I found a way to reproduce the issue.
Recently we added support for mobile apps and we are using linphone library of APP.SIP INVITE packet coming from this APP is crashing FS.We also found which headers are leading to this crash.

INVITE Causing crash :

2018/11/01 08:37:13.066391 10.50.7.253:5060 -> 10.50.7.251:5070
INVITE sip:1047@ecosmob.sip.teledge.com SIP/2.0
X-arp : 7206
X-arip : 192.168.2.8
Record-Route: <sip:10.50.7.253;lr>
x-video: no
x-mac-address: CA6268B1FD88
Record-Route: <sip:198.136.226.1;lr>
Via: SIP/2.0/UDP 66.160.227.253:5060;branch=z9hG4bK5089.b3e4827194e27326cba1a3d6d0820e60.0
Via: SIP/2.0/UDP 198.136.226.1:5060;rport=5060;received=10.50.8.1;branch=z9hG4bK5089.14e5615c7abb8698dfb87f5100ac476d.0
Via: SIP/2.0/UDP 192.168.2.8:50202;received=202.131.119.122;branch=z9hG4bK.9gVXpSGbU;rport=35927
From: <sip:1001@ecosmob.sip.teledge.com>;tag=fsvt11Fla
To: "1047" <sip:1047@ecosmob.sip.teledge.com>
CSeq: 20 INVITE
Call-ID: vOprfDSdcK
Max-Forwards: 70
Supported: replaces, outbound, gruu
Content-Type: application/sdp
Content-Length: 468
Contact: <sip:1001@202.131.119.122:35927;alias=10.50.8.1~5060~1;x-nat=yes;pv-ip=192.168.2.8;pb-ip=202.131.119.122;pb-pt=35927;mac-address=CA6268B1FD88;transport=udp>;+s
.instance="<urn:uuid:0031d886-ab82-00e3-8d0e-22689c61a7cb>";+org.linphone.specs=groupchat
User-Agent: Netcarrier.Telecom_iPhone.SE_iOS12.0.1/4.0.1-97-gf3949dc26 (belle-sip/1.6.3)

v=0
o=1001/CA6268B1FD88 767 2345 IN IP4 192.168.2.8
s=Talk
c=IN IP4 10.50.7.253
t=0 0
a=rtcp-xr:rcvr-rtt=all:10000 stat-summary=loss,dup,jitt,TTL voip-metrics
m=audio 21588 RTP/AVP 0 8 9 18 101
a=rtcp-fb:* trr-int 1000
a=rtcp-fb:* ccm tmmbr
a=direction:active
a=oldmediaip:192.168.2.8
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:9 G722/8000
a=rtpmap:18 G729/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:18 annexb=yes

We found contact header was having sip.intance parameter highlighted in above SIP INVITE.We removed it and it fixed the issue.see below 

INVITE working fine :

2018/11/01 08:39:22.822052 10.50.7.253:5060 -> 10.50.7.251:5070
INVITE sip:1047@ecosmob.sip.teledge.com SIP/2.0
X-arp : 7226
X-arip : 192.168.2.8
Record-Route: <sip:10.50.7.253;lr>
x-video: no
x-mac-address: CA6268B1FD88
Record-Route: <sip:198.136.226.1;lr>
Via: SIP/2.0/UDP 192.168.2.8:50202;received=202.131.119.122;branch=z9hG4bK.UCWmJVLuz;rport=35927
From: <sip:1001@ecosmob.sip.teledge.com>;tag=aB3e~fcu3
To: "1047" <sip:1047@ecosmob.sip.teledge.com>
CSeq: 20 INVITE
Call-ID: d0VM~gqyVj
Max-Forwards: 70
Supported: replaces, outbound, gruu
Content-Type: application/sdp
Content-Length: 469
User-Agent: Netcarrier.Telecom_iPhone.SE_iOS12.0.1/4.0.1-97-gf3949dc26 (belle-sip/1.6.3)
Contact: <sip:1001@202.131.119.122:35927;x-nat=yes;pv-ip=192.168.2.8;pb-ip=202.131.119.122;pb-pt=35927;mac-address=CA6268B1FD88;transport=udp>

v=0
o=1001/CA6268B1FD88 3869 2900 IN IP4 192.168.2.8
s=Talk
c=IN IP4 10.50.7.253
t=0 0
a=rtcp-xr:rcvr-rtt=all:10000 stat-summary=loss,dup,jitt,TTL voip-metrics
m=audio 21640 RTP/AVP 0 8 9 18 101
a=rtcp-fb:* trr-int 1000
a=rtcp-fb:* ccm tmmbr
a=direction:active
a=oldmediaip:192.168.2.8
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:9 G722/8000
a=rtpmap:18 G729/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:18 annexb=yes
a=sendrecv
a=rtcp:21641

My issue got resolved with this but i request FS developer team to find cause of this crash and get it fixed.

On Wed, Oct 31, 2018 at 6:19 PM sagar malam <sagarmalam@gmail.com> wrote:
Hello,

I am using FS 1.6.17 for PBX system.It was working fine since last one month.Since last two days it has started crashing randomly.All the core dump show same error as mentioned below : 

#0  hash (h=0x2e362e312f706973, k=k@entry=0x7f3ea0001100) at ./src/include/private/switch_hashtable_private.h:53
        i = <optimized out>
#1  switch_hashtable_search (h=0x2e362e312f706973, k=k@entry=0x7f3ea0001100) at src/switch_hashtable.c:231
        e = <optimized out>
        hashvalue = 2433273728
#2  0x00007f3edfb59885 in switch_core_hash_find (hash=<optimized out>, key=key@entry=0x7f3ea0001100 "register") at src/switch_core_hash.c:178
No locals.
#3  0x00007f3e90d28690 in sofia_glue_find_profile__ (file=file@entry=0x7f3e90e2c27a "sofia_presence.c", 
    func=func@entry=0x7f3e90e32500 <__func__.29963> "actual_sofia_presence_mwi_event_handler", line=line@entry=521, key=0x7f3ea0001100 "register") at sofia_glue.c:1630
        profile = <optimized out>

Please find whole core dump : 

System is in production.Please help.
--
Thanks,

Sagar


--
Thanks,

Sagar