[
https://issues.apache.org/jira/browse/TS-3405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14335431#comment-14335431
]
Leif Hedstrom commented on TS-3405:
-----------------------------------
Also, without ASAN, I get a crasher, crashlog shows:
{code}
Process: [ET_NET 0] [14572]
File: /server/bin/traffic_server
Version: Traffic Server 5.3.0
System Version: Linux x86_64 #1 SMP Thu Jan 8 23:26:57 UTC 2015
3.17.8-200.fc20.x86_64
Date: Tue, 24 Feb 2015 12:21:28 -0800
Signal Status:
siginfo.si_signo: 11 (Segmentation fault)
siginfo.si_pid: 24 siginfo.si_uid: 0
siginfo.si_code: 0x1 (1) siginfo.si_addr: 0x0000000000000018
No object mapped at address 0x0000000000000018
CPU Registers:
R8 :0x0000000004fb9460 R9 :0x00002b57652a2b79 R10:0x0000000000000000
R11:0x00002b5762599dd0
R12:0x00000000052f2c10 R13:0x00000000007919b0 R14:0x0000000003110000
R15:0x0000000000000002
RDI:0x0000000000000020 RSI:0x0000000000000001 RBP:0x0000000003110000
RBX:0x0000000000000000
RDX:0x00002b57652a3a30 RAX:0x0000000000000000 RCX:0x00002b5761685300
RSP:0x00002b57652a2980
RIP:0x00000000006068ce EFL:0x0000000000010246 CSGSFS:0x3e1f000000000033
ERR:0x0000000000000004
TRAPNO:0x000000000000000e OLDMASK:0x0000000000000000 CR2:0x0000000000000018
Thread 14572, [ET_NET 0]:
0 0x000000000072e3af NetHandler::mainNetEvent(int, Event*) + 0x6f
1 0x000000000075b7da EThread::execute() + 0xa4a
2 0x000000000049732e main + 0xcee
3 0x00002b576243dd65 __libc_start_main + 0xf5
4 0x000000000049dcb1 _start + 0x29
5 0x0000000000000000 0x0 + 0x29
Thread 14573, traffic_server:
0 0x00002b57624d8584 sleep + 0xd4
1 0x000000000067a3a9 startProcessManager(void*) + 0x59
2 0x00002b5761474ee5 start_thread + 0xc5
3 0x00002b5762510b8d clone + 0x6d
4 0x0000000000000000 0x0 + 0x6d
Thread 14575, [ET_NET 1]:
0 0x000000000072e3af NetHandler::mainNetEvent(int, Event*) + 0x6f
1 0x000000000075b7da EThread::execute() + 0xa4a
2 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
3 0x00002b5761474ee5 start_thread + 0xc5
4 0x00002b5762510b8d clone + 0x6d
5 0x0000000000000000 0x0 + 0x6d
Thread 14576, [ET_NET 2]:
0 0x000000000072e3af NetHandler::mainNetEvent(int, Event*) + 0x6f
1 0x000000000075b7da EThread::execute() + 0xa4a
2 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
3 0x00002b5761474ee5 start_thread + 0xc5
4 0x00002b5762510b8d clone + 0x6d
5 0x0000000000000000 0x0 + 0x6d
Thread 14577, [ET_NET 3]:
0 0x00000000004ae122 crash_logger_invoke(int, siginfo_t*, void*) + 0x72
1 0x00002b576147c6d0 __restore_rt + (nil)
2 0x00000000006068ce Http2ConnectionState::send_goaway_frame(unsigned int,
Http2ErrorCode) + 0x2ce
3 0x00000000006080f1 Http2ConnectionState::main_event_handler(int, void*) +
0x391
4 0x0000000000602570 send_connection_event(Continuation*, int, void*) + 0x80
5 0x0000000000602a97 Http2ClientSession::state_complete_frame_read(int,
void*) + 0xf7
6 0x00000000006012b9 Http2ClientSession::state_start_frame_read(int, void*)
+ 0x319
7 0x000000000073824a UnixNetVConnection::readSignalAndUpdate(int) + 0x4a
8 0x0000000000722be5 SSLNetVConnection::net_read_io(NetHandler*, EThread*) +
0x11a5
9 0x000000000072e532 NetHandler::mainNetEvent(int, Event*) + 0x1f2
10 0x000000000075b7da EThread::execute() + 0xa4a
11 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
12 0x00002b5761474ee5 start_thread + 0xc5
13 0x00002b5762510b8d clone + 0x6d
14 0x0000000000000000 0x0 + 0x6d
Thread 14578, [LOG_PREPROC 0]:
0 0x00002b575f522e51 EventNotify::wait() + 0x41
1 0x0000000000626bd2 Log::preproc_thread_main(void*) + 0x52
2 0x000000000062ae9d LoggingPreprocContinuation::mainEvent(int, void*) + 0xd
3 0x000000000075ae13 EThread::execute() + 0x83
4 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
5 0x00002b5761474ee5 start_thread + 0xc5
6 0x00002b5762510b8d clone + 0x6d
7 0x0000000000000000 0x0 + 0x6d
Thread 14579, [LOG_FLUSH]:
0 0x00002b575f522e51 EventNotify::wait() + 0x41
1 0x00000000006270dd Log::flush_thread_main(void*) + 0x45d
2 0x000000000062aead LoggingFlushContinuation::mainEvent(int, void*) + 0xd
3 0x000000000075ae13 EThread::execute() + 0x83
4 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
