sr-dev September 2023

sr-dev@lists.kamailio.org

17 participants
298 discussions

by Scherney Theodor

Hello, The Problem is that SDP body is rewritten, but Content-Length isn't updated. Attached a trace from PCSCF. Event 207 Incoming INVITE: Content length of SDP body is 313. [cid:image001.png@01D9C520.8D438CA0] Event 218 Outgoing INVITE: SDP body is rewritten triggered by "rtpengine_manage". [cid:image002.png@01D9C521.F9C28DD0] Content length of SDP body isn't updated. It should be 242. Event 212: Received from RTP Proxy [cid:image003.png@01D9C521.F9C28DD0] Kamailio Version 5.5.X LOGs from rtpengine.c: Changed File according Logs attached.. 2023-08-01T10:25:41.118366+02:00 172.29.21.25 vict-pcscf-rhel8[1170319] - [logSDID@20306 resource="rtpengine"] ERROR: rtpengine [rtpengine.c:4070]: newbody 'v=0#015#012o=- 3863667612 3863667612 IN IP4 172.23.12.62#015#012s=pjmedia#015#012b=AS:84#015#012t=0 0#015#012a=X-nat:0#015#012m=audio 30444 RTP/AVP 8 101#015#012c=IN IP4 172.29.21.32#015#012b=TIAS:64000#015#012a=sendrecv#015#012a=rtpmap:8 PCMA/8000#015#012a=rtpmap:101 telephone-event/8000#015#012a=fmtp:101 0-16#015#012' 2023-08-01T10:25:41.118730+02:00 172.29.21.25 vict-pcscf-rhel8[1170319] - [logSDID@20306 resource="rtpengine"] ERROR: rtpengine [rtpengine.c:4071]: newbody.len [242] 2023-08-01T10:25:41.119049+02:00 172.29.21.25 vict-pcscf-rhel8[1170319] - [logSDID@20306 resource="rtpengine"] ERROR: rtpengine [rtpengine.c:4110]: rtpengine_offer_answer-03 Any suggestions on how to solve this problem? Thanks! BR Theo

1 year, 2 months

git:master:42704189: pv: reformat exported structures for better readability

by Daniel-Constantin Mierla

Module: kamailio Branch: master Commit: 42704189b49d565bf7341292bf1282bafa9ccc73 URL: https://github.com/kamailio/kamailio/commit/42704189b49d565bf7341292bf1282b… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: 2023-09-14T10:48:26+02:00 pv: reformat exported structures for better readability --- Modified: src/modules/pv/pv.c --- Diff: https://github.com/kamailio/kamailio/commit/42704189b49d565bf7341292bf1282b… Patch: https://github.com/kamailio/kamailio/commit/42704189b49d565bf7341292bf1282b…

1 year, 2 months

[kamailio/kamailio] kamailio 5.7.1 webrtc bug 6 (Issue #3568)

