[Home]

Summary:ASTERISK-14428: Asterisk Crashed When made a attended Transfer
Reporter:Bereterbide Marcelo (marhbere)Labels:
Date Opened:2009-07-07 16:22:47Date Closed:2009-09-08 00:00:48
Priority:CriticalRegression?No
Status:Closed/CompleteComponents:PBX/General
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:( 0) gdb.core.090707
Description:Last log before Crash:
[2009-07-07 18:05:01.089] DEBUG[32705] chan_sip.c: Attended transfer: Will use Replace-Call-ID : c0565c02-1143cbe6@10.240.18.203 (No check of from/to tags)
[2009-07-07 18:05:01.089] DEBUG[32705] chan_sip.c: Trying to put 'SIP/2.0 20' onto UDP socket destined for 10.240.18.203:5060
[2009-07-07 18:05:01.089] DEBUG[32705] channel.c: Planning to masquerade channel Local/6306@agents-f41d;2 into the structure of SIP/361-0971cb18
[2009-07-07 18:05:01.090] DEBUG[32705] channel.c: Done planning to masquerade channel Local/6306@agents-f41d;2 into the structure of SIP/361-0971cb18
[2009-07-07 18:05:01.090] DEBUG[32705] chan_sip.c: Trying to put 'NOTIFY sip' onto UDP socket destined for 10.240.18.203:5060
[2009-07-07 18:05:01.090] DEBUG[32705] chan_sip.c: SIP attended transfer: Unlocking channel SIP/361-0971cb18
[2009-07-07 18:05:01.090] DEBUG[27837] channel.c: Got clone lock for masquerade on 'Local/6306@agents-f41d;2' at 0xb73aea1c
[2009-07-07 18:05:01.090] DEBUG[27837] chan_sip.c: Hangup call Local/6306@agents-f41d;2<MASQ>, SIP callid c0565c02-1143cbe6@10.240.18.203
[2009-07-07 18:05:01.090] DEBUG[27837] chan_sip.c: Trying to put 'BYE sip:36' onto UDP socket destined for 10.240.18.203:5060
[2009-07-07 18:05:01.090] DEBUG[27837] channel.c: Set channel Local/6306@agents-f41d;2 to write format gsm
[2009-07-07 18:05:01.090] DEBUG[27837] channel.c: Set channel Local/6306@agents-f41d;2 to read format ulaw
[2009-07-07 18:05:01.090] DEBUG[27837] channel.c: Putting channel Local/6306@agents-f41d;2 in 2/4 formats
[2009-07-07 18:05:01.090] DEBUG[27837] channel.c: Released clone lock on 'SIP/361-0971cb18<ZOMBIE>'
[2009-07-07 18:05:01.090] DEBUG[27837] channel.c: Done Masquerading Local/6306@agents-f41d;2 (6)
[2009-07-07 18:05:01.091] DEBUG[17850] audiohook.c: Read factory 0xb66c9ac8 and write factory 0xb66ca4e4 both fail to provide 160 samples
[2009-07-07 18:05:01.102] DEBUG[6468] audiohook.c: Read factory 0xb54f6ac8 and write factory 0xb54f74e4 both fail to provide 160 samples
[2009-07-07 18:05:01.111] DEBUG[17850] audiohook.c: Read factory 0xb66c9ac8 and write factory 0xb66ca4e4 both fail to provide 160 samples
[2009-07-07 18:05:01.122] DEBUG[6468] audiohook.c: Read factory 0xb54f6ac8 and write factory 0xb54f74e4 both fail to provide 160 samples
[2009-07-07 18:05:01.131] DEBUG[17850] audiohook.c: Read factory 0xb66c9ac8 and write factory 0xb66ca4e4 both fail to provide 160 samples
[2009-07-07 18:05:01.142] DEBUG[6468] audiohook.c: Read factory 0xb54f6ac8 and write factory 0xb54f74e4 both fail to provide 160 samples
[2009-07-07 18:05:09.242] VERBOSE[27865] logger.c: [2009-07-07 18:05:09.242]  Asterisk Event Logger Started /var/log/asterisk/event_log
[2009-07-07 18:05:09.242] WARNING[27865] config.c: Realtime mapping for 'queue_log' found to engine 'mysql', but the engine is not available
[2009-07-07 18:05:09.397] VERBOSE[27865] logger.c: [2009-07-07 18:05:09.397]  Asterisk Dynamic Loader Starting:
Comments:By: Jason Parker (jparker) 2009-08-25 15:58:05

Definitely the same issue as ASTERISK-14129

By: Digium Subversion (svnbot) 2009-09-01 15:40:47

Repository: asterisk-addons
Revision: 1024

U   branches/1.6.0/formats/format_mp3.c

------------------------------------------------------------------------
r1024 | russell | 2009-09-01 15:40:16 -0500 (Tue, 01 Sep 2009) | 45 lines

Fix memory corruption caused by format_mp3.

format_mp3 claimed that it provided AST_FRIENDLY_OFFSET in frames returned by
read().  However, it lied.  This means that other parts of the code that
attempted to make use of the offset buffer would end up corrupting the fields
in the ast_filestream structure.  This resulted in quite a few crashes due to
unexpected values for fields in ast_filestream.

