- **status**: review --> fixed
- **Comment**:
commit 7a5a4888e753a26765db43ec321235c486072304 (HEAD -> develop,
origin/develop)
Author: thuan.tran <[email protected]>
Date: Fri Aug 14 13:25:30 2020 +0700
mbc: fix agent crash inside ncs_mbcsv_null_func() [#3214]
---
** [tickets:#3214] mbc: agent crash inside ncs_mbcsv_null_func()**
**Status:** fixed
**Milestone:** 5.20.08
**Created:** Fri Aug 14, 2020 06:23 AM UTC by Thuan Tran
**Last Updated:** Fri Aug 14, 2020 06:35 AM UTC
**Owner:** Thuan Tran
Coredump generated as following
~~~
Core was generated by `/usr/local/lib/opensaf/osafimmd'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x00007f8ed9b67940 in ncs_mbcsv_null_func (peer=<optimized out>,
evt=0x7ffc34ed3660) at src/mbc/mbcsv_act.c:82
[Current thread is 1 (Thread 0x7f8eda406780 (LWP 181))]
Thread 1 (Thread 0x7f8eda406780 (LWP 181)):
#0 0x00007f8ed9b67940 in ncs_mbcsv_null_func (peer=<optimized out>,
evt=0x7ffc34ed3660) at src/mbc/mbcsv_act.c:82
pn = <optimized out>
#1 0x00007f8ed9b70c00 in mbcsv_send_ckpt_data_to_all_peers
(msg_to_send=msg_to_send@entry=0x7ffc34ed3768,
ckpt_inst=ckpt_inst@entry=0x559204f37490,
mbc_inst=mbc_inst@entry=0x559204f36ac0) at src/mbc/mbcsv_util.c:412
parg = {i_op = 3652353520, i_client_hdl = 140251514413420, i_ckpt_hdl =
0, info = {encode = {io_msg_type = 0, io_action = NCS_MBCSV_ACT_DONT_CARE,
io_reo_type = 887961360, io_reo_hdl = 3, io_uba = {start = 0x7ffc34ed3700, ub =
0x7f8ed9b53874 <logtrace_trace(char const*, unsigned int, unsigned int, char
const*, ...)+100>, bufp = 0x7f8eda40cc10 "paA\u068e\177", res = 0, ttl = 0, max
= 13}, io_req_context = 1, i_peer_version = 0}, decode = {i_msg_type = 0,
i_action = NCS_MBCSV_ACT_DONT_CARE, i_reo_type = 887961360, i_uba = {start =
0x3, ub = 0x7ffc34ed3700, bufp = 0x7f8ed9b53874 <logtrace_trace(char const*,
unsigned int, unsigned int, char const*, ...)+100>
"\204\300u\rH\213\005I\224&", res = -633287664, ttl = 32654, max = 0},
o_req_context = 13, i_peer_version = 1}, peer = {i_service =
NCS_SERVICE_ID_BASE, i_peer_version = 0}, notify = {i_uba = {start = 0x0, ub =
0x7ffc34ed3710, bufp = 0x3 <error: Cannot access memory at address 0x3>, res =
887961344, ttl = 32764, max = -642434956}, i_peer_version = 52240, i_msg =
0x0}, error = {i_code = NCS_MBCSV_COLD_SYNC_TMR_EXP, i_err = false, i_arg =
0x7ffc34ed3710, i_peer_version = 3}}}
peer_ptr = 0x559204f4d390
tmp_ptr = <optimized out>
uba = <optimized out>
dup_ub = <optimized out>
evt_msg = {next = 0x7f8eda412d48, rcvr_peer_key = {svc_id = 887961512,
pwe_hdl = 32764, peer_anchor = 42, peer_inst_hdl = 65549}, msg_ctxt = {length =
0 '\000', data = "\000\000\000\000\000\000\000?\202\037\u068e"}, msg_type =
MBCSV_EVT_INTERNAL_RCV, info = {peer_msg = {type = MBCSV_EVT_INTERNAL_CLIENT,
