[Home]

Summary:ASTERISK-04507: Asterisk Secfault
Reporter:ewieling (ewieling)Labels:
Date Opened:2005-07-01 06:52:39Date Closed:2011-06-07 14:02:44
Priority:MajorRegression?No
Status:Closed/CompleteComponents:Core/General
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:
Description:I had Asterisk segfault yesterdat.

****** ADDITIONAL INFORMATION ******

#0  0x0806e24e in ast_say_date_with_format_en (chan=0x42422b88, time=1119909864,
   ints=0x419d4634 "0123456789#*", lang=0x42422bd8 "en",
   format=0x42470930 <Address 0x42470930 out of bounds>,
   timezone=0x424708e0 <Address 0x424708e0 out of bounds>) at say.c:1952
1952            for (offset=0 ; format[offset] != '\0' ; offset++) {
(gdb) bt full
#0  0x0806e24e in ast_say_date_with_format_en (chan=0x42422b88, time=1119909864,
   ints=0x419d4634 "0123456789#*", lang=0x42422bd8 "en",
   format=0x42470930 <Address 0x42470930 out of bounds>,
   timezone=0x424708e0 <Address 0x424708e0 out of bounds>) at say.c:1952
       tm = {tm_sec = 24, tm_min = 4, tm_hour = 17, tm_mday = 27, tm_mon = 5, tm_year = 105,
 tm_wday = 1, tm_yday = 177, tm_isdst = 1, tm_gmtoff = -18000, tm_zone = 0x820492c "CDT"}
       res = 0
       offset = 27
       sndoffset = 1111633008
       sndfile = "digits/at\0d\0@ªÎAàb!\b|\234>B\f\234>B\004\234>Bü\233>Bô\233>B\f\234>Bl«#\b\003\0\0\0\0\0\0\0\002\0\001\0\0\0\0\0\001\0\0\0\0\0\0\0q\03\0(\0(\0\005\0\004\0\001\0\0\0\003\0\004\0\006\0\003\0\002\0\003\0\005\0\004\0\004\0\005\0\004\0\002\0\003\0\003\0\004\0\005\0\005\0\004\0\003\0\002\0\004\0\004\0\004\0\004\0\004\0\003\0\004\0\003\0\004\0\004\0\004\0\004\0\004\0\004\0\004\0\004\0\004\0\003\0\004\0\004\0\004\0\004\0\004\0\004\0\004\0\004\0\004\0\004\0\003\0\003\0\004\0\002\02\0*\0\032\0\b\0"...
       nextmsg = "\003\0\001\0\0\0\003\0\0\0\0\0\005\0ÿÿ\0\0ýÿ\0\0\0\0\004\0\0\0\0\0üÿ\001\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0ÿÿ¬D\235A", '\0' <repeats 12 times>, "\004\0\0\0\0\0\004\0\0\0\0\0ýÿ\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0üÿ\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0\004\0\0\0\0\0"...
#1  0x08069969 in ast_say_date_with_format (chan=0x42422b88, time=1119909864,
   ints=0x419d4634 "0123456789#*", lang=0x42422bd8 "en",
   format=0x42470930 <Address 0x42470930 out of bounds>,
   timezone=0x424708e0 <Address 0x424708e0 out of bounds>) at say.c:1926
No locals.
#2  0x419ced02 in play_message_datetime (chan=0x42422b88, vmu=0x42c077e8,
   origtime=0x42470930 <Address 0x42470930 out of bounds>, filename=0x0) at app_voicemail.c:2473
       res = 0
       the_zone = (struct vm_zone *) 0x42470890
       t = 1119909864
       tin = 1119909864
#3  0x419cf730 in play_message (chan=0x42422b88, vmu=0x423ecc9c, vms=0x423ed0ec)
   at app_voicemail.c:2588
---Type <return> to continue, or q <return> to quit---
       filename = "/var/spool/asterisk/voicemail/default/3530/INBOX/msg0000.txt\0«\002@\210+BB`,BBd¡>B¸?\002@p,BBÈôAB¤¡>Bxï\005\b`,BB\004\0\0\0¤¡>B\221e\006\b(?\032\b", '\0' <repeats 16 times>, "\004\0\0\0\004\0\0\0\210+BB\210+BB\001\0\0\0Ô¡>B.g\006\b\210+BB\004", '\0' <repeats 11 times>, "\017\0\0\0\004\0\0\0o[\r\b\0\0\0\0\210+BB1\0\0\0ô¡>B\"µ\b"...