This patch closes out quite a few bugs.  However, some of these bugs have been
open for a while and have been an area where more than one bug has been
discussed.  So with that said, anyone that is following one of the issues
closed here, if you still have a problem, please open a new bug report for the
specific problem you are still having.  If you do, please ensure that the bug
report is based on the newest version of Asterisk, and that this patch is
applied if format_mp3 is in use.  Thanks!

(closes issue ASTERISK-14129)
Reported by: jvandal
Tested by: aragon, russell, zerohalo, marhbere, rgj

(closes issue ASTERISK-14007)
Reported by: aragon

(closes issue ASTERISK-14141)
Reported by: axisinternet

(closes issue ASTERISK-14074)
Reported by: maxnuv

(closes issue ASTERISK-14374)
Reported by: aragon

(closes issue ASTERISK-14203)
Reported by: amorsen
Tested by: amorsen

(closes issue ASTERISK-14718)
Reported by: jensvb

(closes issue ASTERISK-14673)
Reported by: thom4fun

(closes issue ASTERISK-14428)
Reported by: marhbere

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk-addons?view=rev&revision=1024

By: Digium Subversion (svnbot) 2009-09-01 15:42:46

Repository: asterisk-addons
Revision: 1025

U   branches/1.6.1/formats/format_mp3.c

------------------------------------------------------------------------
r1025 | russell | 2009-09-01 15:42:24 -0500 (Tue, 01 Sep 2009) | 45 lines

Fix memory corruption caused by format_mp3.

format_mp3 claimed that it provided AST_FRIENDLY_OFFSET in frames returned by
read().  However, it lied.  This means that other parts of the code that
attempted to make use of the offset buffer would end up corrupting the fields
in the ast_filestream structure.  This resulted in quite a few crashes due to
unexpected values for fields in ast_filestream.

This patch closes out quite a few bugs.  However, some of these bugs have been
open for a while and have been an area where more than one bug has been
discussed.  So with that said, anyone that is following one of the issues
closed here, if you still have a problem, please open a new bug report for the
specific problem you are still having.  If you do, please ensure that the bug
report is based on the newest version of Asterisk, and that this patch is
applied if format_mp3 is in use.  Thanks!

(closes issue ASTERISK-14129)
Reported by: jvandal
Tested by: aragon, russell, zerohalo, marhbere, rgj

(closes issue ASTERISK-14007)
Reported by: aragon

(closes issue ASTERISK-14141)
Reported by: axisinternet

(closes issue ASTERISK-14074)
Reported by: maxnuv

(closes issue ASTERISK-14374)
Reported by: aragon

(closes issue ASTERISK-14203)
Reported by: amorsen
Tested by: amorsen

(closes issue ASTERISK-14718)
Reported by: jensvb

(closes issue ASTERISK-14673)
Reported by: thom4fun

(closes issue ASTERISK-14428)
Reported by: marhbere

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk-addons?view=rev&revision=1025

By: Digium Subversion (svnbot) 2009-09-01 15:43:36

Repository: asterisk-addons
Revision: 1026

U   branches/1.6.2/formats/format_mp3.c

------------------------------------------------------------------------
r1026 | russell | 2009-09-01 15:43:13 -0500 (Tue, 01 Sep 2009) | 45 lines

Fix memory corruption caused by format_mp3.

format_mp3 claimed that it provided AST_FRIENDLY_OFFSET in frames returned by
read().  However, it lied.  This means that other parts of the code that
attempted to make use of the offset buffer would end up corrupting the fields
in the ast_filestream structure.  This resulted in quite a few crashes due to
unexpected values for fields in ast_filestream.

This patch closes out quite a few bugs.  However, some of these bugs have been
open for a while and have been an area where more than one bug has been
discussed.  So with that said, anyone that is following one of the issues
closed here, if you still have a problem, please open a new bug report for the
specific problem you are still having.  If you do, please ensure that the bug
report is based on the newest version of Asterisk, and that this patch is
applied if format_mp3 is in use.  Thanks!