by themsley-voiceflex

### Description see #3563 Sorry about this lot but they all look different in a maybe related sort of way but after 6 bug reports and more coredumps than that, I shall stop now in the hope that there's some useful info somewhere in it all! I started this experiment using 5.6.4 and that crashed 50 times in the space of 10 minutes so 5.7.1 is positively stable with just 6 coredumps in 3 hours! #### Debugging Data ``` PID: 7880 (kamailio) UID: 990 (kamailio) GID: 988 (kamailio) Signal: 11 (SEGV) Timestamp: Thu 2023-09-14 01:29:32 UTC (10min ago) Command Line: /usr/sbin/kamailio -DD -P /run/kamailio/kamailio.pid -f /etc/kamailio/kamailio.cfg -m 256 -M 8 --atexit=no Executable: /usr/sbin/kamailio Control Group: /system.slice/kamailio.service Unit: kamailio.service Slice: system.slice Boot ID: 3fc4251c606f4c6183610573f44c46ba Machine ID: 16e913e686424f13b970f9b1044cc6b3 Hostname: kamrtc01.voiceflex.com Storage: /var/lib/systemd/coredump/core.kamailio.990.3fc4251c606f4c6183610573f44c46ba.7880.1694654972000000.zst (present) Size on Disk: 2.5M Message: Process 7880 (kamailio) of user 990 dumped core. Stack trace of thread 7880: #0 0x00007ffa7e793cd5 EVP_KDF_CTX_free (libcrypto.so.3 + 0x193cd5) #1 0x00007ffa7eba5734 tls13_hkdf_expand (libssl.so.3 + 0x4b734) #2 0x00007ffa7eba5c39 derive_secret_key_and_iv (libssl.so.3 + 0x4bc39) #3 0x00007ffa7eba82b5 tls13_change_cipher_state (libssl.so.3 + 0x4e2b5) #4 0x00007ffa7ebca63b ossl_statem_server_post_work (libssl.so.3 + 0x7063b) #5 0x00007ffa7ebbbb4b state_machine.part.0 (libssl.so.3 + 0x61b4b) #6 0x00007ffa7de4b584 tls_accept (tls.so + 0x59584) #7 0x00007ffa7de568be tls_h_read_f (tls.so + 0x648be) #8 0x00000000006c79bc tcp_read_headers (kamailio + 0x2c79bc) #9 0x00000000006cfb94 tcp_read_req (kamailio + 0x2cfb94) #10 0x00000000006d4cc3 handle_io (kamailio + 0x2d4cc3) #11 0x00000000006c271d io_wait_loop_epoll (kamailio + 0x2c271d) #12 0x00000000006d7a47 tcp_receive_loop (kamailio + 0x2d7a47) #13 0x00000000006b7689 tcp_init_children (kamailio + 0x2b7689) #14 0x000000000042fae9 main_loop (kamailio + 0x2fae9) #15 0x0000000000439969 main (kamailio + 0x39969) #16 0x00007ffa7fc3feb0 __libc_start_call_main (libc.so.6 + 0x3feb0) #17 0x00007ffa7fc3ff60 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3ff60) #18 0x000000000041dc65 _start (kamailio + 0x1dc65) ELF object binary architecture: AMD x86-64 Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007ffa7e793cd5 in EVP_KDF_CTX_free (ctx=0x7ffa6e52c300) at crypto/evp/kdf_lib.c:49 49 ctx->meth->freectx(ctx->algctx); Missing separate debuginfos, use: dnf debuginfo-install glibc-2.34-60.0.2.el9.x86_64 libgcc-11.3.1-4.3.0.1.el9.x86_64 libstdc++-11.3.1-4.3.0.1.el9.x86_64 sssd-client-2.8.2-3.0.2.el9_2.x86_64 (gdb) bt full #0 0x00007ffa7e793cd5 in EVP_KDF_CTX_free (ctx=0x7ffa6e52c300) at crypto/evp/kdf_lib.c:49 No locals. #1 0x00007ffa7eba5734 in tls13_hkdf_expand (s=s@entry=0x7ffa6e8c0c80, md=md@entry=0x7ffa6e15e470, secret=secret@entry=0x7ffdf7e38160 "\374\265\277θh\022\v<\357\356\"\202z\277\302\207\017\362X\246ߔY\311\376ױ\263\253\231\001\063\003\257\251\377\203\250\363r\304x*%", label=label@entry=0x7ffa7ebe019a <keylabel> "key", labellen=labellen@entry=3, data=data@entry=0x0, datalen=0, out=0x7ffdf7e381a0 "j?c\202\355,\223\f[\276,\355\201r\235\060\344\303xu\372\240\371䝫WB0W\002G", outlen=32, fatal=1) at ssl/tls13_enc.c:94 kdf = <optimized out> kctx = 0x7ffa6e52c300 params = {{key = 0x7ffa7ebd94c1 "mode", data_type = 1, data = 0x7ffdf7e37e6c, data_size = 4, return_size = 18446744073709551615}, {key = 0x7ffa7ebd9610 "digest", data_type = 4, data = 0x7ffa6e15e668, data_size = 8, return_size = 18446744073709551615}, {key = 0x7ffa7ebd93da "key", data_type = 5, data = 0x7ffdf7e38160, data_size = 48, return_size = 18446744073709551615}, {key = 0x7ffa7ebd9c2c "prefix", data_type = 5, data = 0x7ffa7ebe0216 <label_prefix>, data_size = 6, return_size = 18446744073709551615}, {key = 0x7ffa7ebda137 "label", data_type = 5, data = 0x7ffa7ebe019a <keylabel>, data_size = 3, return_size = 18446744073709551615}, {key = 0x0, data_type = 0, data = 0x0, data_size = 0, return_size = 0}, {key = 0x0, data_type = 0, data = 0x0, data_size = 0, return_size = 0}} p = <optimized out> mode = 2 mdname = <optimized out> ret = 0 hashlen = 48 __func__ = "tls13_hkdf_expand" #2 0x00007ffa7eba5c39 in tls13_derive_key (keylen=32, key=0x7ffdf7e381a0 "j?c\202\355,\223\f[\276,\355\201r\235\060\344\303xu\372\240\371䝫WB0W\002G", secret=0x7ffdf7e38160 "\374\265\277θh\022\v<\357\356\"\202z\277\302\207\017\362X\246ߔY\311\376ױ\263\253\231\001\063\003\257\251\377\203\250\363r\304x*%", md=0x7ffa6e15e470, s=0x7ffa6e8c0c80) at ssl/tls13_enc.c:119 keylabel = {<optimized out>, <optimized out>, <optimized out>, <optimized out>} #3 derive_secret_key_and_iv (s=s@entry=0x7ffa6e8c0c80, sending=sending@entry=0, md=md@entry=0x7ffa6e15e470, ciph=0x7ffa6df01df8, insecret=insecret@entry=0x7ffa6e8c1204 "\276\202\315\064̫VVZ\037\f82\366\243\216,\f@\177\237\321\006\037\252 \033\303s\354\354\037\353U\255\276\302\237\360\341\003\222Ɍ#\277AP", hash=hash@entry=0x7ffa6e8c1384 "O\362\320+\017\232\354m;\251v\177\023\200m\345}\236\301\254C\027\231\005ͪ\363\253_\273\376\242\341\006\206\211\227\302\003E", label=0x7ffa7ebe0158 <client_handshake_traffic> "c hs traffic", labellen=12, secret=0x7ffdf7e38160 "\374\265\277θh\022\v<\357\356\"\202z\277\302\207\017\362X\246ߔY\311\376ױ\263\253\231\001\063\003\257\251\377\203\250\363r\304x*%", key=0x7ffdf7e381a0 "j?c\202\355,\223\f[\276,\355\201r\235\060\344\303xu\372\240\371䝫WB0W\002G", iv=0x7ffa6e8c14d0 "", ciph_ctx=0x7ffa6e84f4a0) at ssl/tls13_enc.c:385 ivlen = 12 keylen = 32 taglen = 0 hashleni = <optimized out> hashlen = <optimized out> __func__ = "derive_secret_key_and_iv" #4 0x00007ffa7eba82b5 in tls13_change_cipher_state (s=0x7ffa6e8c0c80, which=161) at ssl/tls13_enc.c:650 iv = 0x7ffa6e8c14d0 "" key = "j?c\202\355,\223\f[\276,\355\201r\235\060\344\303xu\372\240\371䝫WB0W\002G", '\000' <repeats 31 times> secret = "\374\265\277θh\022\v<\357\356\"\202z\277\302\207\017\362X\246ߔY\311\376ױ\263\253\231\001\063\003\257\251\377\203\250\363r\304x*%\000\366\\", '\000' <repeats 15 times> hashval = "O\362\320+\017\232\354m;\251v\177\023\200m\345}\236\301\254C\027\231\005ͪ\363\253_\273\376\242\341\006\206\211\227\302\003E\000\246\201\334\067\204C^R\237\346}\372\177\000\000\000\000\000\000\000\000\000" hash = 0x7ffa6e8c1384 "O\362\320+\017\232\354m;\251v\177\023\200m\345}\236\301\254C\027\231\005ͪ\363\253_\273\376\242\341\006\206\211\227\302\003E" insecret = <optimized out> finsecret = <optimized out> log_label = <optimized out> ciph_ctx = 0x7ffa6e84f4a0 finsecretlen = <optimized out> label = <optimized out> labellen = <optimized out> hashlen = 48 ret = 0 md = 0x7ffa6e15e470 cipher = 0x7ffa6df01df8 crypto_info = {{gcm128 = {info = {version = 1, cipher_type = 0}, iv = "\000\000\000\000\000@\000", key = "\000\000\000\000\240\202\343\367\375\177\000\000\345\265q", salt = "\000\000\000", rec_seq = "\250\354\204n\372\177\000"}, gcm256 = {info = {version = 1, cipher_type = 0}, iv = "\000\000\000\000\000@\000", key = "\000\000\000\000\240\202\343\367\375\177\000\000\345\265q\000\000\000\000\000\250\354\204n\372\177\000\000\001\000\000", salt = "\000\000\000", rec_seq = "R\237\346}\372\177\000"}, ccm128 = {info = {version = 1, cipher_type = 0}, iv = "\000\000\000\000\000@\000", key = "\000\000\000\000\240\202\343\367\375\177\000\000\345\265q", salt = "\000\000\000", rec_seq = "\250\354\204n\372\177\000"}, chacha20poly1305 = {info = {version = 1, cipher_type = 0}, iv = "\000\000\000\000\000@\000\000\000\000\000", key = "\240\202\343\367\375\177\000\000\345\265q\000\000\000\000\000\250\354\204n\372\177\000\000\001\000\000\000\000\000\000", salt = 0x7ffdf7e38110 "R\237\346}\372\177", rec_seq = "R\237\346}\372\177\000"}}, tls_crypto_info_len = 140713844858453} bio = <optimized out> skip_ktls = <optimized out> __func__ = "tls13_change_cipher_state" early_exporter_master_secret = "e exp master" client_handshake_traffic = "c hs traffic" server_handshake_traffic = "s hs traffic" server_application_traffic = "s ap traffic" client_early_traffic = "c e traffic" client_application_traffic = "c ap traffic" resumption_master_secret = "res master" exporter_master_secret = "exp master" #5 0x00007ffa7ebca63b in ossl_statem_server_post_work (s=0x7ffa6e8c0c80, wst=<optimized out>) at ssl/statem/statem_srvr.c:903 st = 0x7ffa6e8c0cc8 __func__ = "ossl_statem_server_post_work" #6 0x00007ffa7ebbbb4b in write_state_machine (s=0x7ffa6e8c0c80) at ssl/statem/statem.c:893 post_work = 0x7ffa7ebca200 <ossl_statem_server_post_work> mt = 257 pkt = {buf = 0x7ffa6e84ea00, staticbuf = 0x0, curr = 1, written = 1, maxsize = 18446744073709551615, subs = 0x0, endfirst = 0} ret = <optimized out> pre_work = 0x7ffa7ebc9260 <ossl_statem_server_pre_work> get_construct_message_f = 0x7ffa7ebc2920 <ossl_statem_server_construct_message> confunc = 0x7ffa7ebc2c30 <tls_construct_change_cipher_spec> st = 0x7ffa6e8c0cc8 transition = 0x7ffa7ebc9cf0 <ossl_statem_server_write_transition> cb = 0x7ffa7de10e72 <sr_ssl_ctx_info_callback> st = <optimized out> ret = <optimized out> transition = <optimized out> pre_work = <optimized out> post_work = <optimized out> get_construct_message_f = <optimized out> cb = <optimized out> confunc = <optimized out> mt = <optimized out> pkt = {buf = <optimized out>, staticbuf = <optimized out>, curr = <optimized out>, written = <optimized out>, maxsize = <optimized out>, subs = <optimized out>, endfirst = <optimized out>} __func__ = {<optimized out> <repeats 20 times>} tmpret = <optimized out> #7 state_machine (s=0x7ffa6e8c0c80, server=<optimized out>) at ssl/statem/statem.c:451 buf = 0x0 cb = <optimized out> st = <optimized out> ret = <optimized out> ssret = <optimized out> __func__ = {<optimized out> <repeats 14 times>} #8 0x00007ffa7de4b584 in tls_accept (c=0x7ffa6e7510a8, error=0x7ffdf7e58584) at tls_server.c:470 ret = 0 ssl = 0x7ffa6e8c0c80 cert = 0x1 tls_c = 0x7ffa6e84e020 tls_log = 0 __func__ = "tls_accept" #9 0x00007ffa7de568be in tls_h_read_f (c=0x7ffa6e7510a8, flags=0x7ffdf7e589c0) at tls_server.c:1175 r = 0x7ffa6e7511d0 bytes_free = 16383 bytes_read = 617 read_size = 16383 ssl_error = 0 ssl_read = 0 ssl = 0x7ffa6e8c0c80 rd_buf = "\026\003\001\002d\001\000\002`\003\003]\250\071\325\351\002*'.4\361|\255K\032\016\071\244^\331^î\220ޝ)<\t\323\300\330 $Z\200?