       origtime = 0x8135820 "1119909864"
       cid = 0x81141a8 "\"LEO PAT PETITTO\" <96261398>"
       context = 0x814d9b8 "auto-attendent"
       msg_cfg = (struct ast_config *) 0x81c3218
#4  0x419c4b94 in vm_execmain (chan=0x42422b88, data=0x42422b88) at app_voicemail.c:3654
       res = 0
       valid = 1
       prefix = 0
       cmd = 1100826519
       u = (struct localuser *) 0x81c11a8
       prefixstr = '\0' <repeats 79 times>
       empty = '\0' <repeats 79 times>
       ext_context = '\0' <repeats 255 times>
       box = 1111632776
       useadsi = 0
       skipuser = 0
       tmp = "|Ú>BlÜ40»Ü>B\0\0\0\0|Ú>B\0\200\0\0»Ü>B \t$@P\0\0\0lÜ>BtÛ>B\bÖ\027@|Ú>BuÐ\r\bÄÛ>BlÜ>B", '\0' <repeats 24 times>, "\034Û>B|Ú>B\001\200­ûlÜ>BlÜ>BlÜ>BlÜ>B\207Ü>B»Ü>BlÜ>B»Ü>B", '\0' <repeats 40 times>, "úk\002@", '\0' <repeats 12 times>, "ÿÿÿÿ", '\0' <repeats 12 times>, "\001\0\0\0 \t$@\\Û>B$Û>Be8\030@\\Û>B¼ý40\vþ>B\0\0\0\0\\Û>B\200é#@"...
       ext = 0x42422b88 "SIP/0004f201e35d-a-8233"
       fmtc = "wav", '\0' <repeats 252 times>
       password = "3530", '\0' <repeats 75 times>
       vms = {curbox = "INBOX", '\0' <repeats 74 times>,
 username = "3530", '\0' <repeats 75 times>,
 curdir = "/var/spool/asterisk/voicemail/default/3530/INBOX", '\0' <repeats 207 times>,
 vmbox = "vm-INBOX", '\0' <repeats 247 times>,
 fn = "/var/spool/asterisk/voicemail/default/3530/INBOX/msg0000", '\0' <repeats 199 times>,
 fn2 = "/var/spool/asterisk/voicemail/default/3530/INBOX/msg0000", '\0' <repeats 199 times>,
---Type <return> to continue, or q <return> to quit---
 deleted = {0 <repeats 100 times>}, heard = {0 <repeats 100 times>}, curmsg = 0, lastmsg = 0,
 newmessages = 1, oldmessages = 1, starting = 0, repeats = 0}
       logretries = 1
       vmu = (struct ast_vm_user *) 0x423ecc9c
       vmus = {context = "default", '\0' <repeats 72 times>,
 mailbox = "3530", '\0' <repeats 75 times>, password = "3530", '\0' <repeats 75 times>,
 fullname = "Betty Silverberg", '\0' <repeats 63 times>, email = '\0' <repeats 79 times>,
 pager = '\0' <repeats 79 times>, serveremail = '\0' <repeats 79 times>,
 mailcmd = '\0' <repeats 159 times>, language = '\0' <repeats 19 times>,
 zonetag = "central", '\0' <repeats 72 times>, callback = "toll-access", '\0' <repeats 68 times>,
 dialout = '\0' <repeats 79 times>, exit = '\0' <repeats 79 times>, attach = -1, delete = 0,
 alloced = 0, saycid = 0, svmail = 0, review = 0, operator = 1, envelope = 1, next = 0x0}
       context = 0x0
       silentexit = 0
       cid = '\0' <repeats 255 times>
       passptr = 0x42422c70 ""
ASTERISK-1  0x08077368 in pbx_exec (c=0x42422b88, app=0x8183ad0, data=0x423efe0c, newstack=1111951664)
   at pbx.c:469
       res = 0
       saved_c_appl = 0x419d630c "8r\001"
       saved_c_data = 0x42422b88 "SIP/0004f201e35d-a-8233"
