<div dir="ltr">Hi Thibault,<div>I'm not sure I understand the scenario of your crash. Is the branch rejecting the call a branch added with ts_append? What are you doing upon receiving the 603 (supposing that's how the application is rejecting the call)? Are you appending other branches? </div><div>In the bt it looks like the transaction timed out but then the the log line</div><div><br></div><div>"<span style="font-family:Menlo;font-size:11px">#0 0x00007fc279f64855 in lock_entry (entry=0x7fc2761d6068) at ts_hash.c:156</span>"<br></div><div><br></div>and the core seem unrelated. Maybe you can share the relevant parts of your routing script so that I can get better what's going on.<div>Also it would be very useful if you could provide the logs of your test with debug level 3.</div><div>Thanks for your collaboration.</div><div><br></div><div>Regards,</div><div><br></div><div>Federico</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Sep 15, 2015 at 5:53 PM, Thibault Gueslin <span dir="ltr"><<a href="mailto:thibault.gueslin@gmail.com" target="_blank">thibault.gueslin@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><span class=""><span style="font-size:13px">Hello Federico,</span><div style="font-size:13px"><br></div><div style="font-size:13px">I have built from 4.3 branch.</div><div style="font-size:13px"><br></div></span><span class=""><div style="font-size:13px">I got a crash again... However it seems different than previous one:</div><div style="font-size:13px"><br></div><div style="font-size:13px">Issue seems located in tm module.</div><div style="font-size:13px"><br></div><div style="font-size:13px"><br></div><div style="font-size:13px">It appears if the remote denied the incoming call, then quit application .</div><div style="font-size:13px"><br></div><div style="font-size:13px"><br></div><div style="font-size:13px">thibault</div><div style="font-size:13px"><br></div><div style="font-size:13px"><br></div></span><div style="font-size:13px"><p style="margin:0px;font-size:11px;font-family:Menlo">Core was generated by `sbin/kamailio -f /etc/kamailio/kamailio.cfg -L ./lib64/kamailio/modules/'.</p><span class=""><span><p style="margin:0px;font-size:11px;font-family:Menlo">Program terminated with signal SIGSEGV, Segmentation fault.</p></span></span><p style="margin:0px;font-size:11px;font-family:Menlo">#0 0x00007fc279f64855 in lock_entry (entry=0x7fc2761d6068) at ts_hash.c:156</p><span class=""><p style="margin:0px;font-size:11px;font-family:Menlo">156<span style="white-space:pre-wrap"> </span>ts_lock(t_table, entry);</p><p style="margin:0px;font-size:11px;font-family:Menlo"><br></p><p style="margin:0px;font-size:11px;font-family:Menlo">(gdb) bt full</p></span><p style="margin:0px;font-size:11px;font-family:Menlo">#0 0x0000000000000001 in ?? ()</p><span class=""><span><p style="margin:0px;font-size:11px;font-family:Menlo">No symbol table info available.</p></span></span><p style="margin:0px;font-size:11px;font-family:Menlo">#1 0x00007fc27cd77fd9 in free_faked_req (faked_req=0x7fc27d029100 <faked_req>, t=0x7fc2761f2fc0) at t_reply.c:931</p><span class=""><p style="margin:0px;font-size:11px;font-family:Menlo"> hdr = 0x0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> __FUNCTION__ = "free_faked_req"</p><p style="margin:0px;font-size:11px;font-family:Menlo">#2 0x00007fc27cd78df4 in run_failure_handlers (t=0x7fc2761f2fc0, rpl=0xffffffffffffffff, code=408, extra_flags=96) at t_reply.c:997</p></span><p style="margin:0px;font-size:11px;font-family:Menlo"> faked_req = {id = 3, pid = 15569, tval = {tv_sec = 1442326316, tv_usec = 475922}, fwd_send_flags = {f = 4 '\004', blst_imask = 0 '\000'}, rpl_send_flags = {f = 0 '\000', blst_imask = 0 '\000'}, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> first_line = {type = 1, flags = 1, len = 68, u = {request = {method = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efc08 "INVITE <a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a> SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;rport\r\nContact: <<a href="http://sip:toto4.toto.com.Ipod_tgu@172.16.224.222:549/" target="_blank">sip:toto4.toto.com.Ipod_tgu@172.16.224.222:549</a>"..., len = 6}, uri = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efc0f "<a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a> SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;rport\r\nContact: <sip:toto4.toto.com.Ipod_tgu@172.16.224.222:54924;tran"..., len = 51}, version = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efc43 "SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;rport\r\nContact: <sip:toto4.toto.com.Ipod_tgu@172.16.224.222:54924;transport=tcp>\r\nMax-Forwards: 69\r\nTo: <sip:<a href="http://toto4.toto.co/" target="_blank">toto4.toto.co</a>"..., len = 7}, method_value = 1}, reply = {version = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efc08 "INVITE <a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a> SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;rport\r\nContact: <<a href="http://sip:toto4.toto.com.Ipod_tgu@172.16.224.222:549/" target="_blank">sip:toto4.toto.com.Ipod_tgu@172.16.224.222:549</a>"..., len = 6}, status = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efc0f "<a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a> SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;rport\r\nContact: <sip:toto4.toto.com.Ipod_tgu@172.16.224.222:54924;tran"..., len = 51}, reason = {</p><span class=""><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efc43 "SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;rport\r\nContact: <sip:toto4.toto.com.Ipod_tgu@172.16.224.222:54924;transport=tcp>\r\nMax-Forwards: 69\r\nTo: <sip:<a href="http://toto4.toto.co/" target="_blank">toto4.toto.co</a>"..., len = 7}, statuscode = 1}}}, via1 = 0x7fc2761f0008, via2 = 0x0, headers = 0x7fc2761effc8, last_header = 0x7fc2761f07c0, parsed_flag = 18446744073709551615, </p></span><p style="margin:0px;font-size:11px;font-family:Menlo"> h_via1 = 0x7fc2761effc8, h_via2 = 0x0, callid = 0x7fc2761f0650, to = 0x7fc2761f01f0, cseq = 0x7fc2761f0690, from = 0x7fc2761f0408, contact = 0x7fc2761f0170, maxforwards = 0x7fc2761f01b0, route = 0x0, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> record_route = 0x0, content_type = 0x7fc2761f0780, content_length = 0x7fc2761f07c0, authorization = 0x0, expires = 0x0, proxy_auth = 0x0, supported = 0x0, require = 0x0, proxy_require = 0x0, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> unsupported = 0x0, allow = 0x7fc2761f0740, event = 0x0, accept = 0x0, accept_language = 0x0, organization = 0x0, priority = 0x0, subject = 0x0, user_agent = 0x7fc2761f0700, server = 0x0, </p><span class=""><span><p style="margin:0px;font-size:11px;font-family:Menlo"> content_disposition = 0x0, diversion = 0x0, rpid = 0x0, refer_to = 0x0, session_expires = 0x0, min_se = 0x0, sipifmatch = 0x0, subscription_state = 0x0, date = 0x0, identity = 0x0, identity_info = 0x0, </p></span></span><p style="margin:0px;font-size:11px;font-family:Menlo"> pai = 0x0, ppi = 0x0, path = 0x0, privacy = 0x0, body = 0x7fc27e026c70, </p><span class=""><p style="margin:0px;font-size:11px;font-family:Menlo"> eoh = 0x7fc2761efe45 "\r\nv=0\r\no=- 791306690 125312959 IN IP4 172.16.224.222\r\ns=-\r\nc=IN IP4 172.16.224.222\r\nt=0 0\r\na=tool:baresip 0.4.3\r\nm=audio 25940 RTP/AVP 96 97 98 8 0 101\r\nb=AS:125\r\na=rtpmap:96 opus/48000/2\r\na=rtpmap:97"..., </p></span><p style="margin:0px;font-size:11px;font-family:Menlo"> unparsed = 0x7fc2761efe45 "\r\nv=0\r\no=- 791306690 125312959 IN IP4 172.16.224.222\r\ns=-\r\nc=IN IP4 172.16.224.222\r\nt=0 0\r\na=tool:baresip 0.4.3\r\nm=audio 25940 RTP/AVP 96 97 98 8 0 101\r\nb=AS:125\r\na=rtpmap:96 opus/48000/2\r\na=rtpmap:97"..., rcv = {src_ip = {af = 2, len = 4, u = {addrl = {3334267998, 0}, addr32 = {3334267998, 0, 0, 0}, addr16 = {58462, 50876, 0, 0, 0, 0, 0, 0}, </p><span class=""><span><p style="margin:0px;font-size:11px;font-family:Menlo"> addr = "^\344\274\306", '\000' <repeats 11 