I am using some c code where the following call is in a loop:

r = rtp_session_recv_with_ts(   session,
                                buf,
                                (int) sizeof(buf),
                                ts,
                                &have_more);


and the call does deliver packets for about 5... 10 seconds and the segfaults.

the coredump 

Reading symbols from /home/roeland/src/arbitrium/trx/rx...done.
[New LWP 7779]
[New LWP 7780]
[New LWP 7781]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `./rx'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f17cf37fd93 in concatb (mp=mp@entry=0x93e590, newm=0x0) at
/usr/src/debug/ortp-1.0.2-lp150.28.1.x86_64/src/str_utils.c:337
337             while(newm->b_cont!=NULL) newm=newm->b_cont;
[Current thread is 1 (Thread 0x7f17cfcc5740 (LWP 7779))]
(gdb) bt
#0  0x00007f17cf37fd93 in concatb (mp=mp@entry=0x93e590, newm=0x0) at
/usr/src/debug/ortp-1.0.2-lp150.28.1.x86_64/src/str_utils.c:337
#1  0x00007f17cf374428 in append_sdes (full=1 '\001', m=0x93e590,
session=0x90c990) at /usr/src/debug/ortp-1.0.2-lp150.28.1.x86_64/src/rtcp.c:397
#2  rtp_session_create_and_send_rtcp_packet (session=session@entry=0x90c990,
full=full@entry=1 '\001') at
/usr/src/debug/ortp-1.0.2-lp150.28.1.x86_64/src/rtcp.c:460
#3  0x00007f17cf3746c6 in rtp_session_send_regular_rtcp_packet_and_reschedule
(session=0x90c990, tc=594585295) at
/usr/src/debug/ortp-1.0.2-lp150.28.1.x86_64/src/rtcp.c:569
#4  0x00007f17cf37a28f in rtp_session_recvm_with_ts
(session=session@entry=0x90c990, user_ts=user_ts@entry=26560) at
/usr/src/debug/ortp-1.0.2-lp150.28.1.x86_64/src/rtpsession.c:1304
#5  0x00007f17cf37a485 in rtp_session_recv_with_ts (session=0x90c990,
buffer=<optimized out>, len=32523, ts=26560, have_more=0x7ffe67874118) at
/usr/src/debug/ortp-1.0.2-lp150.28.1.x86_64/src/rtpsession.c:1381
#6  0x0000000000401efc in run_rx ()
#7  0x0000000000402441 in main ()


and as far as my skills go:

#0  0x00007f17cf37fd93 in concatb (mp=mp@entry=0x93e590, newm=0x0) at
/usr/src/debug/ortp-1.0.2-lp150.28.1.x86_64/src/str_utils.c:337
337             while(newm->b_cont!=NULL) newm=newm->b_cont;

is where it died.


I am not sure if I should report here or try to find the upstream people.