[Home]

Summary:ASTERISK-25385: A11 SIGSEGV Crashes in srtp_get_stream (), in ast_srtp_protect
Reporter:Nicole McIntosh (atna99)Labels:
Date Opened:2015-09-09 12:50:23Date Closed:2015-09-11 08:27:10
Priority:MajorRegression?No
Status:Closed/CompleteComponents:
Versions:11.19.0 Frequency of
Occurrence		One Time
Related
Issues:
Environment:Ubuntu 14.04.2 LTS , asterisk version 11.19 updated to trunk, last commit: b4535b0Attachments:( 0) pandora-debug-sept8_c_last10000.txt
( 1) pandora-debug-sept8_c.txt.gz
( 2) pandora-fullbt-sept8_c.txt
Description:Running production server, asterisk crash, related to srtp. We have many servers all using webrtc.

initial backtrace:
{noformat}
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/sbin/asterisk -f -vvvg -c'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f287a2130e0 in srtp_get_stream () from /usr/lib/libsrtp.so.0
(gdb) bt
#0  0x00007f287a2130e0 in srtp_get_stream () from /usr/lib/libsrtp.so.0
#1  0x00007f287a213d27 in srtp_protect_rtcp () from /usr/lib/libsrtp.so.0
#2  0x00007f287a429400 in ast_srtp_protect (srtp=0x7f2765cca750, buf=0x7f281aa1a928,
   len=0x7f281aa1a924, rtcp=1) at res_srtp.c:432
#3  0x00007f282d1936ea in __rtp_sendto (instance=0x7f2765db57a8, buf=0x7f281aa1ab20,
   size=64, flags=0, sa=0x7f281aa1aa90, rtcp=1, ice=0x7f281aa1aa34, use_srtp=1)
   at res_rtp_asterisk.c:2170
#4  0x00007f282d1937d7 in rtcp_sendto (instance=0x7f2765db57a8, buf=0x7f281aa1ab20, size=64,
   flags=0, sa=0x7f281aa1aa90, ice=0x7f281aa1aa34) at res_rtp_asterisk.c:2190
#5  0x00007f282d196f19 in ast_rtcp_write_sr (instance=0x7f2765db57a8)
   at res_rtp_asterisk.c:3066
#6  0x00007f282d197575 in ast_rtcp_write (data=0x7f2765db57a8) at res_rtp_asterisk.c:3135
#7  0x000000000057c062 in ast_sched_runq (con=0x1f48400) at sched.c:639
#8  0x00007f2878885eca in do_monitor (data=0x0) at chan_sip.c:29360
#9  0x000000000059a3c8 in dummy_start (data=0x1fc4360) at utils.c:1223
#10 0x00007f287cd68182 in start_thread (arg=0x7f281aa1b700) at pthread_create.c:312
#11 0x00007f287ded547d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
{noformat}
Comments:By: Asterisk Team (asteriskteam) 2015-09-09 12:50:24.733-0500

Thanks for creating a report! The issue has entered the triage process. That means the issue will wait in this status until a Bug Marshal has an opportunity to review the issue. Once the issue has been reviewed you will receive comments regarding the next steps towards resolution.

A good first step is for you to review the [Asterisk Issue Guidelines|https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines] if you haven't already. The guidelines detail what is expected from an Asterisk issue report.

Then, if you are submitting a patch, please review the [Patch Contribution Process|https://wiki.asterisk.org/wiki/display/AST/Patch+Contribution+Process].
By: Nicole McIntosh (atna99) 2015-09-09 12:55:22.057-0500

Full backtrace and debug log provided.
By: Rusty Newton (rnewton) 2015-09-11 07:52:18.300-0500

Removing pandora-debug-sept8_c.txt.gz and replacing it. The original was gzipped twice - confusing!

Also adding the last 10000 lines of that file as .txt as the original file is massive.
By: Rusty Newton (rnewton) 2015-09-11 08:27:10.712-0500

So, [~jcolp] looked over this issue with me. This doesn't appear to be an issue within Asterisk.

I'd recommend verifying that you have the very latest libsrtp version and if the crash happens again be sure you get libsrtp debug symbols for the trace. File it with the libsrtp project at that time.

Otherwise we can't do much investigation here without being able to reproduce the issue.