View Issue Details

IDProjectCategoryView StatusLast Update
0002330GNUnetobsoletepublic2024-05-03 13:49
ReporterChristian Grothoff Assigned ToMatthias Wachs  
PrioritynormalSeveritycrashReproducibilityhave not tried
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.9.3Fixed in Version0.9.3 
Summary0002330: crash (heap corruption?) in gnunet-service-ats after running mesh 2d-torus test for a long time in a loop
Descriptiongrothoff@pixel:~/svn/gnunet/src/mesh$ gdb ~/bin/gnunet-service-ats core.11112
GNU gdb (GDB) 7.4-debian
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /home/grothoff/bin/gnunet-service-ats...done.

warning: core file may not match specified executable file.
[New LWP 11112]

warning: Can't read pathname for load map: Input/output error.
Core was generated by `gnunet-service-ats -c /tmp/test_mesh_small//9//gnunet-testing-configHujRng'.
Program terminated with signal 6, Aborted.
#0 0x00007f12f5c1c475 in *__GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) ba
#0 0x00007f12f5c1c475 in *__GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1 0x00007f12f5c1f6f0 in *__GI_abort () at abort.c:92
#2 0x00007f12f5c5626b in __libc_message (do_abort=<optimized out>, fmt=<optimized out>) at ../sysdeps/unix/sysv/linux/libc_fatal.c:189
#3 0x00007f12f5c5fab6 in malloc_printerr (action=3, str=0x7f12f5d36870 "free(): corrupted unsorted chunks", ptr=<optimized out>) at malloc.c:6283
#4 0x00007f12f5c647ec in *__GI___libc_free (mem=<optimized out>) at malloc.c:3738
#5 0x00007f12f66d5bd3 in GNUNET_xfree_ (ptr=0x20f1130, filename=0x7f12f6718d20 "connection.c", linenumber=995) at common_allocation.c:201
#6 0x00007f12f66de0df in GNUNET_CONNECTION_destroy (connection=0x20f1130) at connection.c:995
#7 0x00007f12f670a723 in GNUNET_SERVER_client_disconnect (client=0x20f1220) at server.c:1341
#8 0x00007f12f6709ce4 in GNUNET_SERVER_client_drop (client=0x20f1220) at server.c:1178
#9 0x00007f12f67093fb in process_mst (client=0x20f1220, ret=0) at server.c:967
#10 0x00007f12f67097fb in process_incoming (cls=0x20f1220, buf=0x7fffd0eccb70, available=604, addr=0x20f0340, addrlen=2, errCode=0) at server.c:1033
#11 0x00007f12f66de58a in receive_ready (cls=0x20f1130, tc=0x7fffd0edcc10) at connection.c:1055
#12 0x00007f12f67052f9 in run_ready (rs=0x20ef2d0, ws=0x20ef360) at scheduler.c:602
#13 0x00007f12f6705b02 in GNUNET_SCHEDULER_run (task=0x7f12f67123f9 <service_task>, task_cls=0x7fffd0edcf10) at scheduler.c:790
#14 0x00007f12f6713ebb in GNUNET_SERVICE_run (argc=3, argv=0x7fffd0edd168, service_name=0x40d239 "ats", options=GNUNET_SERVICE_OPTION_NONE, task=0x4029e4 <run>, task_cls=0x0)
    at service.c:1773
#15 0x0000000000402ac1 in main (argc=3, argv=0x7fffd0edd168) at gnunet-service-ats.c:182
TagsNo tags attached.

Activities

Christian Grothoff

2012-05-08 19:01

manager   ~0005817

Likely related valgrind errors:

==16839== Command: gnunet-service-ats -c /tmp/test_mesh_small//7//gnunet-testing-configF9CPWx
==16839== Parent PID: 16754
==16839==
==16839== Invalid read of size 8
==16839== at 0x4C74020: GNUNET_SERVER_mst_receive (server_mst.c:144)
==16839== by 0x4C727E6: process_incoming (server.c:1030)
==16839== by 0x4C47589: receive_ready (connection.c:1055)
==16839== by 0x4C6E2F8: run_ready (scheduler.c:602)
==16839== by 0x4C6EB01: GNUNET_SCHEDULER_run (scheduler.c:790)
==16839== by 0x4C7CEBA: GNUNET_SERVICE_run (service.c:1773)
==16839== by 0x402AC0: main (gnunet-service-ats.c:182)
==16839== Address 0x67c45e0 is 32 bytes inside a block of size 48 free'd
==16839== at 0x4027AAE: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==16839== by 0x4C3EBD2: GNUNET_xfree_ (common_allocation.c:201)
==16839== by 0x4C74D5D: GNUNET_SERVER_mst_destroy (server_mst.c:309)
==16839== by 0x4C73578: GNUNET_SERVER_client_disconnect (server.c:1320)
==16839== by 0x4C73A2B: GNUNET_SERVER_receive_done (server.c:1473)
==16839== by 0x40C7D0: GAS_handle_address_in_use (gnunet-service-ats_scheduling.c:320)
==16839== by 0x4C71F61: GNUNET_SERVER_inject (server.c:882)
==16839== by 0x4C72A89: client_message_tokenizer_callback (server.c:1087)
==16839== by 0x4C74A53: GNUNET_SERVER_mst_receive (server_mst.c:264)
==16839== by 0x4C727E6: process_incoming (server.c:1030)
==16839== by 0x4C47589: receive_ready (connection.c:1055)
==16839== by 0x4C6E2F8: run_ready (scheduler.c:602)
==16839==
==16839== Invalid read of size 8
==16839== at 0x4C7402B: GNUNET_SERVER_mst_receive (server_mst.c:144)
==16839== by 0x4C727E6: process_incoming (server.c:1030)
==16839== by 0x4C47589: receive_ready (connection.c:1055)
==16839== by 0x4C6E2F8: run_ready (scheduler.c:602)
==16839== by 0x4C6EB01: GNUNET_SCHEDULER_run (scheduler.c:790)
==16839== by 0x4C7CEBA: GNUNET_SERVICE_run (service.c:1773)
==16839== by 0x402AC0: main (gnunet-service-ats.c:182)
==16839== Address 0x67c45d8 is 24 bytes inside a block of size 48 free'd
==16839== at 0x4027AAE: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==16839== by 0x4C3EBD2: GNUNET_xfree_ (common_allocation.c:201)
==16839== by 0x4C74D5D: GNUNET_SERVER_mst_destroy (server_mst.c:309)
==16839== by 0x4C73578: GNUNET_SERVER_client_disconnect (server.c:1320)
==16839== by 0x4C73A2B: GNUNET_SERVER_receive_done (server.c:1473)
==16839== by 0x40C7D0: GAS_handle_address_in_use (gnunet-service-ats_scheduling.c:320)
==16839== by 0x4C71F61: GNUNET_SERVER_inject (server.c:882)
==16839== by 0x4C72A89: client_message_tokenizer_callback (server.c:1087)
==16839== by 0x4C74A53: GNUNET_SERVER_mst_receive (server_mst.c:264)
==16839== by 0x4C727E6: process_incoming (server.c:1030)
==16839== by 0x4C47589: receive_ready (connection.c:1055)
==16839== by 0x4C6E2F8: run_ready (scheduler.c:602)
==16839==

Christian Grothoff

2012-05-08 19:03

manager   ~0005818

Got another DIFFERENT valgrind log:

==18040== Invalid write of size 8
==18040== at 0x4C75BE6: transmit_message (server_nc.c:301)
==18040== by 0x4C737DB: transmit_ready_callback_wrapper (server.c:1384)
==18040== by 0x4C47B96: process_notify (connection.c:1157)
==18040== by 0x4C48713: transmit_ready (connection.c:1288)
==18040== by 0x4C6E2F8: run_ready (scheduler.c:602)
==18040== by 0x4C6EB01: GNUNET_SCHEDULER_run (scheduler.c:790)
==18040== by 0x4C7CEBA: GNUNET_SERVICE_run (service.c:1773)
==18040== by 0x402AC0: main (gnunet-service-ats.c:182)
==18040== Address 0x67c4920 is 32 bytes inside a block of size 64 free'd
==18040== at 0x4027AAE: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==18040== by 0x4C3EBD2: GNUNET_xfree_ (common_allocation.c:201)
==18040== by 0x4C75913: GNUNET_SERVER_notification_context_destroy (server_nc.c:247)
==18040== by 0x40CD3C: GAS_scheduling_done (gnunet-service-ats_scheduling.c:409)
==18040== by 0x4029AC: cleanup_task (gnunet-service-ats.c:114)
==18040== by 0x4C6E2F8: run_ready (scheduler.c:602)
==18040== by 0x4C6EB01: GNUNET_SCHEDULER_run (scheduler.c:790)
==18040== by 0x4C7CEBA: GNUNET_SERVICE_run (service.c:1773)
==18040== by 0x402AC0: main (gnunet-service-ats.c:182)
==18040==
==18040== Invalid read of size 8
==18040== at 0x4C75FC3: transmit_message (server_nc.c:310)
==18040== by 0x4C737DB: transmit_ready_callback_wrapper (server.c:1384)
==18040== by 0x4C47B96: process_notify (connection.c:1157)
==18040== by 0x4C48713: transmit_ready (connection.c:1288)
==18040== by 0x4C6E2F8: run_ready (scheduler.c:602)
==18040== by 0x4C6EB01: GNUNET_SCHEDULER_run (scheduler.c:790)
==18040== by 0x4C7CEBA: GNUNET_SERVICE_run (service.c:1773)
==18040== by 0x402AC0: main (gnunet-service-ats.c:182)
==18040== Address 0x67c4928 is 40 bytes inside a block of size 64 free'd
==18040== at 0x4027AAE: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==18040== by 0x4C3EBD2: GNUNET_xfree_ (common_allocation.c:201)
==18040== by 0x4C75913: GNUNET_SERVER_notification_context_destroy (server_nc.c:247)
==18040== by 0x40CD3C: GAS_scheduling_done (gnunet-service-ats_scheduling.c:409)
==18040== by 0x4029AC: cleanup_task (gnunet-service-ats.c:114)
==18040== by 0x4C6E2F8: run_ready (scheduler.c:602)
==18040== by 0x4C6EB01: GNUNET_SCHEDULER_run (scheduler.c:790)
==18040== by 0x4C7CEBA: GNUNET_SERVICE_run (service.c:1773)
==18040== by 0x402AC0: main (gnunet-service-ats.c:182)
==18040==