/\377\331\066\313\066\250\251\300\334k\022i\330\341\223!\213p\254\v\240\006\300c\032\355\355\000 \352\352\023\001\023\002\023\003\300+\300/\300,\300\060̨̩\300\023\300\024\000\234\000\235\000/\000\065\001\000\001\367\232\232\000\000\000\020\000\v\000\t\bhttp/1.1\000\v\000\002\001\000\000-\000\002\001\001\377\001\000\001\000\000#\000\000\000\033\000\003\002\000\002\000\000\000\030\000\026\000\000\023webrtc.nebulaip.com\000\063\000+\000)ZZ\000\001\000\000\035\000 "... wr_buf = "\240\205\344\367\375\177\000\000\026\003\000\000\026\003\000\000\000\000\001\000\026N\360\035\235~\214il=\337&\304J\302\236R\214\270:\261\203\277\034)\377\263H\276\355\300\345\065\b\300\264\342\225$\334X\036)W|nCS){D\300_\aH\020\213\340BY\241\304m\350\b\236([%\354/\340\023\n@RD/\273\245\271\356u&\376\255\340Zđ\331./XB\224F\205[\021i\r\250\024к\311\030*\262U\375\020\002L\362\312\005\225\063\\\032\211\061\317%A\024\062\360\310CP\227\355\270(O\263\201\202\tj>\022A\351\374.XB\024\274=\220\310'\343\344\251R\311\314$,\035\267|\031\250\024\223E\254\227U;\351\351\303\372\270>"... rd = {buf = 0x7ffdf7e48580 "\026\003\001\002d\001", pos = 617, used = 617, size = 65536} wr = {buf = 0x7ffdf7e38580 "\240\205\344\367\375\177", pos = 0, used = 0, size = 65536} tls_c = 0x7ffa6e84e020 --Type <RET> for more, q to quit, c to continue without paging-- enc_rd_buf = 0x0 n = 0 flush_flags = 0 err_src = 0x7ffa7de735a0 "TLS read:" ip_buf = '\000' <repeats 63 times> x = 2144005193 tls_dbg = 4095 __func__ = "tls_h_read_f" #10 0x00000000006c79bc in tcp_read_headers (c=0x7ffa6e7510a8, read_flags=0x7ffdf7e589c0) at core/tcp_read.c:441 bytes = 65535 remaining = 0 p = 0x2f86e9a95d6 <error: Cannot access memory at address 0x2f86e9a95d6> r = 0x7ffa6e7511d0 mc = 32762 body_len = 28314 mfline = 0x7ffa6e9a93a0 "\201\376\002\370\324X\234\004\206\035\333M\207\f\331V\364+\365t\356/\371f\246,\377*\272=\376q\270\071\365t\372;\363i\364\v\325T\373j\262\064\331R\312m\265b\274W\235\b\263\066\372h\263S\207\v\274u\342;\357f\247=\367v\344\062\365*\275\066\352e\270\061\370?\266*\375j\267\060\241~\355\060\333\060\266\023\244\060\354m\257\062\345U\226I\265 \261B\273*\353e\246<\357>\364o\254\t\336\f\363>\364d\357m\244b\353a\266*\350g\224/\371f\246,\377*\272=\376q\270\071\365t\372;\363i\352U\226B\246\067\361>\364d\357m\244b\353a\266*\350g\224/\371f\246,\377*\272=\376q\270\071\365t"... mtransid = {s = 0x7ffa6e9a8ff8 "<", len = 1855623184} __func__ = "tcp_read_headers" #11 0x00000000006cfb94 in tcp_read_req (con=0x7ffa6e7510a8, bytes_read=0x7ffdf7e589c4, read_flags=0x7ffdf7e589c0) at core/tcp_read.c:1469 bytes = -1 total_bytes = 0 resp = 1 size = 0 req = 0x7ffa6e7511d0 dst = {send_sock = 0x7ffa6e9a8ff8, to = {s = {sa_family = 0, sa_data = "\000\020\002\000\000\000\001\000\345\367\021\000\000"}, sin = {sin_family = 0, sin_port = 4096, sin_addr = {s_addr = 2}, sin_zero = "\001\000\345\367\021\000\000"}, sin6 = {sin6_family = 0, sin6_port = 4096, sin6_flowinfo = 2, sin6_addr = {__in6_u = {__u6_addr8 = "\001\000\345\367\021\000\000\000ಙ\000\000\000\000", __u6_addr16 = {1, 63461, 17, 0, 45792, 153, 0, 0}, __u6_addr32 = {4158980097, 17, 10072800, 0}}}, sin6_scope_id = 2565659576}, sas = {ss_family = 0, __ss_padding = "\000\020\002\000\000\000\001\000\345\367\021\000\000\000ಙ\000\000\000\000\000\270\333옒\225\237\207\220\221\232n\372\177\000\000\000\000\000\000owh\001\240\264\231\000\000\000\000\000\024\000\000\000\000\000\000\000\001\000\000\000\001\000\000\000\022\000\000\000\375\177\000\000-uQ\000\000\000\000\000\270\211\345\367\375\177\000\000\b", '\000' <repeats 22 times>, __ss_align = 140728762468432}}, id = 1, send_flags = {f = 0, blst_imask = 0}, proto = 48 '0', proto_pad0 = -120 '\210', proto_pad1 = -2075} c = 0 '\000' ret = 0 __func__ = "tcp_read_req" #12 0x00000000006d4cc3 in handle_io (fm=0x7ffa7f599ce8, events=1, idx=-1) at core/tcp_read.c:1780 ret = 8 n = 8 read_flags = RD_CONN_SHORT_READ con = 0x7ffa6e7510a8 s = 18 resp = 1 t = 23623535 ee = 0x0 __func__ = "handle_io" #13 0x00000000006c271d in io_wait_loop_epoll (h=0x99b2e0 <io_w>, t=2, repeat=0) at core/io_wait.h:1070 n = 1 r = 0 fm = 0x7ffa7f599ce8 revents = 1 __func__ = "io_wait_loop_epoll" #14 0x00000000006d7a47 in tcp_receive_loop (unix_sock=47) at core/tcp_read.c:1976 __func__ = "tcp_receive_loop" #15 0x00000000006b7689 in tcp_init_children (woneinit=0x7ffdf7e58d7c) at core/tcp_main.c:5239 r = 3 i = 3 reader_fd_1 = 47 pid = 0 si_desc = "tcp receiver (generic)\000\000\000\000\000\000\000\000\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000\240{\324\177\372\177\000\000\000\000\000\020\000\000\000\000\020\215\345\367\375\177\000\000\034\003e\000\000\000\000\000\020\215\345\367\375\177\000\000\345\030n\000\000\000\000\000\300\214\345\367\375\177\000\000\252\264~\000\000\000\000\000\023e\204\000\000\000\000\000ȹ\342m \000\000" si = 0x0 __func__ = "tcp_init_children" #16 0x000000000042fae9 in main_loop () at main.c:1851 i = 4 pid = 7869 si = 0x0 si_desc = "udp receiver child=3 sock=172.16.128.55:5090\000Y\354W\340\215\345\367\375\177\000\000\000\000\000\000\000\000\000\000@\223\345\367\375\177\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000X_J\177\372\177\000\000\000\000\000\020\000\000\000\000:|\324\177\372\177\000\000\060\000\000\000\060\000\000\000\370\216\345\367\375\177\000" nrprocs = 4 woneinit = 1 __func__ = "main_loop" #17 0x0000000000439969 in main (argc=11, argv=0x7ffdf7e59458) at main.c:3086 cfg_stream = 0x185d380 c = -1 r = 0 tmp = 0x7ffdf7e59ea3 "" tmp_len = 0 port = 0 proto = 0 ahost = 0x0 aport = 0 options = 0x8322d8 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 3855592029 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x200000064 p = 0x0 st = {st_dev = 24, st_ino = 891, st_nlink = 2, st_mode = 16832, st_uid = 990, st_gid = 988, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1694643229, tv_nsec = 729000000}, st_mtim = {tv_sec = 1694654829, tv_nsec = 40961094}, st_ctim = {tv_sec = 1694654829, tv_nsec = 40961094}, __glibc_reserved = {0, 0, 0}} tbuf = "\331l\372\177\372\177\000\000\070+\367\177\372\177\000\000А\345\367\375\177\000\000\a\000\000\000\000\000\000\000\330\030\367\177\372\177\000\000\a\000\000\000#\000\000\000\060z\372\177\372\177\000\000\245F\370\177\372\177\000\000\000\000\000\000\000\000\000\000\220Y\370\177\372\177\000\000\070\000\301\177\372\177\000\000\000\212\366\177\372\177\000\000\000\000\000\000\000\000\000\000\240\220\345\367\375\177\000\000\360n\372\177\372\177\000\000\330*\367\177\372\177\000\000\330*\367\177\372\177\000\000\000\000\000\000\000\000\000\000ؘ\366\177\372\177\000\000\240\220\345\367\375\177\000\000\220\205\372\177\372\177\000\000\000\020\367\177\372\177\000\000\022\034\367\177\372\177\000\000\066\021\370\177\372\177\000\000\344#\300\177\372\177\000\000\272\250"... option_index = 12 long_options = {{name = 0x834976 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x82f4f4 "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x83497b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x834981 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x834987 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x834990 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, { name = 0x83499a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x8349a4 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x8349af "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x8349b8 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x8349c3 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x8349c9 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, { name = 0x8349d3 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x8349da "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" ``` #### Log Messages  ``` Sep 14 01:29:32 kamrtc01 /usr/sbin/kamailio[7880]: CRITICAL: <core> [core/mem/q_malloc.c:519]: qm_free(): BUG: freeing already freed pointer (0x7ffa6eb1ad18), called from tls: tls_init.c: ser_free(405), first free tls: tls_init.c: ser_free(405) - ignoring Sep 14 01:29:32 kamrtc01 kernel: kamailio[7880]: segfault at 203331736cb4 ip 00007ffa7e793cd5 sp 00007ffdf7e37e00 error 4 in libcrypto.so.3.0.7[7ffa7e6ad000+25b000] Sep 14 01:29:32 kamrtc01 kernel: Code: 00 00 00 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 f3 0f 1e fa 48 85 ff 74 37 55 48 89 fd 48 8b 7f 08 48 8b 45 00 <ff> 50 40 48 c7 45 08 00 00 00 00 48 8b 7d 00 e8 47 ff ff ff 48 89 Sep 14 01:29:33 kamrtc01 systemd-coredump[7952]: Process 7880 (kamailio) of user 990 dumped core.#012#012Stack trace of thread 7880:#012#0 0x00007ffa7e793cd5 EVP_KDF_CTX_free (libcrypto.so.3 + 0x193cd5)#012#1 0x00007ffa7eba5734 tls13_hkdf_expand (libssl.so.3 + 0x4b734)#012#2 0x00007ffa7eba5c39 derive_secret_key_and_iv (libssl.so.3 + 0x4bc39)#012#3 0x00007ffa7eba82b5 tls13_change_cipher_state (libssl.so.3 + 0x4e2b5)#012#4 0x00007ffa7ebca63b ossl_statem_server_post_work (libssl.so.3 + 0x7063b)#012#5 0x00007ffa7ebbbb4b state_machine.part.0 (libssl.so.3 + 0x61b4b)#012#6 0x00007ffa7de4b584 tls_accept (tls.so + 0x59584)#012#7 0x00007ffa7de568be tls_h_read_f (tls.so + 0x648be)#012#8 0x00000000006c79bc tcp_read_headers (kamailio + 0x2c79bc)#012#9 0x00000000006cfb94 tcp_read_req (kamailio + 0x2cfb94)#012#10 0x00000000006d4cc3 handle_io (kamailio + 0x2d4cc3)#012#11 0x00000000006c271d io_wait_loop_epoll (kamailio + 0x2c271d)#012#12 0x00000000006d7a47 tcp_receive_loop (kamailio + 0x2d7a47)#012#13 0x00000000006b7689 tcp_init_children (kamailio + 0x2b7689)#012#14 0x000000000042fae9 main_loop (kamailio + 0x2fae9)#012#15 0x0000000000439969 main (kamailio + 0x39969)#012#16 0x00007ffa7fc3feb0 __libc_start_call_main (libc.so.6 + 0x3feb0)#012#17 0x00007ffa7fc3ff60 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3ff60)#012#18 0x000000000041dc65 _start (kamailio + 0x1dc65)#012ELF object binary architecture: AMD x86-64 ``` -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3568 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3568(a)github.com>

