[ 
https://issues.apache.org/jira/browse/DISPATCH-2168?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17382520#comment-17382520
 ] 

Jiri Daněk commented on DISPATCH-2168:
--------------------------------------

This can be reproduced with the {{free_lists = 0}} PR (thanks, [~chug], for 
fixing DISPATCH-2199, which reduced the noise in the logs and made this 
visible). 

https://github.com/jiridanek/qpid-dispatch/runs/3092084350?check_suite_focus=true#step:9:4423

Here's the second, freeing, stack trace which that PR provides

{noformat}
69: ::Http2TestOneStandaloneRouter::test_zzz_http_connector_delete FAILED
69: 
69: <<<<
69: 
69: Router QDR output file:
69: >>>>
69: =================================================================
69: ==4744==ERROR: AddressSanitizer: heap-use-after-free on address 
0x6160000e08e8 at pc 0x5564ab6d7a23 bp 0x7f2318c78220 sp 0x7f2318c78210
69: READ of size 4 at 0x6160000e08e8 thread T1
69:     #0 0x5564ab6d7a22 in qdr_link_inbound_detach_CT 
../src/router_core/connections.c:2046
69:     #1 0x5564ab754220 in router_core_thread 
../src/router_core/router_core_thread.c:239
69:     #2 0x7f231ef55608 in start_thread 
(/lib/x86_64-linux-gnu/libpthread.so.0+0x9608)
69:     #3 0x7f231e11c292 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x122292)
69: 
69: 0x6160000e08e8 is located 360 bytes inside of 576-byte region 
[0x6160000e0780,0x6160000e09c0)
69: freed by thread T1 here:
69:     #0 0x7f231f4c17cf in __interceptor_free 
(/lib/x86_64-linux-gnu/libasan.so.5+0x10d7cf)
69:     #1 0x5564ab5b1919 in qd_dealloc ../src/alloc_pool.c:506
69:     #2 0x5564ab6d1631 in qdr_check_addr_CT 
../src/router_core/connections.c:1353
69:     #3 0x5564ab6d80e3 in qdr_link_inbound_detach_CT 
../src/router_core/connections.c:2135
69:     #4 0x5564ab754220 in router_core_thread 
../src/router_core/router_core_thread.c:239
69:     #5 0x7f231ef55608 in start_thread 
(/lib/x86_64-linux-gnu/libpthread.so.0+0x9608)
69: 
69: previously allocated by thread T1 here:
69:     #0 0x7f231f4c2aa5 in posix_memalign 
(/lib/x86_64-linux-gnu/libasan.so.5+0x10eaa5)
69:     #1 0x5564ab5aa730 in qd_alloc ../src/alloc_pool.c:398
69:     #2 0x5564ab73cb22 in new_qdr_address_t 
../src/router_core/router_core.c:31
69:     #3 0x5564ab73cb22 in qdr_address_CT ../src/router_core/router_core.c:469
69:     #4 0x5564ab79d4bd in qdr_lookup_terminus_address_CT 
../src/router_core/modules/address_lookup_client/lookup_client.c:299
69:     #5 0x5564ab7a11c9 in qcm_addr_lookup_CT 
../src/router_core/modules/address_lookup_client/lookup_client.c:570
69:     #6 0x5564ab6ca8a0 in qdr_link_inbound_first_attach_CT 
../src/router_core/connections.c:1818
69:     #7 0x5564ab754220 in router_core_thread 
../src/router_core/router_core_thread.c:239
69:     #8 0x7f231ef55608 in start_thread 
(/lib/x86_64-linux-gnu/libpthread.so.0+0x9608)
69: 
69: Thread T1 created by T0 here:
69:     #0 0x7f231f3ee805 in pthread_create 
(/lib/x86_64-linux-gnu/libasan.so.5+0x3a805)
69:     #1 0x5564ab68993f in sys_thread ../src/posix/threading.c:181
69:     #2 0x5564ab7397dc in qdr_core ../src/router_core/router_core.c:124
69:     #3 0x5564ab7bd5b6 in qd_router_setup_late ../src/router_node.c:2124
69:     #4 0x7f231997aff4  (/lib/x86_64-linux-gnu/libffi.so.7+0x6ff4)
69:     #5 0x7ffe523db80f  ([stack]+0x1f80f)
69: 
69: SUMMARY: AddressSanitizer: heap-use-after-free 
