Hi, I am having kamailio crash in dialog module. I am using Kamailio v4.3.2 rev. 3763f6 on Debian Wheezy 32 bit. Here is back trace. -- #0 0xb59871c3 in update_dialog_vars_dbinfo (cell=0xa5be5888, var=0x1) at dlg_db_handler.c:651 #1 0xb5987e66 in update_dialog_dbinfo_unsafe (cell=0xa5be5888) at dlg_db_handler.c:724 #2 0xb59895cd in dialog_update_db (ticks=79670306, param=0x0) at dlg_db_handler.c:891 #3 0x0821aebb in compat_old_handler (ti=1274724909, tl=0xa54d3704, data=0xa54d3704) at timer.c:996 #4 0x0821b7be in slow_timer_main () at timer.c:1130 #5 0x080e2176 in main_loop () at main.c:1628 #6 0x080e7bb5 in main (argc=13, argv=0xbff13e54) at main.c:2533 -- The 'bt full' of first entry point gives this, -- #0 0xb59871c3 in update_dialog_vars_dbinfo (cell=0xa5be5888, var=0x1) at dlg_db_handler.c:651 values = {{type = DB1_INT, nul = 0, free = -1248330084, val = {int_val = 7403, ll_val = -5359754473965085461, double_val = -2.0264210675928217e-50, time_val = 7403, string_val = 0x1ceb <Address 0x1ceb out of bounds>, str_val = { s = 0x1ceb <Address 0x1ceb out of bounds>, len = -1247915084}, blob_val = {s = 0x1ceb <Address 0x1ceb out of bounds>, len = -1247915084}, bitmap_val = 7403}}, {type = DB1_INT, nul = 0, free = -1232817552, val = {int_val = 22351, ll_val = -5310283511641385137, double_val = -4.1167425495098089e-47, time_val = 22351, string_val = 0x574f <Address 0x574f out of bounds>, str_val = {s = 0x574f <Address 0x574f out of bounds>, len = -1236396728}, blob_val = { s = 0x574f <Address 0x574f out of bounds>, len = -1236396728}, bitmap_val = 22351}}, {type = DB1_STR, nul = 0, free = -1241051128, val = {int_val = -1512860372, ll_val = 37141845292, double_val = 1.8350509781927642e-313, time_val = -1512860372, string_val = 0xa5d3952c "G", str_val = {s = 0xa5d3952c "G", len = 8}, blob_val = {s = 0xa5d3952c "G", len = 8}, bitmap_val = 2782106924}}, {type = DB1_STR, nul = 0, free = -1074710904, val = {int_val = -1513070788, ll_val = 84386275132, double_val = 4.1692359523228702e-313, time_val = -1513070788, string_val = 0xa5d05f3c "L", str_val = {s = 0xa5d05f3c "L", len = 19}, blob_val = {s = 0xa5d05f3c "L", len = 19}, bitmap_val = 2781896508}}} insert_keys = {0xb59e53c4, 0xb59e53bc, 0xb59e53cc, 0xb59e53d4} __FUNCTION__ = "update_dialog_vars_dbinfo" -- Let me know if you need more info. Thank you. _______________________________________________ sr-dev mailing list sr-dev(a)lists.sip-router.org <mailto:sr-dev@lists.sip-router.org> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev

Can you try with latest branch 4.3? I pushed some patches, lets see if now this case is safe -- the trace showed an attempt to update dialog vars in db while call was already in terminated state. Let me know the results. Cheers, Daniel On 01/10/15 13:58, M S wrote: Here they are, -- (gdb) frame 0 #0 0xb59871c3 in update_dialog_vars_dbinfo (cell=0xa5be5888, var=0x1) at dlg_db_handler.c:651 /usr/src/svn-src/kamailio/modules/dialog/dlg_db_handler.c:651:17602:beg:0xb59871c3 (gdb) p *cell $1 = {ref = 0, next = 0x0, prev = 0x0, h_id = 22351, h_entry = 7403, state = 5, lifetime = 14400, init_ts = 1443690271, start_ts = 0, dflags = 640, iflags = 0, sflags = 2, toroute = 0, toroute_name = {s = 0x0, len = 0}, from_rr_nb = 0, tl = {next = 0x0, prev = 0x0, timeout = 0}, callid = {s = 0xa5be594c <00960ujf0kkljkb5v1losip:157102701100@172.16.171.16sip:00695624404@172.16.171.16sip:00695624404@172.16.171.1616ent-Length:0%5Cr%5Cn%5Cr%5Cn00%5Cr%5Cn%5Cr%5Cn%5CnncL%5C002>"00960ujf0kkljkb5v1losip:157102701100@172.16.171.16sip:00695624404@172.16.171.16sip:00695624404@172.16.171.1616ent-Length: 0\r\n\r\n00\r\n\r\n\nncL\002" <00960ujf0kkljkb5v1losip:157102701100@172.16.171.16sip:00695624404@172.16.171.16sip:00695624404@172.16.171.1616ent-Length:0%5Cr%5Cn%5Cr%5Cn00%5Cr%5Cn%5Cr%5Cn%5CnncL%5C002>, len = 20}, from_uri = { s = 0xa5be5960 "sip:157102701100@172.16.171.16sip:00695624404@172.16.171.16sip:00695624404@172.16.171.1616ent-Length: 0\r\n\r\n00\r\n\r\n\nncL\002", len = 30}, to_uri = { s = 0xa5be597e "sip:00695624404@172.16.171.16sip:00695624404@172.16.171.1616ent-Length: 0\r\n\r\n00\r\n\r\n\nncL\002", len = 29}, req_uri = {s = 0xa5be599b "sip:00695624404@172.16.171.1616ent-Length: 0\r\n\r\n00\r\n\r\n\nncL\002", len = 29}, tag = {{ s = 0xa5d64900 "gp371jkh69sip:1eo0u04f@f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29~49274~6\245\204\002" <gp371jkh69sip:1eo0u04f@f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29%7E49274%7E6%5C245%5C204%5C002>, len = 10}, {s = 0x0, len = 0}}, cseq = {{s = 0xa597c6c4 "5715\f", len = 4}, {s = 0x0, len = 0}}, route_set = {{s = 0x0, len = 0}, {s = 0x0, len = 0}}, contact = {{s = 0xa5d6490a "sip:1eo0u04f@f90o3srerjjp.invalid;transport=ws;ob;alias=91.100.203.29~49274~6\245\204\002", len = 77}, {s = 0x0, len = 0}}, bind_addr = {0xb65b4044, 0x0}, cbs = {first = 0xa5d02974, types = 41172}, profile_links = 0x0, vars = 0x0} -- Thank you. On Thu, Oct 1, 2015 at 1:17 PM, Daniel-Constantin Mierla < miconda(a)gmail.com&gt; wrote: -- Daniel-Constantin Mierlahttp://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda Book: SIP Routing With Kamailio - http://www.asipto.com Kamailio Advanced Training, Sep 28-30, 2015, in Berlin - http://asipto.com/u/kat