info = {peer_disc = {msg_sub_type = 58782016, peer_role = 21906, info =
{peer_up = {peer_version = 35}, peer_down = {dummy = 35 '#'}, peer_info =
{peer_version = 35, my_peer_inst_hdl = 0, compatible = 1 '\001'}, peer_info_rsp
= {peer_version = 35, my_peer_inst_hdl = 0, compatible = 1 '\001'},
peer_chg_role = {peer_version = 35}}}, client_msg = {type = {raw = 58782016,
msg_sub_type = 58782016, evt_type = 58782016}, uba = {start = 0x23, ub = 0x1,
bufp = 0x7f8ed9b53874 <logtrace_trace(char const*, unsigned int, unsigned int,
char const*, ...)+100> "\204\300u\rH\213\005I\224&", res = -642568832, ttl =
32654, max = -642401625}, action = 887961344, snd_type = (unknown: 32764),
reo_type = 2650118144, first_rsp = 947341065}, usr_msg_info = {i_ckpt_hdl =
58782016, i_send_type = (NCS_MBCSV_SND_MBC_ASYNC | unknown: 21904), i_reo_type
= 35, i_reo_hdl = 1, i_action = 3652532340, io_no_peer = 142}, chg_role =
{ckpt_hdl = 58782016, new_role = 21906}}}, tmr_evt = {peer_inst_hdl = 0, type =
NCS_MBCSV_TMR_SEND_COLD_SYNC}, mds_sub_evt = {evt_type = NCSMDS_NONE}}, hops =
3661704520}
__FUNCTION__ = "mbcsv_send_ckpt_data_to_all_peers"
#2 0x00007f8ed9b69f14 in mbcsv_process_snd_ckpt_request (arg=0x7ffc34ed3760)
at src/mbc/mbcsv_api.c:846
mbc_reg = 0x559204f36ac0
ckpt_inst = 0x559204f37490
rc = SA_AIS_OK
evt = <optimized out>
check_peer = false
__FUNCTION__ = "mbcsv_process_snd_ckpt_request"
#3 0x0000559203805290 in immd_mbcsv_sync_update (cb=cb@entry=0x559203a13080
<_immd_cb>, msg=0x7ffc34ed37c0) at src/imm/immd/immd_mbcsv.c:59
arg = {i_op = NCS_MBCSV_OP_SEND_CKPT, i_mbcsv_hdl = 4293918753, info =
{initialize = {i_mbcsv_cb = 0xffe00021, i_version = 1, i_service = 21906,
o_mbcsv_hdl = 887961536}, sel_obj_get = {o_select_obj = 4292870177}, dispatch =
{i_disp_flags = 4292870177}, finalize = {i_dummy = 33}, open = {i_pwe_hdl =
4292870177, i_client_hdl = 94085553586177, o_ckpt_hdl = 887961536}, close =
{i_ckpt_hdl = 4292870177}, chg_role = {i_ckpt_hdl = 4292870177, i_ha_state =
0}, send_ckpt = {i_ckpt_hdl = 4292870177, i_send_type = NCS_MBCSV_SND_SYNC,
i_reo_type = 1, i_reo_hdl = 140721196447680, i_action = NCS_MBCSV_ACT_UPDATE,
io_no_peer = false}, send_notify = {i_ckpt_hdl = 4292870177, i_msg_dest =
NCS_MBCSV_ACTIVE, i_msg = 0x559200000001}, send_data_req = {i_ckpt_hdl =
4292870177, i_uba = {start = 0x559200000001, ub = 0x7ffc34ed37c0, bufp = 0x3
<error: Cannot access memory at address 0x3>, res = -635449581, ttl = 32654,
max = 5}}, obj_set = {i_ckpt_hdl = 4292870177, i_obj =
NCS_MBCSV_OBJ_WARM_SYNC_ON_OFF, i_val = 1}, obj_get = {i_ckpt_hdl = 4292870177,
i_obj = NCS_MBCSV_OBJ_WARM_SYNC_ON_OFF, o_val = 1}}}
__FUNCTION__ = "immd_mbcsv_sync_update"
rc = <optimized out>
#4 0x00005592037fef76 in immd_evt_proc_fevs_req (cb=cb@entry=0x559203a13080
