29 Oct
2013
29 Oct
'13
3:51 a.m.
Hello,
I decided to connect my Nokia inSite 1900MHz E1 BTS that has been sitting
for a while. Shortly after I start OpenBSC, it crashes. I have attached my
configuration files as well as the result from gdb. I am using a Dahdi with
a TE122P set to E1 mode.
openbsc.cfg
!
! OpenBSC configuration saved from vty
! !
password foo
!
line vty
no login
!
e1_input
e1_line 0 driver dahdi
network
network country code 905
mobile network code 1
short name TNET
long name TEST
timer t3101 10
timer t3113 60
bts 0
type nokia_site
band GSM1900
cell_identity 1
location_area_code 1
base_station_id_code 63
training_sequence_code 7
oml e1 line 0 timeslot 1 sub-slot full
oml e1 tei 1
trx 0
arfcn 518
max_power_red 24
rsl e1 line 0 timeslot 2 sub-slot full
rsl e1 tei 1
timeslot 0
phys_chan_config CCCH+SDCCH4
e1 line 0 timeslot 6 sub-slot full
timeslot 1
phys_chan_config TCH/F
e1 line 0 timeslot 6 sub-slot 1
timeslot 2
phys_chan_config TCH/F
e1 line 0 timeslot 6 sub-slot 2
timeslot 3
phys_chan_config TCH/F
e1 line 0 timeslot 6 sub-slot 3
timeslot 4
phys_chan_config TCH/F
e1 line 0 timeslot 7 sub-slot 0
timeslot 5
phys_chan_config TCH/F
e1 line 0 timeslot 7 sub-slot 1
timeslot 6
phys_chan_config TCH/F
e1 line 0 timeslot 7 sub-slot 2
timeslot 7
phys_chan_config TCH/F
e1 line 0 timeslot 7 sub-slot 3
DAHDI system.conf
# Dahdi Configuration File
#
# This file is parsed by the Dahdi Configurator, dahdi_cfg
#
# Global data
#
# E1 Configuration (Jumper set on card)
#
#
span=1,0,0,ccs,hdb3,crc4
#
#
bchan=1-31
#
#
# Zone stuff
loadzone = us
defaultzone = us
Output from gdb:
root@openbsc-2:/opt/openbsc/openbsc/src# gdb ./osmo-nitb/osmo-nitb
GNU gdb (GDB) 7.4.1-debian
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /opt/openbsc/openbsc/src/osmo-nitb/osmo-nitb...done.
(gdb) run
Starting program: /opt/openbsc/openbsc/src/osmo-nitb/osmo-nitb
[Thread debugging using libthread_db enabled]
Using host libthread_db library
"/lib/i386-linux-gnu/i686/cmov/libthread_db.so.1".
<0018> input/lapd.c:212 LAPD Allocating SAP for SAPI=62 / TEI=1
<0018> input/lapd.c:223 k=1 N200=3 N201=260 T200=1.0 T203=10.0
<0018> input/lapd.c:485 LAPD DL-ESTABLISH request TEI=1 SAPI=62
DB: Database initialized.
DB: Database prepared.
<001d> sms_queue.c:220 Attempting to send 20 SMS
<0018> input/lapd.c:624 LAPD DL-ESTABLISH confirm TEI=1 SAPI=62
<0005> bts_nokia_site.c:58 bootstrapping OML for BTS 0
<0005> bts_nokia_site.c:1679 ABIS_OM_MDISC_FOM
<0005> bts_nokia_site.c:1507 (0x81) NOKIA_BTS_ACK
<0005> bts_nokia_site.c:1539 ACK = 1
<0018> input/lapd.c:513 LAPD DL-RELEASE request TEI=1 SAPI=62
<0018> input/lapd.c:628 LAPD DL-RELEASE confirm TEI=1 SAPI=62
Program received signal SIGSEGV, Segmentation fault.