1 year, 2 months

[kamailio/kamailio] kamailio 5.7.1 webrtc bug report 4 (Issue #3566)

by themsley-voiceflex

### Description All as per https://github.com/kamailio/kamailio/issues/3563 #### Debugging Data ``` PID: 4209 (kamailio) UID: 990 (kamailio) GID: 988 (kamailio) Signal: 6 (ABRT) Timestamp: Thu 2023-09-14 00:20:29 UTC (32min ago) Command Line: /usr/sbin/kamailio -DD -P /run/kamailio/kamailio.pid -f /etc/kamailio/kamailio.cfg -m 256 -M 8 --atexit=no Executable: /usr/sbin/kamailio Control Group: /system.slice/kamailio.service Unit: kamailio.service Slice: system.slice Boot ID: 3fc4251c606f4c6183610573f44c46ba Machine ID: 16e913e686424f13b970f9b1044cc6b3 Hostname: kamrtc01.voiceflex.com Storage: /var/lib/systemd/coredump/core.kamailio.990.3fc4251c606f4c6183610573f44c46ba.4209.1694650829000000.zst (present) Size on Disk: 3.3M Message: Process 4209 (kamailio) of user 990 dumped core. Stack trace of thread 4209: #0 0x00007f1338ea158c __pthread_kill_implementation (libc.so.6 + 0xa158c) #1 0x00007f1338e54d46 raise (libc.so.6 + 0x54d46) #2 0x00007f1338e287f3 abort (libc.so.6 + 0x287f3) #3 0x00000000007164db qm_debug_check_frag (kamailio + 0x3164db) #4 0x000000000071a703 qm_free (kamailio + 0x31a703) #5 0x0000000000725209 qm_shm_free (kamailio + 0x325209) #6 0x00007f13370043d6 ser_free (tls.so + 0x313d6) #7 0x00007f1337dbc1ee state_machine.part.0 (libssl.so.3 + 0x621ee) #8 0x00007f133702c584 tls_accept (tls.so + 0x59584) #9 0x00007f13370378be tls_h_read_f (tls.so + 0x648be) #10 0x00000000006c79bc tcp_read_headers (kamailio + 0x2c79bc) #11 0x00000000006cfb94 tcp_read_req (kamailio + 0x2cfb94) #12 0x00000000006d4cc3 handle_io (kamailio + 0x2d4cc3) #13 0x00000000006c271d io_wait_loop_epoll (kamailio + 0x2c271d) #14 0x00000000006d7a47 tcp_receive_loop (kamailio + 0x2d7a47) #15 0x00000000006b7689 tcp_init_children (kamailio + 0x2b7689) #16 0x000000000042fae9 main_loop (kamailio + 0x2fae9) #17 0x0000000000439969 main (kamailio + 0x39969) #18 0x00007f1338e3feb0 __libc_start_call_main (libc.so.6 + 0x3feb0) #19 0x00007f1338e3ff60 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3ff60) #20 0x000000000041dc65 _start (kamailio + 0x1dc65) ELF object binary architecture: AMD x86-64 (gdb) bt full #0 0x00007f1338ea158c in __pthread_kill_implementation () from /lib64/libc.so.6 No symbol table info available. #1 0x00007f1338e54d46 in raise () from /lib64/libc.so.6 No symbol table info available. #2 0x00007f1338e287f3 in abort () from /lib64/libc.so.6 No symbol table info available. #3 0x00000000007164db in qm_debug_check_frag (qm=0x7f1326fd3000, f=0x7f1327793800, file=0x7f133704afe1 "tls: tls_init.c", line=405, efile=0x8a1659 "core/mem/q_malloc.c", eline=511) at core/mem/q_malloc.c:129 p = 0x7f1327732cd0 __func__ = "qm_debug_check_frag" #4 0x000000000071a703 in qm_free (qmp=0x7f1326fd3000, p=0x7f1327793838, file=0x7f133704afe1 "tls: tls_init.c", func=0x7f133704cae0 <__func__.0> "ser_free", line=405, mname=0x7f133704af52 "tls") at core/mem/q_malloc.c:511 qm = 0x7f1326fd3000 f = 0x7f1327793800 size = 140729200190032 next = 0x1 prev = 0x7f132700c6c8 __func__ = "qm_free" #5 0x0000000000725209 in qm_shm_free (qmp=0x7f1326fd3000, p=0x7f1327793838, file=0x7f133704afe1 "tls: tls_init.c", func=0x7f133704cae0 <__func__.0> "ser_free", line=405, mname=0x7f133704af52 "tls") at core/mem/q_malloc.c:1350 No locals. #6 0x00007f13370043d6 in ser_free (ptr=0x7f1327793838, fname=0x7f1337dd6146 "crypto/packet.c", fline=509) at tls_init.c:405 __func__ = "ser_free" #7 0x00007f1337dbc1ee in WPACKET_cleanup (pkt=0x7ffe11fca310) at crypto/packet.c:509 sub = <optimized out> parent = 0x0 #8 write_state_machine (s=0x7f1327f185e0) at ssl/statem/statem.c:873 post_work = <optimized out> mt = 2 pkt = {buf = 0x7f1327da93e0, staticbuf = 0x0, curr = 122, written = 122, maxsize = 18446744073709551615, subs = 0x7f1327793838, endfirst = 0} ret = <optimized out> pre_work = 0x7f1337dc9260 <ossl_statem_server_pre_work> get_construct_message_f = 0x7f1337dc2920 <ossl_statem_server_construct_message> confunc = 0x7f1337dca970 <tls_construct_server_hello> st = 0x7f1327f18628 transition = 0x7f1337dc9cf0 <ossl_statem_server_write_transition> cb = 0x7f1336ff1e72 <sr_ssl_ctx_info_callback> st = <optimized out> ret = <optimized out> transition = <optimized out> pre_work = <optimized out> post_work = <optimized out> get_construct_message_f = <optimized out> cb = <optimized out> confunc = <optimized out> mt = <optimized out> pkt = {buf = <optimized out>, staticbuf = <optimized out>, curr = <optimized out>, written = <optimized out>, maxsize = <optimized out>, subs = <optimized out>, endfirst = <optimized out>} __func__ = {<optimized out> <repeats 20 times>} tmpret = <optimized out> #9 state_machine (s=0x7f1327f185e0, server=<optimized out>) at ssl/statem/statem.c:451 buf = 0x0 cb = <optimized out> st = <optimized out> ret = <optimized out> ssret = <optimized out> __func__ = {<optimized out> <repeats 14 times>} #10 0x00007f133702c584 in tls_accept (c=0x7f1327b9eed8, error=0x7ffe11fea584) at tls_server.c:470 ret = 0 ssl = 0x7f1327f185e0 cert = 0x1 tls_c = 0x7f13277de980 tls_log = 32766 __func__ = "tls_accept" #11 0x00007f13370378be in tls_h_read_f (c=0x7f1327b9eed8, flags=0x7ffe11fea9c0) at tls_server.c:1175 r = 0x7f1327b9f000 bytes_free = 16383 bytes_read = 617 read_size = 16383 ssl_error = 0 ssl_read = 0 ssl = 0x7f1327f185e0 rd_buf = "\026\003\001\002d\001\000\002`\003\003\037\017\360\302a4J\025k\341\210\000B\216ݖ\023\243#\n?\267]\214A\017\370P\374\063a( \241^2\243\006\360>\334\033(+\363d\b\350$\rt\311\321\351\205l\024\021\322|z\\o\235\353\000 \372\372\023\001\023\002\023\003\300+\300/\300,\300\060̨̩\300\023\300\024\000\234\000\235\000/\000\065\001\000\001\367\252\252\000\000\000\005\000\005\001\000\000\000\000\000\n\000\n\000\b\n\n\000\035\000\027\000\030\000#\000\000\000\033\000\003\002\000\002\000\027\000\000\000+\000\a\006\312\312\003\004\003\003\000\063\000+\000)\n\n\000\001\000\000\035\000 2\326\305\"봉\332\366\363SV\036ɩ\322u\316\061\030\225\353Yi"... wr_buf = "\027\003\003\001\032j\276\373Ӥw:1\221<uUV;\357&\211N\001#M\"`\234\370\365\213C\265B\004\006y\250/\246Nd\334h\f\343\065:k\341\321\023\257\360T\020,\255\271\235\201_\003\272\005\237A\356\326\313\355\351\340D^f\023_J\223\360\303:\310gi\313v\306\025\352d\360\343\246/,-\207+\301x\217\246F\300\361\064F\212\377YN\323\065A\323\365Zɞb!3\"8\024\235\066\033\311\t\361\334[\225\227\004c\230\223\210ʑL\213\331\027\022\370\257\265\352s\225\066\370jc\256(\246@\"\245f%\335\026\071\232\374\065\066ar\265\066B\213\024cT/\356\315`\233\350\234\027N\375\254]\360\064\064\305\070z\355"... rd = {buf = 0x7ffe11fda580 "\026\003\001\002d\001", pos = 617, used = 617, size = 65536} wr = { buf = 0x7ffe11fca580 "\027\003\003\001\032j\276\373Ӥw:1\221<uUV;\357&\211N\001#M\"`\234\370\365\213C\265B\004\006y\250/\246Nd\334h\f\343\065:k\341\321\023\257\360T\020,\255\271\235\201_\003\272\005\237A\356\326\313\355\351\340D^f\023_J\223\360\303:\310gi\313v\306\025\352d\360\343\246/,-\207+\301x\217\246F\300\361\064F\212\377YN\323\065A\323\365Zɞb!3\"8\024\235\066\033\311\t\361\334[\225\227\004c\230\223\210ʑL\213\331\027\022\370\257\265\352s\225\066\370jc\256(\246@\"\245f%\335\026\071\232\374\065\066ar\265\066B\213\024cT/\356\315`\233\350\234\027N\375\254]\360\064", <incomplete sequence \305>..., pos = 0, used = 0, size = 65536} tls_c = 0x7f13277de980 enc_rd_buf = 0x0 n = 0 flush_flags = 0 err_src = 0x7f13370545a0 "TLS read:" ip_buf = '\000' <repeats 63 times> x = 954920009 tls_dbg = 4095 __func__ = "tls_h_read_f" #12 0x00000000006c79bc in tcp_read_headers (c=0x7f1327b9eed8, read_flags=0x7ffe11fea9c0) at core/tcp_read.c:441 bytes = 65535 remaining = 0 p = 0x7f1327a0789b "l'\244\016v \247T~ \267E\"l\350Um \356Uj'\260\032-z\261\025+z\267\020\062+\340E'c\340\027~\177\371\030|-\342\r*y\341E)*\262\025|y\265\025!l\357Eg>\275Rz=\351\026/~\331*^\"\270Oht\364a\\\005\370c^" r = 0x7f1327b9f000 mc = 32531 body_len = 10144 mfline = 0x7f13276af2b8 "\201\376\002\367\025p\362%G5\265lF$\267w5\003\233U/\a\227Gg\004\221\v{\025\220Py\021\233U;\023\235H5#\273u:B\334\025\030z\244LtJ\322v\\ \335\027;@\335rF#\322Fc@\313My\002\203U\"B\233\v|\036\204Dy\031\226\036w\002\223Kv\030\317_,\030\265\021w;\313\022-B\303\022!}\370ht\b\337cz\002\205Dg\024\201\037\065G\302(\037$\235\037\065L\201LeJ\205@w\002\206FU\a\227Gg\004\221\v{\025\220Py\021\233U;\023\235H+}\370cg\037\237\037\065L\201LeJ\205@w\002\206FU\a\227Gg\004\221\v{\025\220Py\021\233U"... mtransid = {s = 0x7f1327a072d0 "C", len = 664826600} __func__ = "tcp_read_headers" #13 0x00000000006cfb94 in tcp_read_req (con=0x7f1327b9eed8, bytes_read=0x7ffe11fea9c4, read_flags=0x7ffe11fea9c0) at core/tcp_read.c:1469 bytes = -1 total_bytes = 0 resp = 1 size = 0 req = 0x7f1327b9f000 dst = {send_sock = 0x7f1327a072d0, to = {s = {sa_family = 0, sa_data = "\000\020\002\000\000\000\001\000\376\021\022\000\000"}, sin = {sin_family = 0, sin_port = 4096, sin_addr = {s_addr = 2}, sin_zero = "\001\000\376\021\022\000\000"}, sin6 = {sin6_family = 0, sin6_port = 4096, sin6_flowinfo = 2, sin6_addr = {__in6_u = {__u6_addr8 = "\001\000\376\021\022\000\000\000ಙ\000\000\000\000", __u6_addr16 = {1, 4606, 18, 0, 45792, 153, 0, 0}, __u6_addr32 = {301858817, 18, 10072800, 0}}}, sin6_scope_id = 955546528}, sas = {ss_family = 0, __ss_padding = "\000\020\002\000\000\000\001\000\376\021\022\000\000\000ಙ\000\000\000\000\000\240{\364\070\023\177\000\000ht\240'\023\177\000\000\000\251\376\021\353:\"%\240\264\231\000\000\000\000\000\024\000\000\000\000\000\000\000\001\000\000\000\001\000\000\000\023\000\000\000\376\177\000\000-uQ\000\000\000\000\000\270\251\376\021\376\177\000\000\b", '\000' <repeats 22 times>, __ss_align = 140729200322640}}, id = 1, send_flags = {f = 0, blst_imask = 0}, proto = 48 '0', proto_pad0 = -88 '\250', proto_pad1 = 4606} c = 108 'l' ret = 0 __func__ = "tcp_read_req" #14 0x00000000006d4cc3 in handle_io (fm=0x7f1338799c88, events=1, idx=-1) at core/tcp_read.c:1780 ret = 8 --Type <RET> for more, q to quit, c to continue without paging-- n = 8 read_flags = RD_CONN_SHORT_READ con = 0x7f1327b9eed8 s = 19 resp = 1 t = 623000299 ee = 0x0 __func__ = "handle_io" #15 0x00000000006c271d in io_wait_loop_epoll (h=0x99b2e0 <io_w>, t=2, repeat=0) at core/io_wait.h:1070 n = 1 r = 0 fm = 0x7f1338799c88 revents = 1 __func__ = "io_wait_loop_epoll" #16 0x00000000006d7a47 in tcp_receive_loop (unix_sock=43) at core/tcp_read.c:1976 __func__ = "tcp_receive_loop" #17 0x00000000006b7689 in tcp_init_children (woneinit=0x7ffe11fead7c) at core/tcp_main.c:5239 r = 1 i = 3 reader_fd_1 = 43 pid = 0 si_desc = "tcp receiver (generic)\000\000\000\000\000\000\000\000\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000\240{\364\070\023\177\000\000\000\000\000\020\000\000\000\000\020\255\376\021\376\177\000\000\034\003e\000\000\000\000\000\020\255\376\021\376\177\000\000\345\030n\000\000\000\000\000\300\254\376\021\376\177\000\000\252\264~\000\000\000\000\000\023e\204\000\000\000\000\000\310\311\000' \000\000" si = 0x0 __func__ = "tcp_init_children" #18 0x000000000042fae9 in main_loop () at main.c:1851 i = 4 pid = 4200 si = 0x0 si_desc = "udp receiver child=3 sock=172.16.128.55:5090\000\062\216\366\340\255\376\021\376\177\000\000\000\000\000\000\000\000\000\000@\263\376\021\376\177\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000X_j8\023\177\000\000\000\000\000\020\000\000\000\000:|\364\070\023\177\000\000\060\000\000\000\060\000\000\000\370\256\376\021\376\177\000" nrprocs = 4 woneinit = 1 __func__ = "main_loop" #19 0x0000000000439969 in main (argc=11, argv=0x7ffe11feb458) at main.c:3086 cfg_stream = 0xa20380 c = -1 r = 0 tmp = 0x7ffe11febea4 "" tmp_len = 0 port = 0 proto = 0 ahost = 0x0 aport = 0 options = 0x8322d8 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 444252184 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x200000064 p = 0x0 st = {st_dev = 24, st_ino = 891, st_nlink = 2, st_mode = 16832, st_uid = 990, st_gid = 988, __pad0 = 0, st_rdev = 0, st_size = 100, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1694643229, tv_nsec = 729000000}, st_mtim = {tv_sec = 1694648370, tv_nsec = 514732637}, st_ctim = {tv_sec = 1694648370, tv_nsec = 514732637}, __glibc_reserved = {0, 0, 0}} tbuf = "\331l\030\071\023\177\000\000\070+\025\071\023\177\000\000а\376\021\376\177\000\000\a\000\000\000\000\000\000\000\330\030\025\071\023\177\000\000\a\000\000\000#\000\000\000\060z\030\071\023\177\000\000\245F\026\071\023\177\000\000\000\000\000\000\000\000\000\000\220Y\026\071\023\177\000\000\070\000\341\070\023\177\000\000\000\212\024\071\023\177\000\000\000\000\000\000\000\000\000\000\240\260\376\021\376\177\000\000\360n\030\071\023\177\000\000\330*\025\071\023\177\000\000\330*\025\071\023\177\000\000\000\000\000\000\000\000\000\000ؘ\024\071\023\177\000\000\240\260\376\021\376\177\000\000\220\205\030\071\023\177\000\000\000\020\025\071\023\177\000\000\022\034\025\071\023\177\000\000\066\021\026\071\023\177\000\000\344#\340\070\023\177\000\000\272\250"... option_index = 12 long_options = {{name = 0x834976 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x82f4f4 "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x83497b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x834981 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x834987 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x834990 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, { name = 0x83499a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x8349a4 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x8349af "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x8349b8 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x8349c3 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x8349c9 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, { name = 0x8349d3 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x8349da "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" ``` #### Log Messages Sep 14 00:20:29 kamrtc01 /usr/sbin/kamailio[4209]: CRITICAL: <core> [core/mem/q_malloc.c:519]: qm_free(): BUG: freeing already freed pointer (0x7f13277938b0), called from tls: tls_init.c: ser_free(405), first free tls: tls_init.c: ser_free(405) - ignoring Sep 14 00:20:29 kamrtc01 /usr/sbin/kamailio[4209]: CRITICAL: <core> [core/mem/q_malloc.c:123]: qm_debug_check_frag(): BUG: qm: fragm. 0x7f1327793800 (address 0x7f1327793838) beginning overwritten (0)! Memory allocator was called from tls: tls_init.c:405. Fragment marked by (null):0. Exec from core/mem/q_malloc.c:511. Sep 14 00:20:29 kamrtc01 systemd[1]: Started Process Core Dump (PID 5579/UID 0). Sep 14 00:20:29 kamrtc01 systemd-coredump[5580]: Process 4209 (kamailio) of user 990 dumped core.#012#012Stack trace of thread 4209:#012#0 0x00007f1338ea158c __pthread_kill_implementation (libc.so.6 + 0xa158c)#012#1 0x00007f1338e54d46 raise (libc.so.6 + 0x54d46)#012#2 0x00007f1338e287f3 abort (libc.so.6 + 0x287f3)#012#3 0x00000000007164db qm_debug_check_frag (kamailio + 0x3164db)#012#4 0x000000000071a703 qm_free (kamailio + 0x31a703)#012#5 0x0000000000725209 qm_shm_free (kamailio + 0x325209)#012#6 0x00007f13370043d6 ser_free (tls.so + 0x313d6)#012#7 0x00007f1337dbc1ee state_machine.part.0 (libssl.so.3 + 0x621ee)#012#8 0x00007f133702c584 tls_accept (tls.so + 0x59584)#012#9 0x00007f13370378be tls_h_read_f (tls.so + 0x648be)#012#10 0x00000000006c79bc tcp_read_headers (kamailio + 0x2c79bc)#012#11 0x00000000006cfb94 tcp_read_req (kamailio + 0x2cfb94)#012#12 0x00000000006d4cc3 handle_io (kamailio + 0x2d4cc3)#012#13 0x00000000006c271d io_wait_loop_epoll (kamailio + 0x2c271d)#012#14 0x00000000006d7a47 tcp_receive_loop (kamailio + 0x2d7a47)#012#15 0x00000000006b7689 tcp_init_children (kamailio + 0x2b7689)#012#16 0x000000000042fae9 main_loop (kamailio + 0x2fae9)#012#17 0x0000000000439969 main (kamailio + 0x39969)#012#18 0x00007f1338e3feb0 __libc_start_call_main (libc.so.6 + 0x3feb0)#012#19 0x00007f1338e3ff60 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3ff60)#012#20 0x000000000041dc65 _start (kamailio + 0x1dc65)#012ELF object binary architecture: AMD x86-64 #### SIP Traffic There is sip traffic logged via the siptrace module to homer but the only packets logged are REGISTERs and I suspect this bug is in TLS somewhere further up the chain before it ever gets to sip traffic. -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3566 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3566(a)github.com>

