sr-dev October 2024

sr-dev@lists.kamailio.org

14 participants
115 discussions

[kamailio/kamailio] Service crashed for IMS VoLTE MT call (Issue #3973)
by citicims 09 Jan '25

09 Jan '25

### Description  ### Troubleshooting #### Reproduction  #### Debugging Data ``` root@imstester04:~/core_dump_test# gdb kamailio core._usr_local_sbin_kamailio.0.d660bb15-1623-4c0c-ae29-64c78dc89d8c.3799655.792169952 GNU gdb (Ubuntu 9.2-0ubuntu1~20.04.2) 9.2 Copyright (C) 2020 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from kamailio... [New LWP 3799655] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/usr/local/sbin/kamailio -P /var/run/kamailio_pcscf/kamailio_pcscf.pid -f /etc/'. Program terminated with signal SIGABRT, Aborted. #0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 50 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) bt full #0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 set = {__val = {0, 19989655252, 140370540584975, 1725509713, 94706844523408, 341, 64424509453, 21474836492, 532575944712, 1065151889412, 140368121167872, 28800, 94706843944736, 560, 71148340464, 0}} pid = <optimized out> tid = <optimized out> ret = <optimized out> #1 0x00007faa94995859 in __GI_abort () at abort.c:79 save_stage = 1 act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 140366190491840, 140366190223360, 0, 0, 0, 0, 0, 94706838593952, 94706840315664, 94706840316072, 140366318452096, 2001317716380379136, 0, 94706840315898, 0}}, sa_flags = -1483647068, sa_restorer = 0x7faa94a8b410 <__syslog>} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00005622a778e1c7 in qm_debug_check_frag (qm=0x7fa98ce82000, f=0x7fa9948cbd80, file=0x7faa908fc84e "rom %s:%u\n", line=171, efile=0x5622a7932729 "core/mem/q_malloc.c", eline=546) at core/mem/q_malloc.c:143 p = 0x0 __func__ = "qm_debug_check_frag" #3 0x00005622a77923f8 in qm_free (qmp=0x7fa98ce82000, p=0x7fa9948cbdc0, file=0x7faa908fc84e "rom %s:%u\n", func=0x7faa908fc460 "%s%s%sadd_blind failed\n", line=171, mname=0x7faa908fc28e "") at core/mem/q_malloc.c:546 qm = 0x7fa98ce82000 f = 0x7fa9948cbd80 size = 0 next = 0x0 prev = 0x0 __func__ = "qm_free" #4 0x00007faa907e3749 in free_cell_helper (dead_cell=0x7fa994875c90, silent=0, fname=0x7faa90915362 <__func__.11447+2> "_init_timers", fline=651) at h_table.c:126 b = 0x0 i = 0 rpl = 0x7ffca5bc65e0 tt = 0x1 foo = 0x0 cbs = 0x7fa98cfb76d0 cbs_tmp = 0x7faa907e1041 <t_write_req+481> __func__ = "free_cell_helper" #5 0x00007faa9089f28f in wait_handler (ti=872968975, wait_tl=0x7fa994875d48, data=0x7fa994875c90) at timer.c:651 p_cell = 0x7fa994875c90 ret = 0 unlinked = 0 rcount = 1 __func__ = "wait_handler" #6 0x00005622a7522813 in timer_list_expire (t=872968975, h=0x7fa98cf0a950, slow_l=0x7fa98cf0dd50, slow_mark=6936) at core/timer.c:861 tl = 0x7fa994875d48 ret = 0 #7 0x00005622a7522d52 in timer_handler () at core/timer.c:925 saved_ticks = 872968975 run_slow_timer = 0 i = 792 __func__ = "timer_handler" #8 0x00005622a7523280 in timer_main () at core/timer.c:963 No locals. #9 0x00005622a744501a in main_loop () at main.c:1932 i = 64 pid = 0 si = 0x0 si_desc = "udp receiver child=63 sock=10.51.0.10:20004\000\324\002\000\000\003\000\000\000\345\002\000\000\000h\214\017\334\033\306\033\000\000\000\000\000\000\000\000\210��\247\"V\000\000\000\000\000\000\000\000\000\000\303W\221\247\"V\000\000\345\002\000\000\000\000\000\000\020\264\250\224\252\177\000\000\340i\274\245\374\177\000\000\061\237_\247\"V\000" nrprocs = 64 woneinit = 1 __func__ = "main_loop" #10 0x00005622a7450425 in main (argc=13, argv=0x7ffca5bc6f48) at main.c:3257 cfg_stream = 0x5622a7b512a0 --Type <RET> for more, q to quit, c to continue without paging--c c = -1 r = 0 tmp = 0x7ffca5bc7e58 "" tmp_len = 32682 port = 5060 proto = 0 aproto = 0 ahost = 0x0 aport = 0 options = 0x5622a78c0368 ":f:cm:M:dVIhEeb:B:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 3374692201 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 0 n_lst = 0x0 p = 0x7faa94cfa410 "" st = {st_dev = 25, st_ino = 754, st_nlink = 2, st_mode = 16832, st_uid = 0, st_gid = 0, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1717582113, tv_nsec = 155483622}, st_mtim = {tv_sec = 1717582113, tv_nsec = 155483622}, st_ctim = {tv_sec = 1717582113, tv_nsec = 155483622}, __glibc_reserved = {0, 0, 0}} l1 = 4096 tbuf = "\020n\274\245\374\177\000\000\273\327��\252\177", '\000' <repeats 18 times>, "��\277X��\377\377\000\000\000\000\000\000\000\000\004\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\000\207��\252\177\000\000@#\227\224\252\177\000\000`\201��\252\177\000\000\001l\274\245\374\177\000\000\350y��\252\177", '\000' <repeats 26 times>, "\220\274\266\224\252\177\000\000\004\000\000\024\000\000\000\000 \224\267\224\252\177", '\000' <repeats 130 times>... option_index = 0 long_options = {{name = 0x5622a78c28f6 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x5622a78bd54c "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x5622a78c28fb "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x5622a78c2901 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x5622a78c2907 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x5622a78c2910 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, {name = 0x5622a78c291a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x5622a78c2924 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x5622a78c292f "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x5622a78c2938 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x5622a78c2943 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x5622a78c2949 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, {name = 0x5622a78c2953 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x5622a78c295a "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" (gdb) (gdb) (gdb) ``` #### Log Messages #### SIP Traffic ### Possible Solutions ### Additional Information * **Kamailio Version** - output of `kamailio -v` `Kamailio release 5.8.2`` ``` * **Operating System**:  ``` (paste your output here) ``` -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3973 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3973(a)github.com>

3 8

[kamailio/kamailio] Module CNCXX coredump Kamailio version 5.8.2 (Issue #4009)
by itpanda2024 08 Jan '25

