[Home]

Summary:ASTERISK-10444: queue remove member <TAB> causes core dump and crash
Reporter:Adam Goryachev (adamg)Labels:
Date Opened:2007-10-04 09:26:08Date Closed:2007-10-04 09:34:09
Priority:CriticalRegression?No
Status:Closed/CompleteComponents:Applications/app_queue
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:
Description:This was originally posted as part of bug 0010724 but I was advised to create a new bug report so here it is.

I just updated to current SVN last night, and this morning found this problem. From the CLI if I type "queue remove member <TAB>" then asterisk will crash. I've reproduced this twice.

queue remove member *** glibc detected *** free(): invalid pointer: 0x08247d70 ***
Asterisk ended with exit status 0

There was nothing written to the log files but there is a core dump.
I am using version SVN-branch-1.4-r84581M
I am using debian stable with all updates
I tried to read the guidelines to find out what to do with the core file, but it simply said to "see the notes below" but there were no notes below on gdb.... (the test gdb only appears once on the page).

I re updated again to the latest 1.4 from svn when I was asked and had the same result.

Anyway, hopefully this is a simple fix, but if you need additional info, let me know and I will re-test or provide the info needed.

Regards,
Adam

****** ADDITIONAL INFORMATION ******

I don't know if this is the correct method to generate the debug info, so if not, please let me know what you need, and I'll provide the info for you.

I used the command "gdb `which asterisk` -c core.xxxx"
Core was generated by `asterisk -vvvg -c'.
Program terminated with signal 6, Aborted.
#0  0xb7d52b01 in kill () from /lib/libc.so.6
(gdb)
(gdb) bt
#0  0xb7d52b01 in kill () from /lib/libc.so.6
#1  0xb7ec5f65 in pthread_kill () from /lib/libpthread.so.0
#2  0xb7ec5fab in raise () from /lib/libpthread.so.0
#3  0xb7d52894 in raise () from /lib/libc.so.6
#4  0xb7d53ccc in abort () from /lib/libc.so.6
ASTERISK-1  0xb7d86b9f in __fsetlocking () from /lib/libc.so.6
ASTERISK-2  0xb7d8c110 in __libc_malloc_pthread_startup () from /lib/libc.so.6
ASTERISK-3  0xb7d8d6b8 in free () from /lib/libc.so.6
ASTERISK-4  0x0808d9e3 in handle_commandnummatches (fd=43, argc=4, argv=0xb692cb04) at cli.c:1856
ASTERISK-5  0x0808c97b in ast_cli_command (fd=43, s=0xb692cc7c "_COMMAND NUMMATCHES \"queue remove member \" \"\"") at cli.c:1979
ASTERISK-6 0x0806bc92 in netconsole (vconsole=0x8165c20) at asterisk.c:939
ASTERISK-7 0x080f7e80 in dummy_start (data=0x823bba0) at utils.c:793
ASTERISK-8 0xb7ec2c51 in pthread_start_thread () from /lib/libpthread.so.0
ASTERISK-9 0xb7de441a in clone () from /lib/libc.so.6

Thanks Adam
Comments:By: Digium Subversion (svnbot) 2007-10-04 09:31:36

Repository: asterisk
Revision: 84637

U   branches/1.4/apps/app_queue.c

------------------------------------------------------------------------
r84637 | file | 2007-10-04 09:31:35 -0500 (Thu, 04 Oct 2007) | 4 lines

Create a duplicate of the channel's member name as the tab completion stuff will free it.
(closes issue ASTERISK-10444)
Reported by: adamg

------------------------------------------------------------------------
By: Digium Subversion (svnbot) 2007-10-04 09:34:09

Repository: asterisk
Revision: 84638

_U  trunk/
U   trunk/apps/app_queue.c

------------------------------------------------------------------------
r84638 | file | 2007-10-04 09:34:09 -0500 (Thu, 04 Oct 2007) | 12 lines

Merged revisions 84637 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.4

........
r84637 | file | 2007-10-04 11:51:57 -0300 (Thu, 04 Oct 2007) | 4 lines

Create a duplicate of the channel's member name as the tab completion stuff will free it.
(closes issue ASTERISK-10444)
Reported by: adamg

........

------------------------------------------------------------------------