1 year, 2 months

[kamailio/kamailio] kamailio 5.7.1 as webrtc server bug 3 (Issue #3565)

by themsley-voiceflex

### Description As per https://github.com/kamailio/kamailio/issues/3563 all other o/s & package details are the same ### Troubleshooting #### Reproduction #### Debugging Data  ``` PID: 2110 (kamailio) UID: 990 (kamailio) GID: 988 (kamailio) Signal: 11 (SEGV) Timestamp: Wed 2023-09-13 23:39:27 UTC (14min ago) Command Line: /usr/sbin/kamailio -DD -P /run/kamailio/kamailio.pid -f /etc/kamailio/kamailio.cfg -m 256 -M 8 --atexit=no Executable: /usr/sbin/kamailio Control Group: /system.slice/kamailio.service Unit: kamailio.service Slice: system.slice Boot ID: 3fc4251c606f4c6183610573f44c46ba Machine ID: 16e913e686424f13b970f9b1044cc6b3 Hostname: kamrtc01.voiceflex.com Storage: /var/lib/systemd/coredump/core.kamailio.990.3fc4251c606f4c6183610573f44c46ba.2110.1694648367000000.zst (present) Size on Disk: 3.6M Message: Process 2110 (kamailio) of user 990 dumped core. Stack trace of thread 2110: #0 0x00007fe7ffb9f707 EVP_PKEY_CTX_free (libcrypto.so.3 + 0x19f707) #1 0x00007fe7ffb796f9 EVP_MD_CTX_reset (libcrypto.so.3 + 0x1796f9) #2 0x00007fe7ffb79722 EVP_MD_CTX_free (libcrypto.so.3 + 0x179722) #3 0x00007fe80077faaa ssl3_free.part.0 (libssl.so.3 + 0x26aaa) #4 0x00007fe80079312e SSL_free (libssl.so.3 + 0x3a12e) #5 0x00007fe7ff3654a1 tls_h_tcpconn_clean_f (tls.so + 0x5f4a1) #6 0x0000000000689b32 _tcpconn_free (kamailio + 0x289b32) #7 0x0000000000689b87 _tcpconn_rm (kamailio + 0x289b87) #8 0x00000000006b1175 tcpconn_destroy_all (kamailio + 0x2b1175) #9 0x00000000006b3374 destroy_tcp (kamailio + 0x2b3374) #10 0x000000000041f273 cleanup (kamailio + 0x1f273) #11 0x0000000000420af1 shutdown_children (kamailio + 0x20af1) #12 0x0000000000423a97 handle_sigs (kamailio + 0x23a97) #13 0x00000000004308e1 main_loop (kamailio + 0x308e1) #14 0x0000000000439969 main (kamailio + 0x39969) #15 0x00007fe80103feb0 __libc_start_call_main (libc.so.6 + 0x3feb0) #16 0x00007fe80103ff60 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3ff60) #17 0x000000000041dc65 _start (kamailio + 0x1dc65) ELF object binary architecture: AMD x86-64 GNU gdb (GDB) Red Hat Enterprise Linux 10.2-10.0.2.el9 Copyright (C) 2021 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <https://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/sbin/kamailio... Reading symbols from /usr/lib/debug/usr/sbin/kamailio-5.7.1-1.el9.x86_64.debug... warning: Can't open file /dev/zero (deleted) during file-backed mapping note processing [New LWP 2110] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `/usr/sbin/kamailio -DD -P /run/kamailio/kamailio.pid -f /etc/kamailio/kamailio.'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007fe7ffb9f707 in EVP_PKEY_CTX_free (ctx=0x100000001) at crypto/evp/pmeth_lib.c:415 415 if (ctx->pmeth && ctx->pmeth->cleanup) Missing separate debuginfos, use: dnf debuginfo-install glibc-2.34-60.0.2.el9.x86_64 libgcc-11.3.1-4.3.0.1.el9.x86_64 libstdc++-11.3.1-4.3.0.1.el9.x86_64 sssd-client-2.8.2-3.0.2.el9_2.x86_64 (gdb) bt full #0 0x00007fe7ffb9f707 in EVP_PKEY_CTX_free (ctx=0x100000001) at crypto/evp/pmeth_lib.c:415 No locals. #1 0x00007fe7ffb796f9 in evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:86 No locals. #2 evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:75 No locals. #3 EVP_MD_CTX_reset (ctx=ctx@entry=0x7fe7ef9c5038) at crypto/evp/digest.c:101 No locals. #4 0x00007fe7ffb79722 in EVP_MD_CTX_free (ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:140 No locals. #5 EVP_MD_CTX_free (ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:135 No locals. #6 0x00007fe80077faaa in ssl3_free_digest_list (s=0x7fe7f01ce9d0) at ssl/s3_enc.c:338 No locals. #7 ssl3_free (s=0x7fe7f01ce9d0) at ssl/s3_lib.c:3364 No locals. #8 0x00007fe80079312e in SSL_free (s=0x7fe7f01ce9d0) at ssl/ssl_lib.c:1249 i = <optimized out> i = <optimized out> #9 SSL_free (s=0x7fe7f01ce9d0) at ssl/ssl_lib.c:1172 i = <optimized out> #10 0x00007fe7ff3654a1 in tls_h_tcpconn_clean_f (c=0x7fe7f0308350) at tls_server.c:703 extra = 0x7fe7f0253838 __func__ = "tls_h_tcpconn_clean_f" #11 0x0000000000689b32 in _tcpconn_free (c=0x7fe7f0308350) at core/tcp_main.c:1583 __func__ = "_tcpconn_free" #12 0x0000000000689b87 in _tcpconn_rm (c=0x7fe7f0308350) at core/tcp_main.c:1594 No locals. #13 0x00000000006b1175 in tcpconn_destroy_all () at core/tcp_main.c:4778 c = 0x7fe7f0308350 next = 0x0 h = 250 fd = -1 #14 0x00000000006b3374 in destroy_tcp () at core/tcp_main.c:4964 __func__ = "destroy_tcp" #15 0x000000000041f273 in cleanup (show_status=1) at main.c:582 memlog = 0 __func__ = "cleanup" #16 0x0000000000420af1 in shutdown_children (sig=15, show_status=1) at main.c:706 __func__ = "shutdown_children" #17 0x0000000000423a97 in handle_sigs () at main.c:804 chld = 0 chld_status = 139 any_chld_stopped = 1 memlog = 0 __func__ = "handle_sigs" #18 0x00000000004308e1 in main_loop () at main.c:1902 i = 4 pid = 2136 si = 0x0 si_desc = "udp receiver child=3 sock=172.16.128.55:5090\000\235\"r01Б\374\177\000\000\000\000\000\000\000\000\000\000\220\066Б\374\177\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000X_\212\000\350\177\000\000\000\000\000\020\000\000\000\000:|\024\001\350\177\000\000\060\000\000\000\060\000\000\000H2Б\374\177\000" nrprocs = 4 woneinit = 1 __func__ = "main_loop" #19 0x0000000000439969 in main (argc=11, argv=0x7ffc91d037a8) at main.c:3086 cfg_stream = 0x1bdf380 c = -1 r = 0 tmp = 0x7ffc91d03ea4 "" tmp_len = 0 port = 0 proto = 0 ahost = 0x0 aport = 0 options = 0x8322d8 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 4190893818 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x200000064 p = 0x0 st = {st_dev = 24, st_ino = 891, st_nlink = 2, st_mode = 16832, st_uid = 990, st_gid = 988, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1694643229, tv_nsec = 729000000}, st_mtim = {tv_sec = 1694644781, tv_nsec = 493359816}, st_ctim = {tv_sec = 1694644781, tv_nsec = 493359816}, __glibc_reserved = {0, 0, 0}} tbuf = "\331\\M\001\350\177\000\000\070\033J\001\350\177\000\000 4Б\374\177\000\000\a\000\000\000\000\000\000\000\330\bJ\001\350\177\000\000\a\000\000\000#\000\000\000\060jM\001\350\177\000\000\245\066K\001\350\177\000\000\000\000\000\000\000\000\000\000\220IK\001\350\177\000\000\070\000\001\001\350\177\000\000\000zI\001\350\177\000\000\000\000\000\000\000\000\000\000\360\063Б\374\177\000\000\360^M\001\350\177\000\000\330\032J\001\350\177\000\000\330\032J\001\350\177\000\000\000\000\000\000\000\000\000\000؈I\001\350\177\000\000\360\063Б\374\177\000\000\220uM\001\350\177\000\000\000\000J\001\350\177\000\000\022\fJ\001\350\177\000\000\066\001K\001\350\177\000\000\344#\000\001\350\177\000\000\272\230L\001"... option_index = 12 long_options = {{name = 0x834976 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x82f4f4 "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x83497b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x834981 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x834987 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x834990 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, { name = 0x83499a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x8349a4 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x8349af "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x8349b8 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x8349c3 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x8349c9 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, { name = 0x8349d3 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x8349da "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" (gdb) #0 0x00007fe7ffb9f707 in EVP_PKEY_CTX_free (ctx=0x100000001) at crypto/evp/pmeth_lib.c:415 No locals. #1 0x00007fe7ffb796f9 in evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:86 No locals. #2 evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:75 No locals. #3 EVP_MD_CTX_reset (ctx=ctx@entry=0x7fe7ef9c5038) at crypto/evp/digest.c:101 No locals. #4 0x00007fe7ffb79722 in EVP_MD_CTX_free (ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:140 No locals. #5 EVP_MD_CTX_free (ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:135 No locals. #6 0x00007fe80077faaa in ssl3_free_digest_list (s=0x7fe7f01ce9d0) at ssl/s3_enc.c:338 No locals. #7 ssl3_free (s=0x7fe7f01ce9d0) at ssl/s3_lib.c:3364 No locals. #8 0x00007fe80079312e in SSL_free (s=0x7fe7f01ce9d0) at ssl/ssl_lib.c:1249 i = <optimized out> i = <optimized out> #9 SSL_free (s=0x7fe7f01ce9d0) at ssl/ssl_lib.c:1172 i = <optimized out> #10 0x00007fe7ff3654a1 in tls_h_tcpconn_clean_f (c=0x7fe7f0308350) at tls_server.c:703 extra = 0x7fe7f0253838 __func__ = "tls_h_tcpconn_clean_f" #11 0x0000000000689b32 in _tcpconn_free (c=0x7fe7f0308350) at core/tcp_main.c:1583 __func__ = "_tcpconn_free" #12 0x0000000000689b87 in _tcpconn_rm (c=0x7fe7f0308350) at core/tcp_main.c:1594 No locals. #13 0x00000000006b1175 in tcpconn_destroy_all () at core/tcp_main.c:4778 c = 0x7fe7f0308350 next = 0x0 h = 250 fd = -1 #14 0x00000000006b3374 in destroy_tcp () at core/tcp_main.c:4964 __func__ = "destroy_tcp" #15 0x000000000041f273 in cleanup (show_status=1) at main.c:582 memlog = 0 __func__ = "cleanup" #16 0x0000000000420af1 in shutdown_children (sig=15, show_status=1) at main.c:706 __func__ = "shutdown_children" #17 0x0000000000423a97 in handle_sigs () at main.c:804 chld = 0 chld_status = 139 any_chld_stopped = 1 memlog = 0 __func__ = "handle_sigs" #18 0x00000000004308e1 in main_loop () at main.c:1902 i = 4 pid = 2136 si = 0x0 si_desc = "udp receiver child=3 sock=172.16.128.55:5090\000\235\"r01Б\374\177\000\000\000\000\000\000\000\000\000\000\220\066Б\374\177\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000X_\212\000\350\177\000\000\000\000\000\020\000\000\000\000:|\024\001\350\177\000\000\060\000\000\000\060\000\000\000H2Б\374\177\000" nrprocs = 4 woneinit = 1 __func__ = "main_loop" #19 0x0000000000439969 in main (argc=11, argv=0x7ffc91d037a8) at main.c:3086 cfg_stream = 0x1bdf380 c = -1 r = 0 tmp = 0x7ffc91d03ea4 "" tmp_len = 0 port = 0 proto = 0 ahost = 0x0 aport = 0 options = 0x8322d8 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 4190893818 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x200000064 p = 0x0 st = {st_dev = 24, st_ino = 891, st_nlink = 2, st_mode = 16832, st_uid = 990, st_gid = 988, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1694643229, tv_nsec = 729000000}, st_mtim = {tv_sec = 1694644781, tv_nsec = 493359816}, st_ctim = {tv_sec = 1694644781, tv_nsec = 493359816}, __glibc_reserved = {0, 0, 0}} tbuf = "\331\\M\001\350\177\000\000\070\033J\001\350\177\000\000 4Б\374\177\000\000\a\000\000\000\000\000\000\000\330\bJ\001\350\177\000\000\a\000\000\000#\000\000\000\060jM\001\350\177\000\000\245\066K\001\350\177\000\000\000\000\000\000\000\000\000\000\220IK\001\350\177\000\000\070\000\001\001\350\177\000\000\000zI\001\350\177\000\000\000\000\000\000\000\000\000\000\360\063Б\374\177\000\000\360^M\001\350\177\000\000\330\032J\001\350\177\000\000\330\032J\001\350\177\000\000\000\000\000\000\000\000\000\000؈I\001\350\177\000\000\360\063Б\374\177\000\000\220uM\001\350\177\000\000\000\000J\001\350\177\000\000\022\fJ\001\350\177\000\000\066\001K\001\350\177\000\000\344#\000\001\350\177\000\000\272\230L\001"... option_index = 12 long_options = {{name = 0x834976 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x82f4f4 "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x83497b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x834981 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x834987 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x834990 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, { name = 0x83499a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x8349a4 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x8349af "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x8349b8 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x8349c3 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x8349c9 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, { name = 0x8349d3 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x8349da "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" (gdb) #0 0x00007fe7ffb9f707 in EVP_PKEY_CTX_free (ctx=0x100000001) at crypto/evp/pmeth_lib.c:415 No locals. #1 0x00007fe7ffb796f9 in evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:86 No locals. #2 evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:75 No locals. #3 EVP_MD_CTX_reset (ctx=ctx@entry=0x7fe7ef9c5038) at crypto/evp/digest.c:101 No locals. #4 0x00007fe7ffb79722 in EVP_MD_CTX_free (ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:140 No locals. #5 EVP_MD_CTX_free (ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:135 No locals. #6 0x00007fe80077faaa in ssl3_free_digest_list (s=0x7fe7f01ce9d0) at ssl/s3_enc.c:338 No locals. #7 ssl3_free (s=0x7fe7f01ce9d0) at ssl/s3_lib.c:3364 No locals. #8 0x00007fe80079312e in SSL_free (s=0x7fe7f01ce9d0) at ssl/ssl_lib.c:1249 i = <optimized out> i = <optimized out> #9 SSL_free (s=0x7fe7f01ce9d0) at ssl/ssl_lib.c:1172 i = <optimized out> #10 0x00007fe7ff3654a1 in tls_h_tcpconn_clean_f (c=0x7fe7f0308350) at tls_server.c:703 extra = 0x7fe7f0253838 __func__ = "tls_h_tcpconn_clean_f" #11 0x0000000000689b32 in _tcpconn_free (c=0x7fe7f0308350) at core/tcp_main.c:1583 __func__ = "_tcpconn_free" #12 0x0000000000689b87 in _tcpconn_rm (c=0x7fe7f0308350) at core/tcp_main.c:1594 No locals. #13 0x00000000006b1175 in tcpconn_destroy_all () at core/tcp_main.c:4778 c = 0x7fe7f0308350 next = 0x0 h = 250 fd = -1 #14 0x00000000006b3374 in destroy_tcp () at core/tcp_main.c:4964 __func__ = "destroy_tcp" #15 0x000000000041f273 in cleanup (show_status=1) at main.c:582 memlog = 0 __func__ = "cleanup" #16 0x0000000000420af1 in shutdown_children (sig=15, show_status=1) at main.c:706 __func__ = "shutdown_children" #17 0x0000000000423a97 in handle_sigs () at main.c:804 chld = 0 chld_status = 139 any_chld_stopped = 1 memlog = 0 __func__ = "handle_sigs" #18 0x00000000004308e1 in main_loop () at main.c:1902 i = 4 pid = 2136 si = 0x0 si_desc = "udp receiver child=3 sock=172.16.128.55:5090\000\235\"r01Б\374\177\000\000\000\000\000\000\000\000\000\000\220\066Б\374\177\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000X_\212\000\350\177\000\000\000\000\000\020\000\000\000\000:|\024\001\350\177\000\000\060\000\000\000\060\000\000\000H2Б\374\177\000" nrprocs = 4 woneinit = 1 __func__ = "main_loop" #19 0x0000000000439969 in main (argc=11, argv=0x7ffc91d037a8) at main.c:3086 cfg_stream = 0x1bdf380 c = -1 r = 0 tmp = 0x7ffc91d03ea4 "" tmp_len = 0 port = 0 proto = 0 ahost = 0x0 aport = 0 options = 0x8322d8 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 4190893818 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x200000064 p = 0x0 st = {st_dev = 24, st_ino = 891, st_nlink = 2, st_mode = 16832, st_uid = 990, st_gid = 988, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1694643229, tv_nsec = 729000000}, st_mtim = {tv_sec = 1694644781, tv_nsec = 493359816}, st_ctim = {tv_sec = 1694644781, tv_nsec = 493359816}, __glibc_reserved = {0, 0, 0}} tbuf = "\331\\M\001\350\177\000\000\070\033J\001\350\177\000\000 4Б\374\177\000\000\a\000\000\000\000\000\000\000\330\bJ\001\350\177\000\000\a\000\000\000#\000\000\000\060jM\001\350\177\000\000\245\066K\001\350\177\000\000\000\000\000\000\000\000\000\000\220IK\001\350\177\000\000\070\000\001\001\350\177\000\000\000zI\001\350\177\000\000\000\000\000\000\000\000\000\000\360\063Б\374\177\000\000\360^M\001\350\177\000\000\330\032J\001\350\177\000\000\330\032J\001\350\177\000\000\000\000\000\000\000\000\000\000؈I\001\350\177\000\000\360\063Б\374\177\000\000\220uM\001\350\177\000\000\000\000J\001\350\177\000\000\022\fJ\001\350\177\000\000\066\001K\001\350\177\000\000\344#\000\001\350\177\000\000\272\230L\001"... option_index = 12 long_options = {{name = 0x834976 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x82f4f4 "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x83497b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x834981 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x834987 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x834990 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, { name = 0x83499a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x8349a4 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x8349af "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x8349b8 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x8349c3 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x8349c9 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, { name = 0x8349d3 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x8349da "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" (gdb) #0 0x00007fe7ffb9f707 in EVP_PKEY_CTX_free (ctx=0x100000001) at crypto/evp/pmeth_lib.c:415 No locals. #1 0x00007fe7ffb796f9 in evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:86 No locals. #2 evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:75 No locals. #3 EVP_MD_CTX_reset (ctx=ctx@entry=0x7fe7ef9c5038) at crypto/evp/digest.c:101 No locals. #4 0x00007fe7ffb79722 in EVP_MD_CTX_free (ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:140 No locals. #5 EVP_MD_CTX_free (ctx=0x7fe7ef9c5038) at crypto/evp/digest.c:135 No locals. #6 0x00007fe80077faaa in ssl3_free_digest_list (s=0x7fe7f01ce9d0) at ssl/s3_enc.c:338 No locals. #7 ssl3_free (s=0x7fe7f01ce9d0) at ssl/s3_lib.c:3364 No locals. #8 0x00007fe80079312e in SSL_free (s=0x7fe7f01ce9d0) at ssl/ssl_lib.c:1249 i = <optimized out> i = <optimized out> #9 SSL_free (s=0x7fe7f01ce9d0) at ssl/ssl_lib.c:1172 i = <optimized out> #10 0x00007fe7ff3654a1 in tls_h_tcpconn_clean_f (c=0x7fe7f0308350) at tls_server.c:703 extra = 0x7fe7f0253838 __func__ = "tls_h_tcpconn_clean_f" #11 0x0000000000689b32 in _tcpconn_free (c=0x7fe7f0308350) at core/tcp_main.c:1583 __func__ = "_tcpconn_free" #12 0x0000000000689b87 in _tcpconn_rm (c=0x7fe7f0308350) at core/tcp_main.c:1594 No locals. #13 0x00000000006b1175 in tcpconn_destroy_all () at core/tcp_main.c:4778 c = 0x7fe7f0308350 next = 0x0 h = 250 fd = -1 #14 0x00000000006b3374 in destroy_tcp () at core/tcp_main.c:4964 __func__ = "destroy_tcp" #15 0x000000000041f273 in cleanup (show_status=1) at main.c:582 memlog = 0 __func__ = "cleanup" #16 0x0000000000420af1 in shutdown_children (sig=15, show_status=1) at main.c:706 __func__ = "shutdown_children" #17 0x0000000000423a97 in handle_sigs () at main.c:804 chld = 0 chld_status = 139 any_chld_stopped = 1 memlog = 0 __func__ = "handle_sigs" #18 0x00000000004308e1 in main_loop () at main.c:1902 i = 4 pid = 2136 si = 0x0 si_desc = "udp receiver child=3 sock=172.16.128.55:5090\000\235\"r01Б\374\177\000\000\000\000\000\000\000\000\000\000\220\066Б\374\177\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000X_\212\000\350\177\000\000\000\000\000\020\000\000\000\000:|\024\001\350\177\000\000\060\000\000\000\060\000\000\000H2Б\374\177\000" nrprocs = 4 woneinit = 1 __func__ = "main_loop" #19 0x0000000000439969 in main (argc=11, argv=0x7ffc91d037a8) at main.c:3086 cfg_stream = 0x1bdf380 c = -1 r = 0 tmp = 0x7ffc91d03ea4 "" tmp_len = 0 port = 0 proto = 0 ahost = 0x0 aport = 0 options = 0x8322d8 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 4190893818 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x200000064 p = 0x0 st = {st_dev = 24, st_ino = 891, st_nlink = 2, st_mode = 16832, st_uid = 990, st_gid = 988, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1694643229, tv_nsec = 729000000}, st_mtim = {tv_sec = 1694644781, tv_nsec = 493359816}, st_ctim = {tv_sec = 1694644781, tv_nsec = 493359816}, __glibc_reserved = {0, 0, 0}} tbuf = "\331\\M\001\350\177\000\000\070\033J\001\350\177\000\000 4Б\374\177\000\000\a\000\000\000\000\000\000\000\330\bJ\001\350\177\000\000\a\000\000\000#\000\000\000\060jM\001\350\177\000\000\245\066K\001\350\177\000\000\000\000\000\000\000\000\000\000\220IK\001\350\177\000\000\070\000\001\001\350\177\000\000\000zI\001\350\177\000\000\000\000\000\000\000\000\000\000\360\063Б\374\177\000\000\360^M\001\350\177\000\000\330\032J\001\350\177\000\000\330\032J\001\350\177\000\000\000\000\000\000\000\000\000\000؈I\001\350\177\000\000\360\063Б\374\177\000\000\220uM\001\350\177\000\000\000\000J\001\350\177\000\000\022\fJ\001\350\177\000\000\066\001K\001\350\177\000\000\344#\000\001\350\177\000\000\272\230L\001"... option_index = 12 long_options = {{name = 0x834976 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x82f4f4 "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x83497b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x834981 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x834987 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x834990 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, { name = 0x83499a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x8349a4 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x8349af "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x8349b8 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x8349c3 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x8349c9 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, { name = 0x8349d3 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x8349da "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" ``` #### Log Messages This time it crashed immediately on startup after the crash reported in bug report #2 ``` Sep 13 23:39:28 kamrtc01 kamailio[4142]: WARNING: <core> [core/daemonize.c:348]: daemonize(): pid file contains old pid, replacing pid Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: rr [../outbound/api.h:52]: ob_load_api(): unable to import bind_ob - maybe module is not loaded Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: rr [rr_mod.c:188]: mod_init(): outbound module not available Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: auth [auth_mod.c:345]: mod_init(): qop set, but nonce-count (nonce_count) support disabled Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_mod.c:408]: mod_init(): use OpenSSL version: 30000070 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_mod.c:410]: mod_init(): With ECDH-Support! Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_mod.c:413]: mod_init(): With Diffie Hellman Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: siptrace [siptrace.c:428]: mod_init(): can't load dlg api. Will not install dialog callbacks. Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: pike [pike.c:101]: pike_init(): PIKE - initializing Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: pike [ip_tree.c:81]: init_lock_set(): probing 256 set size Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: NOTICE: regex [regex_mod.c:168]: mod_init(): 'file' parameter is not set, group matching disabled Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: WARNING: tls [tls_init.c:949]: tls_h_mod_init_f(): openssl bug #1491 (crash/mem leaks on low memory) workaround enabled (on low memory tls operations will fail preemptively) with free memory thresholds 14155776 and 7077888 bytes Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: <core> [core/cfg/cfg_ctx.c:599]: cfg_set_now(): tls.low_mem_threshold1 has been changed to 14155776 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: <core> [core/cfg/cfg_ctx.c:599]: cfg_set_now(): tls.low_mem_threshold2 has been changed to 7077888 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: <core> [main.c:3063]: main(): processes (at least): 27 - shm size: 268435456 - pkg size: 8388608 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: <core> [core/udp_server.c:154]: probe_max_receive_buffer(): SO_RCVBUF is initially 212992 for fd 10 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: <core> [core/udp_server.c:207]: probe_max_receive_buffer(): SO_RCVBUF is finally 425984 on fd 10 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: <core> [core/udp_server.c:154]: probe_max_receive_buffer(): SO_RCVBUF is initially 212992 for fd 11 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: <core> [core/udp_server.c:207]: probe_max_receive_buffer(): SO_RCVBUF is finally 425984 on fd 11 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: <core> [core/udp_server.c:154]: probe_max_receive_buffer(): SO_RCVBUF is initially 212992 for fd 12 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: <core> [core/udp_server.c:207]: probe_max_receive_buffer(): SO_RCVBUF is finally 425984 on fd 12 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:332]: ksr_tls_fill_missing(): TLSs<default>: tls_method=25 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:344]: ksr_tls_fill_missing(): TLSs<default>: certificate='/etc/kamailio/tls/wss.pem' Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:351]: ksr_tls_fill_missing(): TLSs<default>: ca_list='(null)' Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:358]: ksr_tls_fill_missing(): TLSs<default>: ca_path='(null)' Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:365]: ksr_tls_fill_missing(): TLSs<default>: crl='(null)' Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:368]: ksr_tls_fill_missing(): TLSs<default>: require_certificate=0 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:376]: ksr_tls_fill_missing(): TLSs<default>: cipher_list='(null)' Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:383]: ksr_tls_fill_missing(): TLSs<default>: private_key='/etc/kamailio/tls/wss.pem' Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:386]: ksr_tls_fill_missing(): TLSs<default>: verify_certificate=0 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:390]: ksr_tls_fill_missing(): TLSs<default>: verify_depth=9 Sep 13 23:39:28 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:393]: ksr_tls_fill_missing(): TLSs<default>: verify_client=0 Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: NOTICE: tls [tls_domain.c:1148]: ksr_tls_fix_domain(): registered server_name callback handler for socket [:0], server_name='<default>' ... Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:754]: set_verification(): TLSs<default>: No client certificate required and no checks performed Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:332]: ksr_tls_fill_missing(): TLSc<default>: tls_method=23 Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:344]: ksr_tls_fill_missing(): TLSc<default>: certificate='(null)' Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:351]: ksr_tls_fill_missing(): TLSc<default>: ca_list='(null)' Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:358]: ksr_tls_fill_missing(): TLSc<default>: ca_path='(null)' Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:365]: ksr_tls_fill_missing(): TLSc<default>: crl='(null)' Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:368]: ksr_tls_fill_missing(): TLSc<default>: require_certificate=1 Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:376]: ksr_tls_fill_missing(): TLSc<default>: cipher_list='(null)' Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:383]: ksr_tls_fill_missing(): TLSc<default>: private_key='(null)' Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:386]: ksr_tls_fill_missing(): TLSc<default>: verify_certificate=1 Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:390]: ksr_tls_fill_missing(): TLSc<default>: verify_depth=9 Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:393]: ksr_tls_fill_missing(): TLSc<default>: verify_client=0 Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4142]: INFO: tls [tls_domain.c:739]: set_verification(): TLSc<default>: Server MUST present valid certificate Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4143]: INFO: rtpengine [rtpengine.c:2960]: rtpp_test(): rtpengine instance <udp:127.0.0.1:2223> found, support for it enabled Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4159]: INFO: jsonrpcs [jsonrpcs_sock.c:460]: jsonrpc_dgram_process(): a new child 0/4159 Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4160]: INFO: ctl [io_listener.c:213]: io_listen_loop(): io_listen_loop: using epoll_lt io watch method (config) Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4166]: CRITICAL: <core> [core/mem/q_malloc.c:519]: qm_free(): BUG: freeing already freed pointer (0x7f9973cc33f8), called from tls: tls_init.c: ser_free(405), first free tls: tls_init.c: ser_free(405) - ignoring Sep 13 23:39:29 kamrtc01 /usr/sbin/kamailio[4164]: CRITICAL: <core> [core/mem/q_malloc.c:133]: qm_debug_check_frag(): BUG: qm: fragm. 0x7f9973b78e70 (address 0x7f9973b78ea8) end overwritten (0, 0)! Memory allocator was called from tls: tls_init.c:405. Fragment marked by tls: tls_init.c:360. Exec from core/mem/q_malloc.c:511. Sep 13 23:39:29 kamrtc01 systemd[1]: Started Process Core Dump (PID 4169/UID 0). Sep 13 23:39:30 kamrtc01 systemd-coredump[4170]: Process 4164 (kamailio) of user 990 dumped core.#012#012Stack trace of thread 4164:#012#0 0x00007f99852a158c __pthread_kill_implementation (libc.so.6 + 0xa158c)#012#1 0x00007f9985254d46 raise (libc.so.6 + 0x54d46)#012#2 0x00007f99852287f3 abort (libc.so.6 + 0x287f3)#012#3 0x00000000007169ee qm_debug_check_frag (kamailio + 0x3169ee)#012#4 0x000000000071a703 qm_free (kamailio + 0x31a703)#012#5 0x0000000000725209 qm_shm_free (kamailio + 0x325209)#012#6 0x00007f998350d3d6 ser_free (tls.so + 0x313d6)#012#7 0x00007f9983d78b5c cleanup_old_md_data (libcrypto.so.3 + 0x178b5c)#012#8 0x00007f9983d7965f evp_md_ctx_clear_digest (libcrypto.so.3 + 0x17965f)#012#9 0x00007f9983d796d7 EVP_MD_CTX_reset (libcrypto.so.3 + 0x1796d7)#012#10 0x00007f9983d79722 EVP_MD_CTX_free (libcrypto.so.3 + 0x179722)#012#11 0x00007f9983e7c557 rsa_freectx (libcrypto.so.3 + 0x27c557)#012#12 0x00007f9983d9b2a0 evp_pkey_ctx_free_old_ops (libcrypto.so.3 + 0x19b2a0)#012#13 0x00007f9983d9f72a EVP_PKEY_CTX_free (libcrypto.so.3 + 0x19f72a)#012#14 0x00007f9983d796f9 EVP_MD_CTX_reset (libcrypto.so.3 + 0x1796f9)#012#15 0x00007f9983d79722 EVP_MD_CTX_free (libcrypto.so.3 + 0x179722)#012#16 0x00007f99849c2778 tls_construct_cert_verify (libssl.so.3 + 0x69778)#012#17 0x00007f99849bb181 state_machine.part.0 (libssl.so.3 + 0x62181)#012#18 0x00007f9983535584 tls_accept (tls.so + 0x59584)#012#19 0x00007f99835408be tls_h_read_f (tls.so + 0x648be)#012#20 0x00000000006c79bc tcp_read_headers (kamailio + 0x2c79bc)#012#21 0x00000000006cfb94 tcp_read_req (kamailio + 0x2cfb94)#012#22 0x00000000006d4cc3 handle_io (kamailio + 0x2d4cc3)#012#23 0x00000000006c271d io_wait_loop_epoll (kamailio + 0x2c271d)#012#24 0x00000000006d7a47 tcp_receive_loop (kamailio + 0x2d7a47)#012#25 0x00000000006b7689 tcp_init_children (kamailio + 0x2b7689)#012#26 0x000000000042fae9 main_loop (kamailio + 0x2fae9)#012#27 0x0000000000439969 main (kamailio + 0x39969)#012#28 0x00007f998523feb0 __libc_start_call_main (libc.so.6 + 0x3feb0)#012#29 0x00007f998523ff60 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3ff60)#012#30 0x000000000041dc65 _start (kamailio + 0x1dc65)#012ELF object binary architecture: AMD x86-64 ``` -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3565 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3565(a)github.com>