08 Jan '25

### Description We upgrade Kamailio from V5.6.5 to V5.8.2 . When call out , out of credit and drop calls. Kamailio v5.8.2 crashed . We think our system not enough memory so we up to memory but the same issue. Anyone met this issue , please help us. Thanks Our system : - OS: Centos 9 stream - Kamailo vesion 5.8.2 #### Reproduction #### Debugging Data <Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f0f1f38902c in __delete_call (call=0x7f0f207d4d90, credit_data=0x7f0f203d42e0) at cnxcc_mod.c:879 879 clist_rm(call, next, prev); Missing separate debuginfos, use: dnf debuginfo-install MariaDB-shared-10.5.25-1.el9.x86_64 hiredis-1.0.2-2.el9.x86_64 (gdb) bt full #0 0x00007f0f1f38902c in __delete_call (call=0x7f0f207d4d90, credit_data=0x7f0f203d42e0) at cnxcc_mod.c:879 __func__ = "__delete_call" #1 0x00007f0f1f383f27 in __stop_billing (callid=0x7f0f207d7378) at cnxcc_mod.c:643 cd_entry = 0x7f0f204f8360 call = 0x7f0f207d4d90 hts = 0x7f0f1f3bf910 <_data+48> credit_data = 0x7f0f203d42e0 __func__ = "__stop_billing" #2 0x00007f0f1f381928 in __dialog_terminated_callback (cell=0x7f0f207d7300, type=64, _params=0x7f0f1f7a8800 <params>) at cnxcc_mod.c:479 __func__ = "__dialog_terminated_callback" #3 0x00007f0f1f6f7490 in run_dlg_callbacks (type=64, dlg=0x7f0f207d7300, req=0x7f0f40eda090, rpl=0x0, dir=2, dlg_data=0x0) at dlg_cb.c:269 cb = 0x7f0f207d7860 __func__ = "run_dlg_callbacks" #4 0x00007f0f1f725c84 in dlg_terminated (req=0x7f0f40eda090, dlg=0x7f0f207d7300, dir=2) at dlg_handlers.c:404 iuid = 0x0 __func__ = "dlg_terminated" #5 0x00007f0f1f735844 in dlg_onroute (req=0x7f0f40eda090, route_params=0x7ffe01fc4a70, param=0x0) at dlg_handlers.c:1502 dlg = 0x7f0f207d7300 iuid = 0x7f0f20cfc690 val = {s = 0x9f4ae7 <buf+775> "2e3.2d72>\r\nP-SR-XUID: atpsh-6722434b-b03-6\r\n\r\n", len = 8} callid = { s = 0x9f4924 <buf+324> "3506e2a7-0fdc-123e-aebc-00505697ee23\r\nCSeq: 90509168 BYE\r\nUser-Agent: FreeSWITCH\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE\r\nSupporte"..., len = 36} ftag = { s = 0x9f48ce <buf+238> "FF27yjy610cZS\r\nTo: \"sipp\" <sip:0999999990@172.16.172.221>;tag=BU30ZvQFDtgHS\r\nCall-ID: 3506e2a7-0fdc-123e-aebc-00505697ee23\r\nCSeq: 90509168 BYE\r\nUser-Agent: FreeSWITCH\r\nAllow: INVITE, ACK, BYE, CANCEL,"..., len = 13} ttag = { s = 0x9f490c <buf+300> "BU30ZvQFDtgHS\r\nCall-ID: 3506e2a7-0fdc-123e-aebc-00505697ee23\r\nCSeq: 90509168 BYE\r\nUser-Agent: FreeSWITCH\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBL"..., len = 13} h_entry = 994 h_id = 10194 new_state = 5 old_state = 4 unref = 2 event = 7 timeout = 0 reset = 0 dir = 2 ret = 0 __func__ = "dlg_onroute" #6 0x00007f0f1fae7e88 in run_rr_callbacks (req=0x7f0f40eda090, rr_param=0x7ffe01fc4b30) at rr_cb.c:96 l_param = { s = 0x9f4a6b <buf+651> "lr;ftag=BU30ZvQFDtgHS;vsf=", 'A' <repeats 36 times>, "BgM-;vst=", 'A' <repeats 37 times>, "QEAAwUIADA-;did=2e3.2d72>\r\nP-SR-XUID: atpsh-6722434b-b03-6\r\n\r\n", len = 132} --Type <RET> for more, q to quit, c to continue without paging--c cbp = 0x7f0f40edfa10 __func__ = "run_rr_callbacks" #7 0x00007f0f1fad6e59 in after_loose (_m=0x7f0f40eda090, preloaded=0) at loose.c:1021 hdr = 0x7f0f40e08460 puri = {user = {s = 0x0, len = 0}, passwd = {s = 0x0, len = 0}, host = { s = 0x9f4a56 <buf+630> "172.16.172.221:65000;lr;ftag=BU30ZvQFDtgHS;vsf=", 'A' <repeats 36 times>, "BgM-;vst=", 'A' <repeats 37 times>, "QEAAwUIADA-;did=2e3.2d72>\r\nP-SR-XUID: atpsh-6722434b-b03-6\r\n\r\n", len = 14}, port = { s = 0x9f4a65 <buf+645> "65000;lr;ftag=BU30ZvQFDtgHS;vsf=", 'A' <repeats 36 times>, "BgM-;vst=", 'A' <repeats 37 times>, "QEAAwUIADA-;did=2e3.2d72>\r\nP-SR-XUID: atpsh-6722434b-b03-6\r\n\r\n", len = 5}, params = { s = 0x9f4a6b <buf+651> "lr;ftag=BU30ZvQFDtgHS;vsf=", 'A' <repeats 36 times>, "BgM-;vst=", 'A' <repeats 37 times>, "QEAAwUIADA-;did=2e3.2d72>\r\nP-SR-XUID: atpsh-6722434b-b03-6\r\n\r\n", len = 132}, sip_params = { s = 0x9f4a6b <buf+651> "lr;ftag=BU30ZvQFDtgHS;vsf=", 'A' <repeats 36 times>, "BgM-;vst=", 'A' <repeats 37 times>, "QEAAwUIADA-;did=2e3.2d72>\r\nP-SR-XUID: atpsh-6722434b-b03-6\r\n\r\n", len = 132}, headers = {s = 0x0, len = 0}, port_no = 65000, proto = 0, type = SIP_URI_T, flags = 0, transport = {s = 0x0, len = 0}, ttl = {s = 0x0, len = 0}, user_param = {s = 0x0, len = 0}, maddr = { s = 0x0, len = 0}, method = {s = 0x0, len = 0}, lr = { s = 0x9f4a6b <buf+651> "lr;ftag=BU30ZvQFDtgHS;vsf=", 'A' <repeats 36 times>, "BgM-;vst=", 'A' <repeats 37 times>, "QEAAwUIADA-;did=2e3.2d72>\r\nP-SR-XUID: atpsh-6722434b-b03-6\r\n\r\n", len = 2}, r2 = {s = 0x0, len = 0}, gr = {s = 0x0, len = 0}, transport_val = { s = 0x0, len = 0}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0x0, len = 0}, maddr_val = {s = 0x0, len = 0}, method_val = {s = 0x0, len = 0}, lr_val = {s = 0x0, len = 0}, r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x0, len = 0}} rt = 0x7f0f40e08660 res = 1 status = 1 uri = { s = 0x9f4a52 <buf+626> "sip:172.16.172.221:65000;lr;ftag=BU30ZvQFDtgHS;vsf=", 'A' <repeats 36 times>, "BgM-;vst=", 'A' <repeats 37 times>, "QEAAwUIADA-;did=2e3.2d72>\r\nP-SR-XUID: atpsh-6722434b-b03-6\r\n\r\n", len = 157} uri_is_myself = 1 use_ob = 0 rparams = { s = 0x9f4a6b <buf+651> "lr;ftag=BU30ZvQFDtgHS;vsf=", 'A' <repeats 36 times>, "BgM-;vst=", 'A' <repeats 37 times>, "QEAAwUIADA-;did=2e3.2d72>\r\nP-SR-XUID: atpsh-6722434b-b03-6\r\n\r\n", len = 132} __func__ = "after_loose" #8 0x00007f0f1fad75e5 in loose_route_mode (_m=0x7f0f40eda090, _mode=0) at loose.c:1056 ret = 0 __func__ = "loose_route_mode" #9 0x00007f0f1fae9cfb in w_loose_route (msg=0x7f0f40eda090, p1=0x0, p2=0x0) at rr_mod.c:273 No locals. #10 0x0000000000443202 in do_action (h=0x7ffe01fc56e0, a=0x7f0f40e9d320, msg=0x7f0f40eda090) at core/action.c:1121 ret = -5 li = 0 v = 0 dst = {send_sock = 0x0, to = {s = {sa_family = 0, sa_data = '\000' <repeats 13 times>}, sin = {sin_family = 0, sin_port = 0, sin_addr = {s_addr = 0}, sin_zero = "\000\000\000\000\000\000\000"}, sin6 = {sin6_family = 0, sin6_port = 0, sin6_flowinfo = 0, sin6_addr = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}, sas = {ss_family = 0, __ss_padding = '\000' <repeats 86 times>, "\020\016\272@\017\177", '\000' <repeats 25 times>, __ss_align = 0}}, id = 0, send_flags = {f = 0, blst_imask = 0}, proto = 0 '\000', proto_pad0 = 0 '\000', proto_pad1 = 0} tmp = 0x0 new_uri = 0x0 end = 0x0 crt = 0x0 cmd = 0x7f0f40b91310 len = 0 user = 0 uri = {user = {s = 0x0, len = 0}, passwd = {s = 0x0, len = 0}, host = {s = 0x0, len = 0}, port = {s = 0x0, len = 0}, params = { s = 0x0, len = 0}, sip_params = {s = 0x0, len = 0}, headers = {s = 0x0, len = 0}, port_no = 0, proto = 0, type = ERROR_URI_T, flags = 0, transport = {s = 0x0, len = 0}, ttl = {s = 0x0, len = 0}, user_param = {s = 0x0, len = 0}, maddr = {s = 0x0, len = 0}, method = {s = 0x0, len = 0}, lr = {s = 0x0, len = 0}, r2 = {s = 0x0, len = 0}, gr = {s = 0x0, len = 0}, transport_val = {s = 0x0, len = 0}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0x0, len = 0}, maddr_val = {s = 0x0, len = 0}, method_val = { s = 0x0, len = 0}, lr_val = {s = 0x0, len = 0}, r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x0, len = 0}} next_hop = {user = {s = 0x0, len = 0}, passwd = {s = 0x0, len = 0}, host = {s = 0x0, len = 0}, port = {s = 0x0, len = 0}, params = { s = 0x0, len = 0}, sip_params = {s = 0x0, len = 0}, headers = {s = 0x0, len = 0}, port_no = 0, proto = 0, type = ERROR_URI_T, flags = 0, transport = {s = 0x0, len = 0}, ttl = {s = 0x0, len = 0}, user_param = {s = 0x0, len = 0}, maddr = {s = 0x0, len = 0}, method = {s = 0x0, len = 0}, lr = {s = 0x0, len = 0}, r2 = {s = 0x0, len = 0}, gr = {s = 0x0, len = 0}, transport_val = {s = 0x0, len = 0}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0x0, len = 0}, maddr_val = {s = 0x0, len = 0}, method_val = { s = 0x0, len = 0}, lr_val = {s = 0x0, len = 0}, r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x0, len = 0}} u = 0x0 port = 0 dst_host = 0x0 i = 0 flags = 0 avp = 0x7f0f40eda090 st = {flags = 0, id = 0, name = {n = 0, s = {s = 0x0, len = 0}, re = 0x0}, avp = 0x0} sct = 0x7ffe01fc5570 sjt = 0x7f0f40e9bdb0 rve = 0x0 mct = 0x0 rv = 0x0 rv1 = 0x7f0f40e65470 c1 = {cache_type = RV_CACHE_EMPTY, val_type = RV_NONE, c = {avp_val = {n = 0, s = {s = 0x0, len = 0}, re = 0x0}, pval = {rs = { s = 0x0, len = 0}, ri = 0, flags = 0}}, i2s = '\000' <repeats 21 times>} s = {s = 0x0, len = 0} srevp = {0x0, 0x0} evp = {data = 0x0, obuf = {s = 0x0, len = 0}, rcv = 0x0, dst = 0x0, req = 0x0, rpl = 0x0, rplcode = 0, mode = 0} mod_f_params = {{type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}} __func__ = "do_action" #11 0x0000000000450a6d in run_actions (h=0x7ffe01fc56e0, a=0x7f0f40e9d320, msg=0x7f0f40eda090) at core/action.c:1618 t = 0x7f0f40e9d320 ret = -1 tvb = {tv_sec = 0, tv_usec = 0} tve = {tv_sec = 0, tv_usec = 0} tz = {tz_minuteswest = 0, tz_dsttime = 0} tdiff = 533967288 __func__ = "run_actions" #12 0x000000000045110f in run_actions_safe (h=0x7ffe01fc6b70, a=0x7f0f40e9d320, msg=0x7f0f40eda090) at core/action.c:1681 ctx = {rec_lev = 1, run_flags = 0, last_retcode = 0, jmp_env = {{__jmpbuf = {4294967296, 7972416043526547515, 140728931744408, 4394786, 9616872, 139703624372224, 7972416043509770299, -7971453441872074693}, __mask_was_saved = 0, __saved_mask = { __val = {139702937259984, 0, 0, 140728931735408, 4294967296, 140728931744408, 4394786, 9616872, 139703624372224, 140728931735792, 6261792, 140728931735696, 139702934448925, 0, 140728931735836, 139703490298096}}}}} ret = 33315352 ign_on_break = 0 #13 0x00000000005f3e0c in rval_get_long (h=0x7ffe01fc6b70, msg=0x7f0f40eda090, i=0x7ffe01fc5f60, rv=0x7f0f40e9d488, cache=0x0) at core/rvalue.c:973 r_avp = 0x0 avp_val = {n = 9616872, s = {s = 0x92bde8 "\340\334A", len = 1223135232}, re = 0x92bde8} pval = {rs = {s = 0x400000000 <error: Cannot access memory at address 0x400000000>, len = 33316704}, ri = 8623258264, flags = 533967288} tmp = {s = 0x0, len = 1} s = 0x0 r = 0 ret = 0 destroy_pval = 0 __func__ = "rval_get_long" #14 0x00000000005f8c20 in rval_expr_eval_long (h=0x7ffe01fc6b70, msg=0x7f0f40eda090, res=0x7ffe01fc5f60, rve=0x7f0f40e9d480) at core/rvalue.c:1854 i1 = 1 i2 = 140728931744408 ret = -1 c1 = {cache_type = RV_CACHE_EMPTY, val_type = RV_NONE, c = {avp_val = {n = 0, s = {s = 0x0, len = 0}, re = 0x0}, pval = {rs = { s = 0x0, len = 0}, ri = 0, flags = 0}}, i2s = '\000' <repeats 20 times>, "\001"} c2 = {cache_type = RV_CACHE_EMPTY, val_type = RV_NONE, c = {avp_val = {n = 139703490551952, s = {s = 0x7f0f40eda090 "@", len = 0}, re = 0x7f0f40eda090}, pval = {rs = {s = 0x7f0f40eda090 "@", len = 0}, ri = 0, flags = 0}}, i2s = '\000' <repeats 21 times>} rv1 = 0x7f0f1fcb3b77 <t_check_trans+249> rv2 = 0x7ffe01fc5a30 __func__ = "rval_expr_eval_long" #15 0x0000000000442c83 in do_action (h=0x7ffe01fc6b70, a=0x7f0f40ea0e60, msg=0x7f0f40eda090) at core/action.c:1097 ret = -5 li = 7972416043847411771 v = 0 dst = {send_sock = 0x7ffe01fc5ff0, to = {s = {sa_family = 15884, sa_data = "_", '\000' <repeats 12 times>}, sin = { sin_family = 15884, sin_port = 95, sin_addr = {s_addr = 0}, sin_zero = "\000\000\000\000\000\000\000"}, sin6 = { sin6_family = 15884, sin6_port = 95, sin6_flowinfo = 0, sin6_addr = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}, sas = {ss_family = 15884, __ss_padding = "_", '\000' <repeats 25 times>, "\377\377\377\377\000\000\000\000\000\000\000\000(^\346@\017\177\000\000\210b\374\001\376\177\000\000\220\240\355@\017\177\000\000pk\374\001\376\177\000\000轒\000\000\000\000\000\000\220\347H\017\177\000\0000`\374\001\376\177\000\000\017\021E\000\000\000\000\000\240`\374\001\376\177\000\000\220\240\355@\017\177\000", __ss_align = 139703490068560}}, id = 33319792, send_flags = {f = 32766, blst_imask = 0}, proto = 0 '\000', proto_pad0 = 0 '\000', proto_pad1 = 0} tmp = 0x8000000 <error: Cannot access memory at address 0x8000000> new_uri = 0x7ffe01fc6160 "\b" end = 0x7f0f40ee3f60 "X-FS-Support" crt = 0x7f0f1fdcfaa6 <pkg_proc_update_stats+115> "H\213\r\203l" cmd = 0x7ffe01fc6120 len = 32766 user = 33317200 uri = {user = {s = 0x0, len = 0}, passwd = {s = 0x0, len = 0}, host = {s = 0x0, len = 0}, port = { s = 0xffffffff01fc7a98 <error: Cannot access memory at address 0xffffffff01fc7a98>, len = 0}, params = { s = 0x92bde8 "\340\334A", len = 0}, sip_params = {s = 0x7ffe01fc7a98 "?~\374\001\376\177", len = 4394786}, headers = { s = 0x92bde8 "\340\334A", len = 1223135232}, port_no = 24256, proto = 508, type = 32766, flags = (URI_USER_NORMALIZE | URI_SIP_USER_PHONE | unknown: 0x45110c), transport = {s = 0x0, len = 1089314960}, ttl = { s = 0x7f0f40e65bd0 "\200\001", len = 33319792}, user_param = {s = 0x0, len = -1}, maddr = { s = 0x100000000 <error: Cannot access memory at address 0x100000000>, len = -234461125}, method = { s = 0x7ffe01fc7a98 "?~\374\001\376\177", len = 4394786}, lr = {s = 0x92bde8 "\340\334A", len = 1223135232}, r2 = { s = 0x6ea3b626f106683b <error: Cannot access memory at address 0x6ea3b626f106683b>, len = 1168533563}, gr = {s = 0x0, len = 0}, transport_val = {s = 0x0, len = 5531605}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0x7ffe01fc62f0 "\200\003", len = 33317320}, maddr_val = {s = 0x7ffe01fc61cc "", len = 1088756432}, method_val = {s = 0x0, len = 33317872}, lr_val = { s = 0x0, len = 0}, r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x0, len = -1}} next_hop = {user = {s = 0x0, len = 0}, passwd = {s = 0x0, len = 0}, host = {s = 0x0, len = 0}, port = {s = 0x0, len = 0}, params = { s = 0x7ffe01fc7a98 "?~\374\001\376\177", len = 4394786}, sip_params = {s = 0x92bde8 "\340\334A", len = 1223135232}, headers = { s = 0x7ffe01fc5db0 "\300^\374\001\376\177", len = 4524653}, port_no = 0, proto = 0, type = ERROR_URI_T, flags = 0, transport = { s = 0x0, len = 0}, ttl = {s = 0x0, len = 1089314960}, user_param = {s = 0x7f0f40e65bd0 "\200\001", len = 33316320}, maddr = { s = 0x0, len = 0}, method = {s = 0x0, len = 0}, lr = {s = 0x0, len = 0}, r2 = {s = 0x0, len = 0}, gr = {s = 0x0, len = 0}, transport_val = {s = 0x0, len = 0}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0x7f0f40b9f568 "~\365\216\037\017\177", len = 0}, maddr_val = {s = 0x0, len = 0}, method_val = {s = 0x0, len = 0}, lr_val = {s = 0x0, len = 0}, r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x0, len = 0}} u = 0x7f0f409ff010 port = 0 dst_host = 0x92bde8 i = 1088720928 flags = 0 avp = 0x7f0f40e496c8 st = {flags = 0, id = 0, name = {n = 0, s = {s = 0x0, len = 0}, re = 0x0}, avp = 0x0} sct = 0x0 sjt = 0x0 rve = 0x7f0f40e9d480 mct = 0x7f0f40e65e20 rv = 0x0 rv1 = 0x7f0f40e68340 c1 = {cache_type = RV_CACHE_EMPTY, val_type = RV_NONE, c = {avp_val = {n = 0, s = {s = 0x0, len = 0}, re = 0x0}, pval = {rs = { s = 0x0, len = 0}, ri = 0, flags = 0}}, i2s = "\000\000\000\000\000\000\000\000h\365\271@\017\177\000\000\000\000\000\000\000"} s = {s = 0x0, len = 0} srevp = {0x0, 0x0} evp = {data = 0x0, obuf = {s = 0x0, len = 0}, rcv = 0x0, dst = 0x0, req = 0x0, rpl = 0x0, rplcode = 0, mode = 0} mod_f_params = {{type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}} __func__ = "do_action" #16 0x0000000000450a6d in run_actions (h=0x7ffe01fc6b70, a=0x7f0f40e9d0d0, msg=0x7f0f40eda090) at core/action.c:1618 t = 0x7f0f40ea0e60 ret = 1 tvb = {tv_sec = 0, tv_usec = 0} tve = {tv_sec = 0, tv_usec = 0} tz = {tz_minuteswest = 8725541, tz_dsttime = 0} tdiff = 1088848992 __func__ = "run_actions" #17 0x000000000043f70a in do_action (h=0x7ffe01fc6b70, a=0x7f0f40e696e0, msg=0x7f0f40eda090) at core/action.c:709 ret = -5 li = 16 v = 1 