../src/router_core/connections.c:2046 in qdr_link_inbound_detach_CT
69: Shadow bytes around the buggy address:
69:   0x0c2c800140c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
69:   0x0c2c800140d0: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
69:   0x0c2c800140e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
69:   0x0c2c800140f0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
69:   0x0c2c80014100: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
69: =>0x0c2c80014110: fd fd fd fd fd fd fd fd fd fd fd fd fd[fd]fd fd
69:   0x0c2c80014120: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
69:   0x0c2c80014130: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
69:   0x0c2c80014140: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
69:   0x0c2c80014150: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
69:   0x0c2c80014160: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
69: Shadow byte legend (one shadow byte represents 8 application bytes):
69:   Addressable:           00
69:   Partially addressable: 01 02 03 04 05 06 07 
69:   Heap left redzone:       fa
69:   Freed heap region:       fd
69:   Stack left redzone:      f1
69:   Stack mid redzone:       f2
69:   Stack right redzone:     f3
69:   Stack after return:      f5
69:   Stack use after scope:   f8
69:   Global redzone:          f9
69:   Global init order:       f6
69:   Poisoned by user:        f7
69:   Container overflow:      fc
69:   Array cookie:            ac
69:   Intra object redzone:    bb
69:   ASan internal:           fe
69:   Left alloca redzone:     ca
69:   Right alloca redzone:    cb
69:   Shadow gap:              cc
69: ==4744==ABORTING
69: 
69: <<<<
69: 
69: Router QDR command file:
69: >>>>
69: qdrouterd -c http2-test-standalone-router.conf -I 
/home/runner/work/qpid-dispatch/qpid-dispatch/qpid-dispatch/python
69: pid=4744
69: 
69: <<<<
69: 
69: Router QDR log file tail:
69: >>>>
69: 2021-07-17 07:23:37.717586 +0000 ROUTER_CORE (debug) [C19][L60][D59] 
Delivery incref:    rc:4  qdr_forward_on_message_CT - adding to general work 
item (../src/router_core/delivery.c:115)
69: 2021-07-17 07:23:37.717610 +0000 ROUTER_CORE (debug) [C19][L60][D59] 
Delivery decref:    rc:3  release protection of return from deliver 
(../src/router_core/delivery.c:149)
69: 2021-07-17 07:23:37.717648 +0000 ROUTER_CORE (debug) [C19][L60][D59] 
Delivery transfer:  qdr_link_forward_CT: action-list -> unsettled-list 
(../src/router_core/transfer.c:718)
69: 2021-07-17 07:23:37.717812 +0000 ROUTER_CORE (trace) Core action 'send_to' 
(../src/router_core/router_core_thread.c:238)
69: 2021-07-17 07:23:37.717885 +0000 ROUTER_CORE (trace) Core action 
'settle_subscription_delivery' (../src/router_core/router_core_thread.c:238)
69: 2021-07-17 07:23:37.717918 +0000 ROUTER_CORE (debug) [C19][L60][D59] 
Delivery decref_CT: rc:2 qdr_settle_subscription_delivery_CT - removed from 
unsettled (../src/router_core/delivery.c:640)
69: 2021-07-17 07:23:37.717942 +0000 ROUTER_CORE (debug) [C19][L60][D59] 
Delivery incref:    rc:3  qdr_delivery_push_CT - add to updated list 
(../src/router_core/delivery.c:115)
69: 2021-07-17 07:23:37.717962 +0000 ROUTER_CORE (debug) [C19][L60][D59] 
Delivery decref_CT: rc:2 qdr_settle_subscription_delivery_CT - removed from 
action (../src/router_core/delivery.c:640)
