Public bug reported: An application we develop crashes on exit with: *** Error in `foo': free(): invalid pointer: 0x0000000009309bc0 ***
This issue occurs when there are a large number of threads running which use thread local storage. We have identified the issue as an existing upstream glibc bug, #13862. This bug was fixed in glibc-2.21. See https://sourceware.org/bugzilla/show_bug.cgi?id=13862. The upstream bug report has a reproducer which reliably reproduces the problem. I have reported this bug to Debian (#854007), and provided a backported patch for the glibc-2.19 package included in Debian-8 (0001-Resize-DTV- if-the-current-DTV-isn-t-big-enough.patch). I have not tested whether this patch resolves this issue in eglibc-2.19 in Ubuntu 14.04, however the reproducer in the original glibc bug report does reliably reproduce the problem on Ubuntu 14.04.5 with the latest glibc6 package installed. The Debian bug report can be found at https://bugs.debian.org/cgi- bin/bugreport.cgi?bug=854007 ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: libc6 2.19-0ubuntu6.11 ProcVersionSignature: Ubuntu 3.13.0-119.166-generic 3.13.11-ckt39 Uname: Linux 3.13.0-119-generic x86_64 NonfreeKernelModules: nvidia ApportVersion: 2.14.1-0ubuntu3.24 Architecture: amd64 Date: Thu Jun 1 15:43:48 2017 Dependencies: gcc-5-base 5.3.0-3ubuntu1~14.04 [origin: unknown] libc6 2.19-0ubuntu6.11 libgcc1 1:5.3.0-3ubuntu1~14.04 [origin: unknown] multiarch-support 2.19-0ubuntu6.11 InstallationDate: Installed on 2015-04-09 (784 days ago) InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Release amd64 (20140417) SourcePackage: eglibc UpgradeStatus: No upgrade log present (probably fresh install) ** Affects: eglibc (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-bug third-party-packages trusty -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to eglibc in Ubuntu. https://bugs.launchpad.net/bugs/1695080 Title: crash during thread exit when using thread local storage Status in eglibc package in Ubuntu: New Bug description: An application we develop crashes on exit with: *** Error in `foo': free(): invalid pointer: 0x0000000009309bc0 *** This issue occurs when there are a large number of threads running which use thread local storage. We have identified the issue as an existing upstream glibc bug, #13862. This bug was fixed in glibc-2.21. See https://sourceware.org/bugzilla/show_bug.cgi?id=13862. The upstream bug report has a reproducer which reliably reproduces the problem. I have reported this bug to Debian (#854007), and provided a backported patch for the glibc-2.19 package included in Debian-8 (0001 -Resize-DTV-if-the-current-DTV-isn-t-big-enough.patch). I have not tested whether this patch resolves this issue in eglibc-2.19 in Ubuntu 14.04, however the reproducer in the original glibc bug report does reliably reproduce the problem on Ubuntu 14.04.5 with the latest glibc6 package installed. The Debian bug report can be found at https://bugs.debian.org/cgi- bin/bugreport.cgi?bug=854007 ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: libc6 2.19-0ubuntu6.11 ProcVersionSignature: Ubuntu 3.13.0-119.166-generic 3.13.11-ckt39 Uname: Linux 3.13.0-119-generic x86_64 NonfreeKernelModules: nvidia ApportVersion: 2.14.1-0ubuntu3.24 Architecture: amd64 Date: Thu Jun 1 15:43:48 2017 Dependencies: gcc-5-base 5.3.0-3ubuntu1~14.04 [origin: unknown] libc6 2.19-0ubuntu6.11 libgcc1 1:5.3.0-3ubuntu1~14.04 [origin: unknown] multiarch-support 2.19-0ubuntu6.11 InstallationDate: Installed on 2015-04-09 (784 days ago) InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Release amd64 (20140417) SourcePackage: eglibc UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1695080/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
