[Freeswitch-users] Freeswitch crashing : Program terminated with signal 11, Segmentation fault.

Thu Nov 1 08:51:49 UTC 2018

I found a way to reproduce the issue.
Recently we added support for mobile apps and we are using linphone library
of APP.SIP INVITE packet coming from this APP is crashing FS.We also found
which headers are leading to this crash.

INVITE Causing crash :

2018/11/01 08:37:13.066391 10.50.7.253:5060 -> 10.50.7.251:5070
INVITE sip:1047 at ecosmob.sip.teledge.com SIP/2.0
X-arp : 7206
X-arip : 192.168.2.8
Record-Route: <sip:10.50.7.253;lr>
x-video: no
x-mac-address: CA6268B1FD88
Record-Route: <sip:198.136.226.1;lr>
Via: SIP/2.0/UDP 66.160.227.253:5060
;branch=z9hG4bK5089.b3e4827194e27326cba1a3d6d0820e60.0
Via: SIP/2.0/UDP 198.136.226.1:5060
;rport=5060;received=10.50.8.1;branch=z9hG4bK5089.14e5615c7abb8698dfb87f5100ac476d.0
Via: SIP/2.0/UDP 192.168.2.8:50202
;received=202.131.119.122;branch=z9hG4bK.9gVXpSGbU;rport=35927
From: <sip:1001 at ecosmob.sip.teledge.com>;tag=fsvt11Fla
To: "1047" <sip:1047 at ecosmob.sip.teledge.com>
CSeq: 20 INVITE
Call-ID: vOprfDSdcK
Max-Forwards: 70
Supported: replaces, outbound, gruu
Content-Type: application/sdp
Content-Length: 468
Contact: <sip:1001 at 202.131.119.122:35927
;alias=10.50.8.1~5060~1;x-nat=yes;pv-ip=192.168.2.8;pb-ip=202.131.119.122;pb-pt=35927;mac-address=CA6268B1FD88;transport=udp>
*;+s*
*.instance="<urn:uuid:0031d886-ab82-00e3-8d0e-22689c61a7cb>";+org.linphone.specs=groupchat*
User-Agent: Netcarrier.Telecom_iPhone.SE_iOS12.0.1/4.0.1-97-gf3949dc26
(belle-sip/1.6.3)

v=0
o=1001/CA6268B1FD88 767 2345 IN IP4 192.168.2.8
s=Talk
c=IN IP4 10.50.7.253
t=0 0
a=rtcp-xr:rcvr-rtt=all:10000 stat-summary=loss,dup,jitt,TTL voip-metrics
m=audio 21588 RTP/AVP 0 8 9 18 101
a=rtcp-fb:* trr-int 1000
a=rtcp-fb:* ccm tmmbr
a=direction:active
a=oldmediaip:192.168.2.8
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:9 G722/8000
a=rtpmap:18 G729/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:18 annexb=yes

We found contact header was having sip.intance parameter highlighted in
above SIP INVITE.We removed it and it fixed the issue.see below

INVITE working fine :

2018/11/01 08:39:22.822052 10.50.7.253:5060 -> 10.50.7.251:5070
INVITE sip:1047 at ecosmob.sip.teledge.com SIP/2.0
X-arp : 7226
X-arip : 192.168.2.8
Record-Route: <sip:10.50.7.253;lr>
x-video: no
x-mac-address: CA6268B1FD88
Record-Route: <sip:198.136.226.1;lr>
Via: SIP/2.0/UDP 192.168.2.8:50202
;received=202.131.119.122;branch=z9hG4bK.UCWmJVLuz;rport=35927
From: <sip:1001 at ecosmob.sip.teledge.com>;tag=aB3e~fcu3
To: "1047" <sip:1047 at ecosmob.sip.teledge.com>
CSeq: 20 INVITE
Call-ID: d0VM~gqyVj
Max-Forwards: 70
Supported: replaces, outbound, gruu
Content-Type: application/sdp
Content-Length: 469
User-Agent: Netcarrier.Telecom_iPhone.SE_iOS12.0.1/4.0.1-97-gf3949dc26
(belle-sip/1.6.3)
*Contact:
<sip:1001 at 202.131.119.122:35927;x-nat=yes;pv-ip=192.168.2.8;pb-ip=202.131.119.122;pb-pt=35927;mac-address=CA6268B1FD88;transport=udp>*

v=0
o=1001/CA6268B1FD88 3869 2900 IN IP4 192.168.2.8
s=Talk
c=IN IP4 10.50.7.253
t=0 0
a=rtcp-xr:rcvr-rtt=all:10000 stat-summary=loss,dup,jitt,TTL voip-metrics
m=audio 21640 RTP/AVP 0 8 9 18 101
a=rtcp-fb:* trr-int 1000
a=rtcp-fb:* ccm tmmbr
a=direction:active
a=oldmediaip:192.168.2.8
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:9 G722/8000
a=rtpmap:18 G729/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:18 annexb=yes
a=sendrecv
a=rtcp:21641

My issue got resolved with this but i request FS developer team to find
cause of this crash and get it fixed.

On Wed, Oct 31, 2018 at 6:19 PM sagar malam <sagarmalam at gmail.com> wrote:

> Hello,
>
> I am using FS 1.6.17 for PBX system.It was working fine since last one
> month.Since last two days it has started crashing randomly.All the core
> dump show same error as mentioned below :
>
> #0  hash (h=0x2e362e312f706973, k=k at entry=0x7f3ea0001100) at
> ./src/include/private/switch_hashtable_private.h:53
>         i = <optimized out>
> #1  switch_hashtable_search (h=0x2e362e312f706973, k=k at entry=0x7f3ea0001100)
> at src/switch_hashtable.c:231
>         e = <optimized out>
>         hashvalue = 2433273728
> #2  0x00007f3edfb59885 in switch_core_hash_find (hash=<optimized out>,
> key=key at entry=0x7f3ea0001100 "register") at src/switch_core_hash.c:178
> No locals.
> #3  0x00007f3e90d28690 in sofia_glue_find_profile__ (file=file at entry=0x7f3e90e2c27a
> "sofia_presence.c",
>     func=func at entry=0x7f3e90e32500 <__func__.29963>
> "actual_sofia_presence_mwi_event_handler", line=line at entry=521,
> key=0x7f3ea0001100 "register") at sofia_glue.c:1630
>         profile = <optimized out>
>
> Please find whole core dump :
> https://pastebin.com/xP2ziRMX
>
> System is in production.Please help.
> --
> Thanks,
>
> Sagar
>

-- 
Thanks,

Sagar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20181101/b760f920/attachment-0001.html>