1 year, 2 months

[kamailio/kamailio] kamailio 5.7.1 webrtc bug 5 (Issue #3567)

by themsley-voiceflex

### Description See #3563 ``` PID: 5617 (kamailio) UID: 990 (kamailio) GID: 988 (kamailio) Signal: 11 (SEGV) Timestamp: Thu 2023-09-14 01:27:07 UTC (4min 56s ago) Command Line: /usr/sbin/kamailio -DD -P /run/kamailio/kamailio.pid -f /etc/kamailio/kamailio.cfg -m 256 -M 8 --atexit=no Executable: /usr/sbin/kamailio Control Group: /system.slice/kamailio.service Unit: kamailio.service Slice: system.slice Boot ID: 3fc4251c606f4c6183610573f44c46ba Machine ID: 16e913e686424f13b970f9b1044cc6b3 Hostname: kamrtc01.voiceflex.com Storage: /var/lib/systemd/coredump/core.kamailio.990.3fc4251c606f4c6183610573f44c46ba.5617.1694654827000000.zst (present) Size on Disk: 3.0M Message: Process 5617 (kamailio) of user 990 dumped core. Stack trace of thread 5617: #0 0x00007fc96739f707 EVP_PKEY_CTX_free (libcrypto.so.3 + 0x19f707) #1 0x00007fc9673796f9 EVP_MD_CTX_reset (libcrypto.so.3 + 0x1796f9) #2 0x00007fc967379722 EVP_MD_CTX_free (libcrypto.so.3 + 0x179722) #3 0x00007fc967f7faaa ssl3_free.part.0 (libssl.so.3 + 0x26aaa) #4 0x00007fc967f9312e SSL_free (libssl.so.3 + 0x3a12e) #5 0x00007fc966b0e4a1 tls_h_tcpconn_clean_f (tls.so + 0x5f4a1) #6 0x0000000000689b32 _tcpconn_free (kamailio + 0x289b32) #7 0x000000000069e8b8 tcpconn_put_destroy (kamailio + 0x29e8b8) #8 0x00000000006a3f65 handle_tcp_child (kamailio + 0x2a3f65) #9 0x00000000006af79a handle_io (kamailio + 0x2af79a) #10 0x000000000067639d io_wait_loop_epoll (kamailio + 0x27639d) #11 0x00000000006b2cb1 tcp_main_loop (kamailio + 0x2b2cb1) #12 0x000000000042fe53 main_loop (kamailio + 0x2fe53) #13 0x0000000000439969 main (kamailio + 0x39969) #14 0x00007fc96883feb0 __libc_start_call_main (libc.so.6 + 0x3feb0) #15 0x00007fc96883ff60 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3ff60) #16 0x000000000041dc65 _start (kamailio + 0x1dc65) ELF object binary architecture: AMD x86-64 (gdb) bt full #0 0x00007fc96739f707 in EVP_PKEY_CTX_free (ctx=0x100000001) at crypto/evp/pmeth_lib.c:415 No locals. #1 0x00007fc9673796f9 in evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fc957213dc8) at crypto/evp/digest.c:86 No locals. #2 evp_md_ctx_reset_ex (keep_fetched=0, ctx=0x7fc957213dc8) at crypto/evp/digest.c:75 No locals. #3 EVP_MD_CTX_reset (ctx=ctx@entry=0x7fc957213dc8) at crypto/evp/digest.c:101 No locals. #4 0x00007fc967379722 in EVP_MD_CTX_free (ctx=0x7fc957213dc8) at crypto/evp/digest.c:140 No locals. #5 EVP_MD_CTX_free (ctx=0x7fc957213dc8) at crypto/evp/digest.c:135 No locals. #6 0x00007fc967f7faaa in ssl3_free_digest_list (s=0x7fc95725b558) at ssl/s3_enc.c:338 No locals. #7 ssl3_free (s=0x7fc95725b558) at ssl/s3_lib.c:3364 No locals. #8 0x00007fc967f9312e in SSL_free (s=0x7fc95725b558) at ssl/ssl_lib.c:1249 i = <optimized out> i = <optimized out> #9 SSL_free (s=0x7fc95725b558) at ssl/ssl_lib.c:1172 i = <optimized out> #10 0x00007fc966b0e4a1 in tls_h_tcpconn_clean_f (c=0x7fc957187c90) at tls_server.c:703 extra = 0x7fc957257d30 __func__ = "tls_h_tcpconn_clean_f" #11 0x0000000000689b32 in _tcpconn_free (c=0x7fc957187c90) at core/tcp_main.c:1583 __func__ = "_tcpconn_free" #12 0x000000000069e8b8 in tcpconn_put_destroy (tcpconn=0x7fc957187c90) at core/tcp_main.c:3336 __func__ = "tcpconn_put_destroy" #13 0x00000000006a3f65 in handle_tcp_child (tcp_c=0x7fc968144180, fd_i=-1) at core/tcp_main.c:3806 tcpconn = 0x7fc957187c90 response = {140502726376592, -2} cmd = -2 bytes = 16 n = 1745431896 t = 465547104 crt_timeout = 59 con_lifetime = 960 __func__ = "handle_tcp_child" #14 0x00000000006af79a in handle_io (fm=0x7fc968199ca0, ev=1, idx=-1) at core/tcp_main.c:4623 ret = 0 __func__ = "handle_io" #15 0x000000000067639d in io_wait_loop_epoll (h=0x957040 <io_h>, t=5, repeat=0) at core/io_wait.h:1070 n = 1 r = 0 fm = 0x7fc968199ca0 revents = 1 __func__ = "io_wait_loop_epoll" #16 0x00000000006b2cb1 in tcp_main_loop () at core/tcp_main.c:4908 si = 0x0 r = 4 __func__ = "tcp_main_loop" #17 0x000000000042fe53 in main_loop () at main.c:1859 i = 4 pid = 0 si = 0x0 si_desc = "udp receiver child=3 sock=172.16.128.55:5090\000fw\316\020\236\066\273\374\177\000\000\000\000\000\000\000\000\000\000p\243\066\273\374\177\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000X_\nh\311\177\000\000\000\000\000\020\000\000\000\000:|\224h\311\177\000\000\060\000\000\000\060\000\000\000(\237\066\273\374\177\000" nrprocs = 4 woneinit = 1 __func__ = "main_loop" #18 0x0000000000439969 in main (argc=11, argv=0x7ffcbb36a488) at main.c:3086 cfg_stream = 0x222f380 c = -1 r = 0 tmp = 0x7ffcbb36bea3 "" tmp_len = 0 port = 0 proto = 0 ahost = 0x0 aport = 0 options = 0x8322d8 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 953728182 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x200000064 p = 0x0 st = {st_dev = 24, st_ino = 891, st_nlink = 2, st_mode = 16832, st_uid = 990, st_gid = 988, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1694643229, tv_nsec = 729000000}, st_mtim = {tv_sec = 1694650829, tv_nsec = 995827964}, st_ctim = {tv_sec = 1694650829, tv_nsec = 995827964}, __glibc_reserved = {0, 0, 0}} tbuf = "\331\f\307h\311\177\000\000\070\313\303h\311\177\000\000\000\241\066\273\374\177\000\000\a\000\000\000\000\000\000\000ظ\303h\311\177\000\000\a\000\000\000#\000\000\000\060\032\307h\311\177\000\000\245\346\304h\311\177\000\000\000\000\000\000\000\000\000\000\220\371\304h\311\177\000\000\070\000\201h\311\177\000\000\000*\303h\311\177\000\000\000\000\000\000\000\000\000\000Р6\273\374\177\000\000\360\016\307h\311\177\000\000\330\312\303h\311\177\000\000\330\312\303h\311\177\000\000\000\000\000\000\000\000\000\000\330\070\303h\311\177\000\000Р6\273\374\177\000\000\220%\307h\311\177\000\000\000\260\303h\311\177\000\000\022\274\303h\311\177\000\000\066\261\304h\311\177\000\000\344#\200h\311\177\000\000\272H\306"... option_index = 12 long_options = {{name = 0x834976 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x82f4f4 "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x83497b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x834981 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x834987 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x834990 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, { name = 0x83499a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x8349a4 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x8349af "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x8349b8 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x8349c3 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x8349c9 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, { name = 0x8349d3 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x8349da "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" ``` #### Log Messages ``` Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: CRITICAL: <core> [core/mem/q_malloc.c:519]: qm_free(): BUG: freeing already freed pointer (0x7fc957213e40), called from tls: tls_init.c: ser_free(405), first free tls: tls_init.c: ser_free(405) - ignoring Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: tls [tls_server.c:1332]: tls_h_read_f(): protocol level error Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: tls [tls_util.h:50]: tls_err_ret(): TLS accept:error:0300009F:digital envelope routines::message digest is null (sni: webrtc.nebulaip.com) Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: tls [tls_util.h:50]: tls_err_ret(): TLS accept:error:0A0C0103:SSL routines::internal error (sni: webrtc.nebulaip.com) Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: tls [tls_server.c:1336]: tls_h_read_f(): src addr: 87.80.226.25:60622 Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: tls [tls_server.c:1339]: tls_h_read_f(): dst addr: 93.95.124.6:7443 Sep 14 01:27:07 kamrtc01 /usr/sbin/kamailio[5615]: ERROR: <core> [core/tcp_read.c:1476]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7fc957187c90 r: 0x7fc957187db8 (-1) Sep 14 01:27:07 kamrtc01 kernel: kamailio[5617]: segfault at 100000079 ip 00007fc96739f707 sp 00007ffcbb3697d0 error 4 in libcrypto.so.3.0.7[7fc9672ad000+25b000] Sep 14 01:27:07 kamrtc01 kernel: Code: ff ff e9 1e ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 85 ff 0f 84 c3 00 00 00 41 54 55 48 89 fd 48 83 ec 08 <48> 8b 47 78 48 85 c0 74 0b 48 8b 40 18 48 85 c0 74 02 ff d0 48 89 Sep 14 01:27:08 kamrtc01 systemd-coredump[7848]: Process 5617 (kamailio) of user 990 dumped core.#012#012Stack trace of thread 5617:#012#0 0x00007fc96739f707 EVP_PKEY_CTX_free (libcrypto.so.3 + 0x19f707)#012#1 0x00007fc9673796f9 EVP_MD_CTX_reset (libcrypto.so.3 + 0x1796f9)#012#2 0x00007fc967379722 EVP_MD_CTX_free (libcrypto.so.3 + 0x179722)#012#3 0x00007fc967f7faaa ssl3_free.part.0 (libssl.so.3 + 0x26aaa)#012#4 0x00007fc967f9312e SSL_free (libssl.so.3 + 0x3a12e)#012#5 0x00007fc966b0e4a1 tls_h_tcpconn_clean_f (tls.so + 0x5f4a1)#012#6 0x0000000000689b32 _tcpconn_free (kamailio + 0x289b32)#012#7 0x000000000069e8b8 tcpconn_put_destroy (kamailio + 0x29e8b8)#012#8 0x00000000006a3f65 handle_tcp_child (kamailio + 0x2a3f65)#012#9 0x00000000006af79a handle_io (kamailio + 0x2af79a)#012#10 0x000000000067639d io_wait_loop_epoll (kamailio + 0x27639d)#012#11 0x00000000006b2cb1 tcp_main_loop (kamailio + 0x2b2cb1)#012#12 0x000000000042fe53 main_loop (kamailio + 0x2fe53)#012#13 0x0000000000439969 main (kamailio + 0x39969)#012#14 0x00007fc96883feb0 __libc_start_call_main (libc.so.6 + 0x3feb0)#012#15 0x00007fc96883ff60 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x3ff60)#012#16 0x000000000041dc65 _start (kamailio + 0x1dc65)#012ELF object binary architecture: AMD x86-64 ``` -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3567 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3567(a)github.com>

1 year, 2 months

[kamailio/kamailio] kamailio 5.7.1 as webrtc server 2 (Issue #3564)

by themsley-voiceflex

### Description Running kamailio 5.7.1 as a webrtc server on port 7443 ### Troubleshooting #### Reproduction Start it up and wait. Weirdly this one was almost exactly 1 hour since the previous one, probably coincidence as it then crashed 4 times in the space of 4 seconds. #### Debugging Data  ``` (gdb) bt full #0 0x0000000000000000 in ?? () No symbol table info available. #1 0x00007fe80077ef22 in ssl3_finish_mac (s=0x7fe7f01ce9d0, buf=<optimized out>, len=10) at ssl/s3_enc.c:358 ret = <optimized out> __func__ = "ssl3_finish_mac" #2 0x00007fe8007c4e47 in ssl3_do_write (s=0x7fe7f01ce9d0, type=22) at ssl/statem/statem_lib.c:61 ret = <optimized out> written = 10 #3 0x00007fe8007bb276 in statem_do_write (s=0x7fe7f01ce9d0) at ssl/statem/statem.c:719 st = <optimized out> st = <optimized out> #4 write_state_machine (s=0x7fe7f01ce9d0) at ssl/statem/statem.c:884 post_work = 0x7fe8007c9200 <ossl_statem_server_post_work> mt = 8 pkt = {buf = 0x7fe7efa92ba0, staticbuf = 0x0, curr = 10, written = 10, maxsize = 18446744073709551615, subs = 0x0, endfirst = 0} ret = <optimized out> pre_work = 0x7fe8007c8260 <ossl_statem_server_pre_work> get_construct_message_f = 0x7fe8007c1920 <ossl_statem_server_construct_message> confunc = 0x7fe8007c9940 <tls_construct_encrypted_extensions> st = 0x7fe7f01cea18 transition = 0x7fe8007c8cf0 <ossl_statem_server_write_transition> cb = 0x7fe7ff324e72 <sr_ssl_ctx_info_callback> st = <optimized out> ret = <optimized out> transition = <optimized out> pre_work = <optimized out> post_work = <optimized out> get_construct_message_f = <optimized out> cb = <optimized out> confunc = <optimized out> mt = <optimized out> pkt = {buf = <optimized out>, staticbuf = <optimized out>, curr = <optimized out>, written = <optimized out>, maxsize = <optimized out>, subs = <optimized out>, endfirst = <optimized out>} __func__ = {<optimized out> <repeats 20 times>} tmpret = <optimized out> #5 state_machine (s=0x7fe7f01ce9d0, server=<optimized out>) at ssl/statem/statem.c:451 buf = 0x0 cb = <optimized out> st = <optimized out> ret = <optimized out> ssret = <optimized out> __func__ = {<optimized out> <repeats 14 times>} #6 0x00007fe7ff35f584 in tls_accept (c=0x7fe7f0308350, error=0x7ffc91d028d4) at tls_server.c:470 ret = 0 ssl = 0x7fe7f01ce9d0 cert = 0x1 tls_c = 0x7fe7f0253838 tls_log = 0 __func__ = "tls_accept" #7 0x00007fe7ff36a8be in tls_h_read_f (c=0x7fe7f0308350, flags=0x7ffc91d02d10) at tls_server.c:1175 r = 0x7fe7f0308478 bytes_free = 16383 --Type <RET> for more, q to quit, c to continue without paging-- bytes_read = 617 read_size = 16383 ssl_error = 0 ssl_read = 0 ssl = 0x7fe7f01ce9d0 rd_buf = "\026\003\001\002d\001\000\002`\003\003\273\256\310^~;4\027\373W\351H_l/\022\257\060\363\277&\370\065\255\177\037\v\004\t\246\335\\ םC\016e\237\217\021\236\274\232D\321\022\215h\261H%4\332\333\301\200\230؞p茗\341\000 \212\212\023\003\023\001\023\002̨̩\300+\300/\300,\300\060\300\023\300\024\000\234\000\235\000/\000\065\001\000\001\367zz\000\000\000\027\000\000\000\005\000\005\001\000\000\000\000\000\r\000\022\000\020\004\003\b\004\004\001\005\003\b\005\005\001\b\006\006\001\000\020\000\v\000\t\bhttp/1.1\000\022\000\000\000\v\000\002\001\000\000\063\000+\000)::\000\001\000\000\035\000 \006\201T\261\031\274[\263ئ\211\313\067\220"... wr_buf = "\360(ϑ\374\177\000\000\026\003\000\000\026\003\000\000\000\000\001\000\326\315[&\237\273\070\234\313\001\000\204\360\245\035?\244\026\372\206\316\060\"\237\202&z\315,E\016\252}v`\204Z\002cx\313\067\263\070\236\362\320\\\347;]\271\377\247\022S\210^/zn\216;̷\323+כ\360S}\264<\025\366\241p\202%=NAع_\"\324Sqq\273^\343F\353\323\a\035\357\206\035\211F\200m)|w\020\260\000E<0\v\204\353\325\304x\263\334\034tʝWkUH^-KCFR\233\063a\207P\262\030?C\334\315\316M̕\270\033\302\226\315\b\205u5\363\375\346\370\023\027\061Ï\365Ύ\266Q\277\324\"m]Z\351+\254S\372\334\216\060\254"... rd = {buf = 0x7ffc91cf28d0 "\026\003\001\002d\001", pos = 617, used = 617, size = 65536} wr = {buf = 0x7ffc91ce28d0 "\360(ϑ\374\177", pos = 0, used = 0, size = 65536} tls_c = 0x7fe7f0253838 enc_rd_buf = 0x0 n = 0 flush_flags = 0 err_src = 0x7fe7ff3875a0 "TLS read:" ip_buf = '\000' <repeats 63 times> x = 17493065 tls_dbg = 4095 __func__ = "tls_h_read_f" #8 0x00000000006c79bc in tcp_read_headers (c=0x7fe7f0308350, read_flags=0x7ffc91d02d10) at core/tcp_read.c:441 bytes = 65535 remaining = 0 p = 0x2f8ef9f5881 <error: Cannot access memory at address 0x2f8ef9f5881> r = 0x7fe7f0308478 mc = 32743 body_len = 61343 mfline = 0x7fe7ef9f5650 "\201\376\002\370 Ck\246r\006,\357s\027", <incomplete sequence \364> mtransid = {s = 0x7fe7ef9f52a8 "N", len = -274771264} __func__ = "tcp_read_headers" #9 0x00000000006cfb94 in tcp_read_req (con=0x7fe7f0308350, bytes_read=0x7ffc91d02d14, read_flags=0x7ffc91d02d10) at core/tcp_read.c:1469 bytes = -1 total_bytes = 0 resp = 1 size = 176093659136 req = 0x7fe7f0308478 dst = {send_sock = 0x7fe7ef9f52a8, to = {s = {sa_family = 0, sa_data = "\000\020\002\000\000\000\001\000Б)\000\000"}, sin = {sin_family = 0, sin_port = 4096, sin_addr = {s_addr = 2}, sin_zero = "\001\000Б)\000\000"}, sin6 = {sin6_family = 0, sin6_port = 4096, sin6_flowinfo = 2, sin6_addr = {__in6_u = {__u6_addr8 = "\001\000Б)\000\000\000\004\000\231\000\000\000\000", __u6_addr16 = {1, 37328, 41, 0, 4, 153, 0, 0}, __u6_addr32 = {2446327809, 41, 10027012, 0}}}, sin6_scope_id = 18119584}, sas = {ss_family = 0, __ss_padding = "\000\020\002\000\000\000\001\000Б)\000\000\000\004\000\231\000\000\000\000\000\240{\024\001\350\177\000\000@T\237\357\347\177\000\000P,Б\001˾M\020\000\000\000\020\000\000\000\024\000\000\000\000\000\000\000\001\000\000\000\001\000\000\000\017\000\000\000\000\000\000\000\033\000\000\000\000\000\000\000\b-Б\374\177\000\000\b", '\000' <repeats 22 times>, __ss_align = 140722754825120}}, id = 1, send_flags = {f = 0, blst_imask = 0}, proto = -128 '\200', proto_pad0 = 43 '+', proto_pad1 = -28208} c = 0 '\000' ret = 0 __func__ = "tcp_read_req" #10 0x00000000006d4cc3 in handle_io (fm=0x7fe800999c58, events=1, idx=-1) at core/tcp_read.c:1780 ret = 8 n = 8 read_flags = RD_CONN_SHORT_READ con = 0x7fe7f0308350 s = 15 resp = 5340591 t = 0 ee = 0x0 __func__ = "handle_io" #11 0x00000000006c271d in io_wait_loop_epoll (h=0x99b2e0 <io_w>, t=2, repeat=0) at core/io_wait.h:1070 n = 1 r = 0 fm = 0x7fe800999c58 revents = 1 __func__ = "io_wait_loop_epoll" #12 0x00000000006d7a47 in tcp_receive_loop (unix_sock=41) at core/tcp_read.c:1976 __func__ = "tcp_receive_loop" #13 0x00000000006b7689 in tcp_init_children (woneinit=0x7ffc91d030cc) at core/tcp_main.c:5239 r = 0 i = 3 reader_fd_1 = 41 pid = 0 si_desc = "tcp receiver (generic)\000\000\000\000\000\000\000\000\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000\240{\024\001\350\177\000\000\000\000\000\020\000\000\000\000`0Б\374\177\000\000\034\003e\000\000\000\000\000`0Б\374\177\000\000\345\030n\000\000\000\000\000\020\060Б\374\177\000\000\252\264~\000\000\000\000\000\023e\204\000\000\000\000\000\310\371\063\357 \000\000" si = 0x0 __func__ = "tcp_init_children" #14 0x000000000042fae9 in main_loop () at main.c:1851 i = 4 pid = 2124 si = 0x0 si_desc = "udp receiver child=3 sock=172.16.128.55:5090\000\235\"r01Б\374\177\000\000\000\000\000\000\000\000\000\000\220\066Б\374\177\000\000\023e\204\000\000\000\000\000\033\000\000\000\000\000\000\000X_\212\000\350\177\000\000\000\000\000\020\000\000\000\000:|\024\001\350\177\000\000\060\000\000\000\060\000\000\000H2Б\374\177\000" nrprocs = 4 woneinit = 1 __func__ = "main_loop" #15 0x0000000000439969 in main (argc=11, argv=0x7ffc91d037a8) at main.c:3086 cfg_stream = 0x1bdf380 c = -1 r = 0 tmp = 0x7ffc91d03ea4 "" tmp_len = 0 port = 0 proto = 0 ahost = 0x0 aport = 0 options = 0x8322d8 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 4190893818 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x200000064 p = 0x0 st = {st_dev = 24, st_ino = 891, st_nlink = 2, st_mode = 16832, st_uid = 990, st_gid = 988, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1694643229, tv_nsec = 729000000}, st_mtim = {tv_sec = 1694644781, tv_nsec = 493359816}, st_ctim = {tv_sec = 1694644781, tv_nsec = 493359816}, __glibc_reserved = {0, 0, 0}} tbuf = "\331\\M\001\350\177\000\000\070\033J\001\350\177\000\000 4Б\374\177\000\000\a\000\000\000\000\000\000\000\330\bJ\001\350\177\000\000\a\000\000\000#\000\000\000\060jM\001\350\177\000\000\245\066K\001\350\177\000\000\000\000\000\000\000\000\000\000\220IK\001\350\177\000\000\070\000\001\001\350\177\000\000\000zI\001\350\177\000\000\000\000\000\000\000\000\000\000\360\063Б\374\177\000\000\360^M\001\350\177\000\000\330\032J\001\350\177\000\000\330\032J\001\350\177\000\000\000\000\000\000\000\000\000\000؈I\001\350\177\000\000\360\063Б\374\177\000\000\220uM\001\350\177\000\000\000\000J\001\350\177\000\000\022\fJ\001\350\177\000\000\066\001K\001\350\177\000\000\344#\000\001\350\177\000\000\272\230L\001"... option_index = 12 long_options = {{name = 0x834976 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x82f4f4 "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x83497b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x834981 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x834987 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x834990 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, { name = 0x83499a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x8349a4 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x8349af "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x8349b8 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x8349c3 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x8349c9 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, { name = 0x8349d3 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x8349da "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" ``` #### Log Messages ``` Sep 13 23:34:53 kamrtc01 /usr/sbin/kamailio[2133]: CRITICAL: <core> [core/mem/q_malloc.c:519]: qm_free(): BUG: freeing already freed pointer (0x7fe7ef9b6800), called from tls: tls_init.c: ser_free(405), first free tls: tls_init.c: ser_free(405) - ignoring Sep 13 23:34:53 kamrtc01 /usr/sbin/kamailio[2132]: CRITICAL: <core> [core/mem/q_malloc.c:519]: qm_free(): BUG: freeing already freed pointer (0x7fe7f04adc20), called from tls: tls_init.c: ser_free(405), first free tls: tls_init.c: ser_free(405) - ignoring Sep 13 23:38:18 kamrtc01 /usr/sbin/kamailio[2133]: CRITICAL: <core> [core/mem/q_malloc.c:519]: qm_free(): BUG: freeing already freed pointer (0x7fe7efa8e9e0), called from tls: tls_init.c: ser_free(405), first free tls: tls_init.c: ser_free(405) - ignoring Sep 13 23:39:26 kamrtc01 /usr/sbin/kamailio[2136]: CRITICAL: <core> [core/mem/q_malloc.c:519]: qm_free(): BUG: freeing already freed pointer (0x7fe7ef9c9468), called from tls: tls_init.c: ser_free(405), first free tls: tls_init.c: ser_free(405) - ignoring Sep 13 23:39:26 kamrtc01 /usr/sbin/kamailio[2132]: CRITICAL: <core> [core/mem/q_malloc.c:519]: qm_free(): BUG: freeing already freed pointer (0x7fe7ef9c3148), called from tls: tls_init.c: ser_free(405), first free tls: tls_init.c: ser_free(405) - ignoring Sep 13 23:39:26 kamrtc01 kernel: kamailio[2132]: segfault at 0 ip 0000000000000000 sp 00007ffc91ce25b8 error 14 in kamailio[400000+1d000] Sep 13 23:39:26 kamrtc01 kernel: Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. ``` System details the same as in https://github.com/kamailio/kamailio/issues/3563 -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3564 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3564(a)github.com>