5 0x00002b5761474ee5 start_thread + 0xc5
6 0x00002b5762510b8d clone + 0x6d
7 0x0000000000000000 0x0 + 0x6d
Thread 14580, [ET_AIO 0:36]:
0 0x0000000000713db8 AIOThreadInfo::start(int, Event*) + 0x678
1 0x000000000075ae13 EThread::execute() + 0x83
2 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
3 0x00002b5761474ee5 start_thread + 0xc5
4 0x00002b5762510b8d clone + 0x6d
5 0x0000000000000000 0x0 + 0x6d
Thread 14581, [ET_AIO 1:36]:
0 0x0000000000713db8 AIOThreadInfo::start(int, Event*) + 0x678
1 0x000000000075ae13 EThread::execute() + 0x83
2 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
3 0x00002b5761474ee5 start_thread + 0xc5
4 0x00002b5762510b8d clone + 0x6d
5 0x0000000000000000 0x0 + 0x6d
Thread 14582, [ET_AIO 2:36]:
0 0x0000000000713db8 AIOThreadInfo::start(int, Event*) + 0x678
1 0x000000000075ae13 EThread::execute() + 0x83
2 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
3 0x00002b5761474ee5 start_thread + 0xc5
4 0x00002b5762510b8d clone + 0x6d
5 0x0000000000000000 0x0 + 0x6d
Thread 14583, [ET_AIO 3:36]:
0 0x0000000000713db8 AIOThreadInfo::start(int, Event*) + 0x678
1 0x000000000075ae13 EThread::execute() + 0x83
2 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
3 0x00002b5761474ee5 start_thread + 0xc5
4 0x00002b5762510b8d clone + 0x6d
5 0x0000000000000000 0x0 + 0x6d
Thread 14584, [ET_AIO 4:36]:
0 0x0000000000713db8 AIOThreadInfo::start(int, Event*) + 0x678
1 0x000000000075ae13 EThread::execute() + 0x83
2 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
3 0x00002b5761474ee5 start_thread + 0xc5
4 0x00002b5762510b8d clone + 0x6d
5 0x0000000000000000 0x0 + 0x6d
Thread 14585, [ET_TASK 0]:
0 0x000000000075a270 ProtectedQueue::dequeue_timed(long, long, bool) + 0x1d0
1 0x000000000075be85 EThread::execute() + 0x10f5
2 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
3 0x00002b5761474ee5 start_thread + 0xc5
4 0x00002b5762510b8d clone + 0x6d
5 0x0000000000000000 0x0 + 0x6d
Thread 14586, [ET_TASK 1]:
0 0x000000000075a270 ProtectedQueue::dequeue_timed(long, long, bool) + 0x1d0
1 0x000000000075be85 EThread::execute() + 0x10f5
2 0x000000000075a47a spawn_thread_internal(void*) + 0x4a
3 0x00002b5761474ee5 start_thread + 0xc5
4 0x00002b5762510b8d clone + 0x6d
5 0x0000000000000000 0x0 + 0x6d
Process Status:
Name: [ET_NET 0]
State: S (sleeping)
Tgid: 14572
Ngid: 0
Pid: 14572
PPid: 14295
TracerPid: 0
Uid: 99 99 99 99
Gid: 99 99 99 99
FDSize: 64
Groups: 99
VmPeak: 215076 kB
VmSize: 215076 kB
VmLck: 0 kB
VmPin: 0 kB
VmHWM: 66548 kB
VmRSS: 66548 kB
VmData: 108228 kB
VmStk: 136 kB
VmExe: 4296 kB
VmLib: 14272 kB
VmPTE: 408 kB
VmSwap: 0 kB
Threads: 14
SigQ: 0/31780
SigPnd: 0000000000000000
ShdPnd: 0000000000000000
SigBlk: 0000000000000000
SigIgn: 0000000000381001
SigCgt: 0000000180004efe
CapInh: 0000000000000000
CapPrm: 0000000000005402
CapEff: 0000000000005400
CapBnd: 0000003fffffffff
Seccomp: 0
Cpus_allowed: ff
Cpus_allowed_list: 0-7
Mems_allowed:
00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000001
Mems_allowed_list: 0
voluntary_ctxt_switches: 35709
nonvoluntary_ctxt_switches: 372
Memory Regions:
00400000-00832000 r-xp 00000000 08:02 6947501
/server/bin/traffic_server
00a32000-00a3f000 r--p 00432000 08:02 6947501
/server/bin/traffic_server
00a3f000-00a46000 rw-p 0043f000 08:02 6947501
/server/bin/traffic_server
00a46000-0102a000 rw-p 00000000 00:00 0
022db000-073d0000 rw-p 00000000 00:00 0 [heap]
2b575f2ea000-2b575f30a000 r-xp 00000000 08:02 6030085
/usr/lib64/ld-2.18.so
2b575f30a000-2b575f30e000 rw-p 00000000 00:00 0
2b575f31a000-2b575f32c000 rw-p 00000000 00:00 0
2b575f32c000-2b575f361000 r--s 00000000 08:02 393337
/var/db/nscd/passwd
2b575f361000-2b575f396000 r--s 00000000 08:02 393338
/var/db/nscd/group
2b575f396000-2b575f3b6000 rwxp 00000000 00:00 0
2b575f3b6000-2b575f4b6000 rw-p 00000000 00:00 0
2b575f4b6000-2b575f4f2000 rw-s 00000000 08:02 135177
/server/var/trafficserver/host.db
2b575f509000-2b575f50a000 r--p 0001f000 08:02 6030085
/usr/lib64/ld-2.18.so
2b575f50a000-2b575f50b000 rw-p 00020000 08:02 6030085
/usr/lib64/ld-2.18.so
2b575f50b000-2b575f50c000 rw-p 00000000 00:00 0
