[Home]

Summary:ASTERISK-16886: [patch] Segfault with new meetme function (count callers in menu8)
Reporter:Daniel Knoll (kenji)Labels:
Date Opened:2010-10-28 04:12:50Date Closed:2011-01-29 12:10:35.000-0600
Priority:CriticalRegression?No
Status:Closed/CompleteComponents:Applications/app_meetme
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:( 0) backtrace.txt
( 1) issue-0018225-full_log
( 2) issue18225.patch
Description:Asterisk crash if you use the new count caller function (menu8) by pressing *81

- compiling under debian lenny amd64
- gcc version 4.3.2 (Debian 4.3.2-1.1)
- [10147793.660069] asterisk[23050]: segfault at 5a ip 7fdbd231c010 sp 4154eed8 error 4 in libc-2.7.so[7fdbd22a1000+14a000]


****** ADDITIONAL INFORMATION ******

*CLI>   == Using SIP RTP CoS mark 5
   -- Executing [33@default:1] Answer("SIP/100-00000000", "") in new stack
   -- Executing [33@default:2] WaitExten("SIP/100-00000000", "2") in new stack
   -- Timeout on SIP/100-00000000, continuing...
   -- Executing [33@default:3] MeetMe("SIP/100-00000000", ",asX") in new stack
   -- <SIP/100-00000000> Playing 'conf-getconfno.slin' (language 'en')
 == Parsing '/usr/local/asterisk-trunk/etc/asterisk/meetme.conf':   == Found
   -- Created MeetMe conference 1023 for conference '777'
   -- <SIP/100-00000000> Playing 'conf-onlyperson.slin' (language 'en')
   -- <SIP/100-00000000> Playing 'conf-adminmenu-162.slin' (language 'en')
   -- <SIP/100-00000000> Playing 'conf-onlyperson.slin' (language 'en')
Segmentation fault (core dumped)
Comments:By: Paul Belanger (pabelanger) 2010-10-28 10:18:32

Thank you for your bug report. In order to move your issue forward, we require a backtrace from the core file produced after the crash. Please see the doc/backtrace.txt file in your Asterisk source directory.

Also, be sure you have DONT_OPTIMIZE enabled in menuselect within the Compiler Flags section, then:

make install

after enabling, reproduce the crash, and then execute the instructions in doc/backtrace.txt.

When complete, attach that file to this issue report. Thanks!

By: Daniel Knoll (kenji) 2010-11-16 16:08:55.000-0600

I added the backtrace. is the issue difficult to solve?
By: Sean Bright (seanbright) 2011-01-19 10:50:36.000-0600

Please test the attached patch and report your results.
By: Digium Subversion (svnbot) 2011-01-29 11:13:45.000-0600

Repository: asterisk
Revision: 304729

U   branches/1.6.2/apps/app_meetme.c

------------------------------------------------------------------------
r304729 | seanbright | 2011-01-29 11:01:51 -0600 (Sat, 29 Jan 2011) | 15 lines

Make sure that we unref the correct object when ejecting the most recent caller.

Currently, when we kick the last user to enter, we decrement our own reference
count which results in a crash when we kick another user or when we exit the
conference ourselves.

This will fix ASTERISK-16886 in 1.8 and trunk, but that particular bug does not exist in
1.6.2.

(closes issue ASTERISK-16886)
Reported by: kenji
Patches:
     issue18225.patch uploaded by seanbright (license 71)
Tested by: seanbright

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=304729
By: Digium Subversion (svnbot) 2011-01-29 11:15:28.000-0600

Repository: asterisk
Revision: 304730

_U  branches/1.8/
U   branches/1.8/apps/app_meetme.c

------------------------------------------------------------------------
r304730 | seanbright | 2011-01-29 11:15:28 -0600 (Sat, 29 Jan 2011) | 22 lines

Merged revisions 304729 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.6.2

........
 r304729 | seanbright | 2011-01-29 12:01:51 -0500 (Sat, 29 Jan 2011) | 15 lines
 
 Make sure that we unref the correct object when ejecting the most recent caller.
 
 Currently, when we kick the last user to enter, we decrement our own reference
 count which results in a crash when we kick another user or when we exit the
 conference ourselves.
 
 This will fix ASTERISK-16886 in 1.8 and trunk, but that particular bug does not exist in
 1.6.2.
 
