Re: [sr-dev] [kamailio] http_query causes memory corruption with AVPs (#212)

16 Jun 2015


      ```
#0  0x000000000061f192 in fm_extract_free (qm=0x7ff2937b5010, frag=0x7ff2938c0dd8) at mem/f_malloc.c:182
        pf = 0x0
        hash = 2
#1  0x0000000000620854 in fm_malloc (qm=0x7ff2937b5010, size=16, file=0x7ff28ed9b04d "rr: record.c", 
    func=0x7ff28ed9c6d0 <__FUNCTION__.8347> "insert_rr_param_lump", line=170) at mem/f_malloc.c:466
        f = 0x7ff2937b5178
        frag = 0x7ff2938c0dd8
        hash = 2
        __FUNCTION__ = "fm_malloc"
#2  0x00007ff28ed8c70e in insert_rr_param_lump (before=0x7ff2938c7fc8, s=0x7ff28eaddbc0 <buf.13034> ";did=7a.bb92", 
    l=12) at record.c:170
        rrp_l = 0x7ffff51d9958
        s1 = 0x7ff2938c7fc8 "\n"
        __FUNCTION__ = "insert_rr_param_lump"
#3  0x00007ff28ed95091 in add_rr_param (msg=0x7ff2938ee7f0, rr_param=0x7ffff51d99f0) at record.c:879
        last_param = 0x7ff2938c7fc8
        root = 0x0
        __FUNCTION__ = "add_rr_param"
#4  0x00007ff28e86fbef in add_dlg_rr_param (req=0x7ff2938ee7f0, entry=167, id=10683) at dlg_handlers.c:161
        buf = ";did=7a.bb92", '\000' <repeats 38 times>
        s = {s = 0x7ff28eaddbc0 <buf.13034> ";did=7a.bb92", len = 12}
        n = 39
        p = 0x7ff28eaddbcc <buf.13034+12> ""
        __FUNCTION__ = "add_dlg_rr_param"
#5  0x00007ff28e876f7c in dlg_new_dialog (req=0x7ff2938ee7f0, t=0x7ff269f1f3f0, run_initial_cbs=1)
    at dlg_handlers.c:869
        dlg = 0x7ff269f20ad0
        s = {s = 0x7ff28eade170 <_dlg_ctx+16> "", len = 0}
        callid = {
          s = 0x9d0b46 <buf.6614+326> "409717448-0-4200345674@64.136.173.225\r\nCSeq: 1 INVITE\r\nContact: sip:16143520694@64.136.173.31:5060\r\nSupported: timer\r\nSession-Expires: 1800;refresher=uac\r\nMin-SE: 90\r\nP-Asserted-Identity: <sip:+1614"..., len = 37}
        ftag = {
          s = 0x9d0b23 <buf.6614+291> "sansay1236078105rdb11134\r\nCall-ID: 409717448-0-4200345674@64.136.173.225\r\nCSeq: 1 INVITE\r\nContact: sip:16143520694@64.136.173.31:5060\r\nSupported: timer\r\nSession-Expires: 1800;refresher=uac\r\nMin-SE: "..., len = 24}
        ttag = {s = 0x0, len = 0}
        req_uri = {s = 0x7ff2937c6740 "sip:+16145152420@199.21.213.67:5060", len = 35}
        dir = 0
        mlock = 1
        __FUNCTION__ = "dlg_new_dialog"
#6  0x00007ff28e8759d1 in dlg_onreq (t=0x7ff269f1f3f0, type=1, param=0x7ff28f6feb20 <params.10155>)
    at dlg_handlers.c:717
        req = 0x7ff2938ee7f0
        dlg = 0x0
        __FUNCTION__ = "dlg_onreq"
#7  0x00007ff28f47f3e7 in run_reqin_callbacks_internal (hl=0x7ff269ef3de8, trans=0x7ff269f1f3f0, 
    params=0x7ff28f6feb20 <params.10155>) at t_hooks.c:360
        cbp = 0x7ff269ef3ef8
        backup_from = 0x7ff269f1f588
        backup_to = 0x7ff269f1f590
        backup_dom_from = 0xa35740 <def_list+32>
        backup_dom_to = 0xa35748 <def_list+40>
        backup_uri_from = 0x7ff269f1f578
        backup_uri_to = 0x7ff269f1f580
        backup_xavps = 0x7ff269f1f5a8
        __FUNCTION__ = "run_reqin_callbacks_internal"
#8  0x00007ff28f47f4ef in run_reqin_callbacks (trans=0x7ff269f1f3f0, req=0x7ff2938ee7f0, code=1) at t_hooks.c:385
        params = {req = 0x7ff2938ee7f0, rpl = 0x0, param = 0x7ff269ef3f08, code = 1, flags = 0, branch = 0, 
          t_rbuf = 0x0, dst = 0x0, send_buf = {s = 0x0, len = 0}}
#9  0x00007ff28f3f714f in build_cell (p_msg=0x7ff2938ee7f0) at h_table.c:356
        new_cell = 0x7ff269f1f3f0
        sip_msg_len = 32754
        old = 0xa35738 <def_list+24>
        cbs = 0x29d18c14
        cbs_tmp = 0x7ff28f4b6d2d <__FUNCTION__.11011>
        xold = 0x9cfa48 <_xavp_list_head>
        cell_size = 5704
        __FUNCTION__ = "build_cell"
#10 0x00007ff28f4049d1 in new_t (p_msg=0x7ff2938ee7f0) at t_lookup.c:1269
        new_cell = 0x0
        __FUNCTION__ = "new_t"
#11 0x00007ff28f405c12 in t_newtran (p_msg=0x7ff2938ee7f0) at t_lookup.c:1409
        lret = -1
        my_err = 0
        canceled = 0
        __FUNCTION__ = "t_newtran"
#12 0x00007ff28f47622e in t_relay_to (p_msg=0x7ff2938ee7f0, proxy=0x0, proto=0, replicate=0) at t_funcs.c:236
        ret = 0
        new_tran = 5687951
        t = 0x415d90 <_start>
        dst = {send_sock = 0x7ffff51da0f0, to = {s = {sa_family = 40640, 
              sa_data = "\035\365\377\177\000\000\340\342\066\224\362\177\000"}, sin = {sin_family = 40640, 
              sin_port = 62749, sin_addr = {s_addr = 32767}, sin_zero = "\340\342\066\224\362\177\000"}, sin6 = {
              sin6_family = 40640, sin6_port = 62749, sin6_flowinfo = 32767, sin6_addr = {__in6_u = {
                  __u6_addr8 = "\340\342\066\224\362\177\000\000p\240\035\365\377\177\000", __u6_addr16 = {58080, 
                    37942, 32754, 0, 41072, 62749, 32767, 0}, __u6_addr32 = {2486624992, 32754, 4112359536, 32767}}}, 
              sin6_scope_id = 31147296}}, id = 0, proto = 20 '\024', send_flags = {f = 140 '\214', 
            blst_imask = 209 '\321'}}
        port = 0
        host = {s = 0x6 <Address 0x6 out of bounds>, len = 8180}
        comp = 0
        __FUNCTION__ = "t_relay_to"
#13 0x00007ff28f49221f in _w_t_relay_to (p_msg=0x7ff2938ee7f0, proxy=0x0, force_proto=0) at tm.c:1474
        t = 0x7ffff51da060
        res = 0
        __FUNCTION__ = "_w_t_relay_to"
#14 0x00007ff28f4932e8 in w_t_relay (p_msg=0x7ff2938ee7f0, _foo=0x0, _bar=0x0) at tm.c:1675
No locals.