dst = {send_sock = 0x92bde8, to = {s = {sa_family = 36864, sa_data = "\347H\017\177\000\000@h\374\001\376\177\000"}, sin = { sin_family = 36864, sin_port = 18663, sin_addr = {s_addr = 32527}, sin_zero = "@h\374\001\376\177\000"}, sin6 = { sin6_family = 36864, sin6_port = 18663, sin6_flowinfo = 32527, sin6_addr = {__in6_u = { __u6_addr8 = "@h\374\001\376\177\000\000\361=t\000\000\000\000", __u6_addr16 = {26688, 508, 32766, 0, 15857, 116, 0, 0}, __u6_addr32 = {33318976, 32766, 7618033, 0}}}, sin6_scope_id = 28}, sas = {ss_family = 36864, __ss_padding = "\347H\017\177\000\000@h\374\001\376\177\000\000\361=t\000\000\000\000\000\034", '\000' <repeats 15 times>, "\377\377\377\377\377\377\377\377\220\240\355@\017\177\000\000轒\000\000\000\000\000\000\220\347H\017\177\000\000\320h\374\001\376\177\000\000H\ru\000\000\000\000\000\360g\374\001\376\177\000\000\246\372\334\037\017\177\000\000\000\000\000\000\000\000\000\000di\374\001\376\177\000", __ss_align = 134217728}}, id = 1086994592, send_flags = {f = 32527, blst_imask = 0}, proto = 21 '\025', proto_pad0 = 75 'K', proto_pad1 = 159} tmp = 0x7ffe01fc6a60 "\020k\374\001\376\177" new_uri = 0x7ffe01fc69f0 "" end = 0x4 <error: Cannot access memory at address 0x4> crt = 0x7f0f40eda090 "@" cmd = 0x7f0f40b9f0d0 len = 32527 user = 1089145792 uri = {user = {s = 0x7f0f40e08630 "", len = 0}, passwd = {s = 0x8000000 <error: Cannot access memory at address 0x8000000>, len = 129248720}, host = {s = 0x3a5670 <error: Cannot access memory at address 0x3a5670>, len = 4969008}, port = { s = 0x57e920 <fork_tcp_process+5074> ";", len = 16}, params = {s = 0x4e <error: Cannot access memory at address 0x4e>, len = 7598071}, sip_params = {s = 0x7ffe01fc6630 "@g\374\001\376\177", len = 4978977}, headers = {s = 0x0, len = 1084226000}, port_no = 62544, proto = 16543, type = 19, flags = (unknown: 0x409ff9d0), transport = {s = 0x7ffe01fc6740 "@h\374\001\376\177", len = 7502474}, ttl = {s = 0x7ffe01fc6740 "@h\374\001\376\177", len = 7492948}, user_param = {s = 0x8bb92b "core", len = 7494079}, maddr = {s = 0x8bc708 <__func__.21> "parse_headers", len = 9157624}, method = {s = 0x7f0f40e085c0 "\220\001", len = 1084223504}, lr = {s = 0x8bc708 <__func__.21> "parse_headers", len = 9157624}, r2 = { s = 0x40 <error: Cannot access memory at address 0x40>, len = 1084223504}, gr = {s = 0x0, len = 0}, transport_val = { s = 0x9f4b13 <buf+819> "\r\n", len = 0}, ttl_val = {s = 0x8be270 <__func__.3> "parse_to_param", len = 9168712}, user_param_val = {s = 0x30 <error: Cannot access memory at address 0x30>, len = 1084223504}, maddr_val = {s = 0x7f0f40e08630 "", len = 1088455888}, method_val = {s = 0x0, len = 1084223504}, lr_val = { s = 0x130 <error: Cannot access memory at address 0x130>, len = 1088456064}, r2_val = { s = 0x400000000 <error: Cannot access memory at address 0x400000000>, len = 0}, gr_val = { s = 0x7ffe01fc7a98 "?~\374\001\376\177", len = 4394786}} next_hop = {user = {s = 0x4a <error: Cannot access memory at address 0x4a>, len = 10438703}, passwd = { s = 0x7 <error: Cannot access memory at address 0x7>, len = 8}, host = {s = 0x7f0f40cc6060 "\001", len = 0}, port = { s = 0x7f0f40e521c0 "\001", len = 1088827984}, params = { s = 0xffffffffffffffff <error: Cannot access memory at address 0xffffffffffffffff>, len = 1088758208}, sip_params = {s = 0x0, len = 1086993056}, headers = {s = 0x7f0f40e07b30 "\003", len = 1088454800}, port_no = 40176, proto = 16617, type = 32527, flags = 0, transport = {s = 0x7f0f40ca3db0 <incomplete sequence \353>, len = 0}, ttl = {s = 0x0, len = 0}, user_param = { s = 0x440e631a0 <error: Cannot access memory at address 0x440e631a0>, len = 9193958}, maddr = {s = 0x0, len = 0}, method = { s = 0x7ffe01fc65c0 "", len = 7807783}, lr = {s = 0x0, len = 0}, r2 = {s = 0x1 <error: Cannot access memory at address 0x1>, len = 1088455952}, gr = {s = 0x9f4b15 <buf+821> "", len = 10439410}, transport_val = {s = 0x0, len = 33318544}, ttl_val = { s = 0x9f4b15 <buf+821> "", len = 10439230}, user_param_val = {s = 0x0, len = 0}, maddr_val = {s = 0x0, len = 0}, method_val = { s = 0x0, len = 7534444}, lr_val = {s = 0x7ffe01fc65c0 "", len = 1084223504}, r2_val = {s = 0x7f0f40e08630 "", len = 1084223504}, gr_val = {s = 0x7ffe01fc6600 "0f\374\001\376\177", len = 534575782}} u = 0x7ffe01fc6b90 port = 0 dst_host = 0x7f0f40e085c0 i = 41 flags = 0 avp = 0x7627ed <parse_cseq+2542> st = {flags = 0, id = 0, name = {n = 0, s = {s = 0x0, len = 65537}, re = 0x0}, avp = 0x9f47e0 <buf>} sct = 0x7f0f40eda090 sjt = 0x7f0f40eb0bc0 rve = 0x7f0f40e66660 mct = 0x7ffe01fc68f0 rv = 0x0 rv1 = 0x7ffe01fc6a10 c1 = {cache_type = 10504224, val_type = RV_NONE, c = {avp_val = {n = 10504232, s = {s = 0xa04828 <def_list+40> "", len = 1085943864}, re = 0xa04828 <def_list+40>}, pval = {rs = {s = 0xa04828 <def_list+40> "", len = 1085943864}, ri = 10504544, flags = 10504552}}, i2s = "\200\371\253\037\017\177\000\000p\371\253\037\017\177\000\000\020\362\253\037\017\177"} s = {s = 0xa04810 <def_list+16> "", len = 33320176} srevp = {0x7ffe01fc6c30, 0x7f0f1fa499ae <tps_msg_received+3364>} evp = {data = 0x0, obuf = {s = 0x0, len = 0}, rcv = 0x0, dst = 0x0, req = 0x0, rpl = 0x0, rplcode = 0, mode = 0} mod_f_params = {{type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}} __func__ = "do_action" #18 0x0000000000450a6d in run_actions (h=0x7ffe01fc6b70, a=0x7f0f40e63e00, msg=0x7f0f40eda090) at core/action.c:1618 t = 0x7f0f40e696e0 ret = -1 tvb = {tv_sec = 0, tv_usec = 0} tve = {tv_sec = 0, tv_usec = 0} tz = {tz_minuteswest = 1089314960, tz_dsttime = 32527} tdiff = 4394786 __func__ = "run_actions" #19 0x00000000004511d7 in run_top_route (a=0x7f0f40e63e00, msg=0x7f0f40eda090, c=0x0) at core/action.c:1701 ctx = {rec_lev = 2, run_flags = 0, last_retcode = 1, jmp_env = {{__jmpbuf = {4294967296, 7972416042383599675, 140728931744408, 4394786, 9616872, 139703624372224, 7972416042299713595, -7971453441872074693}, __mask_was_saved = 0, __saved_mask = { __val = {6379359, 4294967296, 139703490551952, 140728898420737, 4294967296, 140728931744408, 4394786, 9616872, 139703624372224, 140728931740736, 0, 4611686022722355200, 0, 139703490412128, 4294967296, 140728931744408}}}}} p = 0x7ffe01fc6b70 ret = 9616872 sfbk = 0 #20 0x00000000005ab16e in receive_msg ( buf=0x9f47e0 <buf> "BYE sip:gw+internal_sip_gw03@172.16.172.242:65000;transport=udp;gw=internal_sip_gw03 SIP/2.0\r\nVia: SIP/2.0/UDP 172.16.172.230:5080;TH=dcv;rport;branch=z9hG4bKX9Zm25Xe6316g\r\nMax-Forwards: 69\r\nFrom: <si"..., len=821, rcv_info=0x7ffe01fc7200) at core/receive.c:518 msg = 0x7f0f40eda090 ctx = {rec_lev = 0, run_flags = 2, last_retcode = 1, jmp_env = {{__jmpbuf = {4294967296, 7972416042383599675, 140728931744408, 4394786, 9616872, 139703624372224, 7972416042299713595, -7971453441872074693}, __mask_was_saved = 0, __saved_mask = { __val = {0, 0, 0, 1880844493789993498, 1880844493789993498, 1880844493789993498, 1880844493789993498, 0, 0, 0, 0, 2314885530818453536, 2314885530818453536, 2314885530818453536, 2314885530818453536, 0}}}}} bctx = 0x0 ret = 0 tvb = {tv_sec = 0, tv_usec = 0} tve = {tv_sec = 0, tv_usec = 0} diff = 0 inb = { s = 0x9f47e0 <buf> "BYE sip:gw+internal_sip_gw03@172.16.172.242:65000;transport=udp;gw=internal_sip_gw03 SIP/2.0\r\nVia: SIP/2.0/UDP 172.16.172.230:5080;TH=dcv;rport;branch=z9hG4bKX9Zm25Xe6316g\r\nMax-Forwards: 69\r\nFrom: <si"..., len = 821} netinfo = {data = {s = 0x0, len = 0}, bufsize = 0, rcv = 0x0, dst = 0x0} keng = 0x0 evp = {data = 0x7ffe01fc6d60, obuf = {s = 0x0, len = 0}, rcv = 0x7ffe01fc7200, dst = 0x0, req = 0x0, rpl = 0x0, rplcode = 0, mode = 0} cidlockidx = 0 cidlockset = 0 errsipmsg = 0 exectime = 0 __func__ = "receive_msg" #21 0x00000000006f9272 in udp_rcv_loop () at core/udp_server.c:751 len = 598 buf = "BYE