 (closes issue ASTERISK-16886)
 Reported by: kenji
 Patches:
       issue18225.patch uploaded by seanbright (license 71)
 Tested by: seanbright
........

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=304730
By: Digium Subversion (svnbot) 2011-01-29 11:34:23.000-0600

Repository: asterisk
Revision: 304772

_U  trunk/
U   trunk/apps/app_meetme.c

------------------------------------------------------------------------
r304772 | seanbright | 2011-01-29 11:34:22 -0600 (Sat, 29 Jan 2011) | 29 lines

Merged revisions 304730 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.8

................
 r304730 | seanbright | 2011-01-29 12:15:27 -0500 (Sat, 29 Jan 2011) | 22 lines
 
 Merged revisions 304729 via svnmerge from
 https://origsvn.digium.com/svn/asterisk/branches/1.6.2
 
 ........
   r304729 | seanbright | 2011-01-29 12:01:51 -0500 (Sat, 29 Jan 2011) | 15 lines
   
   Make sure that we unref the correct object when ejecting the most recent caller.
   
   Currently, when we kick the last user to enter, we decrement our own reference
   count which results in a crash when we kick another user or when we exit the
   conference ourselves.
   
   This will fix ASTERISK-16886 in 1.8 and trunk, but that particular bug does not exist in
   1.6.2.
   
   (closes issue ASTERISK-16886)
   Reported by: kenji
   Patches:
         issue18225.patch uploaded by seanbright (license 71)
   Tested by: seanbright
 ........
................

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=304772
By: Digium Subversion (svnbot) 2011-01-29 12:08:15.000-0600

Repository: asterisk
Revision: 304776

U   branches/1.6.2/apps/app_meetme.c

------------------------------------------------------------------------
r304776 | seanbright | 2011-01-29 12:08:14 -0600 (Sat, 29 Jan 2011) | 15 lines

If we fail to allocate our announcement objects, make sure we don't leak objects.

The majority of this patch was committed already in r304726 and r304729.

(issue ASTERISK-16886)
Reported by: kenji

(issue ASTERISK-17083)
Reported by: junky

(closes issue ASTERISK-16992)
Reported by: kobaz
Patches:
     meetme-refs.diff uploaded by kobaz (license 834)

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=304776
By: Digium Subversion (svnbot) 2011-01-29 12:09:38.000-0600

Repository: asterisk
Revision: 304777

_U  branches/1.8/
U   branches/1.8/apps/app_meetme.c

------------------------------------------------------------------------
r304777 | seanbright | 2011-01-29 12:09:37 -0600 (Sat, 29 Jan 2011) | 22 lines

Merged revisions 304776 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.6.2

........
 r304776 | seanbright | 2011-01-29 13:08:14 -0500 (Sat, 29 Jan 2011) | 15 lines
 
 If we fail to allocate our announcement objects, make sure we don't leak objects.
 
 The majority of this patch was committed already in r304726 and r304729.
 
 (issue ASTERISK-16886)
 Reported by: kenji
 
 (issue ASTERISK-17083)
 Reported by: junky
 
 (closes issue ASTERISK-16992)
 Reported by: kobaz
 Patches:
       meetme-refs.diff uploaded by kobaz (license 834)
........

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=304777
By: Digium Subversion (svnbot) 2011-01-29 12:10:35.000-0600

Repository: asterisk
Revision: 304778

_U  trunk/
U   trunk/apps/app_meetme.c

------------------------------------------------------------------------
r304778 | seanbright | 2011-01-29 12:10:35 -0600 (Sat, 29 Jan 2011) | 29 lines

Merged revisions 304777 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.8

................
 r304777 | seanbright | 2011-01-29 13:09:37 -0500 (Sat, 29 Jan 2011) | 22 lines
 
 Merged revisions 304776 via svnmerge from
 https://origsvn.digium.com/svn/asterisk/branches/1.6.2
 
 ........
   r304776 | seanbright | 2011-01-29 13:08:14 -0500 (Sat, 29 Jan 2011) | 15 lines
   
   If we fail to allocate our announcement objects, make sure we don't leak objects.
   
   The majority of this patch was committed already in r304726 and r304729.
   
   (issue ASTERISK-16886)
   Reported by: kenji
   
   (issue ASTERISK-17083)
   Reported by: junky
   
   (closes issue ASTERISK-16992)
   Reported by: kobaz
   Patches:
         meetme-refs.diff uploaded by kobaz (license 834)
 ........
................

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=304778