(closes issue ASTERISK-14129)
Reported by: jvandal
Tested by: aragon, russell, zerohalo, marhbere, rgj

(closes issue ASTERISK-14007)
Reported by: aragon

(closes issue ASTERISK-14141)
Reported by: axisinternet

(closes issue ASTERISK-14074)
Reported by: maxnuv

(closes issue ASTERISK-14374)
Reported by: aragon

(closes issue ASTERISK-14203)
Reported by: amorsen
Tested by: amorsen

(closes issue ASTERISK-14718)
Reported by: jensvb

(closes issue ASTERISK-14673)
Reported by: thom4fun

(closes issue ASTERISK-14428)
Reported by: marhbere

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk-addons?view=rev&revision=1026

By: Digium Subversion (svnbot) 2009-09-01 15:45:20

Repository: asterisk
Revision: 215212

U   trunk/addons/format_mp3.c

------------------------------------------------------------------------
r215212 | russell | 2009-09-01 15:44:57 -0500 (Tue, 01 Sep 2009) | 45 lines

Fix memory corruption caused by format_mp3.

format_mp3 claimed that it provided AST_FRIENDLY_OFFSET in frames returned by
read().  However, it lied.  This means that other parts of the code that
attempted to make use of the offset buffer would end up corrupting the fields
in the ast_filestream structure.  This resulted in quite a few crashes due to
unexpected values for fields in ast_filestream.

This patch closes out quite a few bugs.  However, some of these bugs have been
open for a while and have been an area where more than one bug has been
discussed.  So with that said, anyone that is following one of the issues
closed here, if you still have a problem, please open a new bug report for the
specific problem you are still having.  If you do, please ensure that the bug
report is based on the newest version of Asterisk, and that this patch is
applied if format_mp3 is in use.  Thanks!

(closes issue ASTERISK-14129)
Reported by: jvandal
Tested by: aragon, russell, zerohalo, marhbere, rgj

(closes issue ASTERISK-14007)
Reported by: aragon

(closes issue ASTERISK-14141)
Reported by: axisinternet

(closes issue ASTERISK-14074)
Reported by: maxnuv

(closes issue ASTERISK-14374)
Reported by: aragon

(closes issue ASTERISK-14203)
Reported by: amorsen
Tested by: amorsen

(closes issue ASTERISK-14718)
Reported by: jensvb

(closes issue ASTERISK-14673)
Reported by: thom4fun

(closes issue ASTERISK-14428)
Reported by: marhbere

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=215212

By: Digium Subversion (svnbot) 2009-09-01 15:45:51

Repository: asterisk
Revision: 215213

_U  branches/1.6.2/

------------------------------------------------------------------------
r215213 | russell | 2009-09-01 15:45:26 -0500 (Tue, 01 Sep 2009) | 51 lines

Blocked revisions 215212 via svnmerge

........
 r215212 | russell | 2009-09-01 15:44:13 -0500 (Tue, 01 Sep 2009) | 45 lines
 
 Fix memory corruption caused by format_mp3.
 
 format_mp3 claimed that it provided AST_FRIENDLY_OFFSET in frames returned by
 read().  However, it lied.  This means that other parts of the code that
 attempted to make use of the offset buffer would end up corrupting the fields
 in the ast_filestream structure.  This resulted in quite a few crashes due to
 unexpected values for fields in ast_filestream.
 
 This patch closes out quite a few bugs.  However, some of these bugs have been
 open for a while and have been an area where more than one bug has been
 discussed.  So with that said, anyone that is following one of the issues
 closed here, if you still have a problem, please open a new bug report for the
 specific problem you are still having.  If you do, please ensure that the bug
 report is based on the newest version of Asterisk, and that this patch is
 applied if format_mp3 is in use.  Thanks!
 
 (closes issue ASTERISK-14129)
 Reported by: jvandal
 Tested by: aragon, russell, zerohalo, marhbere, rgj
 
 (closes issue ASTERISK-14007)
 Reported by: aragon
 
 (closes issue ASTERISK-14141)
 Reported by: axisinternet
 
 (closes issue ASTERISK-14074)
 Reported by: maxnuv
 
 (closes issue ASTERISK-14374)
 Reported by: aragon
 
 (closes issue ASTERISK-14203)
 Reported by: amorsen
 Tested by: amorsen
 
 (closes issue ASTERISK-14718)
 Reported by: jensvb
 
 (closes issue ASTERISK-14673)
 Reported by: thom4fun
 
 (closes issue ASTERISK-14428)
 Reported by: marhbere
........

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=215213