2b575f50c000-2b575f548000 r-xp 00000000 08:02 6947090
/server/lib64/libtsutil.so.5.3.0
2b575f548000-2b575f747000 ---p 0003c000 08:02 6947090
/server/lib64/libtsutil.so.5.3.0
2b575f747000-2b575f749000 r--p 0003b000 08:02 6947090
/server/lib64/libtsutil.so.5.3.0
2b575f749000-2b575f74b000 rw-p 0003d000 08:02 6947090
/server/lib64/libtsutil.so.5.3.0
2b575f74b000-2b575f74c000 rw-p 00000000 00:00 0
2b575f74c000-2b575f779000 r-xp 00000000 08:02 6045469
/usr/lib64/libhwloc.so.5.3.0
2b575f779000-2b575f979000 ---p 0002d000 08:02 6045469
/usr/lib64/libhwloc.so.5.3.0
2b575f979000-2b575f97a000 r--p 0002d000 08:02 6045469
/usr/lib64/libhwloc.so.5.3.0
2b575f97a000-2b575f97b000 rw-p 0002e000 08:02 6045469
/usr/lib64/libhwloc.so.5.3.0
2b575f97b000-2b575fa95000 r-xp 00000000 08:02 6031542
/usr/lib64/libtcl8.5.so
2b575fa95000-2b575fc94000 ---p 0011a000 08:02 6031542
/usr/lib64/libtcl8.5.so
2b575fc94000-2b575fc99000 r--p 00119000 08:02 6031542
/usr/lib64/libtcl8.5.so
2b575fc99000-2b575fca0000 rw-p 0011e000 08:02 6031542
/usr/lib64/libtcl8.5.so
2b575fca0000-2b575fca1000 rw-p 00000000 00:00 0
2b575fca1000-2b575fcb7000 r-xp 00000000 08:02 6042188
/usr/lib64/libresolv-2.18.so
2b575fcb7000-2b575feb7000 ---p 00016000 08:02 6042188
/usr/lib64/libresolv-2.18.so
2b575feb7000-2b575feb8000 r--p 00016000 08:02 6042188
/usr/lib64/libresolv-2.18.so
2b575feb8000-2b575feb9000 rw-p 00017000 08:02 6042188
/usr/lib64/libresolv-2.18.so
2b575feb9000-2b575febb000 rw-p 00000000 00:00 0
2b575febb000-2b575fece000 r-xp 00000000 08:02 6948499
/server/lib64/libspdylay.so.7.1.1
2b575fece000-2b57600cd000 ---p 00013000 08:02 6948499
/server/lib64/libspdylay.so.7.1.1
2b57600cd000-2b57600ce000 r--p 00012000 08:02 6948499
/server/lib64/libspdylay.so.7.1.1
2b57600ce000-2b57600cf000 rw-p 00013000 08:02 6948499
/server/lib64/libspdylay.so.7.1.1
2b57600cf000-2b5760131000 r-xp 00000000 08:02 6032987
/usr/lib64/libssl.so.1.0.1e
2b5760131000-2b5760330000 ---p 00062000 08:02 6032987
/usr/lib64/libssl.so.1.0.1e
2b5760330000-2b5760334000 r--p 00061000 08:02 6032987
/usr/lib64/libssl.so.1.0.1e
2b5760334000-2b576033b000 rw-p 00065000 08:02 6032987
/usr/lib64/libssl.so.1.0.1e
2b576033b000-2b57604f8000 r-xp 00000000 08:02 6030449
/usr/lib64/libcrypto.so.1.0.1e
2b57604f8000-2b57606f7000 ---p 001bd000 08:02 6030449
/usr/lib64/libcrypto.so.1.0.1e
2b57606f7000-2b5760712000 r--p 001bc000 08:02 6030449
/usr/lib64/libcrypto.so.1.0.1e
2b5760712000-2b576071e000 rw-p 001d7000 08:02 6030449
/usr/lib64/libcrypto.so.1.0.1e
2b576071e000-2b5760722000 rw-p 00000000 00:00 0
2b5760722000-2b5760769000 r-xp 00000000 08:02 6033790
/usr/lib64/libtcmalloc.so.4.1.2
2b5760769000-2b5760969000 ---p 00047000 08:02 6033790
/usr/lib64/libtcmalloc.so.4.1.2
2b5760969000-2b576096a000 r--p 00047000 08:02 6033790
/usr/lib64/libtcmalloc.so.4.1.2
2b576096a000-2b576096b000 rw-p 00048000 08:02 6033790
/usr/lib64/libtcmalloc.so.4.1.2
2b576096b000-2b5760990000 rw-p 00000000 00:00 0
2b5760990000-2b5760994000 r-xp 00000000 08:02 6045332
/usr/lib64/libcap.so.2.22
2b5760994000-2b5760b93000 ---p 00004000 08:02 6045332
/usr/lib64/libcap.so.2.22
2b5760b93000-2b5760b94000 r--p 00003000 08:02 6045332
/usr/lib64/libcap.so.2.22
2b5760b94000-2b5760b95000 rw-p 00004000 08:02 6045332
/usr/lib64/libcap.so.2.22
2b5760b95000-2b5760bfa000 r-xp 00000000 08:02 6030079
/usr/lib64/libpcre.so.1.2.1
2b5760bfa000-2b5760df9000 ---p 00065000 08:02 6030079
/usr/lib64/libpcre.so.1.2.1
2b5760df9000-2b5760dfa000 r--p 00064000 08:02 6030079
/usr/lib64/libpcre.so.1.2.1
2b5760dfa000-2b5760dfb000 rw-p 00065000 08:02 6030079
/usr/lib64/libpcre.so.1.2.1
2b5760dfb000-2b5760e1f000 r-xp 00000000 08:02 6045180
/usr/lib64/liblzma.so.5.0.99
2b5760e1f000-2b576101e000 ---p 00024000 08:02 6045180
/usr/lib64/liblzma.so.5.0.99
2b576101e000-2b576101f000 r--p 00023000 08:02 6045180
/usr/lib64/liblzma.so.5.0.99
2b576101f000-2b5761020000 rw-p 00024000 08:02 6045180
/usr/lib64/liblzma.so.5.0.99
2b5761020000-2b5761035000 r-xp 00000000 08:02 6041099
/usr/lib64/libz.so.1.2.8
2b5761035000-2b5761234000 ---p 00015000 08:02 6041099
/usr/lib64/libz.so.1.2.8