#15 0x00000000005609a1 in do_action (h=0x7ffff51da670, a=0x7ff293805c68, msg=0x7ff2938ee7f0) at action.c:1053
        ret = -5
        v = -182606288
        dst = {send_sock = 0x7ffff51da450, to = {s = {sa_family = 51855, 
              sa_data = "V\000\000\000\000\000@\v\002\000\000\000\000"}, sin = {sin_family = 51855, sin_port = 86, 
              sin_addr = {s_addr = 0}, sin_zero = "@\v\002\000\000\000\000"}, sin6 = {sin6_family = 51855, 
              sin6_port = 86, sin6_flowinfo = 0, sin6_addr = {__in6_u = {
                  __u6_addr8 = "@\v\002\000\000\000\000\000\364\037\000\000\000\000\000", __u6_addr16 = {2880, 2, 0, 
                    0, 8180, 0, 0, 0}, __u6_addr32 = {133952, 0, 8180, 0}}}, sin6_scope_id = 6}}, id = 0, 
          proto = 32 ' ', send_flags = {f = 20 '\024', blst_imask = 231 '\347'}}
        tmp = 0x7ff2940330c2 <_int_free+1410> "\351A\377\377\377L\001\375H\211\350H\203\310\001H\211C\bI\211\$X\351\227\374\377\377L\211\347\350I\363\377\377\351\243\374\377\377H\215-E\030\020"
        new_uri = 0x7ffff51da700 " \364\346\001"
        end = 0x6 <Address 0x6 out of bounds>
        crt = 0x1ebe0 <Address 0x1ebe0 out of bounds>
        cmd = 0x7ff2937d8b90
        len = 0
        user = 31921184
        uri = {user = {s = 0x7ff2938ee7f0 "\001", len = -182598160}, passwd = {s = 0x73 <Address 0x73 out of bounds>, 
            len = 7}, host = {s = 0x7ff2941327f8 "", len = -182607040}, port = {
            s = 0x7ffff51da300 "pu\264\215\362\177", len = -182605728}, params = {
            s = 0x7ffff51da7a0 "\360玓\362\177", len = 0}, sip_params = {
            s = 0x7ff200000000 <Address 0x7ff200000000 out of bounds>, len = 0}, headers = {
            s = 0x7ff2937d8e68 "BiM\217\362\177", len = -1819564112}, port_no = 42784, proto = 37771, type = 32754, 
          flags = (unknown: 0), transport = {s = 0x7ff200000000 <Address 0x7ff200000000 out of bounds>, len = 0}, 
          ttl = {s = 0x7fff00000000 <Address 0x7fff00000000 out of bounds>, len = 13}, user_param = {
            s = 0x7ff293ffed38 <vfprintf+6152> "\200\275", len = 0}, maddr = {s = 0x0, len = -1}, method = {
            s = 0x400000000 <Address 0x400000000 out of bounds>, len = -182605712}, lr = {
            s = 0x415d90 <_start> "1\355I\211\321^H\211\342H\203\344\360PTI\307\300\260%n", len = -182596336}, r2 = {
            s = 0x0, len = 701598740}, gr = {s = 0x7ffff51da450 "\220\213}\223\362\177", len = 4327749}, 
          transport_val = {s = 0x7ff28db47570 "", len = -182607024}, ttl_val = {
            s = 0x7ff29436e2e0 <_nl_C_LC_TIME> "\341"\023\224\362\177", len = -182606592}, user_param_val = {
            s = 0x1db4520 "UTC", len = -182606992}, maddr_val = {
            s = 0x7ff200000000 <Address 0x7ff200000000 out of bounds>, len = -182607002}, method_val = {
            s = 0x7ff28db4756f "s", len = -182606976}, lr_val = {s = 0x7ff293804fe0 "\004", len = 701598740}, 
          r2_val = {s = 0x415d90 <_start> "1\355I\211\321^H\211\342H\203\344\360PTI\307\300\260%n", len = -182596336}, 
          gr_val = {s = 0x0, len = 0}}
        next_hop = {user = {s = 0x1e6f1c0 "\270\a7\224\362\177", len = -182606192}, passwd = {
            s = 0x7ff28e8d75df ")\n", len = -1}, host = {s = 0x7ffff51da190 "\360\242\035\365\377\177", 
            len = 4309793}, port = {s = 0x7ff293ffed38 <vfprintf+6152> "\200\275", len = 0}, params = {
            s = 0x7ff2937f7538 "", len = -1819351056}, sip_params = {s = 0x1e6f1c0 "\270\a7\224\362\177", len = 0}, 
          headers = {s = 0x7ff293804858 "\004", len = -182606840}, port_no = 59376, proto = 37774, type = 32754, 
          flags = (unknown: 4112369136), transport = {s = 0x7ff293ffed38 <vfprintf+6152> "\200\275", len = 115}, 
          ttl = {s = 0x20 <Address 0x20 out of bounds>, len = 0}, user_param = {
            s = 0xffffffffffffffff <Address 0xffffffffffffffff out of bounds>, len = 0}, maddr = {
            s = 0x1 <Address 0x1 out of bounds>, len = -1819351056}, method = {s = 0x7ff293803c48 "\214\001", 
            len = -182605872}, lr = {s = 0x7ff293ffed38 <vfprintf+6152> "\200\275", len = 0}, r2 = {s = 0x0, len = 0}, 
          gr = {s = 0xfffffffffffffffb <Address 0xfffffffffffffffb out of bounds>, len = 701598740}, transport_val = {
            s = 0x415d90 <_start> "1\355I\211\321^H\211\342H\203\344\360PTI\307\300\260%n", len = -182596336}, 
          ttl_val = {s = 0x7ffff51da2f0 "P\244\035\365\377\177", len = 4326694}, user_param_val = {
            s = 0x7ff200000000 <Address 0x7ff200000000 out of bounds>, len = 0}, maddr_val = {
            s = 0x1e6f1c0 "\270\a7\224\362\177", len = -182605888}, method_val = {
            s = 0x18db47570 <Address 0x18db47570 out of bounds>, len = -1819370696}, lr_val = {
            s = 0x7ff28db47566 "%s: %s%.*s", len = -1811950023}, r2_val = {
            s = 0x7ff293ffed38 <vfprintf+6152> "\200\275", len = 0}, gr_val = {s = 0x7ff293804850 "\001", 
            len = -182606840}}
        u = 0x1
        port = 0
        dst_host = 0x7ff2941327f7
        i = -1808332960
        flags = 32754
        avp = 0x100020b70
        st = {flags = 13877, id = 0, name = {n = -182606240, s = {s = 0x7ffff51da660 "h\\200\223\362\177", 
              len = -1903399648}, re = 0x7ffff51da660}, avp = 0x0}
        sct = 0x3
        sjt = 0x7ffff51dc5f0
        rve = 0x1ebe0
        mct = 0x7ff293805798
        rv = 0xa00000000
        rv1 = 0x1e6f490
        c1 = {cache_type = RV_CACHE_EMPTY, val_type = 4294967295, c = {avp_val = {n = -182607568, s = {
                s = 0x7ffff51da130 "\001", len = -1811944136}, re = 0x7ffff51da130}, pval = {rs = {
                s = 0x7ffff51da130 "\001", len = -1811944136}, ri = -182607552, flags = 32767}}, 
          i2s = " \241\035\365\377\177\000\000\000\000\000\000\362\177\000\000\373\377\377\377\377\377"}
        s = {s = 0x19e396b76b802fdd <Address 0x19e396b76b802fdd out of bounds>, len = -652070947}
        srevp = {0x0, 0x0}
        mod_f_params = {{type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, 
              attr = 0x0, select = 0x0}}, {type = NUMBER_ST, u = {number = 2, 
              string = 0x2 <Address 0x2 out of bounds>, str = {s = 0x2 <Address 0x2 out of bounds>, len = 0}, 
