<div dir="ltr">Hey Daniel,<div><br></div><div>Got it once so far... I'll take a look at that commit and see what it did - but very strange indeed.</div><div><br></div><div>Cheers</div><div>Jason</div></div><br><div class="gmail_quote"><div dir="ltr">On Mon, 5 Oct 2015 at 15:42 Daniel-Constantin Mierla <<a href="mailto:miconda@gmail.com">miconda@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
the only recent change in the tcp core was resetting a flag to avoid
infinite log messages (until connection was closed) via commit
d36734d658cd0bcfc8357c7e85ca32da0612aaee .<br>
<br>
Does it happen often, or you got it just once so far?<br>
<br>
Cheers,<br>
Daniel</div><div bgcolor="#FFFFFF" text="#000000"><br>
<br>
<div>On 05/10/15 08:29, Jason Penton wrote:<br>
</div>
</div><div bgcolor="#FFFFFF" text="#000000"><blockquote type="cite">
<div dir="ltr">Hey guys,
<div><br>
</div>
<div>Not sure if there have been any changes but I have an
interesting problem here when using TCP:</div>
<div><br>
</div>
<div><b>The BT is as follows:</b></div>
<div><br>
</div>
<div>
<div>#0 local_timer_list_expire (h=0xa0f128
<tcp_reader_ltimer+178664>, t=723807134, l=0x9e3740
<tcp_reader_ltimer>) at local_timer.c:198</div>
<div>#1 local_timer_expire (t=723807134, h=<optimized
out>) at local_timer.c:227</div>
<div>#2 local_timer_run (lt=lt@entry=0x9e3740
<tcp_reader_ltimer>, saved_ticks=723807150) at
local_timer.c:250</div>
<div>#3 0x00000000005d8417 in tcp_reader_timer_run () at
tcp_read.c:1682</div>
<div>#4 tcp_receive_loop (unix_sock=<optimized out>) at
tcp_read.c:1734</div>
<div>#5 0x00000000005c81c8 in tcp_init_children () at
tcp_main.c:4788</div>
<div>#6 0x00000000004a9da3 in main_loop () at main.c:1664</div>
<div>#7 0x000000000042411e in main (argc=<optimized
out>, argv=<optimized out>) at main.c:2566</div>
</div>
<div><br>
</div>
<div>This seems to be related to clearing timers for TCP
connections. The crash is related to the following code:</div>
<div><br>
</div>
<div><b>_timer_rm_list(tl)</b><br>
</div>
<div><br>
</div>
<div>where it does a null pointer deref on tl->next and
tl->prev, which, according to the bt, are null (see below).</div>
<div><br>
</div>
<div><b>(gdb) print *tl</b></div>
<div>$14 = {next = 0x0, prev = 0x0, expire = 723807134,
initial_timeout = 32, data = 0x7fbbb05aa628, f = 0x5d02f0
<tcpconn_read_timeout>, flags = 512, slow_idx = 0}</div>
<div><br>
</div>
<div>Any ideas?</div>
<div><br>
</div>
<div>Cheers</div>
<div>Jason</div>
<div> </div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote></div><div bgcolor="#FFFFFF" text="#000000"><blockquote type="cite"><pre>_______________________________________________
sr-dev mailing list
<a href="mailto:sr-dev@lists.sip-router.org" target="_blank">sr-dev@lists.sip-router.org</a>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev</a>
</pre>
</blockquote>
<br>
<pre cols="72">--
Daniel-Constantin Mierla
<a href="http://twitter.com/#!/miconda" target="_blank">http://twitter.com/#!/miconda</a> - <a href="http://www.linkedin.com/in/miconda" target="_blank">http://www.linkedin.com/in/miconda</a>
Book: SIP Routing With Kamailio - <a href="http://www.asipto.com" target="_blank">http://www.asipto.com</a>
Kamailio Advanced Training, Sep 28-30, 2015, in Berlin - <a href="http://asipto.com/u/kat" target="_blank">http://asipto.com/u/kat</a></pre>
</div>
_______________________________________________<br>
sr-dev mailing list<br>
<a href="mailto:sr-dev@lists.sip-router.org" target="_blank">sr-dev@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev" rel="noreferrer" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev</a><br>
</blockquote></div>