Crash in ink_freelist_new()
---------------------------

                 Key: TS-220
                 URL: https://issues.apache.org/jira/browse/TS-220
             Project: Traffic Server
          Issue Type: Bug
    Affects Versions: 2.0.0a
            Reporter: Leif Hedstrom
            Priority: Critical


I got a bunch of core dumps similar to the one below (a few of the cores starts 
in the #2 frame below). This is with the 2.0.0x branch, haven't seen it on 
trunk at all.


#0  0x082f0c86 in ink_freelist_new (f=0x845c53c) at ink_queue.cc:322
322           SET_FREELIST_POINTER_VERSION(next, 
*ADDRESS_OF_NEXT(TO_PTR(FREELIST_POINTER(item)), f->offset),
(gdb) bt
#0  0x082f0c86 in ink_freelist_new (f=0x845c53c) at ink_queue.cc:322
warning: (Internal error: pc 0x82c7b89 in read in psymtab, but not in symtab.)

#1  0x082c7b8a in MIOBuffer::write_avail (this=warning: (Internal error: pc 
0x82c7770 in read in psymtab, but not in symtab.)

warning: (Internal error: pc 0x82c7b89 in read in psymtab, but not in symtab.)

0x46fdb8a0)
    at ../../libinktomi++/Allocator.h:208
#2  0x082c47b9 in write_to_net_io (nh=0x408d4fc8, vc=0x473608c0, 
thread=0x408d4008)
    at UnixNetVConnection.cc:490
#3  0x082bdd84 in NetHandler::mainNetEvent (this=0x408d4fc8, event=5, 
e=0x91f97b0)
    at UnixNet.cc:303
#4  0x082e4cd1 in EThread::process_event (this=0x408d4008, e=0x91f97b0, 
    calling_code=5) at I_Continuation.h:147
#5  0x082e5449 in EThread::execute (this=0x408d4008) at UnixEThread.cc:249
#6  0x082e441c in spawn_thread_internal (a=0x91f3d98) at Thread.cc:85
#7  0x00b5f32f in start_thread (arg=<value optimized out>) at 
pthread_create.c:297
#8  0x00ac520e in clone () from /lib/libc-2.8.so




I've also got a couple of stack traces like the below, I don't know if they are 
related at all, but figured I'd include this in the same bug for now (since the 
crash in both these traces are in ink_freelist_new(), just a completely 
different stack trace).

(gdb) bt
#0  0x082f0c86 in ink_freelist_new (f=0x845c53c) at ink_queue.cc:322
#1  0x081606ad in HttpSM::setup_cache_read_transfer (this=0x45f46590)
    at ../../libinktomi++/Allocator.h:208
#2  0x08166bf9 in HttpSM::handle_api_return (this=0x45f46590) at HttpSM.cc:1765
#3  0x0816ab3b in HttpSM::set_next_state (this=0x45f46590) at HttpSM.cc:7464
#4  0x0815579e in HttpSM::call_transact_and_set_next_state (this=0x45f46590, 
f=0)
    at HttpSM.cc:7198
#5  0x08166a48 in HttpSM::handle_api_return (this=0x45f46590) at HttpSM.cc:1713
#6  0x0816af67 in HttpSM::set_next_state (this=0x45f46590) at HttpSM.cc:7232
#7  0x0815579e in HttpSM::call_transact_and_set_next_state (this=0x45f46590, 
f=0)
    at HttpSM.cc:7198
#8  0x08166a48 in HttpSM::handle_api_return (this=0x45f46590) at HttpSM.cc:1713
#9  0x0816af67 in HttpSM::set_next_state (this=0x45f46590) at HttpSM.cc:7232
#10 0x0815579e in HttpSM::call_transact_and_set_next_state (this=0x45f46590, 
    f=0x8189b90 <HttpTransact::HandleCacheOpenRead(HttpTransact::State*)>)
    at HttpSM.cc:7198
#11 0x081676a7 in HttpSM::state_cache_open_read (this=0x45f46590, event=1102, 
    data=0x462ce8e0) at HttpSM.cc:2605
#12 0x0816bfcc in HttpSM::main_handler (this=0x45f46590, event=1102, 
data=0x462ce8e0)
    at HttpSM.cc:2683
#13 0x081459fd in HttpCacheSM::state_cache_open_read (this=0x45f47d28, 
event=1102, 
    data=0x462ce8e0) at ../../iocore/eventsystem/I_Continuation.h:147
#14 0x0829cf50 in CacheVC::openReadStartHead (this=0x462ce8e0, event=3900, 
e=0x0)
    at CacheRead.cc:1026
#15 0x0827c082 in CacheVC::handleRead (this=0x462ce8e0, event=0, e=0x0)
    at ../../iocore/eventsystem/I_Continuation.h:147
#16 0x0829186d in CacheVC::do_read (this=0x4daa3e, akey=0x462ce8fc)
    at P_CacheInternal.h:573
#17 0x0829ca68 in CacheVC::openReadStartHead (this=0x462ce8e0, event=2, 
e=0x46231030)
    at CacheRead.cc:1050
#18 0x082e4cd1 in EThread::process_event (this=0x408a8008, e=0x46231030, 
    calling_code=2) at I_Continuation.h:147
#19 0x082e5589 in EThread::execute (this=0x408a8008) at UnixEThread.cc:202
#20 0x082e441c in spawn_thread_internal (a=0x90b07a0) at Thread.cc:85
#21 0x00b5f32f in start_thread (arg=<value optimized out>) at 
pthread_create.c:297
#22 0x00ac520e in clone () from /lib/libc-2.8.so


-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to