              data = 0x2, attr = 0x2, select = 0x2}}, {type = RVE_FREE_FIXUP_ST, u = {number = 0, string = 0x0, str = {
                s = 0x0, len = 33}, data = 0x0, attr = 0x0, select = 0x0}}, {type = MODFIXUP_ST, u = {
              number = 140679833559008, string = 0x7ff293819fe0 "p\253\205\223\362\177", str = {
                s = 0x7ff293819fe0 "p\253\205\223\362\177", len = 2}, data = 0x7ff293819fe0, attr = 0x7ff293819fe0, 
              select = 0x7ff293819fe0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, 
              data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {
                s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, 
              string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {
              number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}}
        __FUNCTION__ = "do_action"
#16 0x000000000056ca8f in run_actions (h=0x7ffff51da670, a=0x7ff293805c68, msg=0x7ff2938ee7f0) at action.c:1548
        t = 0x7ff293805c68
        ret = -1
        mod = 0x7ffff51da630
        ms = 0
        __FUNCTION__ = "run_actions"
#17 0x000000000056d109 in run_actions_safe (h=0x7ffff51dc5f0, a=0x7ff293805c68, msg=0x7ff2938ee7f0) at action.c:1613
        ctx = {rec_lev = 1, run_flags = 0, last_retcode = 0, jmp_env = {{__jmpbuf = {701598740, 1865500383831404509, 
                4283792, 140737305758992, 0, 0, 1865500383873347549, -1865479660819566627}, __mask_was_saved = 0, 
              __saved_mask = {__val = {0, 140737305749408, 5687951, 58, 140679842060631, 8180, 140679845447520, 
                  31912992, 31912976, 140737305749688, 80, 58, 140679834429424, 140679833467976, 140737305749456, 
                  134064}}}}}
        ret = 1434477640
        ign_on_break = 0
#18 0x000000000041c321 in rval_get_int (h=0x7ffff51dc5f0, msg=0x7ff2938ee7f0, i=0x7ffff51daab8, rv=0x7ff2938060c0, 
    cache=0x0) at rvalue.c:912
        r_avp = 0x0
        avp_val = {n = 701598740, s = {s = 0x29d18c14 <Address 0x29d18c14 out of bounds>, len = 425734109}, 
          re = 0x29d18c14}
        pval = {rs = {s = 0x7ff293803c48 "\214\001", len = -182598160}, ri = 0, flags = 0}
        tmp = {s = 0x7ffff51da8b8 "\360\305\035\365\377\177", len = -1819351056}
        s = 0x0
        r = 0
        ret = 0
        destroy_pval = 0
        __FUNCTION__ = "rval_get_int"
#19 0x0000000000420526 in rval_expr_eval_int (h=0x7ffff51dc5f0, msg=0x7ff2938ee7f0, res=0x7ffff51daab8, 
    rve=0x7ff2938060b8) at rvalue.c:1906
        i1 = -1917581496
        i2 = 32767
        ret = -1
        c1 = {cache_type = RV_CACHE_EMPTY, val_type = 32754, c = {avp_val = {n = 701598740, s = {
                s = 0x29d18c14 <Address 0x29d18c14 out of bounds>, len = -182605536}, re = 0x29d18c14}, pval = {rs = {
                s = 0x29d18c14 <Address 0x29d18c14 out of bounds>, len = -182605536}, ri = -1819370683, 
              flags = 32754}}, i2s = '\000' <repeats 12 times>, "\r\000\000\000\024\214\321)\000"}
        c2 = {cache_type = 2484283384, val_type = 32754, c = {avp_val = {n = -182605328, s = {
                s = 0x7ffff51da9f0 "8\233\216\223\362\177", len = 7590259}, re = 0x7ffff51da9f0}, pval = {rs = {
                s = 0x7ffff51da9f0 "8\233\216\223\362\177", len = 7590259}, ri = 0, flags = 0}}, 
          i2s = "\240@\200\223\362\177\000\000 \257\035\365\377\177\000\000\360玓\362\177"}
        rv1 = 0x7ffff51da8d0
        rv2 = 0x7ffff51da990
        __FUNCTION__ = "rval_expr_eval_int"
#20 0x0000000000420912 in rval_expr_eval_int (h=0x7ffff51dc5f0, msg=0x7ff2938ee7f0, res=0x7ffff51daf20, 
    rve=0x7ff2938067b8) at rvalue.c:1914
        i1 = 2
        i2 = 0
        ret = -1
        c1 = {cache_type = 4294967295, val_type = RV_NONE, c = {avp_val = {n = -1820344528, s = {
                s = 0x7ff2937fbf30 "\210\277\177\223\362\177", len = -1820363688}, re = 0x7ff2937fbf30}, pval = {rs = {
                s = 0x7ff2937fbf30 "\210\277\177\223\362\177", len = -1820363688}, ri = -1819351056, flags = 32754}}, 
          i2s = "pY\200\223\362\177\000\000\360\305\035\365\377\177\000\000\030\n\235\000\000"}
        c2 = {cache_type = 4112362240, val_type = 32767, c = {avp_val = {n = 5687951, s = {
                s = 0x56ca8f <run_actions+1603> "\211E\304H\307\005ӉL", len = -182605104}, 
              re = 0x56ca8f <run_actions+1603>}, pval = {rs = {
                s = 0x56ca8f <run_actions+1603> "\211E\304H\307\005ӉL", len = -182605104}, ri = -1917574811, 
              flags = 32754}}, 
          i2s = "\006\000\000\000\000\000\000\000 \024\347\001\006\000\000\000\340\254\035\365\377\177"}
        rv1 = 0x0
        rv2 = 0x0
        __FUNCTION__ = "rval_expr_eval_int"
#21 0x00000000005604ce in do_action (h=0x7ffff51dc5f0, a=0x7ff293806eb8, msg=0x7ff2938ee7f0) at action.c:1029
        ret = -5
        v = 1
        dst = {send_sock = 0x7ffff51daf30, to = {s = {sa_family = 59027, 
              sa_data = "\264\216\362\177\000\000P\347\361i\362\177\000"}, sin = {sin_family = 59027, 
              sin_port = 36532, sin_addr = {s_addr = 32754}, sin_zero = "P\347\361i\362\177\000"}, sin6 = {
              sin6_family = 59027, sin6_port = 36532, sin6_flowinfo = 32754, sin6_addr = {__in6_u = {
                  __u6_addr8 = "P\347\361i\362\177\000\000\220\260\035\365\377\177\000", __u6_addr16 = {59216, 27121, 
                    32754, 0, 45200, 62749, 32767, 0}, __u6_addr32 = {1777461072, 32754, 4112363664, 32767}}}, 
              sin6_scope_id = 2475285680}}, id = 32754, proto = -16 '\360', send_flags = {f = 231 '\347', 
            blst_imask = 142 '\216'}}
        tmp = 0x0
        new_uri = 0x0
        end = 0x0
        crt = 0x0
        cmd = 0x7ff2937e3808
        len = 0
        user = 0
        uri = {user = {s = 0x2010 <Address 0x2010 out of bounds>, len = -1808332960}, passwd = {
            s = 0x41 <Address 0x41 out of bounds>, len = 31921184}, host = {s = 0x38 <Address 0x38 out of bounds>, 
            len = -1811719849}, port = {s = 0x1ff4 <Address 0x1ff4 out of bounds>, len = 1}, params = {
            s = 0x7ff2938b47a3 "", len = 0}, sip_params = {s = 0x7ffff51daf68 "", len = 701598740}, headers = {
            s = 0x415d90 <_start> "1\355I\211\321^H\211\342H\203\344\360PTI\307\300\260%n", len = -182596336}, 