sip:gw+internal_sip_gw03@172.16.172.242:65000;transport=udp;gw=internal_sip_gw03 SIP/2.0\r\nVia: SIP/2.0/UDP 172.16.172.230:5080;TH=dcv;rport;branch=z9hG4bKX9Zm25Xe6316g\r\nMax-Forwards: 69\r\nFrom: <si"... tmp = 0x1201ae640 <error: Cannot access memory at address 0x1201ae640> fromaddr = 0x7f0f40e99c00 fromaddrlen = 16 rcvi = {src_ip = {af = 2, len = 4, u = {addrl = {3870036140, 0}, addr32 = {3870036140, 0, 0, 0}, addr16 = {4268, 59052, 0, 0, 0, 0, 0, 0}, addr = "\254\020\254\346", '\000' <repeats 11 times>}}, dst_ip = {af = 2, len = 4, u = {addrl = {3719041196, 0}, addr32 = {3719041196, 0, 0, 0}, addr16 = {4268, 56748, 0, 0, 0, 0, 0, 0}, addr = "\254\020\254\335", '\000' <repeats 11 times>}}, src_port = 5080, dst_port = 65000, proto_reserved1 = 0, proto_reserved2 = 0, src_su = {s = {sa_family = 2, sa_data = "\023ج\020\254\346\000\000\000\000\000\000\000"}, sin = { sin_family = 2, sin_port = 55315, sin_addr = {s_addr = 3870036140}, sin_zero = "\000\000\000\000\000\000\000"}, sin6 = { sin6_family = 2, sin6_port = 55315, sin6_flowinfo = 3870036140, sin6_addr = {__in6_u = { __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}, sas = {ss_family = 2, __ss_padding = "\023ج\020\254\346", '\000' <repeats 111 times>, __ss_align = 0}}, bind_address = 0x7f0f40b88fa0, rflags = 0, proto = 1 '\001', proto_pad0 = 0 '\000', proto_pad1 = 0} evp = {data = 0x0, obuf = {s = 0x0, len = 0}, rcv = 0x0, dst = 0x0, req = 0x0, rpl = 0x0, rplcode = 0, mode = 0} printbuf = "\340o\374\001\376\177\000\000f*\260\037\017\177\000\000)\262\272\037\017\177\000\000\340b5\037\017\177\000\000\020p\374\001\376\177\000\000\322\v\272\037\017\177\000\000\000\000\000\000\000\000\000\000\340b5\037\017\177\000\000\000\000\000\000\000\000\000\000p\233\351@\017\177\000\000@p\374\001\376\177\000\000 e\032 \017\177\000\000\230z\374\001\376\177\000\000\"\017C\000\000\000\000\000轒\000\000\000\000\000\000\220\347H\017\177\000\000`p\374\001\376\177\000\000ǥ\272\037\017\177\000\000\360b5\037\017\177\000\000p\233\351@\017\177\000\000\000q\374\001\376\177\000\000\257:3\037\017\177\000\000\000\000\000\000\260\000\000\000p/\306@\260", '\000' <repeats 91 times>... i = -1 j = 506880 l = 176 __func__ = "udp_rcv_loop" #22 0x000000000042dcb6 in main_loop () at main.c:1815 i = 47 pid = 0 si = 0x7f0f40b88fa0 si_desc = "udp receiver child=47 sock=172.16.172.221:65000\0000\000\000\000\000\000\000\000\000\345\032 \017\177\000\000@t\374\001\001\000\000\000\200\211\341\037\017\177\000\000\310/\272@\017\177\000\000\037%r\000\000\000\000\000\230z\374\001\376\177\000\000\200\211\341\037\017\177\000\000轒\000\000\000\000\000\000\220\347H\001\000\000" nrprocs = 128 woneinit = 1 __func__ = "main_loop" #23 0x0000000000439e7d in main (argc=10, argv=0x7ffe01fc7a98) at main.c:3256 cfg_stream = 0xfa5380 c = -1 r = 0 tmp = 0x7ffe01fc7ea8 "" tmp_len = 0 port = 5060 proto = 0 aproto = 0 ahost = 0x0 aport = 0 options = 0x8433f8 ":f:cm:M:dVIhEeb:B:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 1463919274 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x7ffe01fc7980 p = 0x1800000 <error: Cannot access memory at address 0x1800000> st = {st_dev = 24, st_ino = 1005, st_nlink = 2, st_mode = 16832, st_uid = 991, st_gid = 988, __pad0 = 0, st_rdev = 0, st_size = 40, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1730298568, tv_nsec = 63999933}, st_mtim = {tv_sec = 1730298573, tv_nsec = 240999872}, st_ctim = {tv_sec = 1730298573, tv_nsec = 240999872}, __glibc_reserved = {0, 0, 0}} l1 = 512 tbuf = "B\215\347H\017\177\000\000\210J\344H\017\177\000\000\020w\374\001\376\177\000\000\006\000\000\000\000\000\000\000\b7\344H\017\177\000\000\006\000\000\000\020\000\000\0000\232\347H\017\177\000\000\325\031\345H\017\177\000\000\000\000\000\000\000\000\000\000\240,\345H\017\177\000\000\370\377\240H\017\177\000\000\020\033\344H\017\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\340v\374\001\376\177\000\000\240J\344H\017\177\000\000\240J\344H\017\177\000\000\000\000\000\000\000\000\000\000p)\344H\017\177\000\000\340v\374\001\376\177\000\000\200\245\347H\017\177\000\000\0000\344H\017\177\000\000\342;\344H\017\177\000\000v\344\344H\017\177\000\000\334#\240H\017\177\000\000"... option_index = 0 long_options = {{name = 0x845b26 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x84054c "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x845b2b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x845b31 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x845b37 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x845b40 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, {name = 0x845b4a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x845b54 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x845b5f "modparam", has_arg = 1, flag = 0x0, val = 1030}, { name = 0x845b68 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x845b73 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x845b79 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, {name = 0x845b83 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x845b8a "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" (gdb) ) ``` #### Log Messages Oct 30 21:32:19 KAM-V2-02 kamailio[2711]: 188(2711) ERROR: {1 90509167 INVITE 3b4b542a-0fdc-123e-aebc-00505697ee23} <script>: cut prefix : 172.16.172.230:5080 Oct 30 21:32:23 KAM-V2-02 kamailio[2687]: 176(2687) BUG: {1 90509168 BYE 3506e2a7-0fdc-123e-aebc-00505697ee23} cnxcc [cnxcc_mod.c:869]: __delete_call(): number of concurrent calls dropped to negative value: -1 Oct 30 21:32:23 KAM-V2-02 kamailio[2687]: 176(2687) BUG: {1 90509168 BYE 3506e2a7-0fdc-123e-aebc-00505697ee23} cnxcc [cnxcc_mod.c:874]: __delete_call(): number of calls dropped to negative value: -1 Oct 30 21:32:23 KAM-V2-02 kernel: kamailio[2687]: segfault at 8 ip 00007f0f1f38902c sp 00007ffe01fc4470 error 6 in cnxcc.so[7f0f1f377000+3c000] likely on CPU 10 (core 0, socket 5) Oct 30 21:32:23 KAM-V2-02 kernel: Code: 48 8b 05 c7 5f 03 00 8b 00 8d 50 ff 48 8b 05 bb 5f 03 00 89 10 48 8b 85 78 ff ff ff 48 8b 00 48 8b 95 78 ff ff ff 48 8b 52 08 <48> 89 50 08 48 8b 85 78 ff ff ff 48 8b 40 08 48 8b 95 78 ff ff ff Oct 30 21:32:23 KAM-V2-02 mariadbd[1313]: 2024-10-30 21:32:23 189 [Warning] Aborted connection 189 to db: 'kamailio' user: 'kamailio' host: 'localhost' (Got an error reading communication packets) Oct 30 21:32:23 KAM-V2-02 kamailio[3130]: 395(3130) CRITICAL: <core> [core/pass_fd.c:281]: receive_fd(): EOF on 186 Oct 30 21:32:23 KAM-V2-02 kamailio[2331]: 0(2331) ALERT: <core> [main.c:805]: handle_sigs(): child process 2687 exited by a signal 11 Oct 30 21:32:23 KAM-V2-02 kamailio[2331]: 0(2331) ALERT: <core> [main.c:809]: handle_sigs(): core was generated #### SIP Traffic  ``` (paste your sip traffic here) ``` ### Possible Solutions  ### Additional Information * **Kamailio Version** - output of `kamailio -v` version: kamailio 5.8.2 (x86_64/linux) 3fa5f4 flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, MEM_JOIN_FREE, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_SEND_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: 3fa5f4 compiled on 22:03:02 Oct 28 2024 with gcc 11.5.0 * **Operating System**: CentOS Stream release 9 NAME="CentOS Stream" VERSION="9" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="9" PLATFORM_ID="platform:el9" PRETTY_NAME="CentOS Stream 9" ANSI_COLOR="0;31" LOGO="fedora-logo-icon" CPE_NAME="cpe:/o:centos:centos:9" HOME_URL="https://centos.org/" BUG_REPORT_URL="https://issues.redhat.com/" REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux 9" REDHAT_SUPPORT_PRODUCT_VERSION="CentOS Stream" CentOS Stream release 9 CentOS Stream release 9 -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/4009 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/4009(a)github.com>