<_immd_cb>, evt=evt@entry=0x7ffc34ed3a40, sinfo=sinfo@entry=0x0,
deallocate=deallocate@entry=false) at src/imm/immd/immd_evt.c:372
send_evt = {next = 0x0, type = IMMSV_EVT_TYPE_IMMND, info = {imma =
{type = 0, info = {initRsp = {immHandle = 82, error = 4615}, errRsp = {error =
82, errStrings = 0x1207}, admInitRsp = {error = 82, ownerId = 0}, ccbInitRsp =
{error = 82, ccbId = 0}, searchInitRsp = {error = 82, searchId = 0},
searchNextRsp = 0x52, searchBundleNextRsp = 0x52, searchRemote = {client_hdl =
82, requestNodeId = 4615, remoteNodeId = 0, searchId = 0, objectName = {size =
0, buf = 0x23 <error: Cannot access memory at address 0x23>}, attributeNames =
0x559204f4ffac}, admOpReq = {adminOwnerId = 82, invocation = 0, operationId =
4615, continuationId = 0, timeout = 0, objectName = {size = 35, buf =
0x559204f4ffac ""}, params = 0x0}, admOpRsp = {oi_client_hdl = 82, invocation =
4615, result = 0, error = 0, parms = 0x0}, objCreate = {ccbId = 82,
adminOwnerId = 0, className = {size = 4615, buf = 0x0}, parentOrObjectDn =
{size = 0, buf = 0x23 <error: Cannot access memory at address 0x23>},
attrValues = 0x559204f4ffac, immHandle = 0}, objDelete = {ccbId = 82,
adminOwnerId = 0, objectName = {size = 4615, buf = 0x0}, immHandle = 0},
objModify = {ccbId = 82, adminOwnerId = 0, objectName = {size = 4615, buf =
0x0}, attrMods = 0x0, immHandle = 35}, ccbCompl = {ccbId = 82, implId = 0,
invocation = 4615, immHandle = 0}, classDescr = {className = {size = 82, buf =
0x1207 <error: Cannot access memory at address 0x1207>}, classCategory = 0,
attrDefinitions = 0x0}, implSetRsp = {error = 82, implId = 0}, tmr_info = {type
= 82, adm_owner_hdl = 4615, client_hdl = 0, invocation = 0}}}, immnd =
{dont_free_me = false, unused1 = false, unused2 = false, unused3 = false, error
= 0, type = IMMND_EVT_D2ND_GLOB_FEVS_REQ_2, info = {initReq = {version =
{releaseCode = 7 '\a', majorVersion = 18 '\022', minorVersion = 0 '\000'},
client_pid = 0}, finReq = {client_hdl = 4615}, adminitReq = {client_hdl = 4615,
i = {adminOwnerName = {_opaque = {0, 0, 0, 0, 0, 0, 0, 0, 35, 0, 0, 0, 65452,
1268, 21906, 0 <repeats 114 times>}}, releaseOwnershipOnFinalize = false}},
ccbinitReq = {adminOwnerId = 4615, ccbFlags = 0, client_hdl = 0}, implSet =
{client_hdl = 4615, impl_name = {size = 0, buf = 0x0}, impl_id = 35, scope = 0,
oi_timeout = 83165100}, admFinReq = {adm_owner_id = 4615}, admReq =
{adm_owner_id = 4615, scope = 0, objectNames = 0x0}, admOpReq = {adminOwnerId =
4615, invocation = 0, operationId = 0, continuationId = 0, timeout = 35,
objectName = {size = 83165100, buf = 0x0}, params = 0x0}, fevsReq =
{sender_count = 4615, reply_dest = 0, client_hdl = 0, msg = {size = 35, buf =
0x559204f4ffac ""}, isObjSync = 0 '\000', ex_immd_node_id = 0}, admOpRsp =