          port_no = 0, proto = 0, type = ERROR_URI_T, flags = (unknown: 0), transport = {
            s = 0x7ffff51db030 "\360\260\035\365\377\177", len = -1900804025}, ttl = {
            s = 0x7ffff51dae80 " \364\346\001", len = 31912384}, user_param = {s = 0x7ffff51dae80 " \364\346\001", 
            len = -1917553306}, maddr = {s = 0x7ffff51db090 "", len = 31912384}, method = {s = 0x7ff2938431d0 "", 
            len = -1819351056}, lr = {s = 0x0, len = 0}, r2 = {s = 0xffffffff <Address 0xffffffff out of bounds>, 
            len = -1917553306}, gr = {s = 0x7ffff51daf68 "", len = 115}, transport_val = {
            s = 0x15 <Address 0x15 out of bounds>, len = -1811258487}, ttl_val = {s = 0x1e6f420 "", len = 116}, 
          user_param_val = {s = 0x600000037 <Address 0x600000037 out of bounds>, len = -1819682966}, maddr_val = {
            s = 0x7ff269f1f320 "409717448-0-4200345674@64.136.173.225", len = -1819682962}, method_val = {
            s = 0x29d18c14 <Address 0x29d18c14 out of bounds>, len = 4283792}, lr_val = {
            s = 0x7ffff51daf00 "P\347\361i\362\177", len = 4528210}, r2_val = {
            s = 0x7ff269f1e770 "\217\347\361i\362\177", len = -182603632}, gr_val = {s = 0x7ff29389dcb0 "\001", 
            len = -1819351056}}
        next_hop = {user = {s = 0x0, len = 0}, passwd = {s = 0x8 <Address 0x8 out of bounds>, len = -1810689785}, 
          host = {
            s = 0x1e6f42c "18:00:40 kamailio[13877]: DEBUG: dialog [dlg_var.c:263]: print_lists(): from_phone=16143520694 (flags 1)\n", len = -1811502014}, port = {s = 0x3737383331000201 <Address 0x3737383331000201 out of bounds>, 
            len = 8187}, params = {s = 0x100000000 <Address 0x100000000 out of bounds>, len = -1811497199}, 
          sip_params = {s = 0x2010 <Address 0x2010 out of bounds>, len = 8180}, headers = {
            s = 0x6 <Address 0x6 out of bounds>, len = 31921184}, port_no = 44768, proto = 62749, type = 32767, 
          flags = (unknown: 4112362672), transport = {s = 0x7ff29436e2e0 <_nl_C_LC_TIME> "\341"\023\224\362\177", 
            len = -182604192}, ttl = {s = 0x1db4520 "UTC", len = -182604592}, user_param = {
            s = 0x7fff00000000 <Address 0x7fff00000000 out of bounds>, len = -182604602}, maddr = {
            s = 0x3 <Address 0x3 out of bounds>, len = -182604576}, method = {s = 0x7ffff51dacdf "", len = 0}, lr = {
            s = 0x303493889a80 <Address 0x303493889a80 out of bounds>, len = -1819681656}, r2 = {
            s = 0x7ff2938ee7f0 "\001", len = -182598160}, gr = {s = 0x7ffff51dad50 "\001\002", len = 31913040}, 
          transport_val = {s = 0x7ff2938b4b80 "", len = -1808332960}, ttl_val = {
            s = 0x7ff2938b4780 "sip:+16145152420@199.21.213.67:5060", len = 31921184}, user_param_val = {
            s = 0x1ebe0 <Address 0x1ebe0 out of bounds>, len = -1811730238}, maddr_val = {
            s = 0x1e6f42c "18:00:40 kamailio[13877]: DEBUG: dialog [dlg_var.c:263]: print_lists(): from_phone=16143520694 (flags 1)\n", len = -1808340288}, method_val = {s = 0x8 <Address 0x8 out of bounds>, len = -1810689785}, lr_val = {
            s = 0x1e6f42c "18:00:40 kamailio[13877]: DEBUG: dialog [dlg_var.c:263]: print_lists(): from_phone=16143520694 (flags 1)\n", len = -1811502014}, r2_val = {s = 0x3737383331000201 <Address 0x3737383331000201 out of bounds>, 
            len = 8187}, gr_val = {s = 0x0, len = 31912976}}
        u = 0x0
        port = 0
        dst_host = 0x7ffff51db1b0
        i = 0
        flags = 0
        avp = 0xf51dcd10
        st = {flags = 0, id = 0, name = {n = 0, s = {s = 0x0, len = 0}, re = 0x0}, avp = 0x0}
        sct = 0x0
        sjt = 0x0
        rve = 0x7ff2938067b8
        mct = 0x7ff269f1e78f
        rv = 0x0
        rv1 = 0x7ffff51dc5f0
        c1 = {cache_type = RV_CACHE_EMPTY, val_type = RV_NONE, c = {avp_val = {n = 0, s = {s = 0x0, len = 0}, 
              re = 0x0}, pval = {rs = {s = 0x0, len = 0}, ri = 0, flags = 0}}, i2s = '\000' <repeats 21 times>}
        s = {s = 0x0, len = 0}
        srevp = {0x0, 0x0}
        mod_f_params = {{type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, 
              attr = 0x0, select = 0x0}}, {type = NUMBER_ST, u = {number = 2, 
              string = 0x2 <Address 0x2 out of bounds>, str = {s = 0x2 <Address 0x2 out of bounds>, len = 0}, 
              data = 0x2, attr = 0x2, select = 0x2}}, {type = RVE_FREE_FIXUP_ST, u = {number = 0, string = 0x0, str = {
                s = 0x0, len = 33}, data = 0x0, attr = 0x0, select = 0x0}}, {type = MODFIXUP_ST, u = {
              number = 140679833559008, string = 0x7ff293819fe0 "p\253\205\223\362\177", str = {
                s = 0x7ff293819fe0 "p\253\205\223\362\177", len = 2}, data = 0x7ff293819fe0, attr = 0x7ff293819fe0, 
              select = 0x7ff293819fe0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, 
              data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {
                s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, 
              string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {
              number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}}
        __FUNCTION__ = "do_action"
#22 0x000000000056ca8f in run_actions (h=0x7ffff51dc5f0, a=0x7ff2937ff588, msg=0x7ff2938ee7f0) at action.c:1548
        t = 0x7ff293806eb8
        ret = 1
        mod = 0x2
        ms = 0
        __FUNCTION__ = "run_actions"
#23 0x000000000055d624 in do_action (h=0x7ffff51dc5f0, a=0x7ff29389e3c8, msg=0x7ff2938ee7f0) at action.c:677
        ret = -5
        v = 1
        dst = {send_sock = 0x7ffff51db720, to = {s = {sa_family = 0, sa_data = '\000' <repeats 13 times>}, sin = {
              sin_family = 0, sin_port = 0, sin_addr = {s_addr = 0}, sin_zero = "\000\000\000\000\000\000\000"}, 
            sin6 = {sin6_family = 0, sin6_port = 0, sin6_flowinfo = 0, sin6_addr = {__in6_u = {
                  __u6_addr8 = "\000\000\000\000\000\000\000\000I\365\002\224\362\177\000", __u6_addr16 = {0, 0, 0, 0, 
                    62793, 37890, 32754, 0}, __u6_addr32 = {0, 0, 2483221833, 32754}}}, sin6_scope_id = 31912384}}, 
          id = 0, proto = -48 '\320', send_flags = {f = 187 '\273', blst_imask = 29 '\035'}}
        tmp = 0x7b0000000d <Address 0x7b0000000d out of bounds>
        new_uri = 0x7fff00000000 <Address 0x7fff00000000 out of bounds>