3 12

[kamailio/kamailio] Advertise in listen directive still gives port in headers even though it's not set or set to 0 (Issue #3933)
by Evgenii Buchnev 16 Dec '24

16 Dec '24

Reopening. (https://github.com/kamailio/kamailio/issues/3932#issuecomment-2252138364) It's bug. Please see highlighted on screenshot. ![image](https://github.com/user-attachments/assets/88b9671d-d2be-4d49-8596-3e6ab3a2d294) Hey Team, Thank you for the awesome software ### Description Neither option work: `listen=... advertise some.custom.hostname.io` `listen=... advertise some.custom.hostname.io:0` to make Kamailio present only hostname(without port) in Record-Route headers, affects NAPTR/SRV. ### Troubleshooting ============ _Hostname without port - still gives port 5081 in Record-Route_ **kamailio.cfg** ... `listen=tls:KAM_LOC_IP:5081 advertise some.custom.io name "provider_socket_tls"` ... **sngrep, 200 OK for INVITE** ... `Record-Route: <sip:some.custom.io:5081;transport=tls;r2=on;lr;did=494.6e51>` ... **kamcmd corex.list_sockets** ... ``` { af: IPv4 proto: tls name: 172.17.57.164 addrlist: { addr: 172.17.57.164 } port: 5081 sockstr: tls:172.17.57.164:5081 mcast: no mhomed: no virtual: no sockname: provider_socket_tls advertise: tls:some.custom.io:0 } ``` ... ======== _Hostname with port 0 - still gives port 5081 in Record-Route_ kamailio.cfg ... `listen=tls:KAM_LOC_IP:5081 advertise some.custom.io:0 name "provider_socket_tls"` ... sngrep, 200 OK for INVITE ... `Record-Route: <sip:some.custom.io:5081;transport=tls;r2=on;lr;did=042.7721>` ... kamcmd corex.list_sockets ... ``` { af: IPv4 proto: tls name: 172.17.57.164 addrlist: { addr: 172.17.57.164 } port: 5081 sockstr: tls:172.17.57.164:5081 mcast: no mhomed: no virtual: no sockname: provider_socket_tls advertise: tls:some.custom.io:0 } ``` ... ============ _Hostname with explicit different port 8888 - gives that port 8888 in Record-Route (to confirm config works)_ kamailio.cfg ... `listen=tls:KAM_LOC_IP:5081 advertise some.custom.io:8888 name "provider_socket_tls"` ... sngrep, 200 OK for INVITE ... `Record-Route: <sip:some.custom.io:8888;transport=tls;r2=on;lr;did=dae.ac31>` ... kamcmd corex.list_sockets ... ``` { af: IPv4 proto: tls name: 172.17.57.164 addrlist: { addr: 172.17.57.164 } port: 5081 sockstr: tls:172.17.57.164:5081 mcast: no mhomed: no virtual: no sockname: provider_socket_tls advertise: tls:some.custom.io:8888 } ``` ... #### Reproduction Please see Troubleshooting section #### Debugging Data Please see Troubleshooting section #### Log Messages N/A #### SIP Traffic Please see Troubleshooting section ### Possible Solutions N/A ### Additional Information * **Kamailio Version** - output of `kamailio -v` ``` version: kamailio 5.8.2 (x86_64/linux) dbe51d flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, MEM_JOIN_FREE, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_SEND_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: dbe51d compiled on 07:13:22 Jul 17 2024 with gcc 12.2.0) ``` * **Operating System**: ``` [dev]root@[voiceproxy]:~# lsb_release -a No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 12 (bookworm) Release: 12 Codename: bookworm [dev]root@[voiceproxy]:~# uname -a Linux i-0875d7720d6152612 6.1.0-23-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.99-1 (2024-07-15) x86_64 GNU/Linux [dev]root@[voiceproxy]:~# cat /etc/*relea* ID=ec2 VERSION="20240702-1796" PRETTY_NAME="Debian GNU/Linux 12 (bookworm)" NAME="Debian GNU/Linux" VERSION_ID="12" VERSION="12 (bookworm)" VERSION_CODENAME=bookworm ID=debian HOME_URL="https://www.debian.org/" SUPPORT_URL="https://www.debian.org/support" BUG_REPORT_URL="https://bugs.debian.org/" ``` * **Might be related** : https://github.com/kamailio/kamailio/issues/1884 -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3933 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3933(a)github.com>

3 11

[kamailio/kamailio] htable: export table create api functions (PR #4010)
by Stefan Mititelu 14 Dec '24

14 Dec '24

#### Pre-Submission Checklist    - [X] Commit message has the format required by CONTRIBUTING guide - [X] Commits are split per component (core, individual modules, libs, utils, ...) - [X] Each component has a single commit (if not, squash them into one commit) - [X] No commits to README files for modules (changes must be done to docbook files in `doc/` subfolder, the README file is autogenerated) #### Type Of Change - [ ] Small bug fix (non-breaking change which fixes an issue) - [X] New feature (non-breaking change which adds new functionality) - [ ] Breaking change (fix or feature that would change existing functionality) #### Checklist:  - [ ] PR should be backported to stable branches - [X] Tested changes locally - [ ] Related to issue #XXXX (replace XXXX with an open issue number) #### Description  Looks like htable module already exports API functions, but currently no other module uses them. Added 2 more API functions for table creation (so other modules can be able to create their own hash tables if they want to) You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/4010 -- Commit Summary -- * htable: export table create api functions -- File Changes -- M src/modules/htable/api.c (10) M src/modules/htable/api.h (4) M src/modules/htable/ht_api.c (4) -- Patch Links -- https://github.com/kamailio/kamailio/pull/4010.patch https://github.com/kamailio/kamailio/pull/4010.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/4010 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/4010(a)github.com>

2 19

[kamailio/kamailio] cdp: disconnect_serviced_peer Causing the service process to crash (Issue #3999)
by liangbaolin 11 Dec '24