       stack = 0
       execute = (int (*)(struct ast_channel *, void *)) 0x419c21c0 <vm_execmain>
ASTERISK-2  0x0807e494 in pbx_extension_helper (c=0x42422b88, context=0x42422ce0 "macro-std-exten",
   exten=0x8183ad0 "VoiceMailMain", priority=1,
   callerid=0x4240b8f0 "Betty Silverberg <9852463530>", action=1111632776) at pbx.c:1288
       e = (struct ast_exten *) 0x1
       sw = (struct ast_switch *) 0x0
       data = 0x0
       newstack = 1
       res = 0
       status = 4
       incstack = {0x423f46b6 "SIP/0004f201e35d-a-8233\e[0;37;40m",
---Type <return> to continue, or q <return> to quit---
 0x42422b88 "SIP/0004f201e35d-a-8233", 0x17 <Address 0x17 out of bounds>, 0x0, 0x80dd08a "m",
 0x1 <Address 0x1 out of bounds>, 0x423f2464 "\224%?B \t$@¤$?BD\035\036@\235",
 0x4015c329 "\213½¨ûÿÿ\211Â\211ø)ð9Â\017\205_)", 0x423f249c "\200í#@", 0x80dd08a "m",
 0x1 <Address 0x1 out of bounds>, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
 0x20640000 <Address 0x20640000 out of bounds>, 0x0 <repeats 12 times>, 0x40182574 "\201Ã,ä\v",
 0x28 <Address 0x28 out of bounds>, 0x423f26ac "\e[1;35;40mstd-exten\e[0;37;40m",
 0x1d <Address 0x1d out of bounds>, 0x0, 0x402409a0 "´È\022",
 0x423f1f0c "\001\200­û¼!?B¼!?B¼!?B¼!?B½!?B\v\"?B¼!?B\v\"?B",
 0x423f1ed4 "\004 ?B\bÖ\027@\f\037?BþJÃA< ?B¼!?B",
 0x40183865 "\211~\020\213U\024\211~\f\211~\004\205Òt=\213U\024\213Eð\211V\024\211F\030\211V\b1À\211\206\230", 0x423f1f0c "\001\200­û¼!?B¼!?B¼!?B¼!?B½!?B\v\"?B¼!?B\v\"?B",
 0x393f21bc <Address 0x393f21bc out of bounds>, 0x423f220b "", 0x0,
 0x423f1f0c "\001\200­û¼!?B¼!?B¼!?B¼!?B½!?B\v\"?B¼!?B\v\"?B",
 0x8000 <Address 0x8000 out of bounds>, 0x423f220b "", 0x402409a0 "´È\022",
 0x50 <Address 0x50 out of bounds>, 0x423f21bc "9", 0x423f2004 "$ ?B[ä\030@\005",
 0x4017d608 "\211Â\213\205", 0x423f1f0c "\001\200­û¼!?B¼!?B¼!?B¼!?B½!?B\v\"?B¼!?B\v\"?B",
 0x41c34afe "%d", 0x423f203c "ð¸@B", 0x423f21bc "9", 0x0, 0x4015be87 "\200½Òúÿÿ",
 0x423f24c4 "uÐ\r\b \t$@\235", 0x0, 0x0, 0x0,
 0x423f1fac "ð\023$@ \t$@Ô\037?B\205]\030@à\023$@\017",
 0x423f1f0c "\001\200­û¼!?B¼!?B¼!?B¼!?B½!?B\v\"?B¼!?B\v\"?B",
 0xfbad8001 <Address 0xfbad8001 out of bounds>, 0x423f21bc "9", 0x423f21bc "9", 0x423f21bc "9",
 0x423f21bc "9", 0x423f21bd "", 0x423f220b "", 0x423f21bc "9", 0x423f220b "", 0x0, 0x0,
 0x40186b11 "\201Ã\217\236\v", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
 0x47ffc4 <Address 0x47ffc4 out of bounds>, 0x0, 0x402413e0 "", 0x4024143c "", 0x402413e0 "",
 0x28 <Address 0x28 out of bounds>, 0x0, 0x0, 0x40026d9e "\201Ãæ=", 0x0, 0x402413e0 "",
 0x18 <Address 0x18 out of bounds>, 0x4 <Address 0x4 out of bounds>, 0x81a6528 "(\001",
 0x4 <Address 0x4 out of bounds>, 0x1d <Address 0x1d out of bounds>, 0x4002ab84 "\204Ú",
 0x402413e0 "", 0x81a6530 "MACRO_PRIORITY", 0x423f1fb4 "Ô\037?B\205]\030@à\023$@\017",