        end = 0x7ff200000000 <Address 0x7ff200000000 out of bounds>
        crt = 0x7ff28db4756f "s"
        cmd = 0x7ff2937e3808
        len = 32754
        user = -1819351056
        uri = {user = {s = 0x0, len = -1808332960}, passwd = {s = 0x51 <Address 0x51 out of bounds>, len = 31852176}, 
          host = {s = 0x3a <Address 0x3a out of bounds>, len = -1811719849}, port = {
            s = 0x1ff4 <Address 0x1ff4 out of bounds>, len = -1808332960}, params = {s = 0x1e5e690 "", 
            len = 31843968}, sip_params = {s = 0x7ffff51db618 "\365'\023\224\362\177", len = 80}, headers = {
            s = 0x3a <Address 0x3a out of bounds>, len = -1811716350}, port_no = 0, proto = 0, type = ERROR_URI_T, 
          flags = (unknown: 8208), transport = {s = 0x18940 <Address 0x18940 out of bounds>, len = -1}, ttl = {
            s = 0x7ffff51db5a0 " \267\035\365\377\177", len = 4309793}, user_param = {
            s = 0x7ffff51db530 "\220\346\345\001", len = -1917553306}, maddr = {
            s = 0x7ffff51db618 "\365'\023\224\362\177", len = 31843376}, method = {
            s = 0x1e6f1c0 "\270\a7\224\362\177", len = -182600976}, lr = {s = 0x7ff2941327f7 "]", len = 5}, r2 = {
            s = 0x7ff2941327f4 "[%d]", len = -1811950023}, gr = {s = 0x7ffff51db618 "\365'\023\224\362\177", len = 0}, 
          transport_val = {s = 0x15 <Address 0x15 out of bounds>, len = -1811258487}, ttl_val = {s = 0x1e5e690 "", 
            len = -1898336179}, user_param_val = {s = 0x39 <Address 0x39 out of bounds>, len = 1434477639}, 
          maddr_val = {s = 0x0, len = -182602128}, method_val = {s = 0x7ff293ffed38 <vfprintf+6152> "\200\275", 
            len = 701598740}, lr_val = {s = 0x0, len = 0}, r2_val = {
            s = 0xfffffffffffffffb <Address 0xfffffffffffffffb out of bounds>, len = 0}, gr_val = {
            s = 0x3635 <Address 0x3635 out of bounds>, len = -182596336}}
        next_hop = {user = {s = 0x469c9b000 <Address 0x469c9b000 out of bounds>, len = 701598740}, passwd = {
            s = 0x415d90 <_start> "1\355I\211\321^H\211\342H\203\344\360PTI\307\300\260%n", len = -182596336}, host = {
            s = 0x0, len = 0}, port = {s = 0x7ffff51db3a0 "\260\264\035\365\377\177", len = 5687951}, params = {
            s = 0x7ff293889230 "\a", len = -1811497199}, sip_params = {s = 0x7ff269f1dc98 "\270\334\361i\362\177", 
            len = 8180}, headers = {s = 0x6 <Address 0x6 out of bounds>, len = 4283792}, port_no = 46480, 
          proto = 62749, type = 32767, flags = (unknown: 4112364384), transport = {
            s = 0x7ff29436e2e0 <_nl_C_LC_TIME> "\341"\023\224\362\177", len = -1819351056}, ttl = {
            s = 0x7ff293896ba0 "\260\002", len = -182602800}, user_param = {
            s = 0x7fff00000000 <Address 0x7fff00000000 out of bounds>, len = -182602890}, maddr = {
            s = 0x3 <Address 0x3 out of bounds>, len = -182602864}, method = {
            s = 0xfffffffff51db38f <Address 0xfffffffff51db38f out of bounds>, len = 0}, lr = {
            s = 0x3933f51db3b0 <Address 0x3933f51db3b0 out of bounds>, len = 701598740}, r2 = {
            s = 0x415d90 <_start> "1\355I\211\321^H\211\342H\203\344\360PTI\307\300\260%n", len = -182596336}, gr = {
            s = 0x0, len = 0}, transport_val = {s = 0x7ffff51db4b0 "\240\265\035\365\377\177", len = 5689609}, 
          ttl_val = {s = 0x7ff2941327f4 "[%d]", len = -1819351056}, user_param_val = {s = 0x7ff293896ba0 "\260\002", 
            len = -182598160}, maddr_val = {s = 0x0, len = -1}, method_val = {
            s = 0x29d18c14 <Address 0x29d18c14 out of bounds>, len = 828387293}, lr_val = {
            s = 0x415d90 <_start> "1\355I\211\321^H\211\342H\203\344\360PTI\307\300\260%n", len = -182596336}, 
          r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x19e396b733e02fdd <Address 0x19e396b733e02fdd out of bounds>, 
            len = -652070947}}
        u = 0x7ff2937f7280
        port = 0
        dst_host = 0x73
        i = 1
        flags = 0
        avp = 0x6ec14d <__FUNCTION__.7310>
        st = {flags = 6419734, id = 0, name = {n = 534237696, s = {
              s = 0x1081fd7d200 <Address 0x1081fd7d200 out of bounds>, len = -1893908864}, re = 0x1081fd7d200}, 
          avp = 0x7ff28f1d3250}
        sct = 0x0
        sjt = 0x7ffff51db818
        rve = 0x7ff29383df18
        mct = 0x7ff293897018
        rv = 0x7ff293848668
        rv1 = 0x7ff2938ba7b0
        c1 = {cache_type = RV_CACHE_EMPTY, val_type = RV_NONE, c = {avp_val = {n = 0, s = {s = 0x0, len = 0}, 
              re = 0x0}, pval = {rs = {s = 0x0, len = 0}, ri = 0, flags = 0}}, 
          i2s = "\000\260\311i\362\177\000\000\360\305\035\365\017\b\000\000\070\062\312i\362\177"}
        s = {s = 0x7ff2938baafe "", len = 7}
        srevp = {0x0, 0x7b29d18c14}
        mod_f_params = {{type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, 
              attr = 0x0, select = 0x0}}, {type = NUMBER_ST, u = {number = 2, 
              string = 0x2 <Address 0x2 out of bounds>, str = {s = 0x2 <Address 0x2 out of bounds>, len = 0}, 
              data = 0x2, attr = 0x2, select = 0x2}}, {type = RVE_FREE_FIXUP_ST, u = {number = 0, string = 0x0, str = {
                s = 0x0, len = 33}, data = 0x0, attr = 0x0, select = 0x0}}, {type = MODFIXUP_ST, u = {
              number = 140679833559008, string = 0x7ff293819fe0 "p\253\205\223\362\177", str = {
                s = 0x7ff293819fe0 "p\253\205\223\362\177", len = 2}, data = 0x7ff293819fe0, attr = 0x7ff293819fe0, 
              select = 0x7ff293819fe0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, 
              data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {
                s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, 
              string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {
              number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}}
        __FUNCTION__ = "do_action"
#24 0x000000000056ca8f in run_actions (h=0x7ffff51dc5f0, a=0x7ff29389d2f8, msg=0x7ff2938ee7f0) at action.c:1548
        t = 0x7ff29389e3c8
        ret = 1
        mod = 0x0
        ms = 0
        __FUNCTION__ = "run_actions"
#25 0x000000000055d624 in do_action (h=0x7ffff51dc5f0, a=0x7ff2937fbfe8, msg=0x7ff2938ee7f0) at action.c:677