11 Dec '24

### Description hi, I encountered a problem where the CDP module is extremely prone to process crashes. The following are screenshots of the logs and core files. I couldn't find the exception code that caused the problem, but I suspect that the TCP link was properly established, but the peer did not initialize or handle the exception properly, resulting in an exception when the packet was parsed incorrectly and disconnected later. In addition, since the socket is not a normal peer, it will constantly rebuild the chain, but the CDP does not recognize and process it properly. The socket will continue to grow, but the number of peers will not increase. <img width="1508" alt="微信图片_20241011175120" src="https://github.com/user-attachments/assets/88a0fc31-9ff6-4f46-9394-f49c7878…"> ### Troubleshooting #### Reproduction  #### Debugging Data ``` Core was generated by `/usr/sbin/kamailio -f /etc/kamailio_dra/kamailio_dra.cfg -P /var/run/kamailio_d'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f9860fae336 in cc_acc_client_stateful_sm_process (s=0x7f9861bd8980, event=21874, msg=0x55720d57c702 <qm_free+8029>) at acctstatemachine.c:304 304 } (gdb) bt #0 0x00007f9860fae336 in cc_acc_client_stateful_sm_process (s=0x7f9861bd8980, event=21874, msg=0x55720d57c702 <qm_free+8029>) at acctstatemachine.c:304 #1 0x00007f9860fae391 in atomic_get_and_set_int (var=0x776f6e6b6e752072, v=32766) at ../../core/mem/../atomic/atomic_x86.h:242 #2 0x00007f9860fb16eb in disconnect_serviced_peer (sp=0x7f98e28287d0, locked=0) at receiver.c:232 #3 0x00007f9860fbd56b in receive_loop (original_peer=0x0) at receiver.c:942 #4 0x00007f9860fb4c02 in receiver_process (p=0x0) at receiver.c:488 #5 0x00007f9860f50c80 in diameter_peer_start (blocking=0) at diameter_peer.c:278 #6 0x00007f9860f413df in cdp_child_init (rank=0) at cdp_mod.c:274 #7 0x000055720d3df6c2 in init_mod_child (m=0x7f98e279b180, rank=0) at core/sr_module.c:920 #8 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279be50, rank=0) at core/sr_module.c:912 #9 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279c2c0, rank=0) at core/sr_module.c:912 #10 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279cc40, rank=0) at core/sr_module.c:912 #11 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279d130, rank=0) at core/sr_module.c:912 #12 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279d6c0, rank=0) at core/sr_module.c:912 #13 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279db10, rank=0) at core/sr_module.c:912 #14 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279dff0, rank=0) at core/sr_module.c:912 #15 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279fae0, rank=0) at core/sr_module.c:912 #16 0x000055720d3dfff0 in init_child (rank=0) at core/sr_module.c:999 #17 0x000055720d23d70a in main_loop () at main.c:1942 #18 0x000055720d2488f5 in main (argc=16, argv=0x7ffea4fde838) at main.c:3256 (gdb) bt full #0 0x00007f9860fae336 in cc_acc_client_stateful_sm_process (s=0x7f9861bd8980, event=21874, msg=0x55720d57c702 <qm_free+8029>) at acctstatemachine.c:304 x = 0x7f9861b97000 ret = 441 rc = 1627304660 record_type = 32664 __func__ = "cc_acc_client_stateful_sm_process" #1 0x00007f9860fae391 in atomic_get_and_set_int (var=0x776f6e6b6e752072, v=32766) at ../../core/mem/../atomic/atomic_x86.h:242 No locals. #2 0x00007f9860fb16eb in disconnect_serviced_peer (sp=0x7f98e28287d0, locked=0) at receiver.c:232 __llevel = 0 __func__ = "disconnect_serviced_peer" #3 0x00007f9860fbd56b in receive_loop (original_peer=0x0) at receiver.c:942 __llevel = -1526863824 rfds = {__fds_bits = {0, 0, 0, 0, 1024, 0 <repeats 11 times>}} efds = {__fds_bits = {0 <repeats 16 times>}} tv = {tv_sec = 0, tv_usec = 883496} n = 1 max = 298 cnt = 0 msg = 0x0 sp = 0x7f98e28287d0 sp2 = 0x7f98e2827e30 p = 0x0 fd = 295 fd_exchange_pipe_local = 28 __func__ = "receive_loop" #4 0x00007f9860fb4c02 in receiver_process (p=0x0) at receiver.c:488 __llevel = -990730168 __func__ = "receiver_process" #5 0x00007f9860f50c80 in diameter_peer_start (blocking=0) at diameter_peer.c:278 pid = 0 k = 1 seed = 1112701621 p = 0x0 __func__ = "diameter_peer_start" #6 0x00007f9860f413df in cdp_child_init (rank=0) at cdp_mod.c:274 __llevel = 0 __func__ = "cdp_child_init" #7 0x000055720d3df6c2 in init_mod_child (m=0x7f98e279b180, rank=0) at core/sr_module.c:920 ret = 0 __func__ = "init_mod_child" #8 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279be50, rank=0) at core/sr_module.c:912 ret = 1 __func__ = "init_mod_child" #9 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279c2c0, rank=0) at core/sr_module.c:912 ret = 0 __func__ = "init_mod_child" #10 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279cc40, rank=0) at core/sr_module.c:912 ret = 0 __func__ = "init_mod_child" ---Type <return> to continue, or q <return> to quit--- #11 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279d130, rank=0) at core/sr_module.c:912 ret = 0 __func__ = "init_mod_child" #12 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279d6c0, rank=0) at core/sr_module.c:912 ret = 0 __func__ = "init_mod_child" #13 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279db10, rank=0) at core/sr_module.c:912 ret = 32766 __func__ = "init_mod_child" #14 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279dff0, rank=0) at core/sr_module.c:912 ret = 21874 __func__ = "init_mod_child" #15 0x000055720d3df2b5 in init_mod_child (m=0x7f98e279fae0, rank=0) at core/sr_module.c:912 ret = 12 __func__ = "init_mod_child" #16 0x000055720d3dfff0 in init_child (rank=0) at core/sr_module.c:999 ret = 0 type = 0x55720d6ece7b "PROC_MAIN" __func__ = "init_child" #17 0x000055720d23d70a in main_loop () at main.c:1942 i = 1639542784 pid = 50 si = 0x0 si_desc = "\240\233\"\rrU\000\000@\361\367a\230\177\000\000\000\343\375\244\376\177\000\000\327~2\rrU\000\000\000\343\375\244\376\177\000\000\025\t>\r\005\000\000\000\000\000\000\000\037\000\000\000\000;\213\222\213\017\r\202h\r\000\000\000\000\000\000\060\000\000\000\000\000\000\000\240\233\"\rrU\000\000\060\350\375\244\376\177", '\000' <repeats 18 times>, "\340\342\375\244\376\177\000\000 \351O\rrU\000" nrprocs = 21874 woneinit = 0 __func__ = "main_loop" #18 0x000055720d2488f5 in main (argc=16, argv=0x7ffea4fde838) at main.c:3256 cfg_stream = 0x55720ef75260 c = -1 r = 0 tmp = 0x7ffea4fdfee3 "" tmp_len = 32766 port = 5060 proto = 0 aproto = 0 ahost = 0x0 aport = 0 options = 0x55720d6b3698 ":f:cm:M:dVIhEeb:B:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 2959679812 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x0 p = 0x7f996220a3d0 "" st = {st_dev = 50, st_ino = 2995745, st_nlink = 1, st_mode = 16877, st_uid = 103, st_gid = 105, __pad0 = 0, st_rdev = 0, st_size = 4096, st_blksize = 4096, st_blocks = 8, st_atim = {tv_sec = 1726638407, tv_nsec = 558385502}, st_mtim = {tv_sec = 1727831142, tv_nsec = 822744119}, st_ctim = {tv_sec = 1727831142, tv_nsec = 822744119}, __glibc_reserved = {0, 0, 0}} ---Type <return> to continue, or q <return> to quit--- l1 = 2048 tbuf = "pQ!b\231\177\000\000\070-\000b\231\177\000\000\020\347\375\244\376\177\000\000\367\344\376a\231\177", '\000' <repeats 18 times>, "\001\000\000\000\000\000\000\000(W!b\231\177\000\000\000Q!b\231\177\000\000\001\000\000\000\000\000\000\000\300\200 b\231\177\000\000\017Q\377a\231\177\000\000\020W!b\231\177", '\000' <repeats 19 times>, "S\376\244\376\177\000\000\300\212\225\001\000\000\000\000\207\026=a\231\177\000\000`\347\375\244\376\177\000\000\220Q\376\244\376\177\000\000\002\000\000\000\231\177\000\000\000\000\000\000\000\000\000\000\300\346\375\244\376\177\000\000\003\000\000\000\000\000\000\000\260\346\375\244\376\177\000\000\000\000\000\000\000\000\000\000"... option_index = 0 long_options = {{name = 0x55720d6b59f6 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x55720d6b087c "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x55720d6b59fb "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x55720d6b5a01 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x55720d6b5a07 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x55720d6b5a10 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, {name = 0x55720d6b5a1a "server-id", has_arg = 1, flag = 0x0, val = 1028}, { name = 0x55720d6b5a24 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x55720d6b5a2f "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x55720d6b5a38 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x55720d6b5a43 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x55720d6b5a49 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, {name = 0x55720d6b5a53 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x55720d6b5a5a "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" (gdb) (gdb) info locals cfg_stream = 0x55720ef75260 c = -1 r = 0 tmp = 0x7ffea4fdfee3 "" tmp_len = 32766 port = 5060 proto = 0 aproto = 0 ahost = 0x0 aport = 0 options = 0x55720d6b3698 ":f:cm:M:dVIhEeb:B:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 2959679812 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x0 p = 0x7f996220a3d0 "" st = {st_dev = 50, st_ino = 2995745, st_nlink = 1, st_mode = 16877, st_uid = 103, st_gid = 105, __pad0 = 0, st_rdev = 0, st_size = 4096, st_blksize = 4096, st_blocks = 8, st_atim = {tv_sec = 1726638407, tv_nsec = 558385502}, st_mtim = {tv_sec = 1727831142, tv_nsec = 822744119}, st_ctim = {tv_sec = 1727831142, tv_nsec = 822744119}, __glibc_reserved = {0, 0, 0}} l1 = 2048 tbuf = "pQ!b\231\177\000\000\070-\000b\231\177\000\000\020\347\375\244\376\177\000\000\367\344\376a\231\177", '\000' <repeats 18 times>, "\001\000\000\000\000\000\000\000(W!b\231\177\000\000\000Q!b\231\177\000\000\001\000\000\000\000\000\000\000\300\200 b\231\177\000\000\017Q\377a\231\177\000\000\020W!b\231\177", '\000' <repeats 19 times>, "S\376\244\376\177\000\000\300\212\225\001\000\000\000\000\207\026=a\231\177\000\000`\347\375\244\376\177\000\000\220Q\376\244\376\177\000\000\002\000\000\000\231\177\000\000\000\000\000\000\000\000\000\000\300\346\375\244\376\177\000\000\003\000\000\000\000\000\000\000\260\346\375\244\376\177\000\000\000\000\000\000\000\000\000\000"... option_index = 0 long_options = {{name = 0x55720d6b59f6 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x55720d6b087c "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x55720d6b59fb "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x55720d6b5a01 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x55720d6b5a07 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x55720d6b5a10 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, {name = 0x55720d6b5a1a "server-id", has_arg = 1, flag = 0x0, val = 1028}, { name = 0x55720d6b5a24 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x55720d6b5a2f "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x55720d6b5a38 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x55720d6b5a43 "debug", has_arg = 1, flag = 0x0, val = 1032}, {name = 0x55720d6b5a49 "cfg-print", has_arg = 0, flag = 0x0, val = 1033}, {name = 0x55720d6b5a53 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x55720d6b5a5a "all-errors", has_arg = 0, flag = 0x0, val = 1035}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" (gdb) list 299 if(s) { 300 AAASessionsUnlock(s->hash); 301 } 302 303 return ret; 304 } ``` #### Log Messages  ``` 2024-10-11T08:23:20.234947572Z 21(60) ERROR: cdp [receiver.c:783]: receive_loop(): select_recv(): Bad file descriptor 2024-10-11T08:23:24.906121404Z 21(60) ERROR: cdp [receiver.c:783]: receive_loop(): select_recv(): Bad file descriptor 2024-10-11T08:23:41.857946233Z 21(60) ERROR: cdp [receiver.c:783]: receive_loop(): select_recv(): Bad file descriptor 2024-10-11T08:25:18.095639136Z 25(64) WARNING: cdp [peermanager.c:337]: peer_timer(): Inactivity on peer [scscf32.ims.mnc011.mcc460.3gppnetwork.org] and no DWA, Closing peer... 2024-10-11T08:43:38.138243609Z 31(70) CRITICAL: <core> [core/pass_fd.c:281]: receive_fd(): EOF on 34 2024-10-11T08:43:47.476315811Z 0(39) ALERT: <core> [main.c:805]: handle_sigs(): child process 60 exited by a signal 11 2024-10-11T08:43:47.476380054Z 0(39) ALERT: <core> [main.c:809]: handle_sigs(): core was generated 2024-10-11T08:43:47.503780368Z 0(39) CRITICAL: cdp [diameter_peer.c:447]: diameter_peer_destroy(): destroy_diameter_peer(): Bye Bye from C Diameter Peer test ``` * **Operating System**: version: kamailio 5.8.1 (x86_64/linux) 07b761 flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, MEM_JOIN_FREE, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_SEND_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: 07b761 compiled on 10:00:57 Oct 9 2024 with gcc 7.5.0 -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3999 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3999(a)github.com>

3 4

[kamailio/kamailio] free_fixup functions in cmd_export_t are not called (Issue #3814)
by Xenofon Karamanos 06 Dec '24

06 Dec '24

### Description It seems that the fixup_free_* functions are not getting called when used with: ``` static cmd_export_t cmds[] = { {"acc_log_request", (cmd_function)w_acc_log_request, 1, acc_fixup, free_acc_fixup, ANY_ROUTE}, // ... {0, 0, 0, 0, 0, 0} }; static int free_acc_fixup(void **param, int param_no) { LM_CRIT("acc free fixup = %d\n", param_no); if(*param) { pkg_free(*param); *param = 0; } return 0; } ``` Nothing is getting logged from the function. Is this expected not to print in free_fixup due to the destruction of kamailio and the logging is not reliable? I also used gdb and added some breakpoints in `fixup` and `free_fixup` functions in some other modules (file_out) and the breakpoint was only found in `fixup` but not in `free_fixup`. When is the `free_fixup` supposed to be called, at kamailio destruction or after fixing it and before the main loop starts?  ### Troubleshooting #### Reproduction  Use any module that has a custom (maybe also provided from core) `free_fixup` function, and monitor if `free_fixup` is called using debug mode. #### Log Messages  ``` Apr 15 15:52:03 app01 kamailio[812169]: INFO: <core> [core/mem/q_malloc.c:402]: qm_malloc(): qm_malloc(0x7fcdcab18010, 56) called from file_out: file_out.c: fo_fixup_str_index(287) Apr 15 15:52:03 app01 kamailio[812169]: INFO: <core> [core/mem/q_malloc.c:449]: qm_malloc(): qm_malloc(0x7fcdcab18010, 64) returns address 0x7fcdcacc4280 frag. 0x7fcdcacc4240 (size=64) on 1 -th hit``` `0x7fcdcacc4240` fragment is not found anywhere in the logs reported that it was freed unlike other malloced resources. ``` ### Additional Information * **Kamailio Version** - output of `kamailio -v` ``` version: kamailio 5.9.0-dev0 (x86_64/linux) 8bc64a flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, MEM_JOIN_FREE, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_SEND_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: 8bc64a compiled on 15:32:09 Apr 15 2024 with gcc 10.5.0 ``` * **Operating System**:  ``` No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 20.04.6 LTS Release: 20.04 Codename: focal 5.4.0-176-generic #196-Ubuntu SMP Fri Mar 22 16:46:39 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux ``` -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3814 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3814(a)github.com>

