Robert Nishihara created ARROW-2448: ---------------------------------------
Summary: Segfault when plasma client goes out of scope before buffer. Key: ARROW-2448 URL: https://issues.apache.org/jira/browse/ARROW-2448 Project: Apache Arrow Issue Type: Improvement Components: Plasma (C++), Python Reporter: Robert Nishihara The following causes a segfault. First start a plasma store with {code:java} plasma_store -s /tmp/store -m 10000000000{code} Then run the following in Python. {code} import pyarrow.plasma as plasma import numpy as np client = plasma.connect('/tmp/store', '', 0) object_id = client.put(np.zeros(3)) buf = client.get(object_id) del client del buf # This segfaults.{code} The backtrace is {code:java} (lldb) bt * thread #1, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0xfffffffffffffffc) * frame #0: 0x00000001056deaee libplasma.0.dylib`plasma::PlasmaClient::Release(plasma::UniqueID const&) + 142 frame #1: 0x00000001056de9e9 libplasma.0.dylib`plasma::PlasmaBuffer::~PlasmaBuffer() + 41 frame #2: 0x00000001056dec9f libplasma.0.dylib`arrow::Buffer::~Buffer() + 63 frame #3: 0x0000000106206661 lib.cpython-36m-darwin.so`std::__1::shared_ptr<arrow::Buffer>::~shared_ptr() [inlined] std::__1::__shared_count::__release_shared(this=0x00000001019b7d20) at memory:3444 frame #4: 0x0000000106206617 lib.cpython-36m-darwin.so`std::__1::shared_ptr<arrow::Buffer>::~shared_ptr() [inlined] std::__1::__shared_weak_count::__release_shared(this=0x00000001019b7d20) at memory:3486 frame #5: 0x0000000106206617 lib.cpython-36m-darwin.so`std::__1::shared_ptr<arrow::Buffer>::~shared_ptr(this=0x0000000100791780) at memory:4412 frame #6: 0x0000000106002b35 lib.cpython-36m-darwin.so`std::__1::shared_ptr<arrow::Buffer>::~shared_ptr(this=0x0000000100791780) at memory:4410 frame #7: 0x00000001061052c5 lib.cpython-36m-darwin.so`void __Pyx_call_destructor<std::__1::shared_ptr<arrow::Buffer> >(x=std::__1::shared_ptr<arrow::Buffer>::element_type @ 0x00000001019b7d38 strong=0 weak=1) at lib.cxx:486 frame #8: 0x0000000106104f93 lib.cpython-36m-darwin.so`__pyx_tp_dealloc_7pyarrow_3lib_Buffer(o=0x0000000100791768) at lib.cxx:107704 frame #9: 0x00000001069fcd54 multiarray.cpython-36m-darwin.so`array_dealloc + 292 frame #10: 0x00000001000e8daf libpython3.6m.dylib`_PyDict_DelItem_KnownHash + 463 frame #11: 0x0000000100171899 libpython3.6m.dylib`_PyEval_EvalFrameDefault + 13321 frame #12: 0x00000001001791ef libpython3.6m.dylib`_PyEval_EvalCodeWithName + 2447 frame #13: 0x000000010016e3d4 libpython3.6m.dylib`PyEval_EvalCode + 100 frame #14: 0x00000001001a3bd6 libpython3.6m.dylib`PyRun_InteractiveOneObject + 582 frame #15: 0x00000001001a350e libpython3.6m.dylib`PyRun_InteractiveLoopFlags + 222 frame #16: 0x00000001001a33fc libpython3.6m.dylib`PyRun_AnyFileExFlags + 60 frame #17: 0x00000001001bc835 libpython3.6m.dylib`Py_Main + 3829 frame #18: 0x0000000100000df8 python`main + 232 frame #19: 0x00007fff6cd80015 libdyld.dylib`start + 1 frame #20: 0x00007fff6cd80015 libdyld.dylib`start + 1{code} Basically, the issue is that when the buffer goes out of scope, it calls {{Release}} on the plasma client, but the client has already been deallocated. -- This message was sent by Atlassian JIRA (v7.6.3#76005)