[
https://issues.apache.org/jira/browse/TS-3513?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14486654#comment-14486654
]
Bryan Call commented on TS-3513:
--------------------------------
Looks like a different core, but adding it here now:
{code}
(gdb) bt full
#0 0x0000000000642a32 in Http2DynamicTable::set_dynamic_table_size
(this=0x7ffe99b8b1e0, new_size=1) at HPACK.cc:219
last_name_len = 528
last_value_len = 32767
last_field = 0x7fffd4bc9550
old_size = 4096
#1 0x0000000000643ab4 in update_dynamic_table_size (buf_start=0x7fffd4bc9550
"!\202\005\251`Ѱ\231\377\303I\006=+\270\a\200\021\b\r\262ӡ\b\202'\376+4\220\005\265\303\361",
<incomplete sequence \342>,
buf_end=0x7fffd4bc9638 "\016\225^", dynamic_table=...) at HPACK.cc:687
size = 1
len = 1
#2 0x0000000000638fc7 in http2_parse_header_fragment (hdr=0x7ffe9a347868,
iov=..., dynamic_table=..., cont=false) at HTTP2.cc:676
read_bytes = 0
field = 0x7ffd37259918
header = {_field = 0x7ffd37259918, _heap = 0x7ffd37259810, _mh =
0x7ffd372598c8}
ftype = HPACK_FIELD_TABLESIZE_UPDATE
name_len = 32766
name = 0x7fffd4bc9530 " \246\274\324\377\177"
buf_end = 0x7fffd4bc9638 "\016\225^"
cursor = 0x7fffd4bc9550
"!\202\005\251`Ѱ\231\377\303I\006=+\270\a\200\021\b\r\262ӡ\b\202'\376+4\220\005\265\303\361",
<incomplete sequence \342>
heap = 0x7ffd37259810
hh = 0x7ffd37259898
buf_start = 0x7fffd4bc9550
"!\202\005\251`Ѱ\231\377\303I\006=+\270\a\200\021\b\r\262ӡ\b\202'\376+4\220\005\265\303\361",
<incomplete sequence \342>
#3 0x0000000000641b5e in Http2Stream::decode_request_header
(this=0x7ffe9a347840, iov=..., dynamic_table=..., cont=false) at
Http2ConnectionState.h:139
No locals.
#4 0x000000000063e845 in rcv_headers_frame (cs=..., cstate=..., frame=...) at
Http2ConnectionState.cc:222
read_len = 232
read_bytes = 232
cont = false
header_block_fragment = {iov_base = 0x7fffd4bc9550, iov_len = 232}
decoded_bytes = 2571080304
buf = 0x7fffd4bc9550
"!\202\005\251`Ѱ\231\377\303I\006=+\270\a\200\021\b\r\262ӡ\b\202'\376+4\220\005\265\303\361",
<incomplete sequence \342>
params = {pad_length = 0 '\000', priority = {stream_dependency = 0,
weight = 11 '\v'}}
__func__ = "rcv_headers_frame"
stream = 0x7ffe9a347840
nbytes = 237
id = 3
payload_length = 237
unpadded_length = 237
remaining_bytes = 0
#5 0x0000000000640137 in Http2ConnectionState::main_event_handler
(this=0x7ffe8efa1730, event=2253, edata=0x7fffd4bca7f0) at
Http2ConnectionState.cc:643
frame = 0x7fffd4bca7f0
last_streamid = 3
error = 32767
__func__ = "main_event_handler"
{code}
> http2 core dump
> ---------------
>
> Key: TS-3513
> URL: https://issues.apache.org/jira/browse/TS-3513
> Project: Traffic Server
> Issue Type: Bug
> Components: HTTP/2
> Affects Versions: 5.3.0
> Reporter: Bryan Call
> Labels: crash
> Fix For: 6.0.0
>
>
> {code}
> traffic_server: Segmentation fault (Invalid permissions for mapped object
> [0x2ab5cbb3854d])traffic_server - STACK TRACE:
> /usr/bin/traffic_server(_Z19crash_logger_invokeiP7siginfoPv+0xc3)[0x50abe2]
> /lib64/libpthread.so.0(+0x3bb560f710)[0x2ab4b57c8710]
> /lib64/libc.so.6(memmove+0x107)[0x3bb4e83907]
> /usr/bin/traffic_server[0x63e8b4]
> /usr/bin/traffic_server(_ZN20Http2ConnectionState18main_event_handlerEiPv+0x2eb)[0x640137]
> /usr/bin/traffic_server(_ZN12Continuation11handleEventEiPv+0x6c)[0x50da20]
> /usr/bin/traffic_server[0x63b5fd]
> /usr/bin/traffic_server(_ZN18Http2ClientSession25state_complete_frame_readEiPv+0x28f)[0x63d379]
> /usr/bin/traffic_server(_ZN18Http2ClientSession18main_event_handlerEiPv+0xfb)[0x63c26d]
> /usr/bin/traffic_server(_ZN12Continuation11handleEventEiPv+0x6c)[0x50da20]
> /usr/bin/traffic_server(_ZN18Http2ClientSession22state_start_frame_readEiPv+0x892)[0x63d0c0]
> /usr/bin/traffic_server(_ZN18Http2ClientSession18main_event_handlerEiPv+0xfb)[0x63c26d]
> /usr/bin/traffic_server(_ZN12Continuation11handleEventEiPv+0x6c)[0x50da20]
> /usr/bin/traffic_server[0x76dac7]
> /usr/bin/traffic_server(_ZN18UnixNetVConnection19readSignalAndUpdateEi+0x20)[0x7703f4]
> /usr/bin/traffic_server(_ZN17SSLNetVConnection11net_read_ioEP10NetHandlerP7EThread+0x832)[0x75751c]
> /usr/bin/traffic_server(_ZN10NetHandler12mainNetEventEiP5Event+0x628)[0x7676c8]
> /usr/bin/traffic_server(_ZN12Continuation11handleEventEiPv+0x6c)[0x50da20]
> /usr/bin/traffic_server(_ZN7EThread13process_eventEP5Eventi+0xc6)[0x78de82]
> /usr/bin/traffic_server(_ZN7EThread7executeEv+0x3dc)[0x78e38c]
> /usr/bin/traffic_server[0x78d43d]
> /lib64/libpthread.so.0(+0x3bb56079d1)[0x2ab4b57c09d1]
> /lib64/libc.so.6(clone+0x6d)[0x3bb4ee88fd]
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