2b5761234000-2b5761235000 r--p 00014000 08:02 6041099
/usr/lib64/libz.so.1.2.8
2b5761235000-2b5761236000 rw-p 00015000 08:02 6041099
/usr/lib64/libz.so.1.2.8
2b5761236000-2b576123e000 r-xp 00000000 08:02 6041225
/usr/lib64/libcrypt-2.18.so
2b576123e000-2b576143d000 ---p 00008000 08:02 6041225
/usr/lib64/libcrypt-2.18.so
2b576143d000-2b576143e000 r--p 00007000 08:02 6041225
/usr/lib64/libcrypt-2.18.so
2b576143e000-2b576143f000 rw-p 00008000 08:02 6041225
/usr/lib64/libcrypt-2.18.so
2b576143f000-2b576146d000 rw-p 00000000 00:00 0
2b576146d000-2b5761485000 r-xp 00000000 08:02 6042134
/usr/lib64/libpthread-2.18.so
2b5761485000-2b5761684000 ---p 00018000 08:02 6042134
/usr/lib64/libpthread-2.18.so
2b5761684000-2b5761685000 r--p 00017000 08:02 6042134
/usr/lib64/libpthread-2.18.so
2b5761685000-2b5761686000 rw-p 00018000 08:02 6042134
/usr/lib64/libpthread-2.18.so
2b5761686000-2b576168a000 rw-p 00000000 00:00 0
2b576168a000-2b576168d000 r-xp 00000000 08:02 6041228
/usr/lib64/libdl-2.18.so
2b576168d000-2b576188c000 ---p 00003000 08:02 6041228
/usr/lib64/libdl-2.18.so
2b576188c000-2b576188d000 r--p 00002000 08:02 6041228
/usr/lib64/libdl-2.18.so
2b576188d000-2b576188e000 rw-p 00003000 08:02 6041228
/usr/lib64/libdl-2.18.so
2b576188e000-2b57619ec000 r-xp 00000000 08:02 6041456
/usr/lib64/libxml2.so.2.9.1
2b57619ec000-2b5761beb000 ---p 0015e000 08:02 6041456
/usr/lib64/libxml2.so.2.9.1
2b5761beb000-2b5761bf3000 r--p 0015d000 08:02 6041456
/usr/lib64/libxml2.so.2.9.1
2b5761bf3000-2b5761bf5000 rw-p 00165000 08:02 6041456
/usr/lib64/libxml2.so.2.9.1
2b5761bf5000-2b5761bf7000 rw-p 00000000 00:00 0
2b5761bf7000-2b5761ce0000 r-xp 00000000 08:02 6046635
/usr/lib64/libstdc++.so.6.0.19
2b5761ce0000-2b5761ee0000 ---p 000e9000 08:02 6046635
/usr/lib64/libstdc++.so.6.0.19
2b5761ee0000-2b5761ee8000 r--p 000e9000 08:02 6046635
/usr/lib64/libstdc++.so.6.0.19
2b5761ee8000-2b5761eea000 rw-p 000f1000 08:02 6046635
/usr/lib64/libstdc++.so.6.0.19
2b5761eea000-2b5761eff000 rw-p 00000000 00:00 0
2b5761eff000-2b5762004000 r-xp 00000000 08:02 6041245
/usr/lib64/libm-2.18.so
2b5762004000-2b5762204000 ---p 00105000 08:02 6041245
/usr/lib64/libm-2.18.so
2b5762204000-2b5762205000 r--p 00105000 08:02 6041245
/usr/lib64/libm-2.18.so
2b5762205000-2b5762206000 rw-p 00106000 08:02 6041245
/usr/lib64/libm-2.18.so
2b5762206000-2b576221b000 r-xp 00000000 08:02 6030235
/usr/lib64/libgcc_s-4.8.3-20140911.so.1
2b576221b000-2b576241a000 ---p 00015000 08:02 6030235
/usr/lib64/libgcc_s-4.8.3-20140911.so.1
2b576241a000-2b576241b000 r--p 00014000 08:02 6030235
/usr/lib64/libgcc_s-4.8.3-20140911.so.1
2b576241b000-2b576241c000 rw-p 00015000 08:02 6030235
/usr/lib64/libgcc_s-4.8.3-20140911.so.1
2b576241c000-2b57625d0000 r-xp 00000000 08:02 6041191
/usr/lib64/libc-2.18.so
2b57625d0000-2b57627cf000 ---p 001b4000 08:02 6041191
/usr/lib64/libc-2.18.so
2b57627cf000-2b57627d3000 r--p 001b3000 08:02 6041191
/usr/lib64/libc-2.18.so
2b57627d3000-2b57627d5000 rw-p 001b7000 08:02 6041191
/usr/lib64/libc-2.18.so
2b57627d5000-2b57627da000 rw-p 00000000 00:00 0
2b57627da000-2b57627e4000 r-xp 00000000 08:02 6044927
/usr/lib64/libnuma.so.1
2b57627e4000-2b57629e4000 ---p 0000a000 08:02 6044927
/usr/lib64/libnuma.so.1
2b57629e4000-2b57629e5000 r--p 0000a000 08:02 6044927
/usr/lib64/libnuma.so.1
2b57629e5000-2b57629e6000 rw-p 0000b000 08:02 6044927
/usr/lib64/libnuma.so.1
2b57629e6000-2b57629ee000 r-xp 00000000 08:02 6033398
/usr/lib64/libpciaccess.so.0.11.1
2b57629ee000-2b5762bee000 ---p 00008000 08:02 6033398
/usr/lib64/libpciaccess.so.0.11.1
2b5762bee000-2b5762bef000 r--p 00008000 08:02 6033398
/usr/lib64/libpciaccess.so.0.11.1
2b5762bef000-2b5762bf0000 rw-p 00009000 08:02 6033398
/usr/lib64/libpciaccess.so.0.11.1
2b5762bf0000-2b5762bf5000 r-xp 00000000 08:02 6041023
/usr/lib64/libXNVCtrl.so.0.0.0
2b5762bf5000-2b5762df4000 ---p 00005000 08:02 6041023
/usr/lib64/libXNVCtrl.so.0.0.0
2b5762df4000-2b5762df5000 r--p 00004000 08:02 6041023
/usr/lib64/libXNVCtrl.so.0.0.0
2b5762df5000-2b5762df6000 rw-p 00005000 08:02 6041023
/usr/lib64/libXNVCtrl.so.0.0.0
