[CRASH]OpenSIPS Crashes when using "reload_routes"

[vtzan]

OpenSIPS version you are running

version: opensips 3.1.1 (x86_64/linux)
flags: STATS: On, DISABLE_NAGLE, USE_MCAST, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, HP_MALLOC, DBG_MALLOC, FAST_LOCK-ADAPTIVE_WAIT
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535
poll method support: poll, epoll, sigio_rt, select.
git revision: b7cf71712
main.c compiled on 16:22:04 Jan 22 2021 with gcc 8

Crash Core Dump
https://pastebin.com/G2q31Hki

Describe the traffic that generated the bug

curl --location --request POST 'http://opensips_ip_address:8080/json' \
--header 'Content-Type: application/json' \
--data-raw '{
    "jsonrpc": "2.0",
    "method": "reload_routes",
    "id": 11
}'

To Reproduce

1. start OpenSIPS
2. send 2 times reload_routes using the curl command above
3. wait ~20 seconds
4. CRASH

Relevant System Logs

Jan 22 16:35:37 [842] ALERT:core:do_action: BUG - unknown type 1601399924
Jan 22 16:35:37 [842] ERROR:core:do_action: error in /efs/opensips-edge/opensips.cfg:5066
Jan 22 16:35:37 [842] ALERT:core:do_action: BUG - unknown type 1953460848
Jan 22 16:35:37 [842] ERROR:core:do_action: error in /efs/opensips-edge/opensips.cfg:5067
Jan 22 16:35:37 [842] ALERT:core:do_action: BUG - unknown type 1601399924
Jan 22 16:35:37 [842] CRITICAL:core:sig_usr: segfault in process pid: 842, id: 8
Jan 22 16:35:38 [818] NOTICE:presence:destroy: destroy module ...

OS/environment information

• Operating System: Debian 10.7
• OpenSIPS installation: 3.1

Thank you in advance for your support.

Vasilios Tzanoudakis

[bogdan-iancu]

hey @vtzan , thanks for the report. Do you do any changes on the file, before the reloads? I see the backtrace points to some script execution via timer route - could you do some tests to see if indeed the crash is triggered by the presence of such type of routes? Or do you have a minimal cfg that triggers the crash as reported here ?

[vtzan]

Dear @bogdan-iancu,

You are right! (once again)

After disabling the timer_route it doesn't crash anymore.

The timer route that triggers this crash is as simple as this :

timer_route [system_stats, 30] {
	xlog("L_NOTICE","Opensips Rules!\n");
}

Thank you in advance for your support.

Vasilios Tzanoudakis

[luminblade]

Just stumbled across this as well, timer_route crashing in 3.1.1.

[bogdan-iancu]

@vtzan , I managed to reproduce the errors, let me dig in to find the problem.

[stale]

Any updates here? No progress has been made in the last 15 days, marking as stale. Will close this issue if no further updates are made in the next 30 days.

[vtzan]

Just FYI. I have switched to 3.2 and problem is still there.

Thank you in advance for your support.

Vasilios Tzanoudakis

[github-actions]

Any updates here? No progress has been made in the last 15 days, marking as stale. Will close this issue if no further updates are made in the next 30 days.

[bogdan-iancu]

sorry for the delay on this, let me resume the digging into this......