2.1.1 segfault #782
Description
Hi!
Got a segfault.
Backtrace:
# gdb /usr/sbin/opensips core.opensips.sig11.2472
GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/sbin/opensips...Reading symbols from /usr/lib/debug/.build-id/00/d3f7460856ef4d6666bbe206363e1b0a1ac286.debug...done.
done.
[New LWP 2472]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/sbin/opensips -P /var/run/opensips/opensips.pid -m 2048 -M 256 -u opensips'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 internal_search_ID_avp (flags=0, id=3, avp=0x3339363423313a70) at usr_avp.c:316
316 if ( id==avp->id && (flags==0 || (flags&avp->flags))) {
(gdb) bt
#0 internal_search_ID_avp (flags=0, id=3, avp=0x3339363423313a70) at usr_avp.c:316
#1 search_next_avp (avp=0x7f2e29cd9970, val=0x0) at usr_avp.c:370
#2 0x000000000044a085 in next_branches (msg=0x7f2ea63965c0 <faked_req>) at serialize.c:399
#3 0x000000000042ae16 in do_action (a=0x7f2ea9ae8170, msg=0x7f2ea63965c0 <faked_req>) at action.c:1956
#4 0x0000000000433710 in run_action_list (a=<optimized out>, msg=0x7f2ea63965c0 <faked_req>) at action.c:169
#5 0x000000000045a5bc in eval_elem (e=0x7f2ea9ae8250, msg=0x7f2ea63965c0 <faked_req>, val=0x7fff803741c0) at route.c:1643
#6 0x0000000000459e1d in eval_expr (e=0x7f2ea9ae8250, msg=msg@entry=0x7f2ea63965c0 <faked_req>, val=val@entry=0x7fff803741c0)
at route.c:1988
#7 0x000000000042a794 in do_assign (msg=0x7f2ea63965c0 <faked_req>, a=0x7f2ea9ae82a0) at action.c:239
#8 0x000000000042bfe3 in do_action (a=0x7f2ea9ae82a0, msg=0x7f2ea63965c0 <faked_req>) at action.c:1973
#9 0x0000000000433710 in run_action_list (a=a@entry=0x7f2ea9ae7f78, msg=msg@entry=0x7f2ea63965c0 <faked_req>) at action.c:169
#10 0x0000000000433a78 in run_actions (msg=0x7f2ea63965c0 <faked_req>, a=0x7f2ea9ae7f78) at action.c:134
#11 run_top_route (a=0x7f2ea9ae7f78, msg=0x7f2ea63965c0 <faked_req>) at action.c:209
#12 0x00007f2ea614a410 in run_failure_handlers (t=<optimized out>) at t_reply.c:581
#13 t_should_relay_response (Trans=0x7f2e34a8d4d8, new_code=3, branch=714975864, should_store=0x7fff80374a30,
should_relay=0x7fff80374a2c, cancel_bitmap=0x7f2e29cd9958, reply=0x1ff828b8) at t_reply.c:911
#14 0x00007f2ea614a4a8 in relay_reply (t=0x7f2e34a8d4d8, p_msg=0x7f2ea9afc520, branch=2, msg_status=404,
cancel_bitmap=0x7f2e23daf190) at t_reply.c:1125
#15 0x00007f2ea614da3d in reply_received (p_msg=0x7f2ea9afc520) at t_reply.c:1505
#16 0x0000000000426ebc in forward_reply (msg=0x7f2ea9afc520) at forward.c:517
#17 0x0000000000436098 in receive_msg (
buf=0x7d08c0 <buf> "SIP/2.0 404 Not Found\r\nVia: SIP/2.0/UDP 192.168.0.1:5060;branch=z9hG4bK5009.3df681a3.2\r\nFrom: 93293147305 <sip:93293147305@192.168.0.1;user=phone>;tag=9501SIPpTag004160354\r\nTo: 11#17151248386 <sip:1#1"..., len=0,
rcv_info=0x3) at receive.c:243
#18 0x0000000000519ce3 in udp_read_req (si=<optimized out>, bytes_read=<optimized out>) at net/proto_udp/proto_udp.c:190
#19 0x00000000005083a7 in handle_io (fm=<optimized out>, fm=<optimized out>, fm=<optimized out>, idx=<optimized out>,
event_type=<optimized out>) at net/net_udp.c:260
#20 io_wait_loop_epoll (h=<optimized out>, t=<optimized out>, repeat=<optimized out>) at net/../io_wait_loop.h:190
#21 udp_rcv_loop (si=0x1) at net/net_udp.c:308
#22 0x000000000050940b in udp_start_processes (chd_rank=chd_rank@entry=0x7bd57c <chd_rank>,
startup_done=startup_done@entry=0x0) at net/net_udp.c:448
#23 0x0000000000419d85 in main_loop () at main.c:722
---Type <return> to continue, or q <return> to quit---
#24 main (argc=<optimized out>, argv=<optimized out>) at main.c:1259
(gdb)