BiteTheDDDDt opened a new pull request, #60734:
URL: https://github.com/apache/doris/pull/60734
### What problem does this PR solve?
```
=================================================================
==3150626==ERROR: AddressSanitizer: heap-use-after-free on address
0x7c6358d59ac8 at pc 0x5592a812e6b9 bp 0x7b48314d57d0 sp 0x7b48314d57c8
READ of size 8 at 0x7c6358d59ac8 thread T1749
#0 0x5592a812e6b8 in std::__uniq_ptr_impl<std::mutex,
std::default_delete<std::mutex>>::_M_ptr() const
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/unique_ptr.h:193:51
#1 0x5592a812e6b8 in std::unique_ptr<std::mutex,
std::default_delete<std::mutex>>::get() const
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/unique_ptr.h:473:21
#2 0x5592a812e6b8 in std::unique_ptr<std::mutex,
std::default_delete<std::mutex>>::operator*() const
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/unique_ptr.h:457:10
#3 0x5592a812e6b8 in
doris::pipeline::ExchangeSinkBuffer::_send_rpc(doris::pipeline::RpcInstance&)
/root/doris/be/build_ASAN/../src/pipeline/exec/exchange_sink_buffer.cpp:235:39
#4 0x5592a8135a2a in
doris::pipeline::ExchangeSinkBuffer::_send_rpc(doris::pipeline::RpcInstance&)::$_4::operator()(doris::pipeline::RpcInstance*,
bool const&, doris::PTransmitDataResult const&, long const&) const
/root/doris/be/build_ASAN/../src/pipeline/exec/exchange_sink_buffer.cpp:486:17
#5 0x5592a8135a2a in void std::__invoke_impl<void,
doris::pipeline::ExchangeSinkBuffer::_send_rpc(doris::pipeline::RpcInstance&)::$_4&,
doris::pipeline::RpcInstance*, bool const&, doris::PTransmitDataResult const&,
long const&>(std::__invoke_other,
doris::pipeline::ExchangeSinkBuffer::_send_rpc(doris::pipeline::RpcInstance&)::$_4&,
doris::pipeline::RpcInstance*&&, bool const&, doris::PTransmitDataResult
const&, long const&)
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/invoke.h:63:14
#6 0x5592a8135a2a in std::enable_if<is_invocable_r_v<void,
doris::pipeline::ExchangeSinkBuffer::_send_rpc(doris::pipeline::RpcInstance&)::$_4&,
doris::pipeline::RpcInstance*, bool const&, doris::PTransmitDataResult const&,
long const&>, void>::type std::__invoke_r<void,
doris::pipeline::ExchangeSinkBuffer::_send_rpc(doris::pipeline::RpcInstance&)::$_4&,
doris::pipeline::RpcInstance*, bool const&, doris::PTransmitDataResult const&,
long
const&>(doris::pipeline::ExchangeSinkBuffer::_send_rpc(doris::pipeline::RpcInstance&)::$_4&,
doris::pipeline::RpcInstance*&&, bool const&, doris::PTransmitDataResult
const&, long const&)
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/invoke.h:113:2
#7 0x5592a8135a2a in std::_Function_handler<void
(doris::pipeline::RpcInstance*, bool const&, doris::PTransmitDataResult const&,
long const&),
doris::pipeline::ExchangeSinkBuffer::_send_rpc(doris::pipeline::RpcInstance&)::$_4>::_M_invoke(std::_Any_data
const&, doris::pipeline::RpcInstance*&&, bool const&,
doris::PTransmitDataResult const&, long const&)
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/std_function.h:292:9
#8 0x5592a815097c in std::function<void (doris::pipeline::RpcInstance*,
bool const&, doris::PTransmitDataResult const&, long
const&)>::operator()(doris::pipeline::RpcInstance*, bool const&,
doris::PTransmitDataResult const&, long const&) const
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/std_function.h:593:9
#9 0x5592a815097c in
doris::pipeline::ExchangeSendCallback<doris::PTransmitDataResult>::call()
/root/doris/be/build_ASAN/../src/pipeline/exec/exchange_sink_buffer.h:204:17
#10 0x5592a816020c in
doris::AutoReleaseClosure<doris::PTransmitDataParams,
doris::pipeline::ExchangeSendCallback<doris::PTransmitDataResult>>::Run()
/root/doris/be/build_ASAN/../src/util/brpc_closure.h:102:18
#11 0x55928d232f3b in doris::FailureDetectClosure::Run()
/root/doris/be/build_ASAN/../src/util/brpc_client_cache.h:90:20
#12 0x5592aca1ff9e in
brpc::Controller::EndRPC(brpc::Controller::CompletionInfo const&)