        ret = -5
        v = 1
        dst = {send_sock = 0x7300000005, to = {s = {sa_family = 2, 
              sa_data = "\000\000\246\000\000\000\000\000\000\000\377\177\000"}, sin = {sin_family = 2, sin_port = 0, 
              sin_addr = {s_addr = 166}, sin_zero = "\000\000\000\000\377\177\000"}, sin6 = {sin6_family = 2, 
              sin6_port = 0, sin6_flowinfo = 166, sin6_addr = {__in6_u = {
                  __u6_addr8 = "\000\000\000\000\377\177\000\000\000\000\000\000\000\000\000", __u6_addr16 = {0, 0, 
                    32767, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 32767, 0, 0}}}, sin6_scope_id = 31147296}}, id = 0, 
          proto = -56 '\310', send_flags = {f = 202 '\312', blst_imask = 127 '\177'}}
        tmp = 0x27 <Address 0x27 out of bounds>
        new_uri = 0x7ffff51dbd80 ""
        end = 0x7ff2938ee7f0 "\001"
        crt = 0x7ff2938e9b38 "Route: RELAY\n"
        cmd = 0x400000000
        len = 0
        user = 6430857
        uri = {user = {s = 0x7ffff51dbb00 "\020\277\035\365\377\177", len = 4304231}, passwd = {
            s = 0x5000000061 <Address 0x5000000061 out of bounds>, len = -182600032}, host = {
            s = 0x415d90 <_start> "1\355I\211\321^H\211\342H\203\344\360PTI\307\300\260%n", len = -182600016}, port = {
            s = 0x7ffff51dbf10 "\360\304\035\365\377\177", len = 4317247}, params = {s = 0x1e6f420 "", 
            len = 31912976}, sip_params = {s = 0x7ffff51dbcc8 "\230\277\035\365\377\177", len = 96}, headers = {
            s = 0x56 <Address 0x56 out of bounds>, len = -182599792}, port_no = 52352, proto = 37759, type = 32754, 
          flags = (unknown: 8208), transport = {s = 0x7ff2938ee7f0 "\001", len = -182598160}, ttl = {
            s = 0x4f51dbbe0 <Address 0x4f51dbbe0 out of bounds>, len = -1820341622}, user_param = {
            s = 0x7ffff51dbbe0 "\240\314\177\223\362\177", len = -1820341618}, maddr = {
            s = 0x29d18c14 <Address 0x29d18c14 out of bounds>, len = 4283792}, method = {
            s = 0x7ffff51dbbd0 "\330\347\361i\362\177", len = 4528210}, lr = {
            s = 0x7ff269f1e7f8 "\025\350\361i\362\177", len = -182599784}, r2 = {s = 0x7ff2937fcca0 "\001", 
            len = -1819351056}, gr = {s = 0x7ffff51dbc00 "\240\274\035\365\377\177", len = -1900747117}, 
          transport_val = {s = 0x7ff269f1e7d8 "ە\t{", len = -182599784}, ttl_val = {s = 0x7ff2937fcca0 "\001", 
            len = -1819351056}, user_param_val = {s = 0x55 <Address 0x55 out of bounds>, len = -1820341392}, 
          maddr_val = {s = 0x7ffff51dbca0 "", len = -1900741515}, method_val = {s = 0x0, len = 1777464192}, lr_val = {
            s = 0x1e6f420 "", len = -182599784}, r2_val = {s = 0x7ff2937fcca0 "\001", len = -1819351056}, gr_val = {
            s = 0x28 <Address 0x28 out of bounds>, len = 0}}
        next_hop = {user = {s = 0x7ffff51db980 "", len = -1820635120}, passwd = {
            s = 0x7ffff51db9c0 "\360\271\035\365\377\177", len = -1884104870}, host = {
            s = 0x7ff2937eec3d "direction)", len = 0}, port = {s = 0x800000 <Address 0x800000 out of bounds>, 
            len = 7134304}, params = {s = 0x100468 <Address 0x100468 out of bounds>, len = 1254304}, sip_params = {
            s = 0x137790 <Address 0x137790 out of bounds>, len = 8}, headers = {s = 0x3c <Address 0x3c out of bounds>, 
            len = 7225468}, port_no = 47600, proto = 62749, type = 32767, 
          flags = (URI_USER_NORMALIZE | unknown: 6024992), transport = {s = 0x0, len = 7698945}, ttl = {
            s = 0x320 <Address 0x320 out of bounds>, len = 701598740}, user_param = {
            s = 0x7ffff51dbaa0 "к\035\365\377\177", len = 6425573}, maddr = {s = 0x3 <Address 0x3 out of bounds>, 
            len = -182601152}, method = {s = 0x7ffff51dba3f "", len = -182601144}, lr = {
            s = 0x30340061f2d8 <Address 0x30340061f2d8 out of bounds>, len = 1777464248}, r2 = {s = 0x7ff269c9b000 "", 
            len = -182598160}, gr = {s = 0x7ff269ca3238 "\320\022\362i\362\177", len = 31913072}, transport_val = {
            s = 0x6ec14d <__FUNCTION__.7310> "rval_new_empty", len = 7225468}, ttl_val = {
            s = 0x3a8 <Address 0x3a8 out of bounds>, len = -1820635120}, user_param_val = {
            s = 0x1ebe0 <Address 0x1ebe0 out of bounds>, len = -1811730238}, maddr_val = {
            s = 0x7ff2938b4748 "\310\006", len = -1820631320}, method_val = {
            s = 0x29d18c14 <Address 0x29d18c14 out of bounds>, len = 4283792}, lr_val = {s = 0x7ffff51dbad0 "", 
            len = 4304015}, r2_val = {s = 0x7ff2938ee7f0 "\001", len = -182598160}, gr_val = {
            s = 0x7ff2938b4780 "sip:+16145152420@199.21.213.67:5060", len = 31912976}}
        u = 0x7ffff51dbeb0
        port = 0
        dst_host = 0x3c
        i = 12
        flags = 0
        avp = 0xd929d18c14
        st = {flags = 273, id = 1, name = {n = -1820398531, s = {s = 0x7ff2937eec3d "direction)", len = 9}, 
            re = 0x7ff2937eec3d}, avp = 0x7ff269f1dc18}
        sct = 0x7ffff51dbd60
        sjt = 0x7ff2940a66df <syslog+143>
        rve = 0x7ff2938b4748
        mct = 0x0
        rv = 0x7ff2938ee7f0
        rv1 = 0x7ff2937b5010
        c1 = {cache_type = 4112366048, val_type = 32767, c = {avp_val = {n = -1900832870, s = {
                s = 0x7ff28eb3979a <pv_get_avp+1658> "H\211E\350H\203", <incomplete sequence \350>, 
                len = -1819351056}, re = 0x7ff28eb3979a <pv_get_avp+1658>}, pval = {rs = {
                s = 0x7ff28eb3979a <pv_get_avp+1658> "H\211E\350H\203", <incomplete sequence \350>, 
                len = -1819351056}, ri = -182598160, flags = 88}}, 
          i2s = "P\217\214\223\362\177\000\000(\275\035\365\377\177\000\000\200:\177\223\362\177"}
        s = {s = 0x9 <Address 0x9 out of bounds>, len = 701562880}
        srevp = {0x7ff200000001, 0x7ff2937eec3d}
        mod_f_params = {{type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, 
              attr = 0x0, select = 0x0}}, {type = NUMBER_ST, u = {number = 2, 
              string = 0x2 <Address 0x2 out of bounds>, str = {s = 0x2 <Address 0x2 out of bounds>, len = 0}, 
              data = 0x2, attr = 0x2, select = 0x2}}, {type = RVE_FREE_FIXUP_ST, u = {number = 0, string = 0x0, str = {
