[PHREAKSCRIPT-57] res_alarmsystem: Segfault due to calling ast_dtmf_stream on NULL channel

← All Issues || New Issue →

Sort Normal || Priority

Details

Thread 1 (Thread 0x7fcce43066c0 (LWP 918570)):
#0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at ./nptl/pthread_kill.c:44
        tid = <optimized out>
        ret = 0
        pd = <optimized out>
        old_mask = {__val = {0}}
        ret = <optimized out>
#1  0x00007fcd2c9cae8f in __pthread_kill_internal (signo=6, threadid=<optimized out>) at ./nptl/pthread_kill.c:78
#2  0x00007fcd2c97bfb2 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
        ret = <optimized out>
#3  0x00007fcd2c966472 in __GI_abort () at ./stdlib/abort.c:79
        save_stage = 1
        act = {__sigaction_handler = {sa_handler = 0x20, sa_sigaction = 0x20}, sa_mask = {__val = {0, 0, 0, 0, 0, 0, 0, 140517978429152, 140517978433216, 140517978429152, 140519193769105, 0, 307754380, 140517978429184, 0, 140517978429216}}, sa_flags = 748764563, sa_restorer = 0x7fccf08c1900}
#4  0x000055cf1272dc4b in ast_do_crash () at utils.c:2807
#5  0x000055cf1272dcea in __ast_assert_failed (condition=0, condition_str=0x55cf127ca9a0 "user_data is NULL", file=0x55cf127d5f09 "channel.c", line=3013, function=0x55cf127da560 <__PRETTY_FUNCTION__.182> "ast_waitfor_nandfds") at utils.c:2836
#6  0x000055cf1257146f in log_bad_ao2 (user_data=0x0, file=0x55cf127d5f09 "channel.c", line=3013, func=0x55cf127da560 <__PRETTY_FUNCTION__.182> "ast_waitfor_nandfds") at astobj2.c:212
        p = 0x7fcce3a3abf0
        bad_magic = "0%\214\317U(%\214%\214\317U(%\214\317UX0\344d\317U X0\344\314\177q{.\261\367N#\232|\317U \377\377\377\377\377\377\377  \377\377\377\377\377\377\377"
#7  0x000055cf12571534 in __ao2_lock (user_data=0x0, lock_how=AO2_LOCK_REQ_MUTEX, file=0x55cf127d5f09 "channel.c", func=0x55cf127da560 <__PRETTY_FUNCTION__.182> "ast_waitfor_nandfds", line=3013, var=0x55cf127d6bab "c[x]") at astobj2.c:224
        p__LINE__ = 0x55cf1256e3f1 <__ast_free+132>
        obj = 0x7fccf8014800
        obj_mutex = 0x7fccf0068e30
        obj_rwlock = 0x55cf128f55e0 <whales>
        obj_lockobj = 0x0
        res = 32716
#8  0x000055cf125bb168 in ast_waitfor_nandfds (c=0x7fcce4305998, n=1, fds=0x0, nfds=0, exception=0x0, outfd=0x0, ms=0x7fcce4305994) at channel.c:3013
        start = {tv_sec = 0, tv_usec = 0}
        pfds = 0x0
        res = 32716
        rms = 0
        x = 0
        y = 0
        max = 0
        sz = 0
        now = {tv_sec = 0, tv_usec = 0}
        whentohangup = {tv_sec = 0, tv_usec = 0}
        diff = {tv_sec = 16006876518704, tv_usec = 94347857084388}
        winner = 0x0
        fdmap = 0x0
        __PRETTY_FUNCTION__ = "ast_waitfor_nandfds"
        __FUNCTION__ = "ast_waitfor_nandfds"
#9  0x000055cf125bbf65 in ast_waitfor (c=0x0, ms=100) at channel.c:3170
#10 0x000055cf125b604b in safe_sleep_conditional (chan=0x0, timeout_ms=100, cond=0x0, data=0x0, generate_silence=1) at channel.c:1521
        dup_f = 0x0
        f = 0x7fcce481814d
        silgen = 0x0
        res = 0
        start = {tv_sec = 1723764533, tv_usec = 985088}
        ms = 100
        deferred_frames = {first = 0x0, last = 0x0}
        __PRETTY_FUNCTION__ = "safe_sleep_conditional"
#11 0x000055cf125b628f in ast_safe_sleep (chan=0x0, ms=100) at channel.c:1576
#12 0x000055cf1254c324 in dtmf_stream (chan=0x0, digits=0x7fcce4818981 "#", between=150, duration=100, is_external=0) at app.c:1169
        ptr = 0x7fccf0063ee2 "\255", 'ޭ' <repeats 98 times>, <incomplete sequence \336>...
        res = 32717
        silgen = 0x0
        my_sleep = 0x55cf125b6261 <ast_safe_sleep>
        my_senddigit = 0x55cf125c12b2 <ast_senddigit>
        __FUNCTION__ = "dtmf_stream"
#13 0x000055cf1254c637 in ast_dtmf_stream (chan=0x0, peer=0x0, digits=0x7fcce4818981 "#", between=150, duration=100) at app.c:1250
        res = 0
#14 0x00007fcce4811b49 in send_dtmf (chan=0x0, digits=0x7fcce4818981 "#", addstar=0) at res_alarmsystem.c:1249
        res = 0
        __FUNCTION__ = "send_dtmf"
#15 0x00007fcce481279d in send_events_to_server_by_phone (c=0x7fcd24033e70) at res_alarmsystem.c:1427

Comments

You must be logged in to leave a comment.