times>}}, dst_ip = {af = 2, len = 4, u = {addrl = {2667915013, 0}, addr32 = {2667915013, 0, 0, 0}, addr16 = {9989, 40709, 0, 0, 0, 0, 0, 0}, </p></span></span><p style="margin:0px;font-size:11px;font-family:Menlo"> addr = "\005'\005\237", '\000' <repeats 11 times>}}, src_port = 54927, dst_port = 5060, proto_reserved1 = 1, proto_reserved2 = 0, src_su = {s = {sa_family = 2, </p><span class=""><p style="margin:0px;font-size:11px;font-family:Menlo"> sa_data = "\326\217^\344\274\306\000\000\000\000\000\000\000"}, sin = {sin_family = 2, sin_port = 36822, sin_addr = {s_addr = 3334267998}, sin_zero = "\000\000\000\000\000\000\000"}, sin6 = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> sin6_family = 2, sin6_port = 36822, sin6_flowinfo = 3334267998, sin6_addr = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, </p></span><p style="margin:0px;font-size:11px;font-family:Menlo"> sin6_scope_id = 1979090440}}, bind_address = 0x7fc27e03d9f0, proto = 2 '\002'}, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> buf = 0x7fc2761efc08 "INVITE <a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a> SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;rport\r\nContact: <<a href="http://sip:toto4.toto.com.Ipod_tgu@172.16.224.222:549/" target="_blank">sip:toto4.toto.com.Ipod_tgu@172.16.224.222:549</a>"..., len = 959, new_uri = {s = 0x0, len = 0}, dst_uri = {s = 0x0, len = 0}, parsed_uri_ok = 0, parsed_uri = {user = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efba4 "toto4.toto.com.Thibault@172.16.230.61:52915;transport=tcpP/2sip:94.228.188.198:52919;transport=tcp92INVITE <a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a> SIP/2.0\r\nVia: SIP/2.0/TCP <a href="http://172.16.224.222/" target="_blank">172.16.224.222</a>:"..., len = 23}, passwd = {s = 0x0, len = 0}, host = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efbbc "172.16.230.61:52915;transport=tcpP/2sip:94.228.188.198:52919;transport=tcp92INVITE <a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a> SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b8"..., len = 13}, port = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efbca "52915;transport=tcpP/2sip:94.228.188.198:52919;transport=tcp92INVITE <a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a> SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;r"..., len = 5}, params = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efbd0 "transport=tcpP/2sip:94.228.188.198:52919;transport=tcp92INVITE <a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a>SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;rport\r\n"..., len = 13}, sip_params = {s = 0x7fc27e02a260 ' ' <repeats 88 times>, "HK\001~\302\177", len = 13}, headers = {s = 0x0, len = 0}, port_no = 52915, proto = 2, type = SIP_URI_T, </p><span class=""><span><p style="margin:0px;font-size:11px;font-family:Menlo"> flags = (unknown: 0), transport = {</p></span></span><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efbd0 "transport=tcpP/2sip:94.228.188.198:52919;transport=tcp92INVITE <a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a>SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;rport\r\n"..., len = 13}, ttl = {s = 0x0, len = 0}, user_param = {s = 0x0, len = 0}, maddr = {s = 0x0, len = 0}, method = {s = 0x0, len = 0}, lr = {s = 0x0, len = 0}, r2 = {s = 0x0, len = 0}, gr = {</p><span class=""><span><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x0, len = 0}, transport_val = {</p></span></span><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fc2761efbda "tcpP/2sip:94.228.188.198:52919;transport=tcp92INVITE <a href="mailto:sip%3Atoto4.toto.com.Thibault@sip-staging.serveur.com" target="_blank">sip:toto4.toto.com.Thibault@sip-staging.serveur.com</a>SIP/2.0\r\nVia: SIP/2.0/TCP 172.16.224.222:54924;branch=z9hG4bK44b87ead2c84b31a;rport\r\nContact: <"..., len = 3}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0x0, len = 0}, maddr_val = {s = 0x0, len = 0}, method_val = {s = 0x0, len = 0}, lr_val = {s = 0x0, len = 