                s = 0x0, len = 33}, data = 0x0, attr = 0x0, select = 0x0}}, {type = MODFIXUP_ST, u = {
              number = 140679833559008, string = 0x7ff293819fe0 "p\253\205\223\362\177", str = {
                s = 0x7ff293819fe0 "p\253\205\223\362\177", len = 2}, data = 0x7ff293819fe0, attr = 0x7ff293819fe0, 
              select = 0x7ff293819fe0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, 
              data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {
                s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, 
              string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {
              number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}}
        __FUNCTION__ = "do_action"
#26 0x000000000056ca8f in run_actions (h=0x7ffff51dc5f0, a=0x7ff2937fbfe8, msg=0x7ff2938ee7f0) at action.c:1548
        t = 0x7ff2937fbfe8
        ret = -1
        mod = 0x200000001
        ms = 0
        __FUNCTION__ = "run_actions"
#27 0x0000000000569b6c in do_action (h=0x7ffff51dc5f0, a=0x7ff2937ff2f8, msg=0x7ff2938ee7f0) at action.c:1300
        ret = 1
        v = 0
        dst = {send_sock = 0x0, to = {s = {sa_family = 62912, 
              sa_data = "\232\224\362\177\000\000\005\000\000\000\377\177\000"}, sin = {sin_family = 62912, 
              sin_port = 38042, sin_addr = {s_addr = 32754}, sin_zero = "\005\000\000\000\377\177\000"}, sin6 = {
              sin6_family = 62912, sin6_port = 38042, sin6_flowinfo = 32754, sin6_addr = {__in6_u = {
                  __u6_addr8 = "\005\000\000\000\377\177\000\000\000\000\000\000\000\000\000", __u6_addr16 = {5, 0, 
                    32767, 0, 0, 0, 0, 0}, __u6_addr32 = {5, 32767, 0, 0}}}, sin6_scope_id = 1}}, id = 32754, 
          proto = 8 '\b', send_flags = {f = 130 '\202', blst_imask = 155 '\233'}}
        tmp = 0x7ff2937eddc8 "\024\001"
        new_uri = 0x0
        end = 0x1e5e69c ""
        crt = 0x7ffff51dc600 "\024\214\321)"
        cmd = 0x7ff2937e3808
        len = 0
        user = 1434477639
        uri = {user = {s = 0x6 <Address 0x6 out of bounds>, len = 701598740}, passwd = {s = 0x7ffff51dc410 "", 
            len = -182599200}, host = {s = 0x7ff29436e2e0 <_nl_C_LC_TIME> "\341"\023\224\362\177", len = -182598768}, 
          port = {s = 0x1db4520 "UTC", len = -182599168}, params = {s = 0x0, len = -182599178}, sip_params = {
            s = 0x3 <Address 0x3 out of bounds>, len = -182599200}, headers = {s = 0x7ff2938d2170 "\001", 
            len = -1819467120}, port_no = 53624, proto = 115, type = 14643, flags = (unknown: 7790120), transport = {
            s = 0x770460 <__FUNCTION__.6522> "parse_via", len = -1803950700}, ttl = {s = 0x1e5e690 "", 
            len = -1812226792}, user_param = {s = 0x3 <Address 0x3 out of bounds>, len = 5}, maddr = {
            s = 0xa8428197 <Address 0xa8428197 out of bounds>, len = -1803948853}, method = {
            s = 0x770460 <__FUNCTION__.6522> "parse_via", len = -182599040}, lr = {
            s = 0x7ff293fb89bc "\227\201B\250|`\234|\374Qcq\zy\360\003\346`\033|\231/\310Km\301\243\353\372\266=/\222\210\353", <incomplete sequence \352>, len = -1812203296}, r2 = {s = 0x7ffff51dc390 "\340\370\373\223\362\177", 
            len = -182598784}, gr = {s = 0x17 <Address 0x17 out of bounds>, len = -1811502014}, transport_val = {
            s = 0x0, len = -1801783872}, ttl_val = {s = 0x7ff2949af000 "", len = 4249035}, user_param_val = {
            s = 0x7ff293fc6d08 "", len = 4209016}, maddr_val = {s = 0x500000000 <Address 0x500000000 out of bounds>, 
            len = 979}, method_val = {s = 0x86 <Address 0x86 out of bounds>, len = -182598584}, lr_val = {
            s = 0x7ffff51dc420 "\300\305\035\365\377\177", len = 1}, r2_val = {s = 0x7ff2949af5c0 "\302\062A", 
            len = -1801747104}, gr_val = {s = 0x7ff2949b8208 "", len = -1803948113}}
        next_hop = {user = {s = 0x7ff293ffed38 <vfprintf+6152> "\200\275", len = 0}, passwd = {s = 0x0, len = -1}, 
          host = {s = 0x7ff293ffed38 <vfprintf+6152> "\200\275", len = 2}, port = {
            s = 0x7c <Address 0x7c out of bounds>, len = -1811716350}, params = {s = 0x0, len = 7534864}, 
          sip_params = {s = 0x0, len = 82}, headers = {s = 0x72f940 "", len = 31843376}, port_no = 49376, 
          proto = 62749, type = 32767, flags = (unknown: 7790272), transport = {
            s = 0x7ffff51dc1c8 "\366\301\035\365\377\177", len = 31843376}, ttl = {s = 0x0, len = -1811230243}, 
          user_param = {s = 0x7ffff51dc1c8 "\366\301\035\365\377\177", len = 31843376}, maddr = {
            s = 0xffffffff <Address 0xffffffff out of bounds>, len = 7790272}, method = {
            s = 0x3000000010 <Address 0x3000000010 out of bounds>, len = -182597904}, lr = {
            s = 0x7ffff51dc630 "\335/ ܷ\226\343\031\335/"\331!|", <incomplete sequence \346>, len = -1811258487}, 
          r2 = {s = 0x1e5e690 "", len = 232}, gr = {s = 0x7b <Address 0x7b out of bounds>, len = 1434477639}, 
          transport_val = {s = 0x7ff2941327f8 "", len = -182599136}, ttl_val = {
            s = 0x7ffff51dc1e0 "p!\215\223\362\177", len = -1}, user_param_val = {s = 0x1e5e690 "", len = 0}, 
          maddr_val = {s = 0xffffffff00000000 <Address 0xffffffff00000000 out of bounds>, len = 6443774}, 
          method_val = {s = 0x27 <Address 0x27 out of bounds>, len = 18}, lr_val = {
            s = 0x7300000005 <Address 0x7300000005 out of bounds>, len = 2}, r2_val = {
            s = 0x3000000000 <Address 0x3000000000 out of bounds>, len = -1811497199}, gr_val = {s = 0x1db4520 "UTC", 
            len = 8180}}
        u = 0x18910
        port = 0
        dst_host = 0x415d90 <_start>
        i = 0
        flags = 32754
        avp = 0x0
        st = {flags = 8224, id = 0, name = {n = 0, s = {s = 0x7ff200000000 <Address 0x7ff200000000 out of bounds>, 
              len = 0}, re = 0x7ff200000000}, avp = 0x7fff00000000}
        sct = 0xa8428197
        sjt = 0x7ffff51dc380
        rve = 0x7ff2937fb778
        mct = 0x7ff2937f73a0
        rv = 0x7ff2937fcc80
        rv1 = 0x7ff2938b4780
        c1 = {cache_type = RV_CACHE_EMPTY, val_type = RV_NONE, c = {avp_val = {n = 0, s = {s = 0x0, len = 0}, 
              re = 0x0}, pval = {rs = {s = 0x0, len = 0}, ri = 0, flags = 0}}, 
          i2s = "\000\000\000\000\063\070\067\067", '\000' <repeats 13 times>}