0xb7f96f00 in lapd_send_i (line=line@entry=1609, lctx=<error reading
variable: Unhandled dwarf expression opcode 0xfa>,
lctx=<error reading variable: Unhandled dwarf expression opcode 0xfa>)
at lapd_core.c:1803
1803 if (!dl->tx_hist[h].msg) {
(gdb) bt full
#0 0xb7f96f00 in lapd_send_i (line=line@entry=1609, lctx=<error reading
variable: Unhandled dwarf expression opcode 0xfa>,
lctx=<error reading variable: Unhandled dwarf expression opcode 0xfa>)
at lapd_core.c:1803
dl = 0x8157510
k = 1 '\001'
msg = <optimized out>
length = <optimized out>
left = <optimized out>
rc = <optimized out>
nctx = {dl = 0x8157510, n201 = -1208330011, cr = 219 '\333', sapi =
200 '\310', tei = 245 '\365', lpd = 183 '\267',
format = 254 '\376', p_f = 255 '\377', n_send = 255
'\377', n_recv
= 255 '\377', s_u = 3 '\003',
length = -1208330011, more = 62 '>'}
#1 0xb7f99ac3 in lapd_rx_i (lctx=0xbffff9b4, msg=0x815d708) at
lapd_core.c:1609
dl = 0x8157510
ns = 0 '\000'
length = <optimized out>
rc = <optimized out>
#2 lapd_ph_data_ind (msg=msg@entry=0x815d708, lctx=lctx@entry=0xbffff9b4)
at lapd_core.c:1644
rc = <optimized out>
#3 0xb7f4aafa in lapd_receive (li=0x81333f8, msg=msg@entry=0x815d708,
error=error@entry=0xbffffa2c) at input/lapd.c:461
i = 4
lctx = {dl = 0x8157510, n201 = 260, cr = 0 '\000', sapi = 62
'>',
tei = 1 '\001', lpd = 0 '\000',
format = 1 '\001', p_f = 0 '\000', n_send = 0 '\000',
n_recv = 1
'\001', s_u = 0 '\000', length = 12,
more = 0 '\000'}
rc = 135476652
sap = <optimized out>
teip = 0x815d708
#4 0xb7f426e6 in e1inp_rx_ts_lapd (e1i_ts=e1i_ts@entry=0x8133ad4,
msg=msg@entry=0x815d708) at e1_input.c:556
sapi = 62
tei = 1
ret = 0
error = 0
#5 0xb7f460ee in handle_ts1_read (bfd=0x8134040) at input/dahdi.c:190
line = <optimized out>
msg = 0x815d708
ret = 18
ts_nr = <optimized out>
e1i_ts = 0x8133ad4
#6 dahdi_fd_cb (bfd=0x8134040, what=1) at input/dahdi.c:376
line = <optimized out>
ts_nr = <optimized out>
idx = <optimized out>
e1i_ts = <optimized out>
rc = 0
---Type <return> to continue, or q <return> to quit---
#7 0xb7f5a7e2 in osmo_select_main (polling=polling@entry=0) at select.c:158
flags = <optimized out>
ufd = 0x8134040
tmp = 0x81345c8
readset = {__fds_bits = {0 <repeats 32 times>}}
writeset = {__fds_bits = {0 <repeats 32 times>}}
exceptset = {__fds_bits = {0 <repeats 32 times>}}
work = 1
rc = <optimized out>
no_time = {tv_sec = 0, tv_usec = 0}
#8 0x0804d481 in main (argc=1, argv=0xbffffd84) at bsc_hack.c:346
rc = <optimized out>
(gdb) list
1798 }
1799
1800 h = do_mod(dl->v_send, dl->range_hist);
1801
1802 /* if we have no tx_hist yet, we create it */
1803 if (!dl->tx_hist[h].msg) {
1804 /* Get next message into send-buffer, if any */
1805 if (!dl->send_buffer) {
1806 next_message:
1807 dl->send_out = 0;
(gdb)
Regards,
Caleb