0}, r2_val = {</p><span class=""><span><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x0, len = 0}, gr_val = {s = 0x0, len = 0}}, parsed_orig_ruri_ok = 0, parsed_orig_ruri = {user = {s = 0x0, len = 0}, passwd = {s = 0x0, len = 0}, host = {s = 0x0, len = 0}, port = {s = 0x0, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> len = 0}, params = {s = 0x0, len = 0}, sip_params = {s = 0x0, len = 0}, headers = {s = 0x0, len = 0}, port_no = 0, proto = 0, type = ERROR_URI_T, flags = (unknown: 0), transport = {s = 0x0, len = 0}, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> ttl = {s = 0x0, len = 0}, user_param = {s = 0x0, len = 0}, maddr = {s = 0x0, len = 0}, method = {s = 0x0, len = 0}, lr = {s = 0x0, len = 0}, r2 = {s = 0x0, len = 0}, gr = {s = 0x0, len = 0}, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> transport_val = {s = 0x0, len = 0}, ttl_val = {s = 0x0, len = 0}, user_param_val = {s = 0x0, len = 0}, maddr_val = {s = 0x0, len = 0}, method_val = {s = 0x0, len = 0}, lr_val = {s = 0x0, len = 0}, </p></span></span><p style="margin:0px;font-size:11px;font-family:Menlo"> r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x0, len = 0}}, add_rm = 0x7fc2761f4ac8, body_lumps = 0x0, reply_lump = 0x0, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> add_to_branch_s = "z9hG4bK4d8.005be33152cbbe2a3c79d27fff052452.3", '\000' <repeats 12 times>, add_to_branch_len = 45, hash_index = 2260, msg_flags = 266481, flags = 34, set_global_address = {s = 0x0, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> len = 0}, set_global_port = {s = 0x0, len = 0}, force_send_socket = 0x7fc27e03d9f0, path_vec = {s = 0x0, len = 0}, instance = {s = 0x0, len = 0}, reg_id = 0, ruid = {s = 0x0, len = 0}, location_ua = {</p><span class=""><span><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x0, len = 0}, ldv = {flow = {decoded = 0, rcv = {src_ip = {af = 0, len = 0, u = {addrl = {0, 0}, addr32 = {0, 0, 0, 0}, addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, addr = '\000' <repeats 15 times>}}, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> dst_ip = {af = 0, len = 0, u = {addrl = {0, 0}, addr32 = {0, 0, 0, 0}, addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, addr = '\000' <repeats 15 times>}}, src_port = 0, dst_port = 0, proto_reserved1 = 0, </p></span></span><p style="margin:0px;font-size:11px;font-family:Menlo"> __FUNCTION__ = "run_failure_handlers"</p><div><div class="h5"><p style="margin:0px;font-size:11px;font-family:Menlo">#3 0x00007fc27cd7ba3b in t_should_relay_response (Trans=0x7fc2761f2fc0, new_code=408, branch=3, should_store=0x7fff9a9b9248, should_relay=0x7fff9a9b924c, cancel_data=0x7fff9a9b92e0, reply=0xffffffffffffffff)</p><p style="margin:0px;font-size:11px;font-family:Menlo"> at t_reply.c:1342</p><p style="margin:0px;font-size:11px;font-family:Menlo"> branch_cnt = 4</p><p style="margin:0px;font-size:11px;font-family:Menlo"> picked_code = 408</p><p style="margin:0px;font-size:11px;font-family:Menlo"> new_branch = 1</p><p style="margin:0px;font-size:11px;font-family:Menlo"> inv_through = 0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> extra_flags = 96</p><p style="margin:0px;font-size:11px;font-family:Menlo"> i = 32706</p><p style="margin:0px;font-size:11px;font-family:Menlo"> replies_dropped = 0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> __FUNCTION__ = "t_should_relay_response"</p><p style="margin:0px;font-size:11px;font-family:Menlo">#4 0x00007fc27cd7e7d6 in relay_reply (t=0x7fc2761f2fc0, p_msg=0xffffffffffffffff, branch=3, msg_status=408, cancel_data=0x7fff9a9b92e0, do_put_on_wait=0) at t_reply.c:1745</p><p style="margin:0px;font-size:11px;font-family:Menlo"> relay = -1</p><p style="margin:0px;font-size:11px;font-family:Menlo"> save_clone = 0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> buf = 0x0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> res_len = 0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> relayed_code = 0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> relayed_msg = 0x0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> reply_bak = 0x1</p><p style="margin:0px;font-size:11px;font-family:Menlo"> bm = {to_tag_val = {s = 0x200000000 <error: Cannot access memory at address 0x200000000>, len = 1981755328}}</p><p style="margin:0px;font-size:11px;font-family:Menlo"> totag_retr = 0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> reply_status = RPS_ERROR</p><p style="margin:0px;font-size:11px;font-family:Menlo"> uas_rb = 0xffffffffffffffff</p><p style="margin:0px;font-size:11px;font-family:Menlo"> to_tag = 0x7fc2761f3780</p><p style="margin:0px;font-size:11px;font-family:Menlo"> reason = {s = 0x735c44 "Request Timeout", len = -1701080344}</p><p style="margin:0px;font-size:11px;font-family:Menlo"> onsend_params = {req = 0x76203528, rpl = 0x7fc2761f35c0, param = 0x18f59272ffffffff, code = 418744713, flags = 320, branch = 0, t_rbuf = 0x3ef3ee10, dst = 0x415ed0 <_start>, send_buf = {</p><p style="margin:0px;font-size:11px;font-family:Menlo"> s = 0x7fff9a9b92c0 "\020\223\233\232\377\177", len = 2094439873}}</p><p style="margin:0px;font-size:11px;font-family:Menlo"> ip = {af = 2593886736, len = 32767, u = {addrl = {140473294816037, 18446744069414584320}, addr32 = {<a href="tel:2094433061" value="+12094433061" target="_blank">2094433061</a>, 32706, 0, 4294967295}, addr16 = {33573, 31958, 32706, 0, 0, 0, 65535, 65535}, </p><p style="margin:0px;font-size:11px;font-family:Menlo"> addr = "%\203\326|\302\177\000\000\000\000\000\000\377\377\377\377"}}</p><p style="margin:0px;font-size:11px;font-family:Menlo"> __FUNCTION__ = "relay_reply"</p><p style="margin:0px;font-size:11px;font-family:Menlo">#5 0x00007fc27cda99d8 in fake_reply (t=0x7fc2761f2fc0, branch=3, code=408) at timer.c:328</p><p style="margin:0px;font-size:11px;font-family:Menlo"> cancel_data = {cancel_bitmap = 0, reason = {cause = 0, u = {text = {s = 0x0, len = 1981755328}, e2e_cancel = 0x0, packed_hdrs = {s = 0x0, len = 1981755328}}}}</p><p style="margin:0px;font-size:11px;font-family:Menlo"> do_cancel_branch = 1</p><p style="margin:0px;font-size:11px;font-family:Menlo"> reply_status = 15561</p><p style="margin:0px;font-size:11px;font-family:Menlo">#6 0x00007fc27cda9e5f in final_response_handler (r_buf=0x7fc2761f36e8, t=0x7fc2761f2fc0) at timer.c:500</p><p style="margin:0px;font-size:11px;font-family:Menlo"> silent = 0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> branch_ret = 0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> prev_branch = 1056173584</p><p style="margin:0px;font-size:11px;font-family:Menlo"> now = 0</p><p style="margin:0px;font-size:11px;font-family:Menlo">#7 0x00007fc27cda9f02 in retr_buf_handler (ticks=418744835, tl=0x7fc2761f3708, p=0xfffffffe) at timer.c:558</p><p style="margin:0px;font-size:11px;font-family:Menlo"> rbuf = 0x7fc2761f36e8</p><p style="margin:0px;font-size:11px;font-family:Menlo"> fr_remainder = 2593887152</p><p style="margin:0px;font-size:11px;font-family:Menlo"> retr_remainder = 32706</p><p style="margin:0px;font-size:11px;font-family:Menlo"> retr_interval = 1979369672</p><p style="margin:0px;font-size:11px;font-family:Menlo"> new_retr_interval_ms = 140473182140168</p><p style="margin:0px;font-size:11px;font-family:Menlo"> crt_retr_interval_ms = 140473179752648</p><p style="margin:0px;font-size:11px;font-family:Menlo"> t = 0x7fc2761f2fc0</p><p style="margin:0px;font-size:11px;font-family:Menlo"> __FUNCTION__ = "retr_buf_handler"</p><p style="margin:0px;font-size:11px;font-family:Menlo">#8 0x000000000048d82f in slow_timer_main () at timer.c:1130</p><p style="margin:0px;font-size:11px;font-family:Menlo"> n = 12</p><p style="margin:0px;font-size:11px;font-family:Menlo"> ret = 1</p><p style="margin:0px;font-size:11px;font-family:Menlo"> tl = 0x7fc2761f3708</p><p style="margin:0px;font-size:11px;font-family:Menlo"> i = 147</p><p style="margin:0px;font-size:11px;font-family:Menlo"> __FUNCTION__ = "slow_timer_main"</p></div></div></div><div><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">2015-09-15 10:35 GMT+02:00 Federico Cabiddu <span dir="ltr"><<a href="mailto:federico.cabiddu@gmail.com" target="_blank">federico.cabiddu@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Hi Thibault,<div>I have not been able to get the crash reproducing the scenario you described.