Mantis Bugtracker

Viewing Issue Simple Details Jump to Notes ] View Advanced ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0000326 [Yate - Yet Another Telephony Engine] module crash random 2012-12-10 15:13 2013-01-17 16:03
Reporter fed View Status public  
Assigned To paulc
Priority normal Resolution open  
Status feedback   Product Version 4.x
Summary 0000326: Crash during processing many outgoing calls to ss7
Description Yate chrashes when trying to make many outgoing calls via ss7 link
Additional Information Core was generated by `/usr/local/bin/yate -d -p /var/run/yate.pid -vvvvvvvvvv -d -s -r -C -F -Dmz -p'.
Program terminated with signal 11, Segmentation fault.
#0 0x00007fcf8a4a1e18 in TelEngine::ObjList::remove (this=<value optimized out>, delobj=true) at ObjList.cpp:236
236 tmp->destruct();
....
....

Thread 1 (Thread 0x7fcf86238700 (LWP 12535)):
#0 0x00007fcf8a4a1e18 in TelEngine::ObjList::remove (this=<value optimized out>, delobj=true) at ObjList.cpp:236
0000001 0x00007fcf8a4a1eac in TelEngine::ObjList::clear (this=0x7fcd014d2e60) at ObjList.cpp:260
0000002 0x00007fcf8a4a1ef7 in TelEngine::ObjList::~ObjList (this=0x7fcd014d2e60, __in_chrg=<value optimized out>) at ObjList.cpp:43
0000003 0x00007fcf886a511a in (anonymous namespace)::ForkMaster::~ForkMaster (this=0x7fcd014d2df0, __in_chrg=<value optimized out>) at callfork.cpp:190
0000004 0x00007fcf886a51c9 in (anonymous namespace)::ForkMaster::~ForkMaster (this=0x7fcd014d2df0, __in_chrg=<value optimized out>) at callfork.cpp:190
0000005 0x00007fcf8a4a156e in TelEngine::RefObject::deref (this=<value optimized out>) at TelEngine.cpp:757
0000006 0x00007fcf8a4cafa9 in TelEngine::CallEndpoint::disconnect (this=0x7fcf280101b0, final=false, reason=0x7fcf28007c70 "normal-clearing", notify=true, params=0x7fcf28010238) at Channel.cpp:186
0000007 0x00007fcf86877a5f in disconnect (event=0x7fcf28008890, this=0x7fcf86a81b40) at ../yatephone.h:1206
0000008 disconnect (event=0x7fcf28008890, this=0x7fcf86a81b40) at server/ysigchan.cpp:90
0000009 (anonymous namespace)::SigDriver::handleEvent (event=0x7fcf28008890, this=0x7fcf86a81b40) at server/ysigchan.cpp:2593
0000010 0x00007fcf8686cfcc in (anonymous namespace)::SigTrunkThread::run (this=0x225b3c0) at server/ysigchan.cpp:4783
0000011 0x00007fcf8a4a49d5 in TelEngine::ThreadPrivate::run (this=0x2240dd0) at Thread.cpp:347
0000012 0x00007fcf8a4a4a19 in TelEngine::ThreadPrivate::startFunc (arg=<value optimized out>) at Thread.cpp:550
0000013 0x00007fcf8a780851 in start_thread () from /lib64/libpthread.so.0
0000014 0x00007fcf89a1011d in clone () from /lib64/libc.so.6




Tags No tags attached.
Attached Files

- Relationships

-  Notes
(0000498)
fed (reporter)
2012-12-17 15:01

Please rename the problem:
In case callfork module is used , a crash happens when hanging up incoming and outgoing legs the same time .
(0000499)
fed (reporter)
2012-12-17 15:04

One more crash:

Thread 1 (Thread 0x7f93014e6700 (LWP 37483)):
#0 0x00007f919800ac90 in ?? ()
0000001 0x00007f9305496165 in TelEngine::ListIterator::get (this=<value optimized out>, index=<value optimized out>) at Iterator.cpp:111
0000002 0x00007f93054961ae in TelEngine::ListIterator::get (this=0x7f93014e5a60) at Iterator.cpp:120
0000003 0x00007f9303684898 in (anonymous namespace)::ForkMaster::clear (this=0x7f91980045e0, softly=false) at callfork.cpp:602
0000004 0x00007f9303687fde in (anonymous namespace)::ForkMaster::~ForkMaster (this=0x7f91980045e0, __in_chrg=<value optimized out>) at callfork.cpp:170
0000005 0x00007f93036881c9 in (anonymous namespace)::ForkMaster::~ForkMaster (this=0x7f91980045e0, __in_chrg=<value optimized out>) at callfork.cpp:190
0000006 0x00007f930548456e in TelEngine::RefObject::deref (this=<value optimized out>) at TelEngine.cpp:757
0000007 0x00007f93054adfa9 in TelEngine::CallEndpoint::disconnect (this=0x7f92d0012660, final=false, reason=0x7f92d000f3d0 "normal-clearing", notify=true, params=0x7f92d00126e8) at Channel.cpp:186
0000008 0x00007f930185aa5f in disconnect (event=0x7f92d0009450, this=0x7f9301a64b40) at ../yatephone.h:1206
0000009 disconnect (event=0x7f92d0009450, this=0x7f9301a64b40) at server/ysigchan.cpp:90
0000010 (anonymous namespace)::SigDriver::handleEvent (event=0x7f92d0009450, this=0x7f9301a64b40) at server/ysigchan.cpp:2593
0000011 0x00007f930184ffcc in (anonymous namespace)::SigTrunkThread::run (this=0xa93870) at server/ysigchan.cpp:4783
0000012 0x00007f93054879d5 in TelEngine::ThreadPrivate::run (this=0xa93a10) at Thread.cpp:347
0000013 0x00007f9305487a19 in TelEngine::ThreadPrivate::startFunc (arg=<value optimized out>) at Thread.cpp:550
0000014 0x00007f9305763851 in start_thread () from /lib64/libpthread.so.0
0000015 0x00007f93049f311d in clone () from /lib64/libc.so.6
(0000500)
fed (reporter)
2012-12-17 15:17

a piece of log led to crash:


20121215212138.841076 <sip:INFO> 'udp:0.0.0.0:5060' received 442 bytes SIP message from XXX.XXX.XXX.5:5060 [0x9d3590]
------
SIP/2.0 603 Decline
Via: SIP/2.0/UDP XXX.XXX.XXX.9:5060;rport;branch=z9hG4bK752550828
From: "+35846ZZZZZZZ" <sip:+35846ZZZZZZZ@XXX.XXX.XXX.9>;tag=1402226273
To: <sip:50026YYYYYYYYYY@XXX.XXX.XXX.5>;tag=42306500ffffff10ff00525400ffffff
Call-ID: 1497360362@XXX.XXX.XXX.9
CSeq: 140099 INVITE
Server: MERA MSIP v.1.0.2
Reason: Q.850;cause=31;text="Normal, unspecified"
Content-Length: 0
X-CallRef: fork/81785/1
X-CarrierOut: 50023