2b5762df6000-2b5762e07000 r-xp 00000000 08:02 6035852
/usr/lib64/libXext.so.6.4.0
2b5762e07000-2b5763006000 ---p 00011000 08:02 6035852
/usr/lib64/libXext.so.6.4.0
2b5763006000-2b5763007000 r--p 00010000 08:02 6035852
/usr/lib64/libXext.so.6.4.0
2b5763007000-2b5763008000 rw-p 00011000 08:02 6035852
/usr/lib64/libXext.so.6.4.0
2b5763008000-2b5763140000 r-xp 00000000 08:02 6033554
/usr/lib64/libX11.so.6.3.0
2b5763140000-2b5763340000 ---p 00138000 08:02 6033554
/usr/lib64/libX11.so.6.3.0
2b5763340000-2b5763341000 r--p 00138000 08:02 6033554
/usr/lib64/libX11.so.6.3.0
2b5763341000-2b5763346000 rw-p 00139000 08:02 6033554
/usr/lib64/libX11.so.6.3.0
2b5763346000-2b576338d000 r-xp 00000000 08:02 6042941
/usr/lib64/libgssapi_krb5.so.2.2
2b576338d000-2b576358d000 ---p 00047000 08:02 6042941
/usr/lib64/libgssapi_krb5.so.2.2
2b576358d000-2b576358e000 r--p 00047000 08:02 6042941
/usr/lib64/libgssapi_krb5.so.2.2
2b576358e000-2b5763590000 rw-p 00048000 08:02 6042941
/usr/lib64/libgssapi_krb5.so.2.2
2b5763590000-2b5763660000 r-xp 00000000 08:02 6033250
/usr/lib64/libkrb5.so.3.3
2b5763660000-2b576385f000 ---p 000d0000 08:02 6033250
/usr/lib64/libkrb5.so.3.3
2b576385f000-2b576386d000 r--p 000cf000 08:02 6033250
/usr/lib64/libkrb5.so.3.3
2b576386d000-2b5763870000 rw-p 000dd000 08:02 6033250
/usr/lib64/libkrb5.so.3.3
2b5763870000-2b5763873000 r-xp 00000000 08:02 6031106
/usr/lib64/libcom_err.so.2.1
2b5763873000-2b5763a72000 ---p 00003000 08:02 6031106
/usr/lib64/libcom_err.so.2.1
2b5763a72000-2b5763a73000 r--p 00002000 08:02 6031106
/usr/lib64/libcom_err.so.2.1
2b5763a73000-2b5763a74000 rw-p 00003000 08:02 6031106
/usr/lib64/libcom_err.so.2.1
2b5763a74000-2b5763aa6000 r-xp 00000000 08:02 6044700
/usr/lib64/libk5crypto.so.3.1
2b5763aa6000-2b5763ca5000 ---p 00032000 08:02 6044700
/usr/lib64/libk5crypto.so.3.1
2b5763ca5000-2b5763ca7000 r--p 00031000 08:02 6044700
/usr/lib64/libk5crypto.so.3.1
2b5763ca7000-2b5763ca8000 rw-p 00033000 08:02 6044700
/usr/lib64/libk5crypto.so.3.1
2b5763ca8000-2b5763ca9000 rw-p 00000000 00:00 0
2b5763ca9000-2b5763cb3000 r-xp 00000000 08:02 6045823
/usr/lib64/libunwind.so.8.0.1
2b5763cb3000-2b5763eb3000 ---p 0000a000 08:02 6045823
/usr/lib64/libunwind.so.8.0.1
2b5763eb3000-2b5763eb4000 r--p 0000a000 08:02 6045823
/usr/lib64/libunwind.so.8.0.1
2b5763eb4000-2b5763eb5000 rw-p 0000b000 08:02 6045823
/usr/lib64/libunwind.so.8.0.1
2b5763eb5000-2b5763ec3000 rw-p 00000000 00:00 0
2b5763ec3000-2b5763ec7000 r-xp 00000000 08:02 6030626
/usr/lib64/libattr.so.1.1.0
2b5763ec7000-2b57640c6000 ---p 00004000 08:02 6030626
/usr/lib64/libattr.so.1.1.0
2b57640c6000-2b57640c7000 r--p 00003000 08:02 6030626
/usr/lib64/libattr.so.1.1.0
2b57640c7000-2b57640c8000 rw-p 00004000 08:02 6030626
/usr/lib64/libattr.so.1.1.0
2b57640c8000-2b576413f000 r-xp 00000000 08:02 6030410
/usr/lib64/libfreebl3.so
2b576413f000-2b576433e000 ---p 00077000 08:02 6030410
/usr/lib64/libfreebl3.so
2b576433e000-2b5764340000 r--p 00076000 08:02 6030410
/usr/lib64/libfreebl3.so
2b5764340000-2b5764341000 rw-p 00078000 08:02 6030410
/usr/lib64/libfreebl3.so
2b5764341000-2b5764345000 rw-p 00000000 00:00 0
2b5764345000-2b5764365000 r-xp 00000000 08:02 6037321
/usr/lib64/libxcb.so.1.1.0
2b5764365000-2b5764564000 ---p 00020000 08:02 6037321
/usr/lib64/libxcb.so.1.1.0
2b5764564000-2b5764565000 r--p 0001f000 08:02 6037321
/usr/lib64/libxcb.so.1.1.0
2b5764565000-2b5764566000 rw-p 00020000 08:02 6037321
/usr/lib64/libxcb.so.1.1.0
2b5764566000-2b5764573000 r-xp 00000000 08:02 6047388
/usr/lib64/libkrb5support.so.0.1
2b5764573000-2b5764772000 ---p 0000d000 08:02 6047388
/usr/lib64/libkrb5support.so.0.1
2b5764772000-2b5764773000 r--p 0000c000 08:02 6047388
/usr/lib64/libkrb5support.so.0.1
2b5764773000-2b5764774000 rw-p 0000d000 08:02 6047388
/usr/lib64/libkrb5support.so.0.1
2b5764774000-2b5764777000 r-xp 00000000 08:02 6040962
/usr/lib64/libkeyutils.so.1.5
2b5764777000-2b5764976000 ---p 00003000 08:02 6040962
/usr/lib64/libkeyutils.so.1.5
2b5764976000-2b5764977000 r--p 00002000 08:02 6040962
/usr/lib64/libkeyutils.so.1.5
2b5764977000-2b5764978000 rw-p 00003000 08:02 6040962
