Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-1866

Crash: impala::FreePool::Free (Address out of bounds)

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Duplicate
    • Affects Version/s: Impala 2.2
    • Fix Version/s: Impala 2.2
    • Component/s: None
    • Labels:
      None

      Description

      There were 10 randomly chosen TPCH queries executing concurrently on the 10 node CDH5 cluster on tpch300gb_parquet DB. mem_limit was not set.

      Stack Trace:

      #0  0x00000038a10328e5 in raise () from /lib64/libc.so.6
      #0  0x00000038a10328e5 in raise () from /lib64/libc.so.6
      #1  0x00000038a10340c5 in abort () from /lib64/libc.so.6
      #2  0x00007f955c8c5155 in os::abort(bool) () from /usr/java/jdk1.7.0_45-cloudera/jre/lib/amd64/server/libjvm.so
      #3  0x00007f955ca44087 in VMError::report_and_die() () from /usr/java/jdk1.7.0_45-cloudera/jre/lib/amd64/server/libjvm.so
      #4  0x00007f955c8c9adf in JVM_handle_linux_signal () from /usr/java/jdk1.7.0_45-cloudera/jre/lib/amd64/server/libjvm.so
      #5  <signal handler called>
      #6  0x0000000001f6a4d6 in impala::FreePool::Free (this=0xa622240, ptr=0xfdd777fd2498d900 <Address 0xfdd777fd2498d900 out of bounds>) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/runtime/free-pool.h:90
      #7  0x0000000001f690b9 in impala_udf::FunctionContext::Free (this=0xea4d920, buffer=0xfdd777fd2498d900 <Address 0xfdd777fd2498d900 out of bounds>) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/udf/udf.cc:307
      #8  0x00000000011d1c60 in impala::AggregateFunctions::StringValSerializeOrFinalize (ctx=0xea4d920, src=...) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/exprs/aggregate-functions.cc:85
      #9  0x0000000001595249 in impala::AggFnEvaluator::SerializeOrFinalize (this=0x121d45a0, agg_fn_ctx=0xea4d920, src=0x17b33b800, dst_slot_desc=0xcb4be230, dst=0x17b33b800, fn=0x11d1bfa) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/exprs/agg-fn-evaluator.cc:486
      #10 0x000000000152c6c2 in impala::AggFnEvaluator::Serialize (this=0x121d45a0, agg_fn_ctx=0xea4d920, tuple=0x17b33b800) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/exprs/agg-fn-evaluator.h:250
      #11 0x000000000152c81e in impala::AggFnEvaluator::Serialize (evaluators=std::vector of length 1, capacity 1 = {...}, fn_ctxs=std::vector of length 1, capacity 1 = {...}, dst=0x17b33b800) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/exprs/agg-fn-evaluator.h:286
      #12 0x00000000015257ad in impala::PartitionedAggregationNode::FinalizeTuple (this=0xa5a7d200, agg_fn_ctxs=std::vector of length 1, capacity 1 = {...}, tuple=0x17b33b800, pool=0x11ccf270) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/exec/partitioned-aggregation-node.cc:677
      #13 0x0000000001522f9d in impala::PartitionedAggregationNode::CleanupHashTbl (this=0xa5a7d200, ctxs=std::vector of length 1, capacity 1 = {...}, it=...) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/exec/partitioned-aggregation-node.cc:355
      #14 0x0000000001524b98 in impala::PartitionedAggregationNode::Partition::Close (this=0xf2b0e10, finalize_rows=true) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/exec/partitioned-aggregation-node.cc:556
      #15 0x000000000152322a in impala::PartitionedAggregationNode::Close (this=0xa5a7d200, state=0x6a637100) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/exec/partitioned-aggregation-node.cc:378
      #16 0x000000000143ed75 in impala::PlanFragmentExecutor::Close (this=0x43839810) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/runtime/plan-fragment-executor.cc:570
      #17 0x00000000010966f6 in impala::FragmentMgr::FragmentExecState::Exec (this=0x43839600) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/service/fragment-exec-state.cc:50
      #18 0x000000000108db1c in impala::FragmentMgr::FragmentExecThread (this=0xa0d88a0, exec_state=0x43839600) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/service/fragment-mgr.cc:70
      #19 0x00000000010920f0 in boost::_mfi::mf1<void, impala::FragmentMgr, impala::FragmentMgr::FragmentExecState*>::operator() (this=0x193cdcc0, p=0xa0d88a0, a1=0x43839600) at /opt/toolchain/boost-pic-1.55.0/include/boost/bind/mem_fn_template.hpp:165