69: 2021-07-17 07:23:37.718628 +0000 AGENT (debug) Agent request 
Message(address=None, properties={'operation': 'DELETE', 'type': 
'org.apache.qpid.dispatch.httpConnector', 'name': 'connectorToBeDeleted'}, 
body={}, reply_to='amqp:/_topo/0/QDR/temp.HnIB9Lm9SzFf5hv', correlation_id='1', 
content_type=None) 
(/home/runner/work/qpid-dispatch/qpid-dispatch/qpid-dispatch/python/qpid_dispatch_internal/management/agent.py:961)
69: 2021-07-17 07:23:37.718754 +0000 HTTP_ADAPTOR (info) Deleted HttpConnector 
for examples, 127.0.0.1:29618 (../src/adaptors/http2/http2_adaptor.c:2587)
69: 2021-07-17 07:23:37.718805 +0000 ROUTER_CORE (trace) Core action 
'qdr_core_close_connection' (../src/router_core/router_core_thread.c:238)
69: 2021-07-17 07:23:37.718851 +0000 AGENT (debug) Remove httpConnector entity: 
httpConnector/127.0.0.1:29618:connectorToBeDeleted 
(/home/runner/work/qpid-dispatch/qpid-dispatch/qpid-dispatch/python/qpid_dispatch_internal/management/agent.py:704)
69: 2021-07-17 07:23:37.718876 +0000 HTTP_ADAPTOR (trace) [C1] Activation 
triggered, calling pn_raw_connection_wake() 
(../src/adaptors/http2/http2_adaptor.c:1639)
69: 2021-07-17 07:23:37.718939 +0000 AGENT (debug) Agent response:
69:   Message(address='amqp:/_topo/0/QDR/temp.HnIB9Lm9SzFf5hv', 
properties={'statusCode': 204, 'statusDescription': 'No Content'}, body={}, 
reply_to=None, correlation_id='1', content_type=None)
69:   Responding to: 
69:   Message(address=None, properties={'operation': 'DELETE', 'type': 
'org.apache.qpid.dispatch.httpConnector', 'name': 'connectorToBeDeleted'}, 
body={}, reply_to='amqp:/_topo/0/QDR/temp.HnIB9Lm9SzFf5hv', correlation_id='1', 
content_type=None) 
(/home/runner/work/qpid-dispatch/qpid-dispatch/qpid-dispatch/python/qpid_dispatch_internal/management/agent.py:940)
69: 2021-07-17 07:23:37.719117 +0000 ROUTER_CORE (trace) Core action 'send_to' 
(../src/router_core/router_core_thread.c:238)
69: 2021-07-17 07:23:37.719155 +0000 HTTP_ADAPTOR (trace) [C1] 
PN_RAW_CONNECTION_WAKE Wake-up (../src/adaptors/http2/http2_adaptor.c:2497)
69: 2021-07-17 07:23:37.719184 +0000 ROUTER_CORE (debug) [C19][L61][D60] 
Delivery created qdr_forward_new_delivery_CT 
(../src/router_core/forwarder.c:158)
69: 2021-07-17 07:23:37.719206 +0000 HTTP_ADAPTOR (trace) [C1] 
PN_RAW_CONNECTION_CLOSED_READ (../src/adaptors/http2/http2_adaptor.c:2459)
69: 2021-07-17 07:23:37.719228 +0000 ROUTER_CORE (debug) [C19][L61][D60] 
Delivery incref:    rc:1  qdr_forward_deliver_CT - add to undelivered list 
(../src/router_core/delivery.c:115)
69: 2021-07-17 07:23:37.719252 +0000 HTTP_ADAPTOR (trace) [C1] 
PN_RAW_CONNECTION_CLOSED_WRITE (../src/adaptors/http2/http2_adaptor.c:2463)
69: 2021-07-17 07:23:37.719336 +0000 HTTP_ADAPTOR (trace) [C1] 
PN_RAW_CONNECTION_READ Read 0 bytes (../src/adaptors/http2/http2_adaptor.c:2512)
69: 2021-07-17 07:23:37.719357 +0000 HTTP_ADAPTOR (trace) [C1] Egress 
PN_RAW_CONNECTION_DISCONNECTED (../src/adaptors/http2/http2_adaptor.c:2472)
69: 2021-07-17 07:23:37.719372 +0000 HTTP_ADAPTOR (trace) [C1] Setting 
conn->pn_raw_conn=0 (../src/adaptors/http2/http2_adaptor.c:2220)
69: 2021-07-17 07:23:37.719392 +0000 HTTP_ADAPTOR (trace) [C1] Detaching stream 
dispatcher link on egress connection, freed associated stream data 
(../src/adaptors/http2/http2_adaptor.c:2231)
69: 2021-07-17 07:23:37.719431 +0000 PROTOCOL (trace) [C1] Freeing stream_data 