/usr/lib64/libkeyutils.so.1.5
2b5764978000-2b576497a000 r-xp 00000000 08:02 6032166
/usr/lib64/libXau.so.6.0.0
2b576497a000-2b5764b7a000 ---p 00002000 08:02 6032166
/usr/lib64/libXau.so.6.0.0
2b5764b7a000-2b5764b7b000 r--p 00002000 08:02 6032166
/usr/lib64/libXau.so.6.0.0
2b5764b7b000-2b5764b7c000 rw-p 00003000 08:02 6032166
/usr/lib64/libXau.so.6.0.0
2b5764b7c000-2b5764b9d000 r-xp 00000000 08:02 6030254
/usr/lib64/libselinux.so.1
2b5764b9d000-2b5764d9c000 ---p 00021000 08:02 6030254
/usr/lib64/libselinux.so.1
2b5764d9c000-2b5764d9d000 r--p 00020000 08:02 6030254
/usr/lib64/libselinux.so.1
2b5764d9d000-2b5764d9e000 rw-p 00021000 08:02 6030254
/usr/lib64/libselinux.so.1
2b5764d9e000-2b5764da0000 rw-p 00000000 00:00 0
2b5764da0000-2b5764da1000 ---p 00000000 00:00 0
2b5764da1000-2b5764fa1000 rw-p 00000000 00:00 0
[stack:14573]
2b5764fa1000-2b5764fa2000 ---p 00000000 00:00 0
2b5764fa2000-2b57650a2000 rw-p 00000000 00:00 0
[stack:14575]
2b57650a2000-2b57650a3000 ---p 00000000 00:00 0
2b57650a3000-2b57651a3000 rw-p 00000000 00:00 0
[stack:14576]
2b57651a3000-2b57651a4000 ---p 00000000 00:00 0
2b57651a4000-2b57652a4000 rw-p 00000000 00:00 0
[stack:14577]
2b57652a4000-2b57652a5000 ---p 00000000 00:00 0
2b57652a5000-2b57653a5000 rw-p 00000000 00:00 0
[stack:14578]
2b57653a5000-2b57653a6000 ---p 00000000 00:00 0
2b57653a6000-2b57654a6000 rw-p 00000000 00:00 0
[stack:14579]
2b57654a6000-2b57654ce000 r-xp 00000000 08:02 136324
/server/libexec/trafficserver/header_rewrite.so
2b57654ce000-2b57656cd000 ---p 00028000 08:02 136324
/server/libexec/trafficserver/header_rewrite.so
2b57656cd000-2b57656cf000 r--p 00027000 08:02 136324
/server/libexec/trafficserver/header_rewrite.so
2b57656cf000-2b57656d0000 rw-p 00029000 08:02 136324
/server/libexec/trafficserver/header_rewrite.so
2b57656d0000-2b57656d3000 r-xp 00000000 08:02 136326
/server/libexec/trafficserver/stats_over_http.so
2b57656d3000-2b57658d2000 ---p 00003000 08:02 136326
/server/libexec/trafficserver/stats_over_http.so
2b57658d2000-2b57658d3000 r--p 00002000 08:02 136326
/server/libexec/trafficserver/stats_over_http.so
2b57658d3000-2b57658d4000 rw-p 00003000 08:02 136326
/server/libexec/trafficserver/stats_over_http.so
2b57658d4000-2b57658d5000 ---p 00000000 00:00 0
2b57658d5000-2b57659d5000 rw-p 00000000 00:00 0
[stack:14580]
2b57659d5000-2b57659d6000 ---p 00000000 00:00 0
2b57659d6000-2b5765ad6000 rw-p 00000000 00:00 0
[stack:14581]
2b5765ad6000-2b5765ad7000 ---p 00000000 00:00 0
2b5765ad7000-2b5765bd7000 rw-p 00000000 00:00 0
[stack:14582]
2b5765bd7000-2b5765bd8000 ---p 00000000 00:00 0
2b5765bd8000-2b5765cd8000 rw-p 00000000 00:00 0
[stack:14583]
2b5765cd8000-2b5765cd9000 ---p 00000000 00:00 0
2b5765cd9000-2b5765dd9000 rw-p 00000000 00:00 0
[stack:14584]
2b5765dd9000-2b5765ddc000 r-xp 00000000 08:02 136302
/server/libexec/trafficserver/conf_remap.so
2b5765ddc000-2b5765fdb000 ---p 00003000 08:02 136302
/server/libexec/trafficserver/conf_remap.so
2b5765fdb000-2b5765fdc000 r--p 00002000 08:02 136302
/server/libexec/trafficserver/conf_remap.so
2b5765fdc000-2b5765fdd000 rw-p 00003000 08:02 136302
/server/libexec/trafficserver/conf_remap.so
2b5765fdd000-2b5765fe2000 r-xp 00000000 08:02 136358
/server/libexec/trafficserver/geoip_acl.so
2b5765fe2000-2b57661e2000 ---p 00005000 08:02 136358
/server/libexec/trafficserver/geoip_acl.so
2b57661e2000-2b57661e3000 r--p 00005000 08:02 136358
/server/libexec/trafficserver/geoip_acl.so
2b57661e3000-2b57661e4000 rw-p 00006000 08:02 136358
/server/libexec/trafficserver/geoip_acl.so
2b57661e4000-2b5766211000 r-xp 00000000 08:02 6042222
/usr/lib64/libGeoIP.so.1.5.1
2b5766211000-2b5766411000 ---p 0002d000 08:02 6042222
/usr/lib64/libGeoIP.so.1.5.1
2b5766411000-2b5766412000 r--p 0002d000 08:02 6042222
/usr/lib64/libGeoIP.so.1.5.1
2b5766412000-2b5766414000 rw-p 0002e000 08:02 6042222
/usr/lib64/libGeoIP.so.1.5.1
2b5766414000-2b57664cf000 r--p 00000000 08:02 6033712
/usr/share/GeoIP/GeoLiteCountry.dat
2b57664cf000-2b57664d0000 ---p 00000000 00:00 0
2b57664d0000-2b57665d0000 rw-p 00000000 00:00 0
[stack:14585]
2b57665d0000-2b57665d1000 ---p 00000000 00:00 0
