[ 
https://issues.apache.org/jira/browse/CASSANDRA-21412?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

David Capwell updated CASSANDRA-21412:
--------------------------------------
    Description: 
{code}
---------------  T H R E A D  ---------------

Current thread (0x00007fc875039660):  JavaThread 
"node1_AccordJournal-compactor:1" daemon [_thread_in_Java, id=1310, 
stack(0x00007fc861ce0000,0x00007fc861d40000)]

Stack: [0x00007fc861ce0000,0x00007fc861d40000],  sp=0x00007fc861d3e370,  free 
space=376k
Native frames: (J=compiled Java code, A=aot compiled Java code, j=interpreted, 
Vv=VM code, C=native code)
J 8897 c2 java.nio.DirectByteBuffer.getInt(I)I [email protected] (28 bytes) @ 
0x00007fc8e4769176 [0x00007fc8e4769120+0x0000000000000056]
J 62486 c1 
org.apache.cassandra.service.accord.JournalKey$JournalKeySupport.deserialize(Ljava/nio/ByteBuffer;II)Lorg/apache/cassandra/service/accord/JournalKey;
 (43 bytes) @ 0x00007fc8e1274614 [0x00007fc8e1274580+0x0000000000000094]
J 62485 c1 
org.apache.cassandra.service.accord.JournalKey$JournalKeySupport.deserialize(Ljava/nio/ByteBuffer;II)Ljava/lang/Object;
 (8 bytes) @ 0x00007fc8dffe6334 [0x00007fc8dffe62c0+0x0000000000000074]
J 62479 c1 org.apache.cassandra.journal.OnDiskIndex$IndexReader.advance()Z (68 
bytes) @ 0x00007fc8e03119b4 [0x00007fc8e03118e0+0x00000000000000d4]
J 62474 c1 org.apache.cassandra.journal.StaticSegment$KeyOrderReader.advance()Z 
(105 bytes) @ 0x00007fc8e0382444 [0x00007fc8e03823c0+0x0000000000000084]
j  
org.apache.cassandra.service.accord.journal.AbstractSegmentCompactor.compact(Ljava/util/Collection;)Ljava/util/Collection;+500
j  org.apache.cassandra.journal.Compactor.run()V+86
J 27450 c2 org.apache.cassandra.concurrent.ExecutionFailure$1.run()V (72 bytes) 
@ 0x00007fc8e44553bc [0x00007fc8e4455340+0x000000000000007c]
J 7600 c2 
java.util.concurrent.Executors$RunnableAdapter.call()Ljava/lang/Object; 
[email protected] (14 bytes) @ 0x00007fc8e46ad1f8 
[0x00007fc8e46ad1a0+0x0000000000000058]
J 9771 c2 
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run()V 
[email protected] (57 bytes) @ 0x00007fc8e47befc0 
[0x00007fc8e47bed40+0x0000000000000280]
j  
java.util.concurrent.ThreadPoolExecutor.runWorker(Ljava/util/concurrent/ThreadPoolExecutor$Worker;)V+92
 [email protected]
j  java.util.concurrent.ThreadPoolExecutor$Worker.run()V+5 [email protected]
j  io.netty.util.concurrent.FastThreadLocalRunnable.run()V+4
j  java.lang.Thread.run()V+11 [email protected]
v  ~StubRoutines::call_stub
V  [libjvm.so+0x8e8c9b]  JavaCalls::call_helper(JavaValue*, methodHandle 
const&, JavaCallArguments*, Thread*)+0x39b
V  [libjvm.so+0x8e6c5d]  JavaCalls::call_virtual(JavaValue*, Handle, Klass*, 
Symbol*, Symbol*, Thread*)+0x1ed
V  [libjvm.so+0x9959cc]  thread_entry(JavaThread*, Thread*)+0x6c
V  [libjvm.so+0xef225f]  JavaThread::run()+0x29f
V  [libjvm.so+0xeee9df]  Thread::call_run()+0x14f
V  [libjvm.so+0xc87b36]  thread_native_entry(Thread*)+0xe6


siginfo: si_signo: 11 (SIGSEGV), si_code: 1 (SEGV_MAPERR), si_addr: 
0x00007fc7b2fb7319
{code}

  was:
code}
---------------  T H R E A D  ---------------

Current thread (0x00007fc875039660):  JavaThread 
"node1_AccordJournal-compactor:1" daemon [_thread_in_Java, id=1310, 
stack(0x00007fc861ce0000,0x00007fc861d40000)]