(stream_dispatcher, handle_disconnected) (615000003050) 
(../src/adaptors/http2/http2_adaptor.c:2236)
69: 2021-07-17 07:23:37.719450 +0000 ROUTER_CORE (trace) Core action 
'link_detach' (../src/router_core/router_core_thread.c:238)
69: 2021-07-17 07:23:37.719467 +0000 HTTP_ADAPTOR (trace) [C1][S25] Freeing 
stream in free_qdr_http2_connection (../src/adaptors/http2/http2_adaptor.c:79)
69: 2021-07-17 07:23:37.719513 +0000 HTTP_ADAPTOR (trace) [C1][S25] Freeing 
stream_data in free_http2_stream_data (615000005850) 
(../src/adaptors/http2/http2_adaptor.c:354)
69: 2021-07-17 07:23:37.719534 +0000 ROUTER_CORE (debug) [C1][L54][D52] 
Delivery decref:    rc:0  HTTP2 adaptor out_dlv - free_http2_stream_data 
(../src/router_core/delivery.c:149)
69: 2021-07-17 07:23:37.719591 +0000 ROUTER_CORE (trace) Core action 
'link_detach' (../src/router_core/router_core_thread.c:238)
69: 2021-07-17 07:23:37.719619 +0000 ROUTER_CORE (trace) Core action 
'link_detach' (../src/router_core/router_core_thread.c:238)
69: 2021-07-17 07:23:37.720215 +0000 ROUTER_CORE (debug) [C19][L60][D59] 
Delivery decref:    rc:1  removed reference from pn_delivery 
(../src/router_core/delivery.c:149)
69: 2021-07-17 07:23:37.720269 +0000 ROUTER_CORE (debug) [C19][L60][D59] 
Delivery decref:    rc:0  qdr_connection_process - remove from updated list 
(../src/router_core/delivery.c:149)
69: 2021-07-17 07:23:37.720308 +0000 ROUTER_CORE (debug) [C19][L61][D60] 
Delivery incref:    rc:2  qdr_link_process_deliveries - holding the undelivered 
delivery locally (../src/router_core/delivery.c:115)
69: 2021-07-17 07:23:37.720352 +0000 ROUTER_CORE (debug) [C19][L61][D60] 
Delivery incref:    rc:3  referenced by a pn_delivery 
(../src/router_core/delivery.c:115)
69: 2021-07-17 07:23:37.720377 +0000 ROUTER_CORE (debug) [C19][L61][D60] 
Delivery decref:    rc:2  removed reference from pn_delivery 
(../src/router_core/delivery.c:149)
69: 2021-07-17 07:23:37.720397 +0000 ROUTER_CORE (debug) [C19][L61][D60] 
Delivery decref:    rc:1  qdr_link_process_deliveries - remove from undelivered 
list (../src/router_core/delivery.c:149)
69: 2021-07-17 07:23:37.720429 +0000 ROUTER_CORE (debug) [C19][L61][D60] 
Delivery decref:    rc:0  qdr_link_process_deliveries - release local reference 
- done processing (../src/router_core/delivery.c:149)
69: 2021-07-17 07:23:37.720474 +0000 PROTOCOL (trace) [C19]:FRAME: 0 -> 
@flow(19) [next-incoming-id=1, incoming-window=2147483647, next-outgoing-id=0, 
outgoing-window=2147483647, handle=0, delivery-count=1, link-credit=250, 
drain=false] (../src/server.c:111)
69: 2021-07-17 07:23:37.720537 +0000 PROTOCOL (trace) [C19]:FRAME: 0 -> 
@transfer(20) [handle=1, delivery-id=0, 
delivery-tag=b"\x1d\x00\x00\x00\x00\x00\x00\x00", message-format=0, 
settled=true] (144) 
"\x00Sp\xd0\x00\x00\x00\x05\x00\x00\x00\x01B\x00Ss\xd0\x00\x00\x003\x00\x00\x00\x06@@\xa1&amqp:/_topo/0/QDR/temp.HnIB9Lm9SzFf5hv@@\xa1\x011\x00St\xd1\x00\x00\x004\x00\x00\x00\x04\xa1\x0astatusCodeq\x00\x00\x00\xcc\xa1\x11statusDescription\xa1\x0aNo
 Content\x00Sw\xd1\x00\x00\x00\x04\x00\x00\x00\x00" (../src/server.c:111)
69: 2021-07-17 07:23:37.720573 +0000 PROTOCOL (trace) [C19]:FRAME: 0 -> 
@disposition(21) [role=true, first=0, settled=true, state=@accepted(36) []] 
(../src/server.c:111)
69: 2021-07-17 07:23:37.746656 +0000 PROTOCOL (trace) [C19]:FRAME: 0 -> 
@close(24) [error=@error(29) [condition=:"amqp:connection:framing-error", 