        s = {s = 0x7ff2938b4ace "peer", len = 4}
        srevp = {0x0, 0x7ff200000007}
        mod_f_params = {{type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, 
              attr = 0x0, select = 0x0}}, {type = NUMBER_ST, u = {number = 2, 
              string = 0x2 <Address 0x2 out of bounds>, str = {s = 0x2 <Address 0x2 out of bounds>, len = 0}, 
              data = 0x2, attr = 0x2, select = 0x2}}, {type = RVE_FREE_FIXUP_ST, u = {number = 0, string = 0x0, str = {
                s = 0x0, len = 33}, data = 0x0, attr = 0x0, select = 0x0}}, {type = MODFIXUP_ST, u = {
              number = 140679833559008, string = 0x7ff293819fe0 "p\253\205\223\362\177", str = {
                s = 0x7ff293819fe0 "p\253\205\223\362\177", len = 2}, data = 0x7ff293819fe0, attr = 0x7ff293819fe0, 
              select = 0x7ff293819fe0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, 
              data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {
                s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, 
              string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {
              number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}}
        __FUNCTION__ = "do_action"
#28 0x000000000056ca8f in run_actions (h=0x7ffff51dc5f0, a=0x7ff2937eddc8, msg=0x7ff2938ee7f0) at action.c:1548
        t = 0x7ff2937ff2f8
        ret = 1
        mod = 0x0
        ms = 0
        __FUNCTION__ = "run_actions"
#29 0x000000000056d1d1 in run_top_route (a=0x7ff2937eddc8, msg=0x7ff2938ee7f0, c=0x0) at action.c:1634
        ctx = {rec_lev = 4, run_flags = 0, last_retcode = 1, jmp_env = {{__jmpbuf = {701598740, 1865500387102961629, 
                4283792, 140737305758992, 0, 0, 1865500387077795805, -1865479660819566627}, __mask_was_saved = 0, 
              __saved_mask = {__val = {4302502013, 140737305757312, 140679769641336, 8407336880, 3, 
                  4611686025215475715, 18446744073709551615, 140737305757360, 140679769642216, 3, 0, 
                  4611686025197971472, 140679834429424, 140737305757408, 5201926, 8407336672}}}}}
        p = 0x7ffff51dc5f0
        ret = 4283792
        sfbk = 0
#30 0x000000000056ef99 in receive_msg (
    buf=0x9d0a00 <buf.6614> "INVITE sip:+16145152420@199.21.213.99:5060 SIP/2.0\r\nVia: SIP/2.0/UDP 64.136.173.31:5060;branch=z9hG4bK1sansay1236078105rdb11134\r\nRecord-Route: <sip:sansay1236078105rdb11134@64.136.173.31:5060;lr;trans"..., 
    len=924, rcv_info=0x7ffff51dc8e0) at receive.c:196
        msg = 0x7ff2938ee7f0
        ctx = {rec_lev = -182597504, run_flags = 32767, last_retcode = -1803929418, jmp_env = {{__jmpbuf = {5, 0, 
                1041768, 140679841605792, 701598740, 140737305757824, 4283792, 140679849878240}, __mask_was_saved = 0, 
              __saved_mask = {__val = {0, 140737305758112, 140679849851062, 5, 0, 140737305757824, 140679841584912, 1, 
                  140679133673112, 0, 2475499472, 8407337024, 140679133673112, 140737305757760, 4734655, 124}}}}}
        ret = 4740307
        inb = {
          s = 0x9d0a00 <buf.6614> "INVITE sip:+16145152420@199.21.213.99:5060 SIP/2.0\r\nVia: SIP/2.0/UDP 64.136.173.31:5060;branch=z9hG4bK1sansay1236078105rdb11134\r\nRecord-Route: <sip:sansay1236078105rdb11134@64.136.173.31:5060;lr;trans"..., len = 924}
        __FUNCTION__ = "receive_msg"
#31 0x000000000048b131 in udp_rcv_loop () at udp_server.c:495
        len = 924
        buf = "INVITE sip:+16145152420@199.21.213.99:5060 SIP/2.0\r\nVia: SIP/2.0/UDP 64.136.173.31:5060;branch=z9hG4bK1sansay1236078105rdb11134\r\nRecord-Route: <sip:sansay1236078105rdb11134@64.136.173.31:5060;lr;trans"...
        tmp = 0x4458ae796ef6544c <Address 0x4458ae796ef6544c out of bounds>
        from = 0x7ff2938d1fc8
        fromlen = 16
        ri = {src_ip = {af = 2, len = 4, u = {addrl = {531466304, 4283792}, addr32 = {531466304, 0, 4283792, 0}, 
              addr16 = {34880, 8109, 0, 0, 23952, 65, 0, 0}, 
              addr = "@\210\255\037\000\000\000\000\220]A\000\000\000\000"}}, dst_ip = {af = 2, len = 4, u = {addrl = {
                1674909127, 0}, addr32 = {1674909127, 0, 0, 0}, addr16 = {5575, 25557, 0, 0, 0, 0, 0, 0}, 
              addr = "\307\025\325c", '\000' <repeats 11 times>}}, src_port = 5060, dst_port = 5060, 
          proto_reserved1 = 0, proto_reserved2 = 0, src_su = {s = {sa_family = 2, 
              sa_data = "\023\304@\210\255\037\000\000\000\000\000\000\000"}, sin = {sin_family = 2, sin_port = 50195, 
              sin_addr = {s_addr = 531466304}, sin_zero = "\000\000\000\000\000\000\000"}, sin6 = {sin6_family = 2, 
              sin6_port = 50195, sin6_flowinfo = 531466304, sin6_addr = {__in6_u = {
                  __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 
                    0, 0}}}, sin6_scope_id = 0}}, bind_address = 0x7ff2937d67a8, proto = 1 '\001'}
        __FUNCTION__ = "udp_rcv_loop"
#32 0x00000000005178c6 in main_loop () at main.c:1573
        i = 0
        pid = 0
        si = 0x7ff2937d67a8
        si_desc = "udp receiver child=0 sock=199.21.213.99:5060\000\000\000\000\020\315\035\365\377\177", '\000' <repeats 18 times>, "\337f\n\224\362\177\000\000\b\000\000\000\001\000\000\000p\215\215\223\362\177\000\000\020\313\035\365\377\177\000\000P\312\035\365\377\177\000\000\240\374\360i\362\177\000\000\260\064\312i\362\177\000"
        nrprocs = 2
        __FUNCTION__ = "main_loop"
#33 0x000000000051d663 in main (argc=9, argv=0x7ffff51dcd18) at main.c:2533
        cfg_stream = 0x1db0010
        c = -1
        r = 0
        tmp = 0x7ffff51ddf63 ""
        tmp_len = 32754
        port = -1801747104
        proto = 0
        options = 0x720368 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:"
        ret = -1
        seed = 3271817367
        rfd = 4
        debug_save = 0
        debug_flag = 0
        dont_fork_cnt = 0
        n_lst = 0x7ffff51dcbe0
        p = 0x7ff294055646 <intel_check_word+166> "H\205\300t\025\017\266P\003\017\266\312D9\371\017\204", <incomplete sequence \305>
        __FUNCTION__ = "main"
```
---
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/212#issuecomment-112571040

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Re: [sr-dev] [kamailio] http_query causes memory corruption with AVPs (#212)