[TS-4541] SEGV in send_a_data_frame with HTTP/2 (possibly ASAN mutex)

• Type: Bug
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Affects Version/s: 7.0.0
• Fix Version/s: 7.1.0
• Component/s: HTTP/2
• Labels: A ASAN crash
• Backport to Version: 6.2.1
• Assignee: Bryan Call
• Reporter: Bryan Call
• Created: 14/Jun/16 16:28
• Updated: 15/Sep/16 22:08

Description

==26628==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000038 (pc 0x0000009ad1b9 sp 0x2b7e55d79740 bp 0x2b7e55d7d8f0 T15)
    #0 0x9ad1b8 in Mutex_lock ../../../trafficserver/iocore/eventsystem/I_Lock.h:381
    #1 0x9ad1b8 in MutexLock ../../../trafficserver/iocore/eventsystem/I_Lock.h:449
    #2 0x9ad1b8 in Http2ConnectionState::send_a_data_frame(Http2Stream*, unsigned long&) ../../../trafficserver/proxy/http2/Http2ConnectionState.cc:1040
    #3 0x9af71d in Http2ConnectionState::send_data_frames_depends_on_priority() ../../../trafficserver/proxy/http2/Http2ConnectionState.cc:1000
    #4 0x9b1ff9 in Http2ConnectionState::main_event_handler(int, void*) ../../../trafficserver/proxy/http2/Http2ConnectionState.cc:803
    #5 0xe9f5e3 in Continuation::handleEvent(int, void*) ../../../trafficserver/iocore/eventsystem/I_Continuation.h:153
    #6 0xe9f5e3 in EThread::process_event(Event*, int) ../../../trafficserver/iocore/eventsystem/UnixEThread.cc:148
    #7 0xea18c9 in EThread::execute() ../../../trafficserver/iocore/eventsystem/UnixEThread.cc:202
    #8 0xe9e128 in spawn_thread_internal ../../../trafficserver/iocore/eventsystem/Thread.cc:86
    #9 0x2b7e4d575aa0 in start_thread (/lib64/libpthread.so.0+0x3818807aa0)
    #10 0x38180e893c in clone (/lib64/libc.so.6+0x38180e893c)

Issue Links

• is duplicated by: TS-4618 Still in priority queue after closing the stream