(/home/work/unlimit_teamcity/TeamCity/Agents/20260212144004agent_172.17.0.180_1/work/60183217f6ee2a9c/output/be/lib/doris_be+0x4682bf9e)
#13 0x5592aca4f467 in
brpc::policy::ProcessRpcResponse(brpc::InputMessageBase*)
(/home/work/unlimit_teamcity/TeamCity/Agents/20260212144004agent_172.17.0.180_1/work/60183217f6ee2a9c/output/be/lib/doris_be+0x4685b467)
#14 0x5592aca46426 in brpc::ProcessInputMessage(void*)
(/home/work/unlimit_teamcity/TeamCity/Agents/20260212144004agent_172.17.0.180_1/work/60183217f6ee2a9c/output/be/lib/doris_be+0x46852426)
#15 0x5592aca46f20 in
brpc::InputMessenger::InputMessageClosure::~InputMessageClosure()
(/home/work/unlimit_teamcity/TeamCity/Agents/20260212144004agent_172.17.0.180_1/work/60183217f6ee2a9c/output/be/lib/doris_be+0x46852f20)
#16 0x5592aca478dd in brpc::InputMessenger::OnNewMessages(brpc::Socket*)
(/home/work/unlimit_teamcity/TeamCity/Agents/20260212144004agent_172.17.0.180_1/work/60183217f6ee2a9c/output/be/lib/doris_be+0x468538dd)
#17 0x5592acb8faec in brpc::Socket::ProcessEvent(void*)
(/home/work/unlimit_teamcity/TeamCity/Agents/20260212144004agent_172.17.0.180_1/work/60183217f6ee2a9c/output/be/lib/doris_be+0x4699baec)
#18 0x5592ac9cfe76 in bthread::TaskGroup::task_runner(long)
(/home/work/unlimit_teamcity/TeamCity/Agents/20260212144004agent_172.17.0.180_1/work/60183217f6ee2a9c/output/be/lib/doris_be+0x467dbe76)
#19 0x5592ac9baae0 in bthread_make_fcontext
(/home/work/unlimit_teamcity/TeamCity/Agents/20260212144004agent_172.17.0.180_1/work/60183217f6ee2a9c/output/be/lib/doris_be+0x467c6ae0)
0x7c6358d59ac8 is located 8 bytes inside of 200-byte region
[0x7c6358d59ac0,0x7c6358d59b88)
freed by thread T998 (brpc_light) here:
#0 0x55928cd09f12 in operator delete(void*, unsigned long)
(/home/work/unlimit_teamcity/TeamCity/Agents/20260212144004agent_172.17.0.180_1/work/60183217f6ee2a9c/output/be/lib/doris_be+0x26b15f12)
#1 0x5592a814cde1 in
std::default_delete<doris::pipeline::RpcInstance>::operator()(doris::pipeline::RpcInstance*)
const
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/unique_ptr.h:93:2
#2 0x5592a814cde1 in std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>::~unique_ptr()
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/unique_ptr.h:399:4
#3 0x5592a814cde1 in std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>::~pair()
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/stl_pair.h:302:12
#4 0x5592a814cde1 in void std::destroy_at<std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>(std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>*)
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/stl_construct.h:88:15
#5 0x5592a814cde1 in void
std::allocator_traits<std::allocator<std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>>::destroy<std::pair<long
const, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>(std::allocator<std::pair<long
const, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>&, std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>*)
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/alloc_traits.h:698:4
#6 0x5592a814cde1 in
decltype(std::allocator_traits<std::allocator<std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>>::destroy(fp0, fp1))
phmap::allocator_traits<std::allocator<std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>>::destroy_impl<std::allocator<std::pair<long
const, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>, std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>(int,
std::allocator<std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>&, std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>*)
/var/local/thirdparty/installed/include/parallel_hashmap/phmap_base.h:1542:9
#7 0x5592a814cde1 in void
phmap::allocator_traits<std::allocator<std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>>::destroy<std::pair<long
const, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>(std::allocator<std::pair<long
const, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>&, std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>*)
/var/local/thirdparty/installed/include/parallel_hashmap/phmap_base.h:1500:9
#8 0x5592a814cde1 in void phmap::priv::map_slot_policy<long,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>::destroy<std::allocator<std::pair<long
const, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>>(std::allocator<std::pair<long
const, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>*,
phmap::priv::map_slot_type<long, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>*)
/var/local/thirdparty/installed/include/parallel_hashmap/phmap_base.h:4690:13
#9 0x5592a814c998 in void phmap::priv::FlatHashMapPolicy<long,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>::destroy<std::allocator<std::pair<long
const, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>>(std::allocator<std::pair<long
const, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>*,
phmap::priv::map_slot_type<long, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>*)
/var/local/thirdparty/installed/include/parallel_hashmap/phmap.h:4209:9
#10 0x5592a814c998 in void
phmap::priv::hash_policy_traits<phmap::priv::FlatHashMapPolicy<long,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>,
void>::destroy<std::allocator<std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>>(std::allocator<std::pair<long
const, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>*,
phmap::priv::map_slot_type<long, std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>*)
/var/local/thirdparty/installed/include/parallel_hashmap/phmap_base.h:479:9
#11 0x5592a814c998 in
phmap::priv::raw_hash_set<phmap::priv::FlatHashMapPolicy<long,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>, phmap::Hash<long>,
phmap::EqualTo<long>, std::allocator<std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>>::destroy_slots()
/var/local/thirdparty/installed/include/parallel_hashmap/phmap.h:1995:17
#12 0x5592a814c7e5 in
phmap::priv::raw_hash_set<phmap::priv::FlatHashMapPolicy<long,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>, phmap::Hash<long>,
phmap::EqualTo<long>, std::allocator<std::pair<long const,
std::unique_ptr<doris::pipeline::RpcInstance,
std::default_delete<doris::pipeline::RpcInstance>>>>>::~raw_hash_set()
/var/local/thirdparty/installed/include/parallel_hashmap/phmap.h:1236:23
#13 0x5592a814c7e5 in
doris::pipeline::ExchangeSinkBuffer::~ExchangeSinkBuffer()
/root/doris/be/build_ASAN/../src/pipeline/exec/exchange_sink_buffer.h:275:44
#14 0x5592a814c84d in
doris::pipeline::ExchangeSinkBuffer::~ExchangeSinkBuffer()
/root/doris/be/build_ASAN/../src/pipeline/exec/exchange_sink_buffer.h:275:44
#15 0x55928cd38181 in
std::_Sp_counted_base<(__gnu_cxx::_Lock_policy)2>::_M_release()
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/shared_ptr_base.h:345:8
#16 0x5592a80faa14 in
std::__shared_count<(__gnu_cxx::_Lock_policy)2>::~__shared_count()
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/shared_ptr_base.h:1069:11
#17 0x5592a80faa14 in
std::__shared_ptr<doris::pipeline::ExchangeSinkBuffer,
(__gnu_cxx::_Lock_policy)2>::~__shared_ptr()
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/shared_ptr_base.h:1531:31
#18 0x5592a80faa14 in
doris::pipeline::ExchangeSinkOperatorX::~ExchangeSinkOperatorX()
/root/doris/be/build_ASAN/../src/pipeline/exec/exchange_sink_operator.h:190:7
#19 0x55928cd38181 in
std::_Sp_counted_base<(__gnu_cxx::_Lock_policy)2>::_M_release()
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/shared_ptr_base.h:345:8
#20 0x5592aa75a7bf in
std::__shared_count<(__gnu_cxx::_Lock_policy)2>::~__shared_count()
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/shared_ptr_base.h:1069:11
#21 0x5592aa75a7bf in
std::__shared_ptr<doris::pipeline::DataSinkOperatorXBase,
(__gnu_cxx::_Lock_policy)2>::~__shared_ptr()
