Mailinglist Archive: opensuse-bugs (4062 mails)

[bugzilla_noreply@xxxxxxxxxx]

https://bugzilla.novell.com/show_bug.cgi?id=664808

https://bugzilla.novell.com/show_bug.cgi?id=664808#c0


           Summary: linphone segfaults on incoming call
    Classification: openSUSE
           Product: openSUSE 11.4
           Version: Factory
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: GNOME
        AssignedTo: bnc-team-gnome@xxxxxxxxxxxxxxxxxxxxxx
        ReportedBy: seife@xxxxxxxxxxxxxxxxxxxx
         QAContact: qa@xxxxxxx
          Found By: Third Party Developer/Partner
           Blocker: ---


Outgoing calls via SIP work well, but on incoming calls, linphone segfaults
without even ringing:

(gdb) bt
#0  0x00007ffff5887010 in strcasecmp () from /lib64/libc.so.6
#1  0x00007ffff7775071 in find_payload_type_best_match (local=0x943b60,
remote=<value optimized out>)
    at offeranswer.c:32
#2  match_payloads (local=0x943b60, remote=<value optimized out>) at
offeranswer.c:59
#3  0x00007ffff777544d in initiate_incoming (local_capabilities=0x945ec0,
remote_offer=0x9429f0, result=0x9498e0)
    at offeranswer.c:102
#4  offer_answer_initiate_incoming (local_capabilities=0x945ec0,
remote_offer=0x9429f0, result=0x9498e0)
    at offeranswer.c:155
#5  0x00007ffff7775ceb in sdp_process (h=0x927de0) at sal_eXosip2.c:444
#6  0x00007ffff7777595 in sal_call_get_final_media_description (h=0x927de0) at
sal_eXosip2.c:583
#7  0x00007ffff777d12f in call_received (h=0x927de0) at callbacks.c:80
#8  0x00007ffff7779364 in inc_new_call (sal=0x7c3e80) at sal_eXosip2.c:753
#9  process_event (sal=0x7c3e80) at sal_eXosip2.c:1496
#10 sal_iterate (sal=0x7c3e80) at sal_eXosip2.c:1592
#11 0x00007ffff777289e in linphone_core_iterate (lc=0x6ef050) at
linphonecore.c:1766
#12 0x000000000040f542 in linphone_gtk_iterate (lc=0x6ef050) at main.c:443
#13 0x00007ffff5dd739b in ?? () from /lib64/libglib-2.0.so.0
#14 0x00007ffff5dd5a43 in g_main_context_dispatch () from
/lib64/libglib-2.0.so.0
#15 0x00007ffff5dd6220 in ?? () from /lib64/libglib-2.0.so.0
#16 0x00007ffff5dd68a5 in g_main_loop_run () from /lib64/libglib-2.0.so.0
#17 0x00007ffff70407a7 in gtk_main () from /usr/lib64/libgtk-x11-2.0.so.0
#18 0x00000000004109fa in main (argc=1, argv=0x7fffffffdc88) at main.c:1333


The code that crashes is 

static PayloadType * find_payload_type_best_match(const MSList *l, const
PayloadType *refpt){
    PayloadType *pt;
    char value[10];
    const MSList *elem;
    PayloadType *candidate=NULL;

    for (elem=l;elem!=NULL;elem=elem->next){
        pt=(PayloadType*)elem->data;
===>    if (strcasecmp(pt->mime_type,refpt->mime_type)==0 && ...

I'd guess that either elem->data is already NULL, refpt is NULL or the
->mime_type members are NULL, as those are not checked.
Or they are uninitialized / corrupted.

Unfortunately I'm completely unfamiliar with the codebase, so cannot be of more
help.

-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.