SGSN Crash Report

[Holger Hans Peter Freyther]

On Sat, Jun 22, 2013 at 08:17:20PM -0700, Caleb Pal wrote:

> Program received signal SIGABRT, Aborted.
> 0xb7fe1424 in __kernel_vsyscall ()
> (gdb)
> 
> 
> (gdb) bt full
> #0  0xb7fe1424 in __kernel_vsyscall ()
> No symbol table info available.
> #1  0xb79eb941 in raise () from /lib/i386-linux-gnu/i686/cmov/libc.so.6
> No symbol table info available.
> #2  0xb79eed72 in abort () from /lib/i386-linux-gnu/i686/cmov/libc.so.6
> No symbol table info available.
> #3  0xb7bb4738 in talloc_abort (reason=<optimized out>) at talloc.c:167
> No locals.
> #4  0xb7bb8d2a in talloc_chunk_from_ptr (ptr=0x808f0b0) at talloc.c:190
>         pp = 0x808f0b0 ""
>         tc = 0x808f080
> #5  _talloc_free (ptr=0x808f0b0) at talloc.c:517
> No locals.
> #6  talloc_free (ptr=ptr at entry=0x808f0b0) at talloc.c:990
> No locals.
> #7  0xb7baeaab in msgb_free (m=m at entry=0x808f0b0) at msgb.c:72
> No locals.
> #8  0x0804df54 in sndcp_send_ud_frag (fs=0xbfffd7cc) at gprs_sndcp.c:423


This looks like the known double free. My workaround/solution has been
described here[1]. Could you please generate a PCAP file, I will then
look in what it takes to re-produce the issue..

thanks
  holger


[1] http://lists.osmocom.org/pipermail/openbsc/2013-March/004492.html