------
20121215212138.844409 <sip/120955:ALL> YateSIPConnection::hangup() state=1 trans=0x7f9198003500 error='forbidden' code=60
Sniffed 'chan.rtp' time=1355599298.844434
  thread=0x9cf1a0 'YSIP EndPoint'
  data=(nil)
  retval='(null)'
  param['rtpid'] = 'yrtp/1227666327'
  param['media'] = 'audio'
  param['transport'] = 'RTP/AVP'
  param['terminate'] = 'true'
  param['call_direction'] = 'outgoing'
  param['call_address'] = 'XXX.XXX.XXX.5:5060'
  param['call_status'] = 'progressing'
  param['call_billid'] = ''
--> EVENT: chan.rtp
20121215212138.844655 <yrtp:ALL> RTP/AVP message received
20121215212138.844705 <yrtp:ALL> Wrapper 0x7f919800f520 found by ID 'yrtp/1227666327'
20121215212138.844730 <yrtp:INFO> YRTPWrapper::terminate() [0x7f919800f520]
20121215212138.859542 <els-scd-1041/ISUP:INFO> Received message (0x7f92dc002790)
-----
REL [cic=99 label=0-130-1:3-139-4:3] 02 00 02 80 90
  protocol-type='itu-t'
  message-type='REL'
  CauseIndicators.coding='CCITT'
  CauseIndicators.location='U'
  CauseIndicators='normal-clearing'
-----
20121215212138.864718 <els-scd-1041/ISUP:INFO> Sending message (0x7f92d0012ab0)
-----
RLC [cic=99 label=3-139-4:0-130-1:3] 00
-----
20121215212138.864854 >>> DataTranslator::detachChain(0x7f919800fc20,0xabb5a0)
20121215212138.864870 <<< DataTranslator::detachChain
Returned true 'chan.rtp' delay=0.020409
  thread=0x9cf1a0 'YSIP EndPoint'
  data=(nil)
  retval='(null)'
  param['rtpid'] = 'yrtp/1227666327'
  param['media'] = 'audio'
  param['transport'] = 'RTP/AVP'
  param['terminate'] = 'true'
  param['call_direction'] = 'outgoing'
  param['call_address'] = 'XXX.XXX.XXX.5:5060'
  param['call_status'] = 'progressing'
  param['call_billid'] = ''ACK sip:50026YYYYYYYYYY@XXX.XXX.XXX.5 SIP/2.0
Via: SIP/2.0/UDP XXX.XXX.XXX.9:5060;rport;branch=z9hG4bK752550828
From: "+35846ZZZZZZZ" <sip:+35846ZZZZZZZ@XXX.XXX.XXX.9>;tag=1402226273
To: <sip:50026YYYYYYYYYY@XXX.XXX.XXX.5>;tag=42306500ffffff10ff00525400ffffff
Call-ID: 1497360362@XXX.XXX.XXX.9
CSeq: 140099 ACK
Max-Forwards: 20
Contact: <sip:+35846ZZZZZZZ@XXX.XXX.XXX.9:5060>
User-Agent: YATE/4.2.0
Content-Length: 0

------
20121215212138.865392 <yrtp:ALL> YRTPWrapper::~YRTPWrapper() bidir 'audio' [0x7f919800f520]
20121215212138.865452 <ALL> Cleaning up RTP 0x7f919800f690 [0x7f919800f520]
Supervisor: child 37468 died on signal 11

  param['handlers'] = 'regexroute:1,yrtp:100'
  param['localip'] = 'XXX.XXX.XXX.9'
  param['localport'] = '25080'
  param['stats'] = 'PS=0,OS=0,PR=2015,OR=322400,PL=0'
  param['status'] = 'terminated'
20121215212138.864937 >>> DataTranslator::detachChain(0x7f919800fc20,0x7f90495c7d10)
20121215212138.864954 <<< DataTranslator::detachChain
20121215212138.864970 <sig/106093:CALL> Call hangup. Reason: 'normal-clearing' [0x7f92d0012660]
20121215212138.865091 <wave:ALL> WaveConsumer::~WaveConsumer() [0x7f9049370750] total=0 stamp=0
20121215212138.865119 >>> DataTranslator::detachChain(0x7f919800fc20,0x7f90494a58d0)
20121215212138.865129 <<< DataTranslator::detachChain
20121215212138.865137 <wave:ALL> WaveConsumer::~WaveConsumer() [0x7f90494a58d0] total=322400 stamp=329760
20121215212138.865154 <wave:INFO> WaveConsumer rate=7648 b/s
20121215212138.865178 <yrtp:ALL> YRTPSource::~YRTPSource() [0x7f919800fc20] wrapper=0x7f919800f520 ts=329760
20121215212138.865187 <sip/120955:ALL> YateSIPConnection::~YateSIPConnection() [0x7f919800c510]
20121215212138.865298 <yrtp:ALL> YRTPConsumer::~YRTPConsumer() [0x7f919800fd70] wrapper=0x7f919800f520 ts=0
20121215212138.865322 <sip:INFO> 'udp:0.0.0.0:5060' sending 'ACK sip:50026YYYYYYYYYY@XXX.XXX.XXX.5' 0x7f92f4061470 to XXX
------
ACK sip:50026YYYYYYYYYY@XXX.XXX.XXX.5 SIP/2.0
Via: SIP/2.0/UDP XXX.XXX.XXX.9:5060;rport;branch=z9hG4bK752550828
From: "+35846ZZZZZZZ" <sip:+35846ZZZZZZZ@XXX.XXX.XXX.9>;tag=1402226273
To: <sip:50026YYYYYYYYYY@XXX.XXX.XXX.5>;tag=42306500ffffff10ff00525400ffffff
Call-ID: 1497360362@XXX.XXX.XXX.9
CSeq: 140099 ACK
Max-Forwards: 20
Contact: <sip:+35846ZZZZZZZ@XXX.XXX.XXX.9:5060>
User-Agent: YATE/4.2.0
Content-Length: 0

------
20121215212138.865392 <yrtp:ALL> YRTPWrapper::~YRTPWrapper() bidir 'audio' [0x7f919800f520]
20121215212138.865452 <ALL> Cleaning up RTP 0x7f919800f690 [0x7f919800f520]
Supervisor: child 37468 died on signal 11
(0000501)
fed (reporter)
2012-12-17 15:20

it seems to be not connected to type of signalling.
(0000502)
paulc (administrator)
2012-12-19 16:23

Please state the version of Yate involved.

