THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has a new comment added:
FS#454 - Crash in core when freeing shm dup'ed request
User who did this - Hugh Waite (hugh.waite)
----------
The attached patch will generate the hash based on the original request (where present) not the one duplicated in shared mem.
I've tested and it fixes the crash. If it's OK, I'll commit to master, 4.1 and 4.0
----------
One or more files have been attached.
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=454#comment1563
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has a new comment added:
FS#454 - Crash in core when freeing shm dup'ed request
User who did this - Daniel-Constantin Mierla (miconda)
----------
You can go ahead an commit - using local msg struct should be ok.
However, iirc, the From should be parsed before creating the transaction. For a double check, in frame 5, can you get in gdb:
p *hf
----------
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=454#comment1562
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has a new comment added:
FS#454 - Crash in core when freeing shm dup'ed request
User who did this - Hugh Waite (hugh.waite)
----------
The attached patch will generate the hash based on the original request (where present) not the one duplicated in shared mem.
I've tested and it fixes the crash. If it's OK, I'll commit to master, 4.1 and 4.0
----------
One or more files have been attached.
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=454#comment1561
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
A new Flyspray task has been opened. Details are below.
User who did this - Hugh Waite (hugh.waite)
Attached to Project - sip-router
Summary - Crash in core when freeing shm dup'ed request
Task Type - Bug Report
Category - Core
Status - New
Assigned To -
Operating System - All
Severity - High
Priority - Normal
Reported Version - Development
Due in Version - Undecided
Due Date - Undecided
Details - I have found a crash in core/tm which is easily reproducible.
An OPTIONS passes through kamailio to another kamailio server which responds with a 403. The response enters a failure route and crashes (due to an abort) when attempting to free the memory in the faked_req structure.
Attached is the backtrace and the relevant section of the DEBUG level output.
It appears from the DEBUG, that a pkg-memory address is stored in the shm_cloned structure, which is invalid when attempting to free from a different process. The allocated address in this core is 0x7fd12559ee28 called from parse_from_header.
This only occurs when the Via branch is 'pre-RFC3261'. In this case the perpetrator is using "branch=foo".
I think the allocation occurs in char_msg_val.h:83 where the from body is parsed to extract the tag (only for pre-3261 requests).
h_table.c:309 build_cell
h_table.c:390 init_synonym_id
h_table.c:274 char_mag_val
The tm module is pretty stable (last relevant change was removing the syn_branch parameter in May 2013) so I would rather have some guidance before making changes.
One or more files have been attached.
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=454
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task is now closed:
FS#453 - PARAM_STR vs STR_PARAM
User who did this - Daniel-Constantin Mierla (miconda)
Reason for closing: Fixed
More information can be found at the following URL:
https://sip-router.org/tracker/index.php?do=details&task_id=453
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has a new comment added:
FS#453 - PARAM_STR vs STR_PARAM
User who did this - Daniel-Constantin Mierla (miconda)
----------
Should be fixed, thanks for catching it.
----------
More information can be found at the following URL:
https://sip-router.org/tracker/index.php?do=details&task_id=453#comment1560
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has a new comment added:
FS#453 - PARAM_STR vs STR_PARAM
User who did this - Víctor Seva (linuxmaniac)
----------
There is a compilation error so nigthly builds fails https://kamailio.sipwise.com/view/kamdev/job/kamailiodev-nightly-binaries/1…
01:26:39 CC (gcc) [M ims_registrar_scscf.so] api.o
01:26:39 CC (gcc) [M ims_registrar_scscf.so] common.o
01:26:39 CC (gcc) [M ims_registrar_scscf.so] config.o
01:26:40 CC (gcc) [M ims_registrar_scscf.so] cxdx_avp.o
01:26:41 CC (gcc) [M ims_registrar_scscf.so] cxdx_callbacks.o
01:26:41 CC (gcc) [M ims_registrar_scscf.so] cxdx_sar.o
01:26:42 CC (gcc) [M ims_registrar_scscf.so] lookup.o
01:26:42 CC (gcc) [M ims_registrar_scscf.so] path.o
01:26:42 CC (gcc) [M ims_registrar_scscf.so] reg_mod.o
01:26:43 reg_mod.c: In function 'mod_init':
01:26:43 reg_mod.c:315:26: error: 'cxdx_forced_peer_s' undeclared (first use in this function)
01:26:43 reg_mod.c:315:26: note: each undeclared identifier is reported only once for each function it appears in
01:26:43 reg_mod.c:318:25: error: 'cxdx_dest_realm_s' undeclared (first use in this function)
01:26:43 make[2]: *** [reg_mod.o] Error 1
01:26:43 make[1]: *** [install-modules] Error 1
blaming commit ef3def8cba78d2a58ab89a93424665986f886655
----------
More information can be found at the following URL:
https://sip-router.org/tracker/index.php?do=details&task_id=453#comment1559
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has been re-opened:
FS#453 - PARAM_STR vs STR_PARAM
User who did this - Víctor Seva (linuxmaniac)
More information can be found at the following URL:
https://sip-router.org/tracker/index.php?do=details&task_id=453
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.