{oi_client_hdl = 4615, invocation = 0, result = 0, error = 0, parms = 0x23},
ccbUpcallRsp = {oi_client_hdl = 4615, ccbId = 0, implId = 0, inv = 0, result =
0, name = {_opaque = {35, 0, 0, 0, 65452, 1268, 21906, 0 <repeats 122 times>}},
errorString = {size = 0, buf = 0x0}}, classDescr = {className = {size = 4615,
buf = 0x0}, classCategory = 0, attrDefinitions = 0x23}, objCreate = {ccbId =
4615, adminOwnerId = 0, className = {size = 0, buf = 0x0}, parentOrObjectDn =
{size = 35, buf = 0x559204f4ffac ""}, attrValues = 0x0, immHandle = 0},
objModify = {ccbId = 4615, adminOwnerId = 0, objectName = {size = 0, buf =
0x0}, attrMods = 0x23, immHandle = 94085636751276}, objDelete = {ccbId = 4615,
adminOwnerId = 0, objectName = {size = 0, buf = 0x0}, immHandle = 35}, obj_sync
= {className = {size = 4615, buf = 0x0}, objectName = {size = 0, buf = 0x23
<error: Cannot access memory at address 0x23>}, attrValues = 0x559204f4ffac,
next = 0x0}, finSync = {lastContinuationId = 4615, adminOwners = 0x0,
implementers = 0x0, classes = 0x23, ccbResults = 0x559204f4ffac}, ccbId = 4615,
searchOp = {client_hdl = 4615, searchId = 0}, searchInit = {client_hdl = 4615,
rootName = {size = 0, buf = 0x0}, scope = 35, searchOptions = 94085636751276,
searchParam = {present = 0, choice = {oneAttrParam = {attrName = {size = 0, buf
= 0x0}, attrValueType = 0, attrValue = {val = {saint32 = 0, sauint32 = 0,
saint64 = 0, sauint64 = 0, satime = 0, safloat = 0, sadouble = 0, x = {size =
0, buf = 0x0}}}}}}, attributeNames = 0x0, ccbId = 0}, rtAttUpdRpl = {sr =
{client_hdl = 4615, requestNodeId = 0, remoteNodeId = 0, searchId = 0,
objectName = {size = 35, buf = 0x559204f4ffac ""}, attributeNames = 0x0},
result = 0}, searchRemote = {client_hdl = 4615, requestNodeId = 0, remoteNodeId
= 0, searchId = 0, objectName = {size = 35, buf = 0x559204f4ffac ""},
attributeNames = 0x0}, rspSrchRmte = {result = 4615, requestNodeId = 0,
remoteNodeId = 0, searchId = 0, runtimeAttrs = {objectName = {size = 0, buf =
0x23 <error: Cannot access memory at address 0x23>}, attrValuesList =
0x559204f4ffac}}, ctrl = {nodeId = 4615, rulingEpoch = 0, fevsMsgStart = 0,
ndExecPid = 0, canBeCoord = IMMSV_NOT_COORD, isCoord = 35 '#', syncStarted = 0
'\000', nodeEpoch = 0, pbeEnabled = 172 '\254', dir = {size = 0, buf = 0x0},
xmlFile = {size = 0, buf = 0x0}, pbeFile = {size = 0, buf = 0x0},
ex_immd_node_id = 0}, adminitGlobal = {globalOwnerId = 4615, i =
{adminOwnerName = {_opaque = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 35, 0, 0, 0, 65452,
1268, 21906, 0 <repeats 112 times>}}, releaseOwnershipOnFinalize = false}},
ccbinitGlobal = {globalCcbId = 4615, i = {adminOwnerId = 0, ccbFlags = 0,
client_hdl = 35}}, mds_info = {change = 4615, dest = 0, svc_id = 0, node_id =