Stack: [0x00007fc861ce0000,0x00007fc861d40000],  sp=0x00007fc861d3e370,  free 
space=376k
Native frames: (J=compiled Java code, A=aot compiled Java code, j=interpreted, 
Vv=VM code, C=native code)
J 8897 c2 java.nio.DirectByteBuffer.getInt(I)I [email protected] (28 bytes) @ 
0x00007fc8e4769176 [0x00007fc8e4769120+0x0000000000000056]
J 62486 c1 
org.apache.cassandra.service.accord.JournalKey$JournalKeySupport.deserialize(Ljava/nio/ByteBuffer;II)Lorg/apache/cassandra/service/accord/JournalKey;
 (43 bytes) @ 0x00007fc8e1274614 [0x00007fc8e1274580+0x0000000000000094]
J 62485 c1 
org.apache.cassandra.service.accord.JournalKey$JournalKeySupport.deserialize(Ljava/nio/ByteBuffer;II)Ljava/lang/Object;
 (8 bytes) @ 0x00007fc8dffe6334 [0x00007fc8dffe62c0+0x0000000000000074]
J 62479 c1 org.apache.cassandra.journal.OnDiskIndex$IndexReader.advance()Z (68 
bytes) @ 0x00007fc8e03119b4 [0x00007fc8e03118e0+0x00000000000000d4]
J 62474 c1 org.apache.cassandra.journal.StaticSegment$KeyOrderReader.advance()Z 
(105 bytes) @ 0x00007fc8e0382444 [0x00007fc8e03823c0+0x0000000000000084]
j  
org.apache.cassandra.service.accord.journal.AbstractSegmentCompactor.compact(Ljava/util/Collection;)Ljava/util/Collection;+500
j  org.apache.cassandra.journal.Compactor.run()V+86
J 27450 c2 org.apache.cassandra.concurrent.ExecutionFailure$1.run()V (72 bytes) 
@ 0x00007fc8e44553bc [0x00007fc8e4455340+0x000000000000007c]
J 7600 c2 
java.util.concurrent.Executors$RunnableAdapter.call()Ljava/lang/Object; 
[email protected] (14 bytes) @ 0x00007fc8e46ad1f8 
[0x00007fc8e46ad1a0+0x0000000000000058]
J 9771 c2 
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run()V 
[email protected] (57 bytes) @ 0x00007fc8e47befc0 
[0x00007fc8e47bed40+0x0000000000000280]
j  
java.util.concurrent.ThreadPoolExecutor.runWorker(Ljava/util/concurrent/ThreadPoolExecutor$Worker;)V+92
 [email protected]
j  java.util.concurrent.ThreadPoolExecutor$Worker.run()V+5 [email protected]
j  io.netty.util.concurrent.FastThreadLocalRunnable.run()V+4
j  java.lang.Thread.run()V+11 [email protected]
v  ~StubRoutines::call_stub
V  [libjvm.so+0x8e8c9b]  JavaCalls::call_helper(JavaValue*, methodHandle 
const&, JavaCallArguments*, Thread*)+0x39b
V  [libjvm.so+0x8e6c5d]  JavaCalls::call_virtual(JavaValue*, Handle, Klass*, 
Symbol*, Symbol*, Thread*)+0x1ed
V  [libjvm.so+0x9959cc]  thread_entry(JavaThread*, Thread*)+0x6c
V  [libjvm.so+0xef225f]  JavaThread::run()+0x29f
V  [libjvm.so+0xeee9df]  Thread::call_run()+0x14f
V  [libjvm.so+0xc87b36]  thread_native_entry(Thread*)+0xe6


siginfo: si_signo: 11 (SIGSEGV), si_code: 1 (SEGV_MAPERR), si_addr: 
0x00007fc7b2fb7319
{code}