</div><div>Could you try the last 4.3.x code? Are you still seeing the crash?</div><div><br></div><div>Regards,</div><div><br></div><div>Federico</div></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Sep 11, 2015 at 11:34 PM, Thibault Gueslin <span dir="ltr"><<a href="mailto:thibault.gueslin@gmail.com" target="_blank">thibault.gueslin@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Hi Federico,<div><br></div><div>I will try last code in 4.3.x branch.</div><div><br></div><div>The scenario is very easy: I am calling a SIP client (running on a mobile)</div><div>First the client is stopped. Then launch the app. As expected, the calll is presented after it has registered.</div><div>Then kill the application (before answering), then launching again the app, call is presented...</div><div>Then waiting for call timeout.</div><div>It works one or 2 times then call never timeouts on the client which initiates the call</div><div>(which means Kamailio is dead and does not send 408 Timeout)</div><div><br></div></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">2015-09-10 19:33 GMT+02:00 Federico Cabiddu <span dir="ltr"><<a href="mailto:federico.cabiddu@gmail.com" target="_blank">federico.cabiddu@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Hi Thibault,<div>have you tried last tsilo code from 4.3.x branch?</div><div>Recently there has been a fix (<a href="https://github.com/kamailio/kamailio/commit/6ce6803d57dabe287d7d6fa859e93c1df402d821" target="_blank">https://github.com/kamailio/kamailio/commit/6ce6803d57dabe287d7d6fa859e93c1df402d821</a>) for an issue that may be related to yours. </div><div>I'll keep investigating to see if I can spot something else. In the meanwhile could you describe your scenario? Are you storing multiple transactions per ruri? Did any of them got a final reply before the crash?</div><div><br></div><div>Regards,</div><div><br></div><div>Federico</div></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Sep 10, 2015 at 3:00 PM, Daniel-Constantin Mierla <span dir="ltr"><<a href="mailto:miconda@gmail.com" target="_blank">miconda@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><span>
<br>
<br>
<div>On 10/09/15 14:36, Thibault Gueslin
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr"><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">2015-09-10 14:25 GMT+02:00
Daniel-Constantin Mierla <span dir="ltr"><<a href="mailto:miconda@gmail.com" target="_blank"></a><a href="mailto:miconda@gmail.com" target="_blank">miconda@gmail.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"> Do you have msrp
enabled in configuration file<br>
</div>
</blockquote>
<div><br>
</div>
<div>I don't think so <br>
</div>
</div>
</div>
</div>
</blockquote>
<br></span>
The last frames of backtrace indicates code related to msrp, but
might be just some code lines mismatching.<br>
<br>
The issue seems to be in tsilo. I looke over the code and I spotted
some "unclear" mechanisms that can lead to race conditions, which
may result in invalid access to memory, as it happens in this case,
ptr becomes 0x8b08578b49642454 -- from my short investigation, that
is likely to be due to following a ->next field in a freed
structure.<br>
<br>
Not being the author of tsilo module, I can't do much more right
now. I will open an issue on bug tracker explaining what I found,
assigning Federico (cc-ed, author of the module) to analyze and see
if anything is wrong there.<br>
<br>
Cheers,<br>
Daniel<div><div><br>
<br>
</div></div></div></blockquote></div></div></div></div></blockquote></div></div></div></div></blockquote></div></div></div></div></blockquote></div><br></div></div></div></div>
</blockquote></div><br></div>