[TS-2061] "malloc(): memory corruption (fast)" in LogBuffer

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.3.5
• Component/s: Logging
• Assignee: Leif Hedstrom
• Reporter: Yunkai Zhang
• Created: 23/Jul/13 09:56
• Updated: 09/Aug/13 14:34
• Resolved: 23/Jul/13 21:19

Description

(gdb) bt
#0  0x0000003c466f4e6e in __lll_lock_wait_private () from /lib64/libc.so.6
#1  0x0000003c4667bae8 in _L_lock_9162 () from /lib64/libc.so.6
#2  0x0000003c46679482 in malloc () from /lib64/libc.so.6
#3  0x0000003c45e0cb7b in _dl_map_object_deps () from /lib64/ld-linux-x86-64.so.2
#4  0x0000003c45e12991 in dl_open_worker () from /lib64/ld-linux-x86-64.so.2
#5  0x0000003c45e0e106 in _dl_catch_error () from /lib64/ld-linux-x86-64.so.2
#6  0x0000003c45e123ea in _dl_open () from /lib64/ld-linux-x86-64.so.2
#7  0x0000003c46722f80 in do_dlopen () from /lib64/libc.so.6
#8  0x0000003c45e0e106 in _dl_catch_error () from /lib64/ld-linux-x86-64.so.2
#9  0x0000003c467230d7 in __libc_dlopen_mode () from /lib64/libc.so.6
#10 0x0000003c466fb675 in init () from /lib64/libc.so.6
#11 0x0000003c46a0cac3 in pthread_once () from /lib64/libpthread.so.0
#12 0x0000003c466fb774 in backtrace () from /lib64/libc.so.6
#13 0x00002ae6b8e48358 in ink_stack_trace_dump () from /usr/lib64/trafficserver/libtsutil.so.3
#14 0x00000000004f19e2 in ?? ()
#15 <signal handler called>
#16 0x0000003c46678568 in _int_malloc () from /lib64/libc.so.6
#17 0x0000003c4667948d in malloc () from /lib64/libc.so.6
#18 0x00000031a56bd0bd in operator new(unsigned long) () from /usr/lib64/libstdc++.so.6
#19 0x00000031a56bd1d9 in operator new[](unsigned long) () from /usr/lib64/libstdc++.so.6
#20 0x00000000005b5e40 in LogBuffer::LogBuffer(LogObject*, unsigned long, unsigned long, unsigned long) ()
#21 0x00000000005cdbd4 in LogObject::_checkout_write(unsigned long*, unsigned long) ()
#22 0x00000000005cf4a0 in LogObject::log(LogAccess*, char*) ()
#23 0x00000000005b69e6 in Log::access(LogAccess*) ()
#24 0x0000000000539900 in HttpSM::update_stats() ()
#25 0x0000000000542b78 in HttpSM::kill_this() ()
#26 0x0000000000542e98 in HttpSM::main_handler(int, void*) ()
#27 0x00000000005805fe in HttpTunnel::main_handler(int, void*) ()
#28 0x00000000006bbfb1 in ?? ()
#29 0x00000000006be037 in write_to_net_io(NetHandler*, UnixNetVConnection*, EThread*) ()
#30 0x00000000006b69a6 in NetHandler::mainNetEvent(int, Event*) ()
#31 0x00000000006df414 in EThread::process_event(Event*, int) ()
#32 0x00000000006dfdbb in EThread::execute() ()
#33 0x00000000004d6c9c in main ()

Issue Links

• relates to: TS-777 Increasing logbuffer size makes us "drop" log entries
• relates to: TS-2063 LogFile::write_ascii_logbuffer3() can silently drop log entries