      #20 0x0000000001091ea9 in boost::_bi::list2<boost::_bi::value<impala::FragmentMgr*>, boost::_bi::value<impala::FragmentMgr::FragmentExecState*> >::operator()<boost::_mfi::mf1<void, impala::FragmentMgr, impala::FragmentMgr::FragmentExecState*>, boost::_bi::list0> (this=0x193cdcd0, f=..., a=...) at /opt/toolchain/boost-pic-1.55.0/include/boost/bind/bind.hpp:313
      #21 0x0000000001091791 in boost::_bi::bind_t<void, boost::_mfi::mf1<void, impala::FragmentMgr, impala::FragmentMgr::FragmentExecState*>, boost::_bi::list2<boost::_bi::value<impala::FragmentMgr*>, boost::_bi::value<impala::FragmentMgr::FragmentExecState*> > >::operator() (this=0x193cdcc0) at /opt/toolchain/boost-pic-1.55.0/include/boost/bind/bind_template.hpp:20
      #22 0x00000000010910df in boost::detail::function::void_function_obj_invoker0<boost::_bi::bind_t<void, boost::_mfi::mf1<void, impala::FragmentMgr, impala::FragmentMgr::FragmentExecState*>, boost::_bi::list2<boost::_bi::value<impala::FragmentMgr*>, boost::_bi::value<impala::FragmentMgr::FragmentExecState*> > >, void>::invoke (function_obj_ptr=...) at /opt/toolchain/boost-pic-1.55.0/include/boost/function/function_template.hpp:153
      #23 0x0000000000f21725 in boost::function0<void>::operator() (this=0x7f941feefcc0) at /opt/toolchain/boost-pic-1.55.0/include/boost/function/function_template.hpp:767
      #24 0x000000000117a090 in impala::Thread::SuperviseThread (name="exec-plan-fragment", category="impala-server", functor=..., thread_started=0x7f8a56ef2b90) at /usr/src/debug/impala-2.2.0-cdh5.5.0-SNAPSHOT/be/src/util/thread.cc:311
      #25 0x000000000118322c in boost::_bi::list4<boost::_bi::value<std::basic_string<char, std::char_traits<char>, std::allocator<char> > >, boost::_bi::value<std::basic_string<char, std::char_traits<char>, std::allocator<char> > >, boost::_bi::value<boost::function<void()> >, boost::_bi::value<impala::Promise<long int>*> >::operator()<void (*)(const std::string&, const std::string&, impala::Thread::ThreadFunctor, impala::Promise<long int>*), boost::_bi::list0>(boost::_bi::type<void>, void (*&)(const std::string &, const std::string &, impala::Thread::ThreadFunctor, impala::Promise<long> *), boost::_bi::list0 &, int) (this=0x1904a5c0, f=@0x1904a5b8, a=...) at /opt/toolchain/boost-pic-1.55.0/include/boost/bind/bind.hpp:457
      #26 0x0000000001183173 in boost::_bi::bind_t<void, void (*)(const std::string&, const std::string&, impala::Thread::ThreadFunctor, impala::Promise<long int>*), boost::_bi::list4<boost::_bi::value<std::basic_string<char, std::char_traits<char>, std::allocator<char> > >, boost::_bi::value<std::basic_string<char, std::char_traits<char>, std::allocator<char> > >, boost::_bi::value<boost::function<void()> >, boost::_bi::value<impala::Promise<long int>*> > >::operator()(void) (this=0x1904a5b8) at /opt/toolchain/boost-pic-1.55.0/include/boost/bind/bind_template.hpp:20
      #27 0x0000000001183132 in boost::detail::thread_data<boost::_bi::bind_t<void, void (*)(const std::string&, const std::string&, impala::Thread::ThreadFunctor, impala::Promise<long int>*), boost::_bi::list4<boost::_bi::value<std::basic_string<char, std::char_traits<char>, std::allocator<char> > >, boost::_bi::value<std::basic_string<char, std::char_traits<char>, std::allocator<char> > >, boost::_bi::value<boost::function<void()> >, boost::_bi::value<impala::Promise<long int>*> > > >::run(void) (this=0x1904a400) at /opt/toolchain/boost-pic-1.55.0/include/boost/thread/detail/thread.hpp:117
      #28 0x00000000015e3793 in thread_proxy ()
      #29 0x00000038a1407851 in start_thread () from /lib64/libpthread.so.0
      #30 0x00000038a10e894d in clone () from /lib64/libc.so.6
      

      Additional information is located on e1220.halxg.cloudera.com in /data/4/IMPALA-1866 directory.

        Attachments

          Activity

            People

            • Assignee:
              mjacobs Matthew Jacobs
              Reporter:
              tarasbob Taras Bobrovytsky
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: