[Home]

Summary:ASTERISK-10537: revision 85764 introduces crash
Reporter:Dmitry Andrianov (dimas)Labels:
Date Opened:2007-10-15 19:33:52Date Closed:2007-10-16 08:16:15
Priority:CriticalRegression?No
Status:Closed/CompleteComponents:Applications/app_queue
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:
Description:Rev 85687 works fine, 85764 crashes in app_queue.
make clean/distclean does not help.
See btfull + valgrind output below.

****** ADDITIONAL INFORMATION ******

(gdb) bt full
#0  0x00167402 in __kernel_vsyscall ()
No symbol table info available.
#1  0x41661c00 in raise () from /lib/libc.so.6
No symbol table info available.
#2  0x41663451 in abort () from /lib/libc.so.6
No symbol table info available.
#3  0x416971fb in __libc_message () from /lib/libc.so.6
No symbol table info available.
#4  0x4169ef5d in _int_free () from /lib/libc.so.6
No symbol table info available.
ASTERISK-1  0x416a25b0 in free () from /lib/libc.so.6
No symbol table info available.
ASTERISK-2  0x00239eea in device_state_thread (data=0x0) at app_queue.c:660
       sc = (struct statechange *) 0x97ce8c8
ASTERISK-3  0x080f9fde in dummy_start (data=0x97a5ec0) at utils.c:831
       __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {1098625012, 0, -1216058480, -1216060472, 1049792232,
       -2129038810}, __mask_was_saved = 0}}, __pad = {0xb7846480, 0x0, 0x0, 0x0}}
       __cancel_routine = (void (*)(void *)) 0x8068b9d <ast_unregister_thread>
       __cancel_arg = (void *) 0xb7846b90
       not_first_call = 0
       ret = (void *) 0x0
       a = {start_routine = 0x239dec <device_state_thread>, data = 0x0,
 name = 0x97ad558 "device_state_thread  started at [ 4695] app_queue.c load_module()"}
ASTERISK-4  0x417ac2db in start_thread () from /lib/libpthread.so.0
No symbol table info available.
ASTERISK-5  0x4170612e in clone () from /lib/libc.so.6
No symbol table info available.


Also, valgrind sees this:

==00:00:01:17.360 2680== Thread 23:
==00:00:01:17.360 2680== Invalid free() / delete / delete[]
==00:00:01:17.360 2680==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==00:00:01:17.361 2680==    by 0x4C40EE9: ??? (app_queue.c:660)
==00:00:01:17.361 2680==    by 0x80F9FDD: dummy_start (utils.c:831)
==00:00:01:17.361 2680==    by 0x417AC2DA: start_thread (in /lib/libpthread-2.5.so)
==00:00:01:17.361 2680==    by 0x4170612D: clone (in /lib/libc-2.5.so)
==00:00:01:17.361 2680==  Address 0x519C860 is 0 bytes inside a block of size 17 free'd
==00:00:01:17.361 2680==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==00:00:01:17.361 2680==    by 0x4C40A1E: ??? (app_queue.c:567)
==00:00:01:17.361 2680==    by 0x4C40EDE: ??? (app_queue.c:658)
==00:00:01:17.361 2680==    by 0x80F9FDD: dummy_start (utils.c:831)
==00:00:01:17.361 2680==    by 0x417AC2DA: start_thread (in /lib/libpthread-2.5.so)
==00:00:01:17.361 2680==    by 0x4170612D: clone (in /lib/libc-2.5.so)
Comments:By: Andrew Lindh (andrew) 2007-10-15 19:43:15

I posted as bug ASTERISK-10536 too