description="connection aborted"]] (../src/server.c:111)
69: 2021-07-17 07:23:37.746713 +0000 PROTOCOL (trace) [C19]:FRAME:   <- EOS 
(../src/server.c:111)
69: 2021-07-17 07:23:37.746742 +0000 SERVER (info) [C19] Connection from 
127.0.0.1:47230 (to 0.0.0.0:29619) failed: amqp:connection:framing-error 
connection aborted (../src/server.c:1084)
69: 2021-07-17 07:23:37.746792 +0000 PROTOCOL (trace) [C19]:FRAME:   -> EOS 
(../src/server.c:111)
69: 2021-07-17 07:23:37.746815 +0000 CONTAINER (debug) Aborting link 
'ef4cc9c2-7dc5-4301-b13d-a533c9a81902-$management' due to parent connection end 
(../src/container.c:333)
69: 2021-07-17 07:23:37.746847 +0000 CONTAINER (debug) Aborting link 
'ef4cc9c2-7dc5-4301-b13d-a533c9a81902-1de2af99-82ac-4bfc-9919-5702a480d15c' due 
to parent connection end (../src/container.c:333)
69: 
69: <<<<
{noformat}

> [http2] qdr_address_t use after free in system_tests_http2
> ----------------------------------------------------------
>
>                 Key: DISPATCH-2168
>                 URL: https://issues.apache.org/jira/browse/DISPATCH-2168
>             Project: Qpid Dispatch
>          Issue Type: Test
>          Components: Protocol Adaptors
>    Affects Versions: 1.16.0
>            Reporter: Ganesh Murthy
>            Assignee: Ganesh Murthy
>            Priority: Major
>
> {noformat}
>       9: 
> ======================================================================
>       69: ERROR: test_zzz_http_connector_delete 
> (system_tests_http2.Http2TestOneInteriorRouter)
>       69: 
> ----------------------------------------------------------------------
>       69: Traceback (most recent call last):
>       69:   File 
> "/home/travis/build/apache/qpid-dispatch/tests/system_test.py", line 1196, in 
> __call__
>       69:     p.teardown()
>       69:   File 
> "/home/travis/build/apache/qpid-dispatch/tests/system_test.py", line 311, in 
> teardown
>       69:     error("exit code %s, expected %s" % (status, self.expect))
>       69:   File 
> "/home/travis/build/apache/qpid-dispatch/tests/system_test.py", line 299, in 
> error
>       69:     raise RuntimeError("Process %s error: %s\n%s\n%s\n>>>>\n%s<<<<" 
> % (
>       69: RuntimeError: Process 18299 error: exit code 1, expected 0
>       69: qdmanage QUERY --type=org.apache.qpid.dispatch.httpConnector --bus 
> amqp://0.0.0.0:28091 --indent=-1 --timeout 300.0
>       69: 
> /home/travis/build/apache/qpid-dispatch/build/tests/system_test.dir/system_tests_http2/Http2TestOneInteriorRouter/test_zzz_http_connector_delete/qdmanage-124.cmd
>       69: >>>>
>       69: <<<<
>       69: 
>       69: During handling of the above exception, another exception occurred:
>       69: 
>       69: Traceback (most recent call last):
>       69:   File 
> "/home/travis/build/apache/qpid-dispatch/tests/system_test.py", line 924, in 
> wrap
>       69:     return f(*args, **kwargs)
>       69:   File 
> "/home/travis/build/apache/qpid-dispatch/tests/system_tests_http2.py", line 
> 450, in test_zzz_http_connector_delete
>       69:     
> self.check_connector_delete(client_addr=self.router_qdra.http_addresses[0],
>       69:   File 
> "/home/travis/build/apache/qpid-dispatch/tests/system_tests_http2.py", line 
> 247, in check_connector_delete
>       69:     http_connectors  = 
> qd_manager.query('org.apache.qpid.dispatch.httpConnector')
>       69:   File 
> "/home/travis/build/apache/qpid-dispatch/tests/system_test.py", line 1228, in 
> query
>       69:     return json.loads(self('QUERY --type=%s' % long_type))
>       69:   File 
> "/home/travis/build/apache/qpid-dispatch/tests/system_test.py", line 1198, in 
> __call__
>       69:     raise Exception("%s\n%s" % (e, out))
>       69: Exception: Process 18299 error: exit code 1, expected 0
>       69: qdmanage QUERY --type=org.apache.qpid.dispatch.httpConnector --bus 
> amqp://0.0.0.0:28091 --indent=-1 --timeout 300.0
>       69: 
> /home/travis/build/apache/qpid-dispatch/build/tests/system_test.dir/system_tests_http2/Http2TestOneInteriorRouter/test_zzz_http_connector_delete/qdmanage-124.cmd
>       69: >>>>
>       69: <<<<
>       69: ConnectionException: Connection amqp://0.0.0.0:28091 disconnected: 
> Condition('proton.pythonio', 'Connection refused to all addresses')
>       69: 
>       69: 
>       69: 
> ======================================================================
>       69: ERROR: tearDownClass (system_tests_http2.Http2TestOneInteriorRouter)
>       69: 
> ----------------------------------------------------------------------
>       69: Traceback (most recent call last):
>       69:   File 
> "/home/travis/build/apache/qpid-dispatch/tests/system_test.py", line 865, in 
> tearDownClass
>       69:     cls.tester.teardown()
>       69:   File 
> "/home/travis/build/apache/qpid-dispatch/tests/system_test.py", line 808, in 
> teardown
>       69:     raise RuntimeError("Errors during teardown: \n\n%s" % 
> "\n\n".join([str(e) for e in errors]))
>       69: RuntimeError: Errors during teardown: 
>       69: 
>       69: Process 18274 error: exit code 1, expected -1
>       69: qdrouterd -c http2-test-router.conf -I 
> /home/travis/build/apache/qpid-dispatch/python
>       69: 
> /home/travis/build/apache/qpid-dispatch/build/tests/system_test.dir/system_tests_http2/Http2TestOneInteriorRouter/setUpClass/http2-test-router-47.cmd
>       69: >>>>
>       69: =================================================================
>       69: ==18274==ERROR: AddressSanitizer: use-after-poison on address 
> 0x6160000db4e8 at pc 0x7fabfdcc70c1 bp 0x7fabf75151d0 sp 0x7fabf75151c8
>       69: READ of size 4 at 0x6160000db4e8 thread T1
>       69:     #0 0x7fabfdcc70c0 in qdr_link_inbound_detach_CT 
> /home/travis/build/apache/qpid-dispatch/src/router_core/connections.c:2046:24
>       69:     #1 0x7fabfdd5761f in router_core_thread 
> /home/travis/build/apache/qpid-dispatch/src/router_core/router_core_thread.c:239:13
>       69:     #2 0x7fabfd833608 in start_thread 
> (/lib/x86_64-linux-gnu/libpthread.so.0+0x9608)
>       69:     #3 0x7fabfd05e292 in clone 
> (/lib/x86_64-linux-gnu/libc.so.6+0x122292)
>       69: 
>       69: 0x6160000db4e8 is located 360 bytes inside of 576-byte region 
> [0x6160000db380,0x6160000db5c0)
>       69: allocated by thread T1 here:
>       69:     #0 0x498177 in posix_memalign 
> (/home/travis/build/apache/qpid-dispatch/build/router/qdrouterd+0x498177)
>       69:     #1 0x7fabfdbc9b7e in qd_alloc 
> /home/travis/build/apache/qpid-dispatch/src/alloc_pool.c:396:13
>       69:     #2 0x7fabfdd491d8 in new_qdr_address_t 
> /home/travis/build/apache/qpid-dispatch/src/router_core/router_core.c:31:1
>       69:     #3 0x7fabfdd491d8 in qdr_address_CT 