2b57665d1000-2b57669d1000 rw-p 00000000 00:00 0
[stack:14586]
7fff1d234000-7fff1d255000 rw-p 00000000 00:00 0 [stack]
7fff1d386000-7fff1d388000 r--p 00000000 00:00 0 [vvar]
7fff1d388000-7fff1d38a000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0
[vsyscall]
{code}
I'd imagine it's the same issue.
> Memory use after free in HTTP/2
> -------------------------------
>
> Key: TS-3405
> URL: https://issues.apache.org/jira/browse/TS-3405
> Project: Traffic Server
> Issue Type: Bug
> Components: HTTP/2
> Reporter: Bryan Call
> Fix For: 5.3.0
>
> Attachments: fix-h2.patch
>
>
> From Leif running on docs.trafficserver.apache.org:
>
> {code}
> traffic_server: using root directory '/opt/ats'
> =================================================================
> ==31101==ERROR: AddressSanitizer: heap-use-after-free on address
> 0x61800000c888 at pc 0x4f3558 bp 0x2aaf10c88930 sp 0x2aaf10c88928
> READ of size 8 at 0x61800000c888 thread T2 ([ET_NET 1])
> #0 0x4f3557 in Continuation::handleEvent(int, void*)
> ../iocore/eventsystem/I_Continuation.h:146
> #1 0x4f3557 in FetchSM::InvokePluginExt(int)
> /usr/local/src/trafficserver/proxy/FetchSM.cc:301
> #2 0x4f3a7a in FetchSM::process_fetch_read(int)
> /usr/local/src/trafficserver/proxy/FetchSM.cc:465
> #3 0x4f5112 in FetchSM::fetch_handler(int, void*)
> /usr/local/src/trafficserver/proxy/FetchSM.cc:514
> #4 0x59f1b7 in Continuation::handleEvent(int, void*)
> ../iocore/eventsystem/I_Continuation.h:146
> #5 0x59f1b7 in PluginVC::process_read_side(bool)
> /usr/local/src/trafficserver/proxy/PluginVC.cc:640
> #6 0x5abcb9 in PluginVC::main_handler(int, void*)
> /usr/local/src/trafficserver/proxy/PluginVC.cc:206
> #7 0xc821fe in Continuation::handleEvent(int, void*)
> /usr/local/src/trafficserver/iocore/eventsystem/I_Continuation.h:146
> #8 0xc821fe in EThread::process_event(Event*, int)
> /usr/local/src/trafficserver/iocore/eventsystem/UnixEThread.cc:144
> #9 0xc84819 in EThread::execute()
> /usr/local/src/trafficserver/iocore/eventsystem/UnixEThread.cc:238
> #10 0xc80e18 in spawn_thread_internal
> /usr/local/src/trafficserver/iocore/eventsystem/Thread.cc:88
> #11 0x2aaf0b083df2 in start_thread (/lib64/libpthread.so.0+0x7df2)
> #12 0x2aaf0c8ec1ac in clone (/lib64/libc.so.6+0xf61ac)
> 0x61800000c888 is located 8 bytes inside of 816-byte region
> [0x61800000c880,0x61800000cbb0)
> freed by thread T0 ([ET_NET 0]) here:
> #0 0x2aaf08c131c7 in __interceptor_free
> ../../.././libsanitizer/asan/asan_malloc_linux.cc:62
> #1 0x7b7d42 in Http2ClientSession::do_io_close(int)
> /usr/local/src/trafficserver/proxy/http2/Http2ClientSession.cc:194
> #2 0x7b7d42 in Http2ClientSession::main_event_handler(int, void*)
> /usr/local/src/trafficserver/proxy/http2/Http2ClientSession.cc:237
> #3 0xc1351f in Continuation::handleEvent(int, void*)
> ../../iocore/eventsystem/I_Continuation.h:146
> #4 0xc1351f in read_signal_and_update
> /usr/local/src/trafficserver/iocore/net/UnixNetVConnection.cc:140
> #5 0xc1351f in read_signal_done
> /usr/local/src/trafficserver/iocore/net/UnixNetVConnection.cc:185
> #6 0xc1351f in UnixNetVConnection::readSignalDone(int, NetHandler*)
> /usr/local/src/trafficserver/iocore/net/UnixNetVConnection.cc:939
> #7 0xbbabf8 in SSLNetVConnection::net_read_io(NetHandler*, EThread*)
> /usr/local/src/trafficserver/iocore/net/SSLNetVConnection.cc:596
> #8 0xbda09c in NetHandler::mainNetEvent(int, Event*)
> /usr/local/src/trafficserver/iocore/net/UnixNet.cc:513
> #9 0xc85089 in Continuation::handleEvent(int, void*)
> /usr/local/src/trafficserver/iocore/eventsystem/I_Continuation.h:146
> #10 0xc85089 in EThread::process_event(Event*, int)
> /usr/local/src/trafficserver/iocore/eventsystem/UnixEThread.cc:144
> #11 0xc85089 in EThread::execute()
> /usr/local/src/trafficserver/iocore/eventsystem/UnixEThread.cc:268
> #12 0x498f96 in main /usr/local/src/trafficserver/proxy/Main.cc:1826
> #13 0x2aaf0c817af4 in __libc_start_main (/lib64/libc.so.6+0x21af4)
> previously allocated by thread T0 ([ET_NET 0]) here:
> #0 0x2aaf08c1393b in __interceptor_posix_memalign