 0x40023fd9 "ëÝ\220\215t&", 0x402413f0 "", 0x402409a0 "´È\022",
 0x423f1fd4 "\004 ?BÔ¼\n\b0e\032\bßJÃA\004 ?B[ä\030@\005", 0x40185d85 "éHÿÿÿ\213\203¬\016",
 0x402413e0 "", 0xf <Address 0xf out of bounds>, 0x0, 0x81a6530 "MACRO_PRIORITY",
 0x8137438 "0e\032\bHt\023\bèû\037\b\021", 0x8137448 "9", 0x423f2004 "$ ?B[ä\030@\005",
 0x80abcd4 "\213\026\211ðÆ\004\023", 0x81a6530 "MACRO_PRIORITY", 0x41c34adf "MACRO_PRIORITY",
---Type <return> to continue, or q <return> to quit---
 0x423f2004 "$ ?B[ä\030@\005", 0x4018e45b "\211Æë¢Ç\004$\005", 0x5 <Address 0x5 out of bounds>,
 0x41c34aef "ACRO_OFFSET", 0x4240c7f0 "tempvar", 0x4241f9f8 "ðÇ@B¸!BB", 0x42424364 "(¾!\b",
 0x41c34aee "MACRO_OFFSET", 0x423f2024 "\024&?BVBÃA\001", 0x4018e45b "\211Æë¢Ç\004$\005"}
       passdata = '\0' <repeats 8191 times>
       stacklen = 0
       tmp = "\e[1;36;40mVoiceMailMain\e[0;37;40m", '\0' <repeats 46 times>
       tmp2 = "\e[1;35;40mSIP/0004f201e35d-a-8233\e[0;37;40m", '\0' <repeats 36 times>
       tmp3 = "\e[1;35;40m\e[0;37;40m\0;40m\0\07;40m\00;37;40m\00;37;40m", '\0' <repeats 362 times>, "Eë\023@·\216#@\0\0\0\0\0\0\0\0úk\002@\0\0\0\0TZ\0\0\0\0\0\0 \t$@\001\0\0\0\001\0\0\0¤ß>Bõ\222\032@Ä\216#@Øü\017\b\0\0\0\0\0\0\0\001", '\0' <repeats 12 times>, "àk?B", '\0' <repeats 12 times>, "\236m\002@", '\0' <repeats 12 times>, "\204«\002@.\200#@Ì\032$@Ä\216#@\204«\002@.\200#@\a\0\0\0¤ß>BÙ?"...
ASTERISK-3  0x41c34256 in macro_exec (chan=0x42422b88, data=0x1) at app_macro.c:141
       tmp = "std-exten", '\0' <repeats 246 times>
       rest = 0x0
       fullmacro = "macro-std-exten\0¬%?BP\0\0\0uÐ\r\b \t$@\235\0\0\0\0P\001@ô$?B¾\001\030@\200í#@\0P\001@\235\0\0\0di\002@\001\0\0\0\200í#@\024%?B\021k\002@"
       varname = "P\0\0\0üF?B\224%?B \t$@¤$?BD\035\036@\235\0\0\0è\020\030@\001\0\0\0\0P\001@\235\0\0\0¢\t\b\b\t\0\0\0ð¸@B<%?Bt%\030@\200í#@\0P\001@Ô$?B \002\030@"
       oldargs = {0x0 <repeats 81 times>}
       argc = 1
       x = 1
       res = 0
       oldexten = "3530", '\0' <repeats 251 times>
       oldpriority = 9
       pc = "9", '\0' <repeats 78 times>
       oldcontext = "toll-access", '\0' <repeats 244 times>
       offsets = 0x42422c70 ""
       offset = 0
       setmacrocontext = 1
       save_macro_exten = 0x0
       save_macro_context = 0x0
       save_macro_priority = 0x0
---Type <return> to continue, or q <return> to quit---
       save_macro_offset = 0x0
ASTERISK-4  0x08077368 in pbx_exec (c=0x42422b88, app=0x81b5440, data=0x423f474c, newstack=1111951664)
   at pbx.c:469
       res = 0
       saved_c_appl = 0x42422b88 "SIP/0004f201e35d-a-8233"
       saved_c_data = 0x1 <Address 0x1 out of bounds>
       stack = -1
       execute = (int (*)(struct ast_channel *, void *)) 0x41c33cc0 <macro_exec>
ASTERISK-5  0x0807e494 in pbx_extension_helper (c=0x42422b88, context=0x42422ce0 "macro-std-exten",