3 9

[kamailio/kamailio] Issue when disconnect ethernet and connect again (Issue #3983)
by LuyenPQ 22 Nov '24

22 Nov '24

Hi team, i got this issue when i change network connection connect and disconnect wifi or lan this is log 09-25 11:31:17.826 4510 4510 E kamailio: ERROR: <core> [core/tcp_main.c:3955]: handle_new_connect(): error while accepting connection(22): Invalid argument 09-25 11:31:22.019 4510 4510 I chatty : uid=0(root) kamailio identical 45884 lines 09-25 11:31:22.022 4510 4510 E kamailio: ERROR: <core> [core/tcp_main.c:3955]: handle_new_connect(): error while accepting connection(22): Invalid argument -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3983 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3983(a)github.com>

2 2

[kamailio/kamailio] pv: Ensure URI enclosed in <> when changing Display Name (PR #3935)
by Xenofon Karamanos 19 Nov '24

19 Nov '24

#### Pre-Submission Checklist    - [x] Commit message has the format required by CONTRIBUTING guide - [x] Commits are split per component (core, individual modules, libs, utils, ...) - [x] Each component has a single commit (if not, squash them into one commit) - [x] No commits to README files for modules (changes must be done to docbook files in `doc/` subfolder, the README file is autogenerated) #### Type Of Change - [x] Small bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds new functionality) - [ ] Breaking change (fix or feature that would change existing functionality) #### Checklist:  - [x] PR should be backported to stable branches - [x] Tested changes locally - [ ] Related to issue #XXXX (replace XXXX with an open issue number) #### Description  This PR fixes a bug in pseudo-variables related to "From" and "To" headers and changing the `Display Name` through `$tu/$fu/$fn/$tn`. According to standard the URI must be enclosed in <> if a `Display Name` is given, but it may or may NOT if no display name is present. So, if one tries to modify the `from`/`to` header with an initial empty display name and URI that is NOT enclosed in <>, it yields an invalid message. This PR makes sure that if URI was not enclosed in <> and display name is modified, that will wrap URI in <>. You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/3935 -- Commit Summary -- * pv: Ensure URI enclosed in <> when changing Display Name -- File Changes -- M src/modules/pv/pv_core.c (62) -- Patch Links -- https://github.com/kamailio/kamailio/pull/3935.patch https://github.com/kamailio/kamailio/pull/3935.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/3935 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/3935(a)github.com>

4 17

[kamailio/kamailio] Fixed segfault when using kazoo_query in kazoo mod (PR #4002)
by Remco van Vugt 19 Nov '24

19 Nov '24

A response to the amqp query caused a segfault in libc - Refactored parts of the code to be more readable and DRY - Split up functions for 3/4/5 arguments passed - Tested in 8.5.2 #### Pre-Submission Checklist - [x] Commit message has the format required by CONTRIBUTING guide - [x] Commits are split per component (core, individual modules, libs, utils, ...) - [x] Each component has a single commit (if not, squash them into one commit) - [x] No commits to README files for modules (changes must be done to docbook files in `doc/` subfolder, the README file is autogenerated) #### Type Of Change - [x] Small bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds new functionality) - [ ] Breaking change (fix or feature that would change existing functionality) #### Checklist:  - [x] PR should be backported to stable branches - [x] Tested changes locally - [ ] Related to issue #XXXX (replace XXXX with an open issue number) #### Description The current state of the module was not usable anymore as everything up from 5.5.x caused a segfault when the kazoo_query method was executed. Refactored the module a bit to make sure it is works again 5.8.x You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/4002 -- Commit Summary -- * Fixed segfault when using kazoo_query in kazoo mod -- File Changes -- M src/modules/kazoo/kazoo.c (10) M src/modules/kazoo/kz_amqp.c (67) M src/modules/kazoo/kz_amqp.h (9) -- Patch Links -- https://github.com/kamailio/kamailio/pull/4002.patch https://github.com/kamailio/kamailio/pull/4002.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/4002 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/4002(a)github.com>

3 16

[kamailio/kamailio] modules/snmpstats: exit with `ksr_exit()` instead of standard `exit()` (PR #3993)
by Anton Yabchinskiy 19 Nov '24

19 Nov '24

The former respects the `--atexit=no` from Kamailio command line. See note on `atexit` in TLS module "Overview".   #### Pre-Submission Checklist    - [x] Commit message has the format required by CONTRIBUTING guide - [x] Commits are split per component (core, individual modules, libs, utils, ...) - [x] Each component has a single commit (if not, squash them into one commit) - [x] No commits to README files for modules (changes must be done to docbook files in `doc/` subfolder, the README file is autogenerated) #### Type Of Change - [x] Small bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds new functionality) - [ ] Breaking change (fix or feature that would change existing functionality) #### Checklist:  - [ ] PR should be backported to stable branches - [ ] Tested changes locally - [ ] Related to issue #XXXX (replace XXXX with an open issue number) #### Description  I'm using `tls` module along with some other modules. On Kamailio termination there are a lot of "freeing already freed pointer" messages from `qm_free()`. Also there may be a corrupted memory report (followed by `abort()`) from `qm_debug_check_frag()`. I'm aware of `--atexit=no` required for `tls`, and Kamailio is indeed started as `kamailio --atexit=no -m 16 -n 1 -w . -f some.cfg`. The `tls` module is loaded and configured something like this: ``` disable_core_dump=no debug=2 memdbg=2 # mem_safety=0 enable_tls=yes listen=tls:127.0.0.1:5060 mpath="lib64/kamailio/modules" loadmodule "tls.so" modparam("tls", "init_mode", 1) modparam("tls", "config", "tls.cfg"); loadmodule "snmpstats.so" modparam("snmpstats", "sipEntityType", "proxyServer") modparam("snmpstats", "snmpgetPath", "/usr/bin/") modparam("snmpstats", "snmpCommunity", "MySNMPComunity") modparam("snmpstats", "snmpVersion", "2c") loadmodule "xlog.so" route { xlog("L_NOTICE", "Hello\n"); } ``` Running Kamailio and then stopping it with `SIGTERM` yields the following. Some blocks of shared memory are allocated by the main process (PID 62575). E.g., one of the blocks: ``` 0(62575) INFO: <core> [core/mem/q_malloc.c:429]: qm_malloc(): qm_malloc(0x7facc5dc0000, 8) returns address 0x7facc5e55810 frag. 0x7facc5e557d8 (size=8) on 1 -th hit ``` On termination, this address is freed by another process (PID 62583). Somewhere after "sig_usr(): signal 15 received" message there's the following entry in the log: ``` 5(62583) INFO: <core> [core/mem/q_malloc.c:495]: qm_free(): qm_free(0x7facc5dc0000, 0x7facc5e55810), called from tls: tls_init.c: ser_free(400) ``` Then later the same address is freed again, by the main process (PID 62575). That's due to explicit call to `OPENSSL_cleanup()` from `tls_h_mod_destroy_f()` in `tls` module: ``` 0(62575) INFO: tls [tls_init.c:1063]: tls_h_mod_destroy_f(): executing openssl v1.1+ cleanup 0(62575) INFO: <core> [core/mem/q_malloc.c:495]: qm_free(): qm_free(0x7facc5dc0000, 0x7facc5e55810), called from tls: tls_init.c: ser_free(400) 0(62575) CRITICAL: <core> [core/mem/q_malloc.c:535]: qm_free(): BUG: freeing already freed pointer (0x7facc5e55810), called from tls: tls_init.c: ser_free(400), first free tls: tls_init.c: ser_free(400) - ignoring ``` It depends on initial conditions (which modules are loaded, what is the configuration, etc.), but sometimes `qm_debug_check_frag()` detects memory corruption and calls `abort()`: ``` 0(62575) CRITICAL: <core> [core/mem/q_malloc.c:126]: qm_debug_check_frag(): BUG: qm: fragm. 0x7facc5e891e0 (address 0x7facc5e89218) beginning overwritten (7facc5e85498)! Memory allocator was called from tls: tls_init.c:400. Fragment marked by :140376711102467. Exec from core/mem/q_malloc.c:526. ``` The output of `kamcmd core.ps` suggests that the offending process (PID 62583) is related to SNMP: ``` 62575 main process - attendant … 62583 SNMP AgentX ``` The "SNMP AgentX" process in `snmpstats` overrides some signal handlers (including the `SIGTERM` one) and calls `exit()`: ``` /*! Creates a child that will become the AgentX sub-agent. The child will * insulate itself from the rest of Kamailio by overriding most of signal * handlers. */ void agentx_child(int rank) { … /* Setup a SIGTERM handler */ sigfillset(&new_sigterm_handler.sa_mask); new_sigterm_handler.sa_flags = 0; new_sigterm_handler.sa_handler = sigterm_handler; sigaction(SIGTERM, &new_sigterm_handler, NULL); … } ``` ``` static void sigterm_handler(int signal) { /* Just exit. The master agent will clean everything up for us */ exit(0); } ``` Looks like this `exit()` triggers an extra call to `OPENSSL_cleanup`, implicitly armed by OpenSSL itself on startup. So, the OpenSSL cleanup gets called twice. As for now I've fixed the issue by replacing this `exit(0)` with `ksr_exit(0)` which respects the `--atexit=no` command line option. But I wonder is it a right way to do it. As far as I can see, code in `src/modules/` ignores `ksr_exit()` and uses plain `exit()`. Is it for a reason? Shouldn't modules also exit with `ksr_exit`? You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/3993 -- Commit Summary -- * modules/snmpstats: exit with ksr_exit() instead of standard exit() -- File Changes -- M src/modules/snmpstats/snmpstats.c (5) M src/modules/snmpstats/sub_agent.c (5) -- Patch Links -- https://github.com/kamailio/kamailio/pull/3993.patch https://github.com/kamailio/kamailio/pull/3993.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/3993 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/3993(a)github.com>

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

sr-dev October 2024