> Journal compaction did not get a reference to segments to segfault due to 
> use-after-free
> ----------------------------------------------------------------------------------------
>
>                 Key: CASSANDRA-21412
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-21412
>             Project: Apache Cassandra
>          Issue Type: Bug
>          Components: Accord
>            Reporter: David Capwell
>            Assignee: David Capwell
>            Priority: Normal
>             Fix For: 6.x, 6.0.x
>
>
> {code}
> ---------------  T H R E A D  ---------------
> Current thread (0x00007fc875039660):  JavaThread 
> "node1_AccordJournal-compactor:1" daemon [_thread_in_Java, id=1310, 
> stack(0x00007fc861ce0000,0x00007fc861d40000)]
> Stack: [0x00007fc861ce0000,0x00007fc861d40000],  sp=0x00007fc861d3e370,  free 
> space=376k
> Native frames: (J=compiled Java code, A=aot compiled Java code, 
> j=interpreted, Vv=VM code, C=native code)
> J 8897 c2 java.nio.DirectByteBuffer.getInt(I)I [email protected] (28 bytes) @ 
> 0x00007fc8e4769176 [0x00007fc8e4769120+0x0000000000000056]
> J 62486 c1 
> org.apache.cassandra.service.accord.JournalKey$JournalKeySupport.deserialize(Ljava/nio/ByteBuffer;II)Lorg/apache/cassandra/service/accord/JournalKey;
>  (43 bytes) @ 0x00007fc8e1274614 [0x00007fc8e1274580+0x0000000000000094]
> J 62485 c1 
> org.apache.cassandra.service.accord.JournalKey$JournalKeySupport.deserialize(Ljava/nio/ByteBuffer;II)Ljava/lang/Object;
>  (8 bytes) @ 0x00007fc8dffe6334 [0x00007fc8dffe62c0+0x0000000000000074]
> J 62479 c1 org.apache.cassandra.journal.OnDiskIndex$IndexReader.advance()Z 
> (68 bytes) @ 0x00007fc8e03119b4 [0x00007fc8e03118e0+0x00000000000000d4]
> J 62474 c1 
> org.apache.cassandra.journal.StaticSegment$KeyOrderReader.advance()Z (105 
> bytes) @ 0x00007fc8e0382444 [0x00007fc8e03823c0+0x0000000000000084]
> j  
> org.apache.cassandra.service.accord.journal.AbstractSegmentCompactor.compact(Ljava/util/Collection;)Ljava/util/Collection;+500
> j  org.apache.cassandra.journal.Compactor.run()V+86
> J 27450 c2 org.apache.cassandra.concurrent.ExecutionFailure$1.run()V (72 
> bytes) @ 0x00007fc8e44553bc [0x00007fc8e4455340+0x000000000000007c]
> J 7600 c2 
> java.util.concurrent.Executors$RunnableAdapter.call()Ljava/lang/Object; 
> [email protected] (14 bytes) @ 0x00007fc8e46ad1f8 
> [0x00007fc8e46ad1a0+0x0000000000000058]
> J 9771 c2 
> java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run()V 
> [email protected] (57 bytes) @ 0x00007fc8e47befc0 
> [0x00007fc8e47bed40+0x0000000000000280]
> j  
> java.util.concurrent.ThreadPoolExecutor.runWorker(Ljava/util/concurrent/ThreadPoolExecutor$Worker;)V+92
>  [email protected]
> j  java.util.concurrent.ThreadPoolExecutor$Worker.run()V+5 [email protected]
> j  io.netty.util.concurrent.FastThreadLocalRunnable.run()V+4
> j  java.lang.Thread.run()V+11 [email protected]
> v  ~StubRoutines::call_stub
> V  [libjvm.so+0x8e8c9b]  JavaCalls::call_helper(JavaValue*, methodHandle 
> const&, JavaCallArguments*, Thread*)+0x39b
> V  [libjvm.so+0x8e6c5d]  JavaCalls::call_virtual(JavaValue*, Handle, Klass*, 
> Symbol*, Symbol*, Thread*)+0x1ed
> V  [libjvm.so+0x9959cc]  thread_entry(JavaThread*, Thread*)+0x6c
> V  [libjvm.so+0xef225f]  JavaThread::run()+0x29f
> V  [libjvm.so+0xeee9df]  Thread::call_run()+0x14f
> V  [libjvm.so+0xc87b36]  thread_native_entry(Thread*)+0xe6
> siginfo: si_signo: 11 (SIGSEGV), si_code: 1 (SEGV_MAPERR), si_addr: 
> 0x00007fc7b2fb7319
> {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to