---

** [tickets:#2496] amf: amfd crashes while trying to free invalid memory.**

**Status:** accepted
**Milestone:** 5.17.06
**Created:** Wed Jun 14, 2017 08:49 AM UTC by Praveen
**Last Updated:** Wed Jun 14, 2017 08:49 AM UTC
**Owner:** Praveen


Steps to reproduce:
1)Bring AMF demo up on one controller.
2)Issue lock operation on active SU.
3)When component is still processing quiesced assignment, run below command:
immlist safSu=SU1,safSg=AmfDemo,safApp=AmfDemo1
4)AMF wil crash for updating runtime atributes of SU in su_rt_attr_cb().

bt:
\#0  0x00007fac6971fcc9 in __GI_raise (sig=sig@entry=6) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:56
\#1  0x00007fac697230d8 in __GI_abort () at abort.c:89
\#2  0x00007fac6975c394 in __libc_message (do_abort=do_abort@entry=1,
    fmt=fmt@entry=0x7fac6986ab28 "*** Error in `%s': %s: 0x%s ***\n") at 
../sysdeps/posix/libc_fatal.c:175
\#3  0x00007fac6976866e in malloc_printerr (ptr=<optimized out>,
    str=0x7fac6986acc8 "free(): invalid next size (fast)", action=1) at 
malloc.c:4996
\#4  _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at 
malloc.c:3840
\#5  0x00007fac6b4c471a in su_rt_attr_cb (immOiHandle=<optimized out>, 
objectName=<optimized out>,
    attributeNames=<optimized out>) at src/amf/amfd/su.cc:1501
\#6  0x00007fac6b4531f1 in rt_attr_update_cb (immoi_handle=94489411855, 
object_name=0x7fac640041b8,
    attribute_names=0x7fac6c104290) at src/amf/amfd/imm.cc:881
\#7  0x00007fac6a99bc42 in imma_process_callback_info 
(cb=cb@entry=0x7fac6aba6320 <imma_cb>, cl_node=0x7fac6c0cf250,
    callback=callback@entry=0x7fac64004190, immHandle=94489411855) at 
src/imm/agent/imma_proc.cc:3266
\#8  0x00007fac6a99bf79 in imma_hdl_callbk_dispatch_all (cb=0x7fac6aba6320 
<imma_cb>, immHandle=94489411855)
    at src/imm/agent/imma_proc.cc:1812
\#9  0x00007fac6a99301d in saImmOiDispatch (immOiHandle=94489411855, 
dispatchFlags=SA_DISPATCH_ALL)
    at src/imm/agent/imma_oi_api.cc:642
\#10 0x00007fac6b412868 in main_loop () at src/amf/amfd/main.cc:717
\#11 main (argc=<optimized out>, argv=<optimized out>) at 
src/amf/amfd/main.cc:848



---

Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is 
subscribed to https://sourceforge.net/p/opensaf/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://sourceforge.net/p/opensaf/admin/tickets/options.  Or, if this is a 
mailing list, you can unsubscribe from the mailing list.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Opensaf-tickets mailing list
Opensaf-tickets@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets

Reply via email to