> ../../.././libsanitizer/asan/asan_malloc_linux.cc:130
> #1 0x2aaf09afd2f9 in ats_memalign
> /usr/local/src/trafficserver/lib/ts/ink_memory.cc:96
> #2 0x7cd804 in ClassAllocator<Http2ClientSession>::alloc()
> ../../lib/ts/Allocator.h:124
> #3 0x7cd804 in Http2SessionAccept::accept(NetVConnection*, MIOBuffer*,
> IOBufferReader*)
> /usr/local/src/trafficserver/proxy/http2/Http2SessionAccept.cc:57
> #4 0x7cd3c4 in Http2SessionAccept::mainEvent(int, void*)
> /usr/local/src/trafficserver/proxy/http2/Http2SessionAccept.cc:69
> #5 0xbc2fae in SSLNextProtocolTrampoline::ioCompletionEvent(int, void*)
> /usr/local/src/trafficserver/iocore/net/SSLNextProtocolAccept.cc:101
> #6 0xc1351f in Continuation::handleEvent(int, void*)
> ../../iocore/eventsystem/I_Continuation.h:146
> #7 0xc1351f in read_signal_and_update
> /usr/local/src/trafficserver/iocore/net/UnixNetVConnection.cc:140
> #8 0xc1351f in read_signal_done
> /usr/local/src/trafficserver/iocore/net/UnixNetVConnection.cc:185
> #9 0xc1351f in UnixNetVConnection::readSignalDone(int, NetHandler*)
> /usr/local/src/trafficserver/iocore/net/UnixNetVConnection.cc:939
> #10 0xbbba59 in SSLNetVConnection::net_read_io(NetHandler*, EThread*)
> /usr/local/src/trafficserver/iocore/net/SSLNetVConnection.cc:489
> #11 0xbda09c in NetHandler::mainNetEvent(int, Event*)
> /usr/local/src/trafficserver/iocore/net/UnixNet.cc:513
> #12 0xc85089 in Continuation::handleEvent(int, void*)
> /usr/local/src/trafficserver/iocore/eventsystem/I_Continuation.h:146
> #13 0xc85089 in EThread::process_event(Event*, int)
> /usr/local/src/trafficserver/iocore/eventsystem/UnixEThread.cc:144
> #14 0xc85089 in EThread::execute()
> /usr/local/src/trafficserver/iocore/eventsystem/UnixEThread.cc:268
> #15 0x498f96 in main /usr/local/src/trafficserver/proxy/Main.cc:1826
> #16 0x2aaf0c817af4 in __libc_start_main (/lib64/libc.so.6+0x21af4)
> Thread T2 ([ET_NET 1]) created by T0 ([ET_NET 0]) here:
> #0 0x2aaf08be286a in __interceptor_pthread_create
> ../../.././libsanitizer/asan/asan_interceptors.cc:183
> #1 0xc81aa5 in ink_thread_create ../../lib/ts/ink_thread.h:148
> #2 0xc81aa5 in Thread::start(char const*, unsigned long, void*
> (*)(void*), void*)
> /usr/local/src/trafficserver/iocore/eventsystem/Thread.cc:103
> #3 0xc8a026 in EventProcessor::start(int, unsigned long)
> /usr/local/src/trafficserver/iocore/eventsystem/UnixEventProcessor.cc:140
> #4 0x498d0b in main /usr/local/src/trafficserver/proxy/Main.cc:1636
> #5 0x2aaf0c817af4 in __libc_start_main (/lib64/libc.so.6+0x21af4)
> SUMMARY: AddressSanitizer: heap-use-after-free
> ../iocore/eventsystem/I_Continuation.h:146 Continuation::handleEvent(int,
> void*)
> Shadow bytes around the buggy address:
> 0x0c307fff98c0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
> 0x0c307fff98d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
> 0x0c307fff98e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
> 0x0c307fff98f0: fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa fa
> 0x0c307fff9900: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
> =>0x0c307fff9910: fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd
> 0x0c307fff9920: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
> 0x0c307fff9930: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
> 0x0c307fff9940: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
> 0x0c307fff9950: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
> 0x0c307fff9960: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
> Shadow byte legend (one shadow byte represents 8 application bytes):
> Addressable: 00
> Partially addressable: 01 02 03 04 05 06 07
> Heap left redzone: fa
> Heap right redzone: fb
> Freed heap region: fd
> Stack left redzone: f1
> Stack mid redzone: f2
> Stack right redzone: f3
> Stack partial redzone: f4
> Stack after return: f5
> Stack use after scope: f8
> Global redzone: f9
> Global init order: f6
> Poisoned by user: f7
> Contiguous container OOB:fc
> ASan internal: fe
> ==31101==ABORTING
> traffic_server: using root directory '/opt/ats'
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
