Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Won't Fix
-
6.0.0
-
None
-
None
Description
Using gcc 5.2 on docs.trafficserver, I get this ASan failure fairly frequently.
==15673==ERROR: AddressSanitizer: attempting free on address which was not malloc()-ed: 0x000000fa46a8 in thread T7 ([ET_NET 6])
#0 0x2b19029b731a in operator delete(void*) ../../../../libsanitizer/asan/asan_new_delete.cc:92
#1 0x2b1903c67142 in __gnu_cxx::new_allocator<char>::deallocate(char*, unsigned long) /usr/local/src/gcc-5.2.0/centos7/x86_64-unknown-linux-gnu/libstdc++-v3/include/ext/new_allocator.h:110
#2 0x2b1903c67142 in std::allocator_traits<std::allocator<char> >::deallocate(std::allocator<char>&, char*, unsigned long) /usr/local/src/gcc-5.2.0/centos7/x86_64-unknown-linux-gnu/libstdc++-v3/include/bits/alloc_traits.h:386
#3 0x2b1903c67142 in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_destroy(unsigned long) /usr/local/src/gcc-5.2.0/centos7/x86_64-unknown-linux-gnu/libstdc++-v3/include/bits/basic_string.h:185
#4 0x2b1903c67142 in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_dispose() /usr/local/src/gcc-5.2.0/centos7/x86_64-unknown-linux-gnu/libstdc++-v3/include/bits/basic_string.h:180
#5 0x2b1903c67142 in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_assign(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) /usr/local/src/gcc-5.2.0/centos7/x86_64-unknown-linux-gnu/libstdc++-v3/include/bits/basic_string.tcc:270
#6 0x2b1903c67408 in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::assign(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) /usr/local/src/gcc-5.2.0/centos7/x86_64-unknown-linux-gnu/libstdc++-v3/include/bits/basic_string.h:1094
#7 0x2b1903c67408 in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::operator=(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) /usr/local/src/gcc-5.2.0/centos7/x86_64-unknown-linux-gnu/libstdc++-v3/include/bits/basic_string.h:552
#8 0x71cf6c in spdy_process_syn_stream_frame /usr/local/src/trafficserver/proxy/spdy/SpdyCallbacks.cc:282
#9 0x71d4ee in spdy_on_ctrl_recv_callback(spdylay_session*, spdylay_frame_type, spdylay_frame*, void*) /usr/local/src/trafficserver/proxy/spdy/SpdyCallbacks.cc:317
#10 0x2b190464003f in spdylay_session_call_on_ctrl_frame_received /admin/src/spdylay/lib/spdylay_session.c:1634
#11 0x2b190464003f in spdylay_session_on_syn_stream_received /admin/src/spdylay/lib/spdylay_session.c:1782
#12 0x2b1904642567 in spdylay_session_process_ctrl_frame /admin/src/spdylay/lib/spdylay_session.c:2246
#13 0x2b1904642567 in spdylay_session_mem_recv /admin/src/spdylay/lib/spdylay_session.c:2868
#14 0x2b19046428d4 in spdylay_session_recv /admin/src/spdylay/lib/spdylay_session.c:2891
#15 0x7143c4 in spdy_process_read /usr/local/src/trafficserver/proxy/spdy/SpdyClientSession.cc:302
#16 0x713f05 in SpdyClientSession::state_session_readwrite(int, void*) /usr/local/src/trafficserver/proxy/spdy/SpdyClientSession.cc:249
#17 0x53396e in Continuation::handleEvent(int, void*) /usr/local/src/trafficserver/iocore/eventsystem/I_Continuation.h:146
#18 0x9b235f in read_signal_and_update /usr/local/src/trafficserver/iocore/net/UnixNetVConnection.cc:150
#19 0x9b8f69 in UnixNetVConnection::readSignalAndUpdate(int) /usr/local/src/trafficserver/iocore/net/UnixNetVConnection.cc:1026
#20 0x97c63d in SSLNetVConnection::net_read_io(NetHandler*, EThread*) /usr/local/src/trafficserver/iocore/net/SSLNetVConnection.cc:611
#21 0x99ff32 in NetHandler::mainNetEvent(int, Event*) /usr/local/src/trafficserver/iocore/net/UnixNet.cc:516
#22 0x53396e in Continuation::handleEvent(int, void*) /usr/local/src/trafficserver/iocore/eventsystem/I_Continuation.h:146
#23 0x9fed26 in EThread::process_event(Event*, int) /usr/local/src/trafficserver/iocore/eventsystem/UnixEThread.cc:128
#24 0x9ffb5f in EThread::execute() /usr/local/src/trafficserver/iocore/eventsystem/UnixEThread.cc:252
#25 0x9fd4dc in spawn_thread_internal /usr/local/src/trafficserver/iocore/eventsystem/Thread.cc:86
#26 0x2b190597ddf4 in start_thread (/lib64/libpthread.so.0+0x7df4)
#27 0x2b190670e1ac in __clone (/lib64/libc.so.6+0xf61ac)
AddressSanitizer can not describe address in more detail (wild memory access suspected).
SUMMARY: AddressSanitizer: bad-free ../../../../libsanitizer/asan/asan_new_delete.cc:92 operator delete(void*)
Thread T7 ([ET_NET 6]) created by T0 ([ET_NET 0]) here:
#0 0x2b19029580c4 in __interceptor_pthread_create ../../../../libsanitizer/asan/asan_interceptors.cc:179
#1 0x9fcfaf in ink_thread_create ../../lib/ts/ink_thread.h:150
#2 0x9fd5fa in Thread::start(char const*, unsigned long, void* (*)(void*), void*) /usr/local/src/trafficserver/iocore/eventsystem/Thread.cc:101
#3 0xa02c39 in EventProcessor::start(int, unsigned long) /usr/local/src/trafficserver/iocore/eventsystem/UnixEventProcessor.cc:140
#4 0x595e2d in main /usr/local/src/trafficserver/proxy/Main.cc:1628
#5 0x2b1906639af4 in __libc_start_main (/lib64/libc.so.6+0x21af4)
==15673==ABORTING