> /home/travis/build/apache/qpid-dispatch/src/router_core/router_core.c:469:27
>       69:     #4 0x7fabfdd61133 in qdr_subscribe_CT 
> /home/travis/build/apache/qpid-dispatch/src/router_core/route_tables.c:643:20
>       69:     #5 0x7fabfdd5761f in router_core_thread 
> /home/travis/build/apache/qpid-dispatch/src/router_core/router_core_thread.c:239:13
>       69:     #6 0x7fabfd833608 in start_thread 
> (/lib/x86_64-linux-gnu/libpthread.so.0+0x9608)
>       69: 
>       69: Thread T1 created by T0 here:
>       69:     #0 0x481a1c in pthread_create 
> (/home/travis/build/apache/qpid-dispatch/build/router/qdrouterd+0x481a1c)
>       69:     #1 0x7fabfdc817d9 in sys_thread 
> /home/travis/build/apache/qpid-dispatch/src/posix/threading.c:181:5
>       69:     #2 0x7fabfdd36520 in qdr_core 
> /home/travis/build/apache/qpid-dispatch/src/router_core/router_core.c:124:20
>       69:     #3 0x7fabfddc5858 in qd_router_setup_late 
> /home/travis/build/apache/qpid-dispatch/src/router_node.c:2124:31
>       69:     #4 0x7fabf9308ff4  (/lib/x86_64-linux-gnu/libffi.so.7+0x6ff4)
>       69: LLVMSymbolizer: error reading file: No such file or directory
>       69:     #5 0x7fffd86b144f  ([stack]+0x1f44f)
>       69: 
>       69: SUMMARY: AddressSanitizer: use-after-poison 
> /home/travis/build/apache/qpid-dispatch/src/router_core/connections.c:2046:24 
> in qdr_link_inbound_detach_CT
>       69: Shadow bytes around the buggy address:
>       69:   0x0c2c80013640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>       69:   0x0c2c80013650: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
>       69:   0x0c2c80013660: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
>       69:   0x0c2c80013670: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>       69:   0x0c2c80013680: 00 00 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
>       69: =>0x0c2c80013690: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7[f7]f7 f7
>       69:   0x0c2c800136a0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
>       69:   0x0c2c800136b0: f7 f7 f7 f7 f7 f7 00 00 fa fa fa fa fa fa fa fa
>       69:   0x0c2c800136c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
>       69:   0x0c2c800136d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>       69:   0x0c2c800136e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>       69: Shadow byte legend (one shadow byte represents 8 application bytes):
>       69:   Addressable:           00
>       69:   Partially addressable: 01 02 03 04 05 06 07 
>       69:   Heap left redzone:       fa
>       69:   Freed heap region:       fd
>       69:   Stack left redzone:      f1
>       69:   Stack mid redzone:       f2
>       69:   Stack right redzone:     f3
>       69:   Stack after return:      f5
>       69:   Stack use after scope:   f8
>       69:   Global redzone:          f9
>       69:   Global init order:       f6
>       69:   Poisoned by user:        f7
>       69:   Container overflow:      fc
>       69:   Array cookie:            ac
>       69:   Intra object redzone:    bb
>       69:   ASan internal:           fe
>       69:   Left alloca redzone:     ca
>       69:   Right alloca redzone:    cb
>       69:   Shadow gap:              cc
>       69: ==18274==ABORTING
>       69: <<<< {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to