Christian Grothoff

2012-05-09 09:26

manager   ~0005822

==10030== Invalid read of size 2
==10030== at 0x402B5C0: memmove (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10030== by 0x4C744C2: GNUNET_SERVER_mst_receive (server_mst.c:150)
==10030== by 0x4C725BA: process_mst (server.c:952)
==10030== by 0x4C72B5E: process_incoming (server.c:1033)
==10030== by 0x4C475C9: receive_ready (connection.c:1055)
==10030== by 0x4C6E65C: run_ready (scheduler.c:602)
==10030== by 0x4C6EE65: GNUNET_SCHEDULER_run (scheduler.c:790)
==10030== by 0x4C7D21E: GNUNET_SERVICE_run (service.c:1773)
==10030== by 0x402AC0: main (gnunet-service-ats.c:182)
==10030== Address 0x67c49d2 is 82 bytes inside a block of size 3,832 free'd
==10030== at 0x4027AAE: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10030== by 0x4C3EC12: GNUNET_xfree_ (common_allocation.c:201)
==10030== by 0x4C750A9: GNUNET_SERVER_mst_destroy (server_mst.c:308)
==10030== by 0x4C738DC: GNUNET_SERVER_client_disconnect (server.c:1320)
==10030== by 0x4C73D8F: GNUNET_SERVER_receive_done (server.c:1473)
==10030== by 0x40C7D0: GAS_handle_address_in_use (gnunet-service-ats_scheduling.c:320)
==10030== by 0x4C722C5: GNUNET_SERVER_inject (server.c:882)
==10030== by 0x4C72DED: client_message_tokenizer_callback (server.c:1087)
==10030== by 0x4C74AB7: GNUNET_SERVER_mst_receive (server_mst.c:224)
==10030== by 0x4C725BA: process_mst (server.c:952)
==10030== by 0x4C72B5E: process_incoming (server.c:1033)
==10030== by 0x4C475C9: receive_ready (connection.c:1055)

Christian Grothoff

2012-05-09 13:55

manager   ~0005826

Issue from Note 0005817 might be fixed in SVN 21376.

Matthias Wachs

2012-05-09 15:32

reporter   ~0005827

Note 5818 is fixed with revision 21383.

Matthias Wachs

2012-05-09 15:42

reporter   ~0005828

Note 5822 should be fixed with 21376

Christian Grothoff

2012-05-09 20:18

manager   ~0005830

Ok, let's call this one resolved then, if it re-surfaces, it should at least be significantly different (and thus warrant a new report anyway).

Issue History

Date Modified Username Field Change
2012-05-08 18:35 Christian Grothoff New Issue
2012-05-08 18:35 Christian Grothoff Status new => assigned
2012-05-08 18:35 Christian Grothoff Assigned To => Matthias Wachs
2012-05-08 19:01 Christian Grothoff Note Added: 0005817
2012-05-08 19:03 Christian Grothoff Note Added: 0005818
2012-05-09 09:26 Christian Grothoff Note Added: 0005822
2012-05-09 13:55 Christian Grothoff Note Added: 0005826
2012-05-09 15:32 Matthias Wachs Note Added: 0005827
2012-05-09 15:42 Matthias Wachs Note Added: 0005828
2012-05-09 15:42 Matthias Wachs Status assigned => feedback
2012-05-09 15:42 Matthias Wachs Resolution open => fixed
2012-05-09 20:18 Christian Grothoff Note Added: 0005830
2012-05-09 20:18 Christian Grothoff Status feedback => assigned
2012-05-09 20:18 Christian Grothoff Status assigned => resolved
2012-05-09 20:18 Christian Grothoff Fixed in Version => 0.9.3
2012-05-09 20:18 Christian Grothoff Target Version => 0.9.3
2012-06-02 19:15 Christian Grothoff Status resolved => closed
2024-05-03 13:49 Christian Grothoff Category ATS service => obsolete