1 year, 2 months

git:master:cadfec9b: modules: readme files regenerated - pv ... [skip ci]

by Kamailio Dev

Module: kamailio Branch: master Commit: cadfec9b49404304ee1b2c4f4b49490eaa540bc2 URL: https://github.com/kamailio/kamailio/commit/cadfec9b49404304ee1b2c4f4b49490… Author: Kamailio Dev <kamailio.dev(a)kamailio.org> Committer: Kamailio Dev <kamailio.dev(a)kamailio.org> Date: 2023-09-13T15:47:06+02:00 modules: readme files regenerated - pv ... [skip ci] --- Modified: src/modules/pv/README --- Diff: https://github.com/kamailio/kamailio/commit/cadfec9b49404304ee1b2c4f4b49490… Patch: https://github.com/kamailio/kamailio/commit/cadfec9b49404304ee1b2c4f4b49490…

1 year, 2 months

git:master:02a39e53: pv: docs for xavp_params_implode_qval() function

by Daniel-Constantin Mierla

Module: kamailio Branch: master Commit: 02a39e53b550ee50c61d0b0540282588497ff360 URL: https://github.com/kamailio/kamailio/commit/02a39e53b550ee50c61d0b054028258… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: 2023-09-13T15:43:31+02:00 pv: docs for xavp_params_implode_qval() function --- Modified: src/modules/pv/doc/pv_admin.xml --- Diff: https://github.com/kamailio/kamailio/commit/02a39e53b550ee50c61d0b054028258… Patch: https://github.com/kamailio/kamailio/commit/02a39e53b550ee50c61d0b054028258… --- diff --git a/src/modules/pv/doc/pv_admin.xml b/src/modules/pv/doc/pv_admin.xml index d2ef27c10e1..336997a2477 100644 --- a/src/modules/pv/doc/pv_admin.xml +++ b/src/modules/pv/doc/pv_admin.xml @@ -421,6 +421,41 @@ $xavp(x[0]=>c) = "d"; $xavp(x[0]=>a) = "b"; xavp_params_implode("x", "$var(out)"); # results in: $var(out) is "a=b;c=d;e=f;" +... + </programlisting> + </example> + </section> + <section id="pv.f.xavp_params_implode_qval"> + <title> + <function moreinfo="none">xavp_params_implode_qval(xname, pvname)</function> + </title> + <para> + Serialize the subfields in an XAVP to a parameters string format, + enclosing string values in double quotes. + </para> + <para> + Number values are serialized as unsigned integer string format. + </para> + <para> + The first parameter has to be the name of XAVP (only the string + name, not the in $xavp(name)). The second parameter + is the name of output variable (in full name, like $var(output)). + </para> + <para> + The value is stored as string type. + </para> + <para> + Function can be used from ANY ROUTE. + </para> + <example> + <title><function>xavp_params_implode_qval</function> usage</title> + <programlisting format="linespecific"> +... +$xavp(x=>e) = "f"; +$xavp(x[0]=>c) = 5; +$xavp(x[0]=>a) = "b"; +xavp_params_implode("x", "$var(out)"); +# results in: $var(out) is: a="b";c=5;e="f"; ... </programlisting> </example>

1 year, 2 months

git:master:a69c42f8: pv: added function to serialize xavps with quited str values

by Daniel-Constantin Mierla

Module: kamailio Branch: master Commit: a69c42f830dae5c7b14b03c56c47229f0b85f6c5 URL: https://github.com/kamailio/kamailio/commit/a69c42f830dae5c7b14b03c56c47229… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: 2023-09-13T15:39:30+02:00 pv: added function to serialize xavps with quited str values --- Modified: src/modules/pv/pv.c --- Diff: https://github.com/kamailio/kamailio/commit/a69c42f830dae5c7b14b03c56c47229… Patch: https://github.com/kamailio/kamailio/commit/a69c42f830dae5c7b14b03c56c47229… --- diff --git a/src/modules/pv/pv.c b/src/modules/pv/pv.c index 3a905593dc7..73c309da6e3 100644 --- a/src/modules/pv/pv.c +++ b/src/modules/pv/pv.c @@ -475,6 +475,8 @@ static int w_xavp_copy_dst(sip_msg_t *msg, char *src_name, char *src_idx, char *dst_name, char *dst_idx); static int w_xavp_params_explode(sip_msg_t *msg, char *pparams, char *pxname); static int w_xavp_params_implode(sip_msg_t *msg, char *pxname, char *pvname); +static int w_xavp_params_implode_qval( + sip_msg_t *msg, char *pxname, char *pvname); static int w_xavu_params_explode(sip_msg_t *msg, char *pparams, char *pxname); static int w_xavu_params_implode(sip_msg_t *msg, char *pxname, char *pvname); static int w_xavp_slist_explode( @@ -537,6 +539,8 @@ static cmd_export_t cmds[] = { fixup_spve_spve, fixup_free_spve_spve, ANY_ROUTE}, {"xavp_params_implode", (cmd_function)w_xavp_params_implode, 2, fixup_spve_str, fixup_free_spve_str, ANY_ROUTE}, + {"xavp_params_implode_qval", (cmd_function)w_xavp_params_implode_qval, + 2, fixup_spve_str, fixup_free_spve_str, ANY_ROUTE}, {"xavu_params_explode", (cmd_function)w_xavu_params_explode, 2, fixup_spve_spve, fixup_free_spve_spve, ANY_ROUTE}, {"xavu_params_implode", (cmd_function)w_xavu_params_implode, 2, @@ -1119,7 +1123,8 @@ static int ki_xavu_params_explode(sip_msg_t *msg, str *sparams, str *sxname) /** * */ -static int ki_xavp_params_implode(sip_msg_t *msg, str *sxname, str *svname) +static int ki_xavp_params_implode_mode( + sip_msg_t *msg, str *sxname, int mode, str *svname) { pv_spec_t *vspec = NULL; pv_value_t val; @@ -1144,7 +1149,8 @@ static int ki_xavp_params_implode(sip_msg_t *msg, str *sxname, str *svname) } val.rs.s = pv_get_buffer(); - val.rs.len = xavp_serialize_fields(sxname, val.rs.s, pv_get_buffer_size()); + val.rs.len = xavp_serialize_fields_style( + sxname, mode, val.rs.s, pv_get_buffer_size()); if(val.rs.len <= 0) { return -1; } @@ -1158,6 +1164,14 @@ static int ki_xavp_params_implode(sip_msg_t *msg, str *sxname, str *svname) return 1; } +/** + * + */ +static int ki_xavp_params_implode(sip_msg_t *msg, str *sxname, str *svname) +{ + return ki_xavp_params_implode_mode(msg, sxname, 0, svname); +} + /** * */ @@ -1173,6 +1187,30 @@ static int w_xavp_params_implode(sip_msg_t *msg, char *pxname, char *pvname) return ki_xavp_params_implode(msg, &sxname, (str *)pvname); } +/** + * + */ +static int ki_xavp_params_implode_qval(sip_msg_t *msg, str *sxname, str *svname) +{ + return ki_xavp_params_implode_mode(msg, sxname, XAVP_PRINT_QVAL, svname); +} + +/** + * + */ +static int w_xavp_params_implode_qval( + sip_msg_t *msg, char *pxname, char *pvname) +{ + str sxname; + + if(fixup_get_svalue(msg, (gparam_t *)pxname, &sxname) != 0) { + LM_ERR("cannot get the xavp name\n"); + return -1; + } + + return ki_xavp_params_implode_qval(msg, &sxname, (str *)pvname); +} + /** * */ @@ -2864,6 +2902,11 @@ static sr_kemi_t sr_kemi_pvx_exports[] = { { SR_KEMIP_STR, SR_KEMIP_STR, SR_KEMIP_NONE, SR_KEMIP_NONE, SR_KEMIP_NONE, SR_KEMIP_NONE } }, + { str_init("pvx"), str_init("xavp_params_implode_qval"), + SR_KEMIP_INT, ki_xavp_params_implode_qval, + { SR_KEMIP_STR, SR_KEMIP_STR, SR_KEMIP_NONE, + SR_KEMIP_NONE, SR_KEMIP_NONE, SR_KEMIP_NONE } + }, { str_init("pvx"), str_init("xavu_params_explode"), SR_KEMIP_INT, ki_xavu_params_explode, { SR_KEMIP_STR, SR_KEMIP_STR, SR_KEMIP_NONE,

1 year, 2 months

← Newer
1
...
19
20
21
22
23
24
25
...
30
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

sr-dev September 2023