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/shared_ptr_base.h:1531:31
#22 0x5592aa75a7bf in
std::__shared_ptr<doris::pipeline::DataSinkOperatorXBase,
(__gnu_cxx::_Lock_policy)2>::reset()
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/shared_ptr_base.h:1649:9
#23 0x5592aa75a7bf in
doris::pipeline::PipelineFragmentContext::_release_resource()
/root/doris/be/build_ASAN/../src/pipeline/pipeline_fragment_context.cpp:2111:11
#24 0x5592aa7ab4ec in
doris::pipeline::PipelineFragmentContext::set_to_rerun()
/root/doris/be/build_ASAN/../src/pipeline/pipeline_fragment_context.cpp:2084:5
#25 0x55929194cd35 in
doris::FragmentMgr::rerun_fragment(doris::TUniqueId const&, int,
doris::PRerunFragmentParams_Opcode)
/root/doris/be/build_ASAN/../src/runtime/fragment_mgr.cpp:1460:34
#26 0x55929229716a in
doris::PInternalService::rerun_fragment(google::protobuf::RpcController*,
doris::PRerunFragmentParams const*, doris::PRerunFragmentResult*,
google::protobuf::Closure*)::$_0::operator()() const
/root/doris/be/build_ASAN/../src/service/internal_service.cpp:1650:44
#27 0x55929229716a in void std::__invoke_impl<void,
doris::PInternalService::rerun_fragment(google::protobuf::RpcController*,
doris::PRerunFragmentParams const*, doris::PRerunFragmentResult*,
google::protobuf::Closure*)::$_0&>(std::__invoke_other,
doris::PInternalService::rerun_fragment(google::protobuf::RpcController*,
doris::PRerunFragmentParams const*, doris::PRerunFragmentResult*,
google::protobuf::Closure*)::$_0&)
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/invoke.h:63:14
#28 0x55929229716a in std::enable_if<is_invocable_r_v<void,
doris::PInternalService::rerun_fragment(google::protobuf::RpcController*,
doris::PRerunFragmentParams const*, doris::PRerunFragmentResult*,
google::protobuf::Closure*)::$_0&>, void>::type std::__invoke_r<void,
doris::PInternalService::rerun_fragment(google::protobuf::RpcController*,
doris::PRerunFragmentParams const*, doris::PRerunFragmentResult*,
google::protobuf::Closure*)::$_0&>(doris::PInternalService::rerun_fragment(google::protobuf::RpcController*,
doris::PRerunFragmentParams const*, doris::PRerunFragmentResult*,
google::protobuf::Closure*)::$_0&)
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/invoke.h:113:2
#29 0x55929229716a in std::_Function_handler<void (),
doris::PInternalService::rerun_fragment(google::protobuf::RpcController*,
doris::PRerunFragmentParams const*, doris::PRerunFragmentResult*,
google::protobuf::Closure*)::$_0>::_M_invoke(std::_Any_data const&)
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/std_function.h:292:9
#30 0x5592922e048b in std::function<void ()>::operator()() const
/usr/local/ldb-toolchain-v0.26/bin/../lib/gcc/x86_64-pc-linux-gnu/15/include/g++-v15/bits/std_function.h:593:9
#31 0x5592922e048b in doris::WorkThreadPool<false>::work_thread(int)
/root/doris/be/build_ASAN/../src/util/work_thread_pool.hpp:159:17
#32 0x5592bbf4d4ff in execute_native_thread_routine archive64.c
```
### Check List (For Author)
- Test <!-- At least one of them must be included. -->
- [ ] Regression test
- [ ] Unit Test
- [ ] Manual test (add detailed scripts or steps below)
- [ ] No need to test or manual test. Explain why:
- [ ] This is a refactor/code format and no logic has been changed.
- [ ] Previous test can cover this change.
- [ ] No code files have been changed.
- [ ] Other reason <!-- Add your reason? -->
- Behavior changed:
- [ ] No.
- [ ] Yes. <!-- Explain the behavior change -->
- Does this need documentation?
- [ ] No.
- [ ] Yes. <!-- Add document PR link here. eg:
https://github.com/apache/doris-website/pull/1214 -->
### Check List (For Reviewer who merge this PR)
- [ ] Confirm the release note
- [ ] Confirm test cases
- [ ] Confirm document
- [ ] Add branch pick label <!-- Add branch pick label that this PR should
merge into -->
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
