Preview Tool

Cisco Bug: CSCvt05318 - CTFTP core seen from TFTP side while trying to write dynamic file

Last Modified

Oct 13, 2020

Products (1)

  • Cisco Unified Communications Manager (CallManager)

Known Affected Releases

11.5(1.17900.52) 11.5(1.18900.27) 12.5(1.11900.146)

Description (partial)

The ctftp core generation is suspected to be an issue from TFTP side. The crash occurred due to an invalid file descriptor while trying to write the dynamic file EMU.283 as shown below
mDynFileName = {<stlp_std::priv::_String_base<char, stlp_std::allocator<char> >> = {_M_buffers =
{ _M_end_of_storage = 0xe844b181 "te", _M_static_buf = "\201\261D\350\344I0\365\070?\000\000\210\251\304", <incomplete sequence \326>}

_M_finish = 0xe844b180 "",M_start_of_storage = {<stlp_std::allocator<char>> = {<stlp_std::__stlport_class<stlp_std::allocator<char> >> =
{<No data fields>}

, <No data fields>}, _M_data = 0xe844b148 "/usr/local/cm/tftp/tftpcache/headset/config/user/EMU.283"}}

members of CWriterInfo:
m_dynFile = 0x0

 backtrace - CUCM
 #0  0xf6bfda17 in fwrite () from /usr/lib/
#1  0x566c493a in write_to_DynFile (recvSize=22, recvBuf=0xefd4d090 "{\"headsetConfig\":{ } }311", this=0xd21058e8) at TDCLClusterSigs.hpp:163
#2  Writer::PersistFile (this=this@entry=0xefd2f0d0, action=action@entry=FileWrite, data=0xefd4d090 "{\"headsetConfig\":{ } }311", dataLen=22, wInfo=...) at ProcessWriter.cpp:181
#3  0x566c5890 in Writer::wait_WriteReq (this=0xefd2f0d0, s=...) at ProcessWriter.cpp:115
#4  0x566c5f6d in Writer::fireSignal (this=<optimized out>, sdlSignal=...) at ProcessWriter.hpp:37
#5  0x56d13eac in SdlProcessBase::inputSignal (this=this@entry=0xefd2f0d0, rSignal=rSignal@entry=0xefd54790, traceType=SdlSystemLog::SignalThreadedNoPriorities, highPriority=0, normalPriority=1, lowPriority=0, veryLowPriority=0, lazyPriority=0, dbUpdatePriority=0) at SdlProcessBase.cpp:417
#6  0x56d38412 in SdlThreadedProcess::threadQueueReader (this=this@entry=0xefd2f0d0) at SdlThreadedProcess.cpp:110
#7  0x56d386bc in SdlThreadedProcess::threadQueueReaderInit (sdlThreadedProcess=0xefd2f0d0) at SdlThreadedProcess.cpp:75
#8  0xf6d92b4c in start_thread () from /usr/lib/
#9  0xf6c9404e in clone () from /usr/lib/
 info registers
 eax            0xefd4d090      -271265648
ecx            0xe3d2eab2       -472716622
edx            0xe5210d18       -450818792
ebx            0xf6d5d000       -153759744
esp            0xd2105800       0xd2105800
ebp            0xd2105a98       0xd2105a98

The issue was seen after ad-hoc testing around EM-based headset, and is suspected to be from TFTP side. The crash occurred due to an invalid file descriptor while trying to write a certain dynamic file.
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.