   exten=0x81b5440 "Macro", priority=9, callerid=0x4240b8f0 "Betty Silverberg <9852463530>",
   action=1111632776) at pbx.c:1288
       e = (struct ast_exten *) 0x1
       sw = (struct ast_switch *) 0x0
       data = 0x0
       newstack = 1
       res = 0
       status = 4
       incstack = {0x81da7f8 "ø\224\032\b §\021\b6,GotoIf($[\"${ARG1}\" = \"\"]?cause-0,11)",
 0x810bdc8 "parkedcalls", 0x81dafd0 "X³\035\b°¨\035\bcess", 0x81db3c0 "",
 0x81de0e8 "ä\025$@ä\025$@\020", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
 0x42422b88 "SIP/0004f201e35d-a-8233", 0x8088b78 "\200|0ÿ \177\nÆD0ÿ",
 0x423f68fc "Betty Silverberg", 0x22 <Address 0x22 out of bounds>, 0x0 <repeats 68 times>,
 0x423f690e "9852463530", 0x8088a3c "\205Àuà\213MðF\210\0349A\211Mð\017¶\024>\210Ó\204ÛuÔ\215t&",
 0x80dd1b5 "( )-.", 0x30 <Address 0x30 out of bounds>, 0xa <Address 0xa out of bounds>,
 0x8219dd0 "1119973402.4115", 0x4242433c "1119973402.4115", 0x42422b88 "SIP/0004f201e35d-a-8233",
 0x423f6964 "Äj?B-ë\a\b\t", 0x808df6f "\213\233à\003", 0x8219dd0 "1119973402.4115",
 0x4242433c "1119973402.4115", 0x1f <Address 0x1f out of bounds>, 0x402413e0 "", 0x0, 0x0, 0x0,
 0x40026d9e "\201Ãæ=", 0x0, 0x402413e0 "", 0x423f68fc "Betty Silverberg",
 0x423f690e "9852463530", 0x74746542 <Address 0x74746542 out of bounds>,
 0x69532079 <Address 0x69532079 out of bounds>, 0x7265766c <Address 0x7265766c out of bounds>,
 0x67726562 <Address 0x67726562 out of bounds>, 0x38390000 <Address 0x38390000 out of bounds>,
 0x36343235 <Address 0x36343235 out of bounds>, 0x30333533 <Address 0x30333533 out of bounds>,
 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808d6ea "\213\233à\003",
---Type <return> to continue, or q <return> to quit---
 0x8219d90 "\032pÁB\021\036\001", 0x0, 0x0, 0x0}
       passdata = "std-exten", '\0' <repeats 8182 times>
       stacklen = 5
       tmp = "\e[1;36;40mMacro\e[0;37;40m", '\0' <repeats 54 times>
       tmp2 = "\e[1;35;40mSIP/0004f201e35d-a-8233\e[0;37;40m", '\0' <repeats 36 times>
       tmp3 = "\e[1;35;40mstd-exten\e[0;37;40m\0m\0\00m\0-b\e[0;37;40m\00m", '\0' <repeats 8140 times>
ASTERISK-6 0x0807eb2d in ast_pbx_run (c=0x42422b88) at pbx.c:1769
       digit = 0 '\0'
       exten = '\0' <repeats 255 times>
       pos = 0
       waittime = 1
       res = 0
ASTERISK-7 0x0807db21 in pbx_thread (data=0x0) at pbx.c:1992
No locals.
ASTERISK-8 0x40023600 in pthread_detach () from /lib/i686/libpthread.so.0
No symbol table info available.
(gdb)
Comments:By: Kevin P. Fleming (kpfleming) 2005-07-05 16:17:29

As I mentioned in the other bug, unless we have a properly produced backtrace, we can't do anything to debug the problem. Can you do anything to make this problem occur with a non-optimized build of Asterisk so that a backtrace can be produced?