Project

General

Profile

Actions

Bug #4709

closed

osmo-bts-trx (latest version 1.2.1) crashes in ttcn3-bts-test-latest

Added by fixeria over 3 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
High
Assignee:
-
Category:
osmo-bts-trx
Target version:
-
Start date:
08/13/2020
Due date:
% Done:

0%

Spec Reference:
Tags:

Description

Looking at the build artifacts of https://jenkins.osmocom.org/jenkins/view/TTCN3/job/ttcn3-bts-test-latest/, I noticed that almost all of them (at least since build#647, Jul 15, 2020) contain cordumps of osmo-bts-trx.

(gdb) bt
#0  e1inp_line_put (line=0x0) at e1_input.c:430
#1  0x00007f88e0342d95 in e1inp_sign_link_destroy (link=0x563a8c4be690) at e1_input.c:570
#2  0x0000563a8b6a02fe in sign_link_down (line=<optimized out>) at abis.c:165
#3  0x00007f88e0346dd8 in ipa_client_read (link=<optimized out>) at input/ipa.c:68
#4  ipa_client_fd_cb (ofd=<optimized out>, what=<optimized out>) at input/ipa.c:136
#5  0x00007f88dfa8b0bf in osmo_fd_disp_fds (_eset=<optimized out>, _wset=<optimized out>, _rset=<optimized out>) at select.c:227
#6  _osmo_select_main (polling=polling@entry=0) at select.c:265
#7  0x00007f88dfa8b736 in osmo_select_main (polling=polling@entry=0) at select.c:274
#8  0x0000563a8b69e884 in bts_main (argc=5, argv=0x7ffcc3a7a428) at main.c:354
#9  0x00007f88df2df2e1 in __libc_start_main (main=0x563a8b675d00 <main>, argc=5, argv=0x7ffcc3a7a428, init=<optimized out>, fini=<optimized out>, 
    rtld_fini=<optimized out>, stack_end=0x7ffcc3a7a418) at ../csu/libc-start.c:291
#10 0x0000563a8b675d3a in _start ()

Package versions:

Package: libosmocore-dev
Version: 1.3.2

Package: libosmo-abis-dev
Version: 0.8.1

Package: osmo-bts
Version: 0.4.0-2

I assume it has been fixed in the recent master, as we don't see any coredumps in ttcn3-bts-test (master).


Related issues

Related to OsmoBSC - Bug #4688: TC_chopped_ipa_ping causes use-after-free abort in ipaccess_drop() / msgb_free(e1i_ts->pending_msg); because of recent libosmo-abis commit "ipaccess: Drop e1inp_line reference in ipacess_drop()"Resolvedpespin07/31/2020

Actions
Related to OsmoBTS - Bug #3612: osmo-bts-trx: heap-use-after-free in e1inp_sign_link_destroyResolvedpespin10/02/2018

Actions
Related to OpenBSC - Bug #4094: multiple crashes due to connection failures / dropsClosed07/09/2019

Actions
Actions

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 48.8 MB)