[TS-4913] Crash with active timeout

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Duplicate
• Component/s: HTTP
• Assignee: Unassigned
• Reporter: Masaori Koshiba
• Created: 30/Sep/16 07:45
• Updated: 07/Oct/16 19:42
• Resolved: 07/Oct/16 19:42

Description

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffff0859700 (LWP 5234)]
0x00000000005c3c98 in ProxyClientTransaction::get_netvc (this=0x60ae0001c4e0) at http/../ProxyClientTransaction.h:43
43          return (parent) ? parent->get_netvc() : NULL;
Missing separate debuginfos, use: debuginfo-install glibc-2.17-106.el7_2.4.x86_64 libasan-4.8.3-9.el7.x86_64 libgcc-4.8.3-9.el7.x86_64 libstdc++-4.8.3-9.el7.x86_64 nss-softokn-freebl-3.16.2.3-14.2.el7_2.x86_64 pcre-8.32-15.el7_2.1.x86_64 tcl-8.5.13-4.el7.x86_64 xz-libs-5.1.2-9alpha.el7.x86_64 zlib-1.2.7-13.el7.x86_64
(gdb) bt
#0  0x00000000005c3c98 in ProxyClientTransaction::get_netvc (this=0x60ae0001c4e0) at http/../ProxyClientTransaction.h:43
#1  0x00000000006b7376 in HttpSM::update_stats (this=0x7fffe69c71e0) at HttpSM.cc:6967
#2  0x00000000006b5d6c in HttpSM::kill_this (this=0x7fffe69c71e0) at HttpSM.cc:6833
#3  0x000000000068f7d2 in HttpSM::main_handler (this=0x7fffe69c71e0, event=105, data=0x60aa00017e48) at HttpSM.cc:2671
#4  0x0000000000535fac in Continuation::handleEvent (this=0x7fffe69c71e0, event=105, data=0x60aa00017e48) at ../iocore/eventsystem/I_Continuation.h:153
#5  0x0000000000a1dc60 in read_signal_and_update (event=105, vc=0x60aa00017d20) at UnixNetVConnection.cc:143
#6  0x0000000000a25c8b in UnixNetVConnection::mainEvent (this=0x60aa00017d20, event=1, e=0x7ffff08588f0) at UnixNetVConnection.cc:1241
#7  0x0000000000535fac in Continuation::handleEvent (this=0x60aa00017d20, event=1, data=0x7ffff08588f0) at ../iocore/eventsystem/I_Continuation.h:153
#8  0x0000000000a0df73 in NetHandler::_close_vc (this=0x7ffff16874e0, vc=0x60aa00017d20, now=1475220689249441376, handle_event=@0x7ffff0858a50: 0,
    closed=@0x7ffff0858a10: 0, total_idle_time=@0x7ffff0858a90: 1, total_idle_count=@0x7ffff0858ad0: 1) at UnixNet.cc:668
#9  0x0000000000a0ccd2 in NetHandler::manage_active_queue (this=0x7ffff16874e0, ignore_queue_size=true) at UnixNet.cc:577
#10 0x0000000000a0f53c in InactivityCop::check_inactivity (this=0x600c0001d2a0, event=2, e=0x608e00006ca0) at UnixNet.cc:93
#11 0x0000000000535fac in Continuation::handleEvent (this=0x600c0001d2a0, event=2, data=0x608e00006ca0) at ../iocore/eventsystem/I_Continuation.h:153
#12 0x0000000000a69c85 in EThread::process_event (this=0x7ffff1683800, e=0x608e00006ca0, calling_code=2) at UnixEThread.cc:143
#13 0x0000000000a6a4d5 in EThread::execute (this=0x7ffff1683800) at UnixEThread.cc:225
#14 0x0000000000a685d0 in spawn_thread_internal (a=0x600800015950) at Thread.cc:84
#15 0x00007ffff4e64ac8 in ?? () from /lib64/libasan.so.0
#16 0x00007ffff349ddc5 in start_thread () from /lib64/libpthread.so.0
#17 0x00007ffff27a828d in clone () from /lib64/libc.so.6
(gdb) p parent
$1 = (ProxyClientSession *) 0x60ae0001c200
(gdb) p parent->get_netvc()
Cannot access memory at address 0x88

Conditions

• TS with debug and ASan
• records.config

  CONFIG proxy.config.http.transaction_active_timeout_in INT 1
  

• Using httpbin as origin server and remap to it
• access to 'http://localhost:8080/httpbin/delay/2' via curl

Issue Links

• is duplicated by: TS-4905 Crash when slow logging is enabled.