Bug#842878: Asterisk crashes with pjproject 2.5.5

[Bernhard Schmidt]

On Sun, Nov 06, 2016 at 06:15:12PM -0500, Gedalya wrote:

Hi,

> On 11/06/2016 05:50 PM, Bernhard Schmidt wrote:
> > Nothing productive on the upstream mailinglist (or rather disturbing,
> > they say that ABI can change in backward incompatible way even in minor
> > versions and you're always expected to recompile),
> Yea, I followed the conversation there. Looks rather grim.
> 
> >  BUT thanks to Stepan
> > Golosunov and Tzafrir in Bug#828240 there now seems to be a way to build
> > Asterisk 13.12.1 against OpenSSL 1.1.0. 
> >
> > I have tested that build (built against pjproject 2.5.5~dfsg-2 in sid)
> > and it does not crash for me.
> OK, a little confused here: the resulting asterisk will link against
> both libssl1.1 and libssl1.0.2 (via pjsip) during runtime?  Does that
> kind of thing work?

As far as I understood the mailinglist it works unless a program is
doing a direct dlopen() for openssl. Asterisk is directly linked against
OpenSSL 1.1.0 and pjsip (which is dlopen()ed by Asterisk) directly links
OpenSSL 1.0.2, so I hope we're good. 

I have done a SIP/TLS call with SRTP in that combination, and it appears
to work. 
> 
> 
> > It will probably take a few more days to fully test this (and import a
> > few other crash fixes for pjproject as well for good measure),
> Agreed, basically all the revisions in SVN related to DNS resolution since 2.5.5 look important.
> 
> Anyhow, I'll try this on my end soon and let you know how it went.

I have now uploaded Asterisk 13.12.1~dfsg-1 into sid, should be built
and available within a few hours. This works well for me with pjproject
from sid. Maybe it really just needed a recompile, but you had already
tested that in the beginning. Would it be possible that something went
wrong there?

I'll look into adding the Asterisk patches on top of pjproject later on. 

The ABI stability of pjproject looks rather grim, theoretically we would
need a library bump every time a new minor version is released. 

Another problem with pjproject, it has always been build with assertions
enabled. Upstream strongly recommends adding -DNDEBUG to production
builds disabling assertions. Unfortunately this drops a symbol, so
technically we would need another transition. 

Bernhard
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-voip-maintainers/attachments/20161109/244b15af/attachment-0001.sig>