Re: [Linphone-users] str_utils.c assertion, #2

[Ilya Melnikov]

Checked previous versions:
* Linphone 3.3.2 (from Ubuntu Precise) does not have this bug. I couldn't get 
it to crash.
* Linphone 3.5.2 (from Ubuntu Saucy) crashing in the same way. Backtrace:

=== begin trace ===
[New LWP 5764]
[New LWP 5751]
[New LWP 5750]
[New LWP 5753]
[New LWP 5755]
[New LWP 5760]
[New LWP 5752]
[New LWP 5754]
[New LWP 5762]
[New LWP 5763]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
Core was generated by `linphone --verbose'.
Program terminated with signal 11, Segmentation fault.
#0  dupmsg (m=0xb400b470) at str_utils.c:148

#0  dupmsg (m=0xb400b470) at str_utils.c:148
#1  0xb76c73f8 in msv4l2_thread (ptr=0x8fe9200) at msv4l2.c:440
#2  0xb6e16d78 in start_thread (arg=0xa804eb40) at pthread_create.c:311
#3  0xb6d4d01e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:131

eax            0xb400b9e0       -1275020832
ecx            0xb4000010       -1275068400
edx            0xb400b9e0       -1275020832
ebx            0xb770dff4       -1217339404
esp            0xa804e040       0xa804e040
ebp            0x0      0x0
esi            0xb400b470       -1275022224
edi            0x0      0
eip            0xb76f4938       0xb76f4938 <dupmsg+56>
eflags         0x10286  [ PF SF IF RF ]
cs             0x73     115
ss             0x7b     123
ds             0x7b     123
es             0x7b     123
fs             0x0      0
gs             0x33     51

=> 0xb76f4938 <dupmsg+56>:      mov    %eax,0x8(%ebp)
   0xb76f493b <dupmsg+59>:      mov    0x8(%esi),%esi
   0xb76f493e <dupmsg+62>:      mov    %eax,%ebp
   0xb76f4940 <dupmsg+64>:      test   %esi,%esi
   0xb76f4942 <dupmsg+66>:      jne    0xb76f4930 <dupmsg+48>
   0xb76f4944 <dupmsg+68>:      add    $0x1c,%esp
   0xb76f4947 <dupmsg+71>:      mov    %edi,%eax
   0xb76f4949 <dupmsg+73>:      pop    %ebx
   0xb76f494a <dupmsg+74>:      pop    %esi
   0xb76f494b <dupmsg+75>:      pop    %edi
   0xb76f494c <dupmsg+76>:      pop    %ebp
   0xb76f494d <dupmsg+77>:      ret    
   0xb76f494e:  xchg   %ax,%ax
   0xb76f4950 <putq>:   mov    0x4(%esp),%eax
   0xb76f4954 <putq+4>: mov    0x8(%esp),%edx
   0xb76f4958 <putq+8>: mov    (%eax),%ecx


Thread 10 (Thread 0xa884fb40 (LWP 5763)):
#0  0xb7725424 in __kernel_vsyscall ()
#1  0xb6e1e126 in nanosleep () at ../sysdeps/unix/syscall-template.S:81
#2  0xb76acb24 in sleepMs (ms=<optimized out>) at msticker.c:257
#3  ms_ticker_run (arg=0x9014448) at msticker.c:384
#4  0xb6e16d78 in start_thread (arg=0xa884fb40) at pthread_create.c:311
#5  0xb6d4d01e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:131

Thread 9 (Thread 0xacbfdb40 (LWP 5762)):
#0  0xb7725424 in __kernel_vsyscall ()
#1  0xb6d44f41 in select () at ../sysdeps/unix/syscall-template.S:81
#2  0xb5bf0532 in eXosip_read_message () from /usr/lib/i386-linux-
gnu/libeXosip2.so.7
#3  0xb5bdd9d9 in eXosip_execute () from /usr/lib/i386-linux-
gnu/libeXosip2.so.7
#4  0xb5bdea28 in ?? () from /usr/lib/i386-linux-gnu/libeXosip2.so.7
#5  0xb6e16d78 in start_thread (arg=0xacbfdb40) at pthread_create.c:311
#6  0xb6d4d01e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:131

Thread 8 (Thread 0xb2dffb40 (LWP 5754)):
#0  0xb7725424 in __kernel_vsyscall ()
#1  0xb6d3da0b in poll () at ../sysdeps/unix/syscall-template.S:81
#2  0xb6e80a4b in g_poll () from /lib/i386-linux-gnu/libglib-2.0.so.0
#3  0xb6e71b68 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#4  0xb6e71ca8 in g_main_context_iteration () from /lib/i386-linux-
gnu/libglib-2.0.so.0
#5  0xb6e71d2e in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#6  0xb6e97c4a in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#7  0xb6e16d78 in start_thread (arg=0xb2dffb40) at pthread_create.c:311
#8  0xb6d4d01e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:131

