[TS-4554] ASAN crash (stack overflow) with H2 priorities

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 7.0.0
• Fix Version/s: 6.2.1, 7.0.0
• Component/s: HTTP/2
• Labels: ASAN
• Assignee: Masaori Koshiba
• Reporter: Leif Hedstrom
• Created: 16/Jun/16 17:16
• Updated: 07/Nov/16 23:26
• Resolved: 09/Aug/16 09:28

Description

I'm seeing (truncated):

ASAN:SIGSEGV
=================================================================
==11178==ERROR: AddressSanitizer: stack-overflow on address 0x2aab63633ff0 (pc 0x0000007ddaa9 bp 0x2aab63634050 sp 0x2aab63633ff0 T6)
    #0 0x7ddaa8 in Http2DependencyTree<Http2Stream*>::_find(Http2DependencyTree<Http2Stream*>::Node*, unsigned int) /usr/local/src/trafficserver/proxy/http2/Http2DependencyTree.h:134
    #1 0x7ddaa8 in Http2DependencyTree<Http2Stream*>::_find(Http2DependencyTree<Http2Stream*>::Node*, unsigned int) /usr/local/src/trafficserver/proxy/http2/Http2DependencyTree.h:140
    #2 0x7ddaa8 in Http2DependencyTree<Http2Stream*>::_find(Http2DependencyTree<Http2Stream*>::Node*, unsigned int) /usr/local/src/trafficserver/proxy/http2/Http2DependencyTree.h:140
.
.
.
    #2261 0x7ddc34 in Http2DependencyTree<Http2Stream*>::_find(Http2DependencyTree<Http2Stream*>::Node*, unsigned int) /usr/local/src/trafficserver/proxy/http2/Http2DependencyTree.h:140
    #2262 0x7ddc34 in Http2DependencyTree<Http2Stream*>::_find(Http2DependencyTree<Http2Stream*>::Node*, unsigned int) /usr/local/src/trafficserver/proxy/http2/Http2DependencyTree.h:140
    #2263 0x7ddc34 in Http2DependencyTree<Http2Stream*>::_find(Http2DependencyTree<Http2Stream*>::Node*, unsigned int) /usr/local/src/trafficserver/proxy/http2/Http2DependencyTree.h:140

SUMMARY: AddressSanitizer: stack-overflow /usr/local/src/trafficserver/proxy/http2/Http2DependencyTree.h:134 Http2DependencyTree<Http2Stream*>::_find(Http2DependencyTree<Http2Stream*>::Node*, unsigned int)
Thread T6 ([ET_NET 5]) created by T0 ([ET_NET 0]) here:
    #0 0x2aab5b0d50c4 in __interceptor_pthread_create ../../../../libsanitizer/asan/asan_interceptors.cc:179
    #1 0xcfdb99 in ink_thread_create ../../lib/ts/ink_thread.h:147
    #2 0xcfdb99 in Thread::start(char const*, unsigned long, void* (*)(void*), void*) /usr/local/src/trafficserver/iocore/eventsystem/Thread.cc:99
    #3 0xd0562e in EventProcessor::start(int, unsigned long) /usr/local/src/trafficserver/iocore/eventsystem/UnixEventProcessor.cc:140
    #4 0x497b59 in main /usr/local/src/trafficserver/proxy/Main.cc:1746
    #5 0x2aab5ee11b14 in __libc_start_main (/lib64/libc.so.6+0x21b14)

==11178==ABORTING

Issue Links

• links to: GitHub Pull Request #830
• links to: GitHub Pull Request #1189