A possible fix was applied in SVN Rev 5261 (2012-09-14)
(0000503)
fed (reporter)
2012-12-19 16:55

version 4.2.

Ok , I will retest with SVN Rev 5261.
(0000504)
fed (reporter)
2013-01-02 15:03

It happend again, the problem is still open.


Thread 1 (Thread 0x7f2f41fae700 (LWP 41896)):
#0 0x00007f2eb049a470 in ?? ()
0000001 0x00007f2f46532165 in TelEngine::ListIterator::get (this=<value optimized out>, index=<value optimized out>) at Iterator.cpp:111
0000002 0x00007f2f465321ae in TelEngine::ListIterator::get (this=0x7f2f41fada60) at Iterator.cpp:120
0000003 0x00007f2f442d28b8 in (anonymous namespace)::ForkMaster::clear (this=0x7f2bc40180d0, softly=false) at callfork.cpp:627
0000004 0x00007f2f442d648e in (anonymous namespace)::ForkMaster::~ForkMaster (this=0x7f2bc40180d0, __in_chrg=<value optimized out>) at callfork.cpp:175
0000005 0x00007f2f442d6699 in (anonymous namespace)::ForkMaster::~ForkMaster (this=0x7f2bc40180d0, __in_chrg=<value optimized out>) at callfork.cpp:195
0000006 0x00007f2f4652056e in TelEngine::RefObject::deref (this=<value optimized out>) at TelEngine.cpp:757
0000007 0x00007f2f46549fa9 in TelEngine::CallEndpoint::disconnect (this=0x7f2ef801b920, final=false, reason=0x7f2ef800cdc0 "normal-clearing", notify=true, params=0x7f2ef801b9a8) at Channel.cpp:186
0000008 0x00007f2f424a8a5f in disconnect (event=0x7f2ef80058b0, this=0x7f2f426b2b40) at ../yatephone.h:1206
0000009 disconnect (event=0x7f2ef80058b0, this=0x7f2f426b2b40) at server/ysigchan.cpp:90
0000010 (anonymous namespace)::SigDriver::handleEvent (event=0x7f2ef80058b0, this=0x7f2f426b2b40) at server/ysigchan.cpp:2593
0000011 0x00007f2f4249dfcc in (anonymous namespace)::SigTrunkThread::run (this=0x132e6d0) at server/ysigchan.cpp:4783
0000012 0x00007f2f465239d5 in TelEngine::ThreadPrivate::run (this=0x1348990) at Thread.cpp:347
0000013 0x00007f2f46523a19 in TelEngine::ThreadPrivate::startFunc (arg=<value optimized out>) at Thread.cpp:550
0000014 0x00007f2f467ff851 in start_thread () from /lib64/libpthread.so.0
0000015 0x00007f2f45a8f11d in clone () from /lib64/libc.so.6

- Issue History
Date Modified Username Field Change
2012-12-10 15:13 fed New Issue
2012-12-17 15:01 fed Note Added: 0000498
2012-12-17 15:04 fed Note Added: 0000499
2012-12-17 15:17 fed Note Added: 0000500
2012-12-17 15:20 fed Note Added: 0000501
2012-12-19 16:23 paulc Note Added: 0000502
2012-12-19 16:23 paulc Assigned To => paulc
2012-12-19 16:23 paulc Status new => feedback
2012-12-19 16:23 paulc Category engine => module
2012-12-19 16:55 fed Note Added: 0000503
2013-01-02 15:03 fed Note Added: 0000504
2013-01-17 16:03 fed Note Added: 0000505
2013-01-17 16:43 fed Note Deleted: 0000505


Copyright © 2000 - 2008 Mantis Group
Powered by Mantis Bugtracker