0, role = 35}, syncFevsBase = 4615, impl_delete = {size = 4615, implNameList =
0x0}}}, immd = {type = 0, info = {ctrl_msg = {ndExecPid = 82, epoch = 0,
refresh = 7 '\a', pbeEnabled = 18 '\022', dir = {size = 0, buf = 0x0}, xmlFile
= {size = 35, buf = 0x559204f4ffac ""}, pbeFile = {size = 0, buf = 0x0},
fevs_count = 0, admo_id_count = 0, ccb_id_count = 0, impl_count = 0,
ex_immd_node_id = 0}, admown_init = {client_hdl = 82, i = {adminOwnerName =
{_opaque = {4615, 0 <repeats 11 times>, 35, 0, 0, 0, 65452, 1268, 21906, 0
<repeats 110 times>}}, releaseOwnershipOnFinalize = false}}, ccb_init =
{adminOwnerId = 82, ccbFlags = 4615, client_hdl = 0}, impl_set = {r =
{client_hdl = 82, impl_name = {size = 4615, buf = 0x0}, impl_id = 0, scope = 0,
oi_timeout = 35}, reply_dest = 94085636751276}, objModify = {ccbId = 82,
adminOwnerId = 0, objectName = {size = 4615, buf = 0x0}, attrMods = 0x0,
immHandle = 35}, ccbId = 82, admoId = 82, fevsReq = {sender_count = 82,
reply_dest = 4615, client_hdl = 0, msg = {size = 0, buf = 0x23 <error: Cannot
access memory at address 0x23>}, isObjSync = 172 '\254', ex_immd_node_id =
21906}, tmr_info = {type = 82, info = {immnd_dest = 4615}}, mds_info = {change
= 82, dest = 4615, svc_id = 0, node_id = 0, role = 0}, rda_info = {io_role =
82}, syncFevsBase = {fevsBase = 82, client_hdl = 4615}, pbe2 = {epoch = 82,
maxCcbId = 0, maxCommitTime = 4615, maxWeakCcbId = 0, maxWeakCommitTime = 0},
impl_delete = {size = 82, implNameList = 0x1207}}}}, sinfo = {to_svc = 0, dest
= 0, node_id = 0, stype = MDS_SENDTYPE_SND, ctxt = {length = 0 '\000', data =
'\000' <repeats 11 times>}, mSynReqCount = 0 '\000', pid = 0, uid = 0, gid = 0}}
mbcp_msg = {type = IMMD_A2S_MSG_BASE, info = {fevsReq = {sender_count =
4615, reply_dest = 0, client_hdl = 0, msg = {size = 35, buf = 0x559204f4ffac
""}, isObjSync = 0 '\000', ex_immd_node_id = 0}, count = 4615, ctrl = {nodeId =
4615, rulingEpoch = 0, fevsMsgStart = 0, ndExecPid = 0, canBeCoord =
IMMSV_NOT_COORD, isCoord = 35 '#', syncStarted = 0 '\000', nodeEpoch = 0,
pbeEnabled = 172 '\254', dir = {size = 0, buf = 0x0}, xmlFile = {size = 0, buf
= 0x0}, pbeFile = {size = 0, buf = 0x0}, ex_immd_node_id = 0}}}
proc_rc = 1
fevs_req = 0x7ffc34ed3a48
isResend = 0 '\000'
__FUNCTION__ = "immd_evt_proc_fevs_req"
~~~
---
Sent from sourceforge.net because [email protected] is
subscribed to https://sourceforge.net/p/opensaf/tickets/
To unsubscribe from further messages, a project admin can change settings at
https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a
mailing list, you can unsubscribe from the mailing list._______________________________________________
Opensaf-tickets mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
