sin_zero = "\000\000\000\000\000\000\000"}, sin6 = {sin6_family = 2, sin6_port = 50195, sin6_flowinfo = 2591917903, sin6_addr = {in6_u = {
u6_addr8 = '\0' <repeats 15 times>, u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}},
bind_address = 0x817a120}
buf = "SUBSCRIBE sip:79.135.125.158:5060 SIP/2.0\r\nRecord-Route: <sip:xuser@79.135.125.160:5082;lr=on;ftag=4f14dbf6>\r\nVia: SIP/2.0/UDP 79.135.125.154;branch=z9hG4bKcb3.50cbb994.0\r\nVia: SIP/2.0/UDP 79.135.125."...
__FUNCTION__ = "udp_rcv_loop"
#13 0x080646b5 in main_loop () at main.c:779
i = 6
pid = 0
si = (struct socket_info *) 0x817a120
chd_rank = 7
__FUNCTION__ = "main_loop"
---Type <return> to continue, or q <return> to quit---
#14 0x08066535 in main (argc=9, argv=0xbff2c8e4) at main.c:1318
cfg_log_stderr = 0
cfg_stream = (FILE *) 0x11ff4008
c = -1
r = 0
tmp = 0xbff2dc13 ""
tmp_len = 135483632
port = 0
proto = 134551232
options = 0x8100154 "f:cCm:b:l:n:N:rRvdDETSVhw:t:u:g:P:G:W:"
ret = -1
seed = 1776766230
rfd = 4
__FUNCTION__ = "main"
SF made it even worse... one with original formatting is available at http://pastebin.ca/1715791
Hi,
Thanks for the backtrace. It did not help to find the problem :( . It still seems impossible to have null in pres_uri in that place in the code. I noticed however that the line numbers are not exactly the same as in the release 1.5.3. Can you please check if you have modified something in your copy.
Also, can you tell me if you have you set the module parameter fallback2db?
Regards,
Anca
No failback2db set. The only patches that we included were debugging logs for some strange issues and a hotfix... nothing that should affect this crash imho:
http://pastebin.ca/1717052