[Home]

Summary:ASTERISK-25223: Crash in RLS MWI termination tests
Reporter:Matt Jordan (mjordan)Labels:
Date Opened:2015-07-01 12:58:43Date Closed:2015-11-22 19:35:34.000-0600
Priority:MajorRegression?
Status:Closed/CompleteComponents:Resources/res_pjsip_pubsub
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:( 0) logs.zip
Description:See attached tarball for full logs and backtraces.

Essentially, we are attempting to manipulate a subscription that is clearly dead:

{code}
[Thread debugging using libthread_db enabled]
Core was generated by `/usr/sbin/asterisk -f -g -q -m -n -C /tmp/asterisk-testsuite/d1c48e7aee13c35647'.
Program terminated with signal 11, Segmentation fault.
#0  0x005b2b4f in pjsip_evsub_get_state_name (sub=0xdeaddead) at ../src/pjsip-simple/evsub.c:988
988    return sub->state_str.ptr;
#0  0x005b2b4f in pjsip_evsub_get_state_name (sub=0xdeaddead) at ../src/pjsip-simple/evsub.c:988
No locals.
#1  0x0548e9e2 in sip_subscription_send_request (sub_tree=0xb74146dc, tdata=0xb742b494) at res_pjsip_pubsub.c:1641
       endpoint = 0x9db6b44
       res = 0
       __PRETTY_FUNCTION__ = "sip_subscription_send_request"
#2  0x05490884 in send_notify (sub_tree=0xb74146dc, force_full_state=1) at res_pjsip_pubsub.c:2078
       evsub = 0xb74161f4
       tdata = 0xb742b494
#3  0x05494e4b in pubsub_on_rx_subscribe_request (rdata=0xb740dc44) at res_pjsip_pubsub.c:2604
       expires_header = 0xb740f81c
       handler = 0x5fa9c40
       endpoint = 0x9db6b44
       sub_tree = 0xb74146dc
       generator = 0x784b7e0
       resource = 0xb6dc6f40 "mail_list"
       request_uri = 0xb740ee00
       request_uri_sip = 0xb740ee00
       resource_size = 10
       resp = 200
       tree = {root = 0xb74134d0, notification_batch_interval = 0}
       dlg_status = 0
       __PRETTY_FUNCTION__ = "pubsub_on_rx_subscribe_request"
#4  0x05498fb2 in pubsub_on_rx_request (rdata=0xb740dc44) at res_pjsip_pubsub.c:3089
No locals.
#5  0x009138d9 in pjsip_endpt_process_rx_data (endpt=0x94daf4c, rdata=0xb740dc44, p=0x74b427c, p_handled=0xb6dc715c) at ../src/pjsip/sip_endpoint.c:886
       msg = 0xb740edbc
       def_prm = {start_prio = 122032128, start_mod = 0x8fbc90, idx_after_start = 122367276, silent = 0}
       mod = 0x54a7980
       handled = 0
       i = 1
       status = 9516828
       __PRETTY_FUNCTION__ = "pjsip_endpt_process_rx_data"
{code}

This was caught by the Jenkins build agents. See referenced link for test failure.
Comments:By: Asterisk Team (asteriskteam) 2015-07-01 12:58:45.406-0500

Thanks for creating a report! The issue has entered the triage process. That means the issue will wait in this status until a Bug Marshal has an opportunity to review the issue. Once the issue has been reviewed you will receive comments regarding the next steps towards resolution.

A good first step is for you to review the [Asterisk Issue Guidelines|https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines] if you haven't already. The guidelines detail what is expected from an Asterisk issue report.

Then, if you are submitting a patch, please review the [Patch Contribution Process|https://wiki.asterisk.org/wiki/display/AST/Patch+Contribution+Process].