View Issue Details

IDProjectCategoryView StatusLast Update
0003113GNUnetcadet servicepublic2013-12-24 20:54
ReporterChristian Grothoff Assigned ToBart Polot  
PriorityurgentSeveritycrashReproducibilityhave not tried
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.10.0Fixed in Version0.10.0 
Summary0003113: read after free (valgrind report)
Description==896== Invalid read of size 8
==896== at 0x11062C: GMT_remove_channel (gnunet-service-mesh_tunnel.c:1553)
==896== by 0x11DE88: channel_destroy (gnunet-service-mesh_channel.c:872)
==896== by 0x11FCB8: GMCH_handle_local_destroy (gnunet-service-mesh_channel.c:1455)
==896== by 0x121CB8: channel_destroy_iterator (gnunet-service-mesh_local.c:216)
==896== by 0x50687E5: GNUNET_CONTAINER_multihashmap32_iterate (container_multihashmap32.c:247)
==896== by 0x121F0C: handle_client_disconnect (gnunet-service-mesh_local.c:248)
==896== by 0x5093F17: GNUNET_SERVER_client_disconnect (server.c:1503)
==896== by 0x50911CC: GNUNET_SERVER_destroy (server.c:798)
==896== by 0x509B174: shutdown_task (service.c:1130)
==896== by 0x508D74B: run_ready (scheduler.c:593)
==896== by 0x508E09D: GNUNET_SCHEDULER_run (scheduler.c:808)
==896== by 0x509CE9A: GNUNET_SERVICE_run (service.c:1478)
==896== Address 0x7ae78a8 is 184 bytes inside a block of size 224 free'd
==896== at 0x4C2A74C: free (vg_replace_malloc.c:468)
==896== by 0x5052273: GNUNET_xfree_ (common_allocation.c:236)
==896== by 0x110BE2: GMT_destroy (gnunet-service-mesh_tunnel.c:1665)
==896== by 0x126367: shutdown_tunnel (gnunet-service-mesh_peer.c:500)
==896== by 0x5067300: GNUNET_CONTAINER_multipeermap_iterate (container_multipeermap.c:361)
==896== by 0x12912E: GMP_shutdown (gnunet-service-mesh_peer.c:1224)
==896== by 0x12C300: shutdown_task (gnunet-service-mesh.c:103)
==896== by 0x508D74B: run_ready (scheduler.c:593)
==896== by 0x508E09D: GNUNET_SCHEDULER_run (scheduler.c:808)
==896== by 0x509CE9A: GNUNET_SERVICE_run (service.c:1478)
==896== by 0x12C77C: main (gnunet-service-mesh.c:161)
==896==
==896== Invalid read of size 8
==896== at 0x110640: GMT_remove_channel (gnunet-service-mesh_tunnel.c:1555)
==896== by 0x11DE88: channel_destroy (gnunet-service-mesh_channel.c:872)
==896== by 0x11FCB8: GMCH_handle_local_destroy (gnunet-service-mesh_channel.c:1455)
==896== by 0x121CB8: channel_destroy_iterator (gnunet-service-mesh_local.c:216)
==896== by 0x50687E5: GNUNET_CONTAINER_multihashmap32_iterate (container_multihashmap32.c:247)
==896== by 0x121F0C: handle_client_disconnect (gnunet-service-mesh_local.c:248)
==896== by 0x5093F17: GNUNET_SERVER_client_disconnect (server.c:1503)
==896== by 0x50911CC: GNUNET_SERVER_destroy (server.c:798)
==896== by 0x509B174: shutdown_task (service.c:1130)
==896== by 0x508D74B: run_ready (scheduler.c:593)
==896== by 0x508E09D: GNUNET_SCHEDULER_run (scheduler.c:808)
==896== by 0x509CE9A: GNUNET_SERVICE_run (service.c:1478)
==896== Address 0xdf0adba0df0adca is not stack'd, malloc'd or (recently) free'd
==896==
==896==
==896== Process terminating with default action of signal 11 (SIGSEGV): dumping core
==896== General Protection Fault
==896== at 0x110640: GMT_remove_channel (gnunet-service-mesh_tunnel.c:1555)
==896== by 0x11DE88: channel_destroy (gnunet-service-mesh_channel.c:872)
==896== by 0x11FCB8: GMCH_handle_local_destroy (gnunet-service-mesh_channel.c:1455)
==896== by 0x121CB8: channel_destroy_iterator (gnunet-service-mesh_local.c:216)
==896== by 0x50687E5: GNUNET_CONTAINER_multihashmap32_iterate (container_multihashmap32.c:247)
==896== by 0x121F0C: handle_client_disconnect (gnunet-service-mesh_local.c:248)
==896== by 0x5093F17: GNUNET_SERVER_client_disconnect (server.c:1503)
==896== by 0x50911CC: GNUNET_SERVER_destroy (server.c:798)
==896== by 0x509B174: shutdown_task (service.c:1130)
==896== by 0x508D74B: run_ready (scheduler.c:593)
==896== by 0x508E09D: GNUNET_SCHEDULER_run (scheduler.c:808)
==896== by 0x509CE9A: GNUNET_SERVICE_run (service.c:1478)
Nov 16 18:25:19-330787 conversation-918 ERROR Assertion failed at mesh_api.c:1351.
TagsNo tags attached.

Activities

Bart Polot

2013-11-19 16:11

reporter   ~0007658

Fixed yesterday.

Issue History

Date Modified Username Field Change
2013-11-16 18:26 Christian Grothoff New Issue
2013-11-16 18:26 Christian Grothoff Status new => assigned
2013-11-16 18:26 Christian Grothoff Assigned To => Bart Polot
2013-11-19 16:11 Bart Polot Note Added: 0007658
2013-11-19 16:11 Bart Polot Status assigned => resolved
2013-11-19 16:11 Bart Polot Fixed in Version => Git master
2013-11-19 16:11 Bart Polot Resolution open => fixed
2013-12-08 23:56 Christian Grothoff Fixed in Version Git master => 0.10.0
2013-12-24 20:54 Christian Grothoff Status resolved => closed
2014-05-09 18:34 Christian Grothoff Category mesh service => cadet service