Thread 7 (Thread 0xb3fffb40 (LWP 5752)):
#0  0xb7725424 in __kernel_vsyscall ()
#1  0xb6e1db38 in accept () at ../sysdeps/unix/sysv/linux/i386/socket.S:95
#2  0xb76f54f8 in ortp_server_pipe_accept_client (server=6) at port.c:405
#3  0x08063b8c in server_pipe_thread (pointer=0x0) at singleinstance.c:48
#4  0xb6e16d78 in start_thread (arg=0xb3fffb40) at pthread_create.c:311
#5  0xb6d4d01e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:131

Thread 6 (Thread 0xad3feb40 (LWP 5760)):
#0  0xb7725424 in __kernel_vsyscall ()
#1  0xb6d3da0b in poll () at ../sysdeps/unix/syscall-template.S:81
#2  0xb6b30bbd in ?? () from /usr/lib/i386-linux-gnu/libpulse.so.0
#3  0xb6b1f4fe in pa_mainloop_poll () from /usr/lib/i386-linux-
gnu/libpulse.so.0
#4  0xb6b1fd2d in pa_mainloop_iterate () from /usr/lib/i386-linux-
gnu/libpulse.so.0
#5  0xb6b1fe04 in pa_mainloop_run () from /usr/lib/i386-linux-
gnu/libpulse.so.0
#6  0xb6b30b5c in ?? () from /usr/lib/i386-linux-gnu/libpulse.so.0
#7  0xb58dd4bd in ?? () from /usr/lib/i386-linux-
gnu/pulseaudio/libpulsecommon-4.0.so
#8  0xb6e16d78 in start_thread (arg=0xad3feb40) at pthread_create.c:311
#9  0xb6d4d01e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:131

Thread 5 (Thread 0xb25feb40 (LWP 5755)):
#0  0xb7725424 in __kernel_vsyscall ()
#1  0xb6e1ac33 in pthread_cond_timedwait@@GLIBC_2.3.2 () at 
../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/pthread_cond_timedwait.S:250
#2  0xb6eb50a7 in g_cond_wait_until () from /lib/i386-linux-
gnu/libglib-2.0.so.0
#3  0xb6e457c1 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#4  0xb6e45f42 in g_async_queue_timeout_pop () from /lib/i386-linux-
gnu/libglib-2.0.so.0
#5  0xb6e987d5 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#6  0xb6e97c4a in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#7  0xb6e16d78 in start_thread (arg=0xb25feb40) at pthread_create.c:311
#8  0xb6d4d01e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:131

Thread 4 (Thread 0xb37feb40 (LWP 5753)):
#0  0xb7725424 in __kernel_vsyscall ()
#1  0xb6d3da0b in poll () at ../sysdeps/unix/syscall-template.S:81
#2  0xb6e80a4b in g_poll () from /lib/i386-linux-gnu/libglib-2.0.so.0
#3  0xb6e71b68 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#4  0xb6e7204b in g_main_loop_run () from /lib/i386-linux-gnu/libglib-2.0.so.0
#5  0xb707b32a in ?? () from /usr/lib/i386-linux-gnu/libgio-2.0.so.0
#6  0xb6e97c4a in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#7  0xb6e16d78 in start_thread (arg=0xb37feb40) at pthread_create.c:311
#8  0xb6d4d01e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:131

Thread 3 (Thread 0xb5019880 (LWP 5750)):
#0  0xb7725424 in __kernel_vsyscall ()
#1  0xb6d3da0b in poll () at ../sysdeps/unix/syscall-template.S:81
#2  0xb6e80a4b in g_poll () from /lib/i386-linux-gnu/libglib-2.0.so.0
#3  0xb6e71b68 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#4  0xb6e7204b in g_main_loop_run () from /lib/i386-linux-gnu/libglib-2.0.so.0
#5  0xb73133e0 in gtk_main () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#6  0x08054e16 in main (argc=1, argv=0xbfb34ee4) at main.c:1765

Thread 2 (Thread 0xb49b7b40 (LWP 5751)):
#0  0xb7725424 in __kernel_vsyscall ()
#1  0xb6d3da0b in poll () at ../sysdeps/unix/syscall-template.S:81
#2  0xb6e80a4b in g_poll () from /lib/i386-linux-gnu/libglib-2.0.so.0
#3  0xb6e71b68 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#4  0xb6e71ca8 in g_main_context_iteration () from /lib/i386-linux-
gnu/libglib-2.0.so.0
#5  0xb4bfdf70 in ?? () from /usr/lib/i386-linux-
gnu/gio/modules/libdconfsettings.so
#6  0xb6e97c4a in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#7  0xb6e16d78 in start_thread (arg=0xb49b7b40) at pthread_create.c:311
#8  0xb6d4d01e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:131

Thread 1 (Thread 0xa804eb40 (LWP 5764)):
#0  dupmsg (m=0xb400b470) at str_utils.c:148
#1  0xb76c73f8 in msv4l2_thread (ptr=0x8fe9200) at msv4l2.c:440
#2  0xb6e16d78 in start_thread (arg=0xa804eb40) at pthread_create.c:311
#3  0xb6d4d01e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:131
=== end trace ===


--
Ilya Melnikov
Wednesday 04 June 2014 10:01:05

signature.asc
Description: This is a digitally signed message part.