View Issue Details

IDProjectCategoryView StatusLast Update
0002014GNUnettransport servicepublic2011-12-26 22:28
ReporterLRN Assigned ToChristian Grothoff  
PriorityhighSeveritycrashReproducibilityhave not tried
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.9.1Fixed in Version0.9.1 
Summary0002014: Crash in transport service (corrupt callback address?)
Descriptionr18623 + 5
Additional Information
Reading symbols from d:\progs\gnunet\bin\gnunet-service-transport.exe...done.
[Switching to Thread 12976.0x40f0]
(gdb) bt
#0  0x77ad000d in ntdll!LdrFindResource_U () from E:\Windows\SysWOW64\ntdll.dll
#1  0x77b5f826 in ntdll!RtlQueryTimeZoneInformation () from E:\Windows\SysWOW64\ntdll.dll
#2  0xf0553b21 in ?? ()
#3  0x00000000 in ?? ()
(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 12976.0x4348]
0x02000000 in ?? ()
(gdb) bt
#0  0x02000000 in ?? ()
#1  0x00408b70 in _fu314__skip_log () at gnunet-service-transport_neighbours.c:683
#2  0x00408fec in _fu329__skip_log () at gnunet-service-transport_neighbours.c:728
#3  0x0040964c in _fu350__skip_log () at gnunet-service-transport_neighbours.c:780
#4  0x6be747d7 in run_ready (rs=0x1e4d618, ws=0x1e53b50) at scheduler.c:684
#5  0x6be74f45 in GNUNET_SCHEDULER_run (task=0x6be7f2aa <service_task>, task_cls=0x28fe28) at scheduler.c:874
#6  0x6be7ff8e in GNUNET_SERVICE_run (argc=3, argv=0x1e4aca8, serviceName=0x4152d7 "transport", opt=GNUNET_SERVICE_OPTION_NONE,
    task=0x402430 <run>, task_cls=0x0) at service.c:1673
#7  0x004027a5 in main (argc=3, argv=0x1e4aca8) at gnunet-service-transport.c:610
(gdb) up
#1  0x00408b70 in _fu314__skip_log () at gnunet-service-transport_neighbours.c:683
683         mq->cont (mq->cont_cls, success);
(gdb)
#2  0x00408fec in _fu329__skip_log () at gnunet-service-transport_neighbours.c:728
728         transmit_send_continuation (mq, &n->id, GNUNET_SYSERR);
(gdb) do
#1  0x00408b70 in _fu314__skip_log () at gnunet-service-transport_neighbours.c:683
683         mq->cont (mq->cont_cls, success);
(gdb) p mq->cont
$1 = (GST_NeighbourSendContinuation) 0x2000000
TagsNo tags attached.

Activities

Matthias Wachs

2011-12-19 14:34

manager   ~0005136

mq->cont is only set in GST_neighbours_send

And GST_neighbours_send is only used in:

gnunet-service-transport_clients.c:clients_handle_send
  GST_neighbours_send (&obm->peer, obmm, msize,
                       GNUNET_TIME_relative_ntoh (obm->timeout),
                       &handle_send_transmit_continuation, stcc);

gnunet-service-transport.c:transmit_our_hello
  GST_neighbours_send (target, (const char *) hello, ntohs (hello->size),
                       GNUNET_CONSTANTS_HELLO_ADDRESS_EXPIRATION, NULL, NULL);

Matthias Wachs

2011-12-19 14:43

manager   ~0005137

Shutdown order in transport-service is:
  GST_neighbours_stop ();
...
  GST_clients_stop ();

I can not explain this issue...this cannot happen :-)

LRN

2011-12-19 15:45

developer   ~0005141

Well, an unfortunate range error could garble contents of the callback.
Anyway, it might be an isolated incident.

Matthias Wachs

2011-12-19 16:22

manager   ~0005142

I hope so...I have no explanation why the address &handle_send_transmit_continuation should be corrupted

Christian Grothoff

2011-12-19 17:31

manager   ~0005143

Fixed in SVN 18696.

Issue History

Date Modified Username Field Change
2011-12-17 00:36 LRN New Issue
2011-12-17 00:36 LRN Status new => assigned
2011-12-17 00:36 LRN Assigned To => Matthias Wachs
2011-12-19 14:24 Christian Grothoff Target Version => 0.9.1
2011-12-19 14:27 Christian Grothoff Priority normal => high
2011-12-19 14:34 Matthias Wachs Note Added: 0005136
2011-12-19 14:43 Matthias Wachs Note Added: 0005137
2011-12-19 15:45 LRN Note Added: 0005141
2011-12-19 16:22 Matthias Wachs Note Added: 0005142
2011-12-19 17:31 Christian Grothoff Note Added: 0005143
2011-12-19 17:31 Christian Grothoff Status assigned => resolved
2011-12-19 17:31 Christian Grothoff Fixed in Version => 0.9.1
2011-12-19 17:31 Christian Grothoff Resolution open => fixed
2011-12-19 17:31 Christian Grothoff Assigned To Matthias Wachs => Christian Grothoff
2011-12-26 22:28 Christian Grothoff Status resolved => closed