View Issue Details

IDProjectCategoryView StatusLast Update
0003113GNUnetcadet servicepublic2013-12-24 19:54
ReporterChristian Grothoff Assigned ToBart Polot Due Date
PriorityurgentSeveritycrashReproducibilityhave not tried
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.10.0Fixed in Version0.10.0 
Summary0003113: read after free (valgrind report)
Description==896== Invalid read of size 8
==896== at 0x11062C: GMT_remove_channel (gnunet-service-mesh_tunnel.c:1553)
==896== by 0x11DE88: channel_destroy (gnunet-service-mesh_channel.c:872)
==896== by 0x11FCB8: GMCH_handle_local_destroy (gnunet-service-mesh_channel.c:1455)
==896== by 0x121CB8: channel_destroy_iterator (gnunet-service-mesh_local.c:216)
==896== by 0x50687E5: GNUNET_CONTAINER_multihashmap32_iterate (container_multihashmap32.c:247)
==896== by 0x121F0C: handle_client_disconnect (gnunet-service-mesh_local.c:248)
==896== by 0x5093F17: GNUNET_SERVER_client_disconnect (server.c:1503)
==896== by 0x50911CC: GNUNET_SERVER_destroy (server.c:798)
==896== by 0x509B174: shutdown_task (service.c:1130)
==896== by 0x508D74B: run_ready (scheduler.c:593)
==896== by 0x508E09D: GNUNET_SCHEDULER_run (scheduler.c:808)
==896== by 0x509CE9A: GNUNET_SERVICE_run (service.c:1478)
==896== Address 0x7ae78a8 is 184 bytes inside a block of size 224 free'd
==896== at 0x4C2A74C: free (vg_replace_malloc.c:468)
==896== by 0x5052273: GNUNET_xfree_ (common_allocation.c:236)
==896== by 0x110BE2: GMT_destroy (gnunet-service-mesh_tunnel.c:1665)
==896== by 0x126367: shutdown_tunnel (gnunet-service-mesh_peer.c:500)
==896== by 0x5067300: GNUNET_CONTAINER_multipeermap_iterate (container_multipeermap.c:361)
==896== by 0x12912E: GMP_shutdown (gnunet-service-mesh_peer.c:1224)
==896== by 0x12C300: shutdown_task (gnunet-service-mesh.c:103)
==896== by 0x508D74B: run_ready (scheduler.c:593)
==896== by 0x508E09D: GNUNET_SCHEDULER_run (scheduler.c:808)
==896== by 0x509CE9A: GNUNET_SERVICE_run (service.c:1478)
==896== by 0x12C77C: main (gnunet-service-mesh.c:161)
==896==
==896== Invalid read of size 8
==896== at 0x110640: GMT_remove_channel (gnunet-service-mesh_tunnel.c:1555)
==896== by 0x11DE88: channel_destroy (gnunet-service-mesh_channel.c:872)
==896== by 0x11FCB8: GMCH_handle_local_destroy (gnunet-service-mesh_channel.c:1455)
==896== by 0x121CB8: channel_destroy_iterator (gnunet-service-mesh_local.c:216)
==896== by 0x50687E5: GNUNET_CONTAINER_multihashmap32_iterate (container_multihashmap32.c:247)
==896== by 0x121F0C: handle_client_disconnect (gnunet-service-mesh_local.c:248)
==896== by 0x5093F17: GNUNET_SERVER_client_disconnect (server.c:1503)
==896== by 0x50911CC: GNUNET_SERVER_destroy (server.c:798)
==896== by 0x509B174: shutdown_task (service.c:1130)
==896== by 0x508D74B: run_ready (scheduler.c:593)
==896== by 0x508E09D: GNUNET_SCHEDULER_run (scheduler.c:808)
==896== by 0x509CE9A: GNUNET_SERVICE_run (service.c:1478)
==896== Address 0xdf0adba0df0adca is not stack'd, malloc'd or (recently) free'd
==896==
==896==
==896== Process terminating with default action of signal 11 (SIGSEGV): dumping core
==896== General Protection Fault
==896== at 0x110640: GMT_remove_channel (gnunet-service-mesh_tunnel.c:1555)
==896== by 0x11DE88: channel_destroy (gnunet-service-mesh_channel.c:872)
==896== by 0x11FCB8: GMCH_handle_local_destroy (gnunet-service-mesh_channel.c:1455)
==896== by 0x121CB8: channel_destroy_iterator (gnunet-service-mesh_local.c:216)
==896== by 0x50687E5: GNUNET_CONTAINER_multihashmap32_iterate (container_multihashmap32.c:247)
==896== by 0x121F0C: handle_client_disconnect (gnunet-service-mesh_local.c:248)
==896== by 0x5093F17: GNUNET_SERVER_client_disconnect (server.c:1503)
==896== by 0x50911CC: GNUNET_SERVER_destroy (server.c:798)
==896== by 0x509B174: shutdown_task (service.c:1130)
==896== by 0x508D74B: run_ready (scheduler.c:593)
==896== by 0x508E09D: GNUNET_SCHEDULER_run (scheduler.c:808)
==896== by 0x509CE9A: GNUNET_SERVICE_run (service.c:1478)
Nov 16 18:25:19-330787 conversation-918 ERROR Assertion failed at mesh_api.c:1351.
TagsNo tags attached.

Activities

Bart Polot

2013-11-19 15:11

reporter   ~0007658

Fixed yesterday.

Issue History

Date ModifiedUsernameFieldChange
2013-11-16 17:26Christian GrothoffNew Issue
2013-11-16 17:26Christian GrothoffStatusnew => assigned
2013-11-16 17:26Christian GrothoffAssigned To => Bart Polot
2013-11-19 15:11Bart PolotNote Added: 0007658
2013-11-19 15:11Bart PolotStatusassigned => resolved
2013-11-19 15:11Bart PolotFixed in Version => Git master
2013-11-19 15:11Bart PolotResolutionopen => fixed
2013-12-08 22:56Christian GrothoffFixed in VersionGit master => 0.10.0
2013-12-24 19:54Christian GrothoffStatusresolved => closed
2014-05-09 16:34Christian GrothoffCategorymesh service => cadet service