[
https://issues.apache.org/jira/browse/TS-833?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13050947#comment-13050947
]
Zhao Yongming commented on TS-833:
----------------------------------
we have got another rare Seg Fault, not sure if it is this bug related, here is
the stack trace:
traffic.out:
{code}
NOTE: Traffic Server received Sig 11: Segmentation fault
/usr/bin/traffic_server - STACK TRACE:
/usr/bin/traffic_server[0x51ba3e]
/lib64/libpthread.so.0[0x30ec20e7c0]
[0x122802e65b371fd0]
/usr/bin/traffic_server(DNSEntry::mainEvent(int, Event*)+0x595)[0x643b65]
/usr/bin/traffic_server(Continuation::handleEvent(int, void*)+0x6f)[0x4d302f]
/usr/bin/traffic_server(DNSProcessor::getby(char const*, int, int,
Continuation*, DNSHandler*, int)+0x250)[0x641472]
/usr/bin/traffic_server(DNSProcessor::gethostbyname(Continuation*, char const*,
DNSHandler*, int)+0x47)[0x6378c7]
/usr/bin/traffic_server(HostDBContinuation::do_dns()+0x2b9)[0x630125]
/usr/bin/traffic_server(HostDBContinuation::probeEvent(int,
Event*)+0x341)[0x6313b3]
/usr/bin/traffic_server(Continuation::handleEvent(int, void*)+0x6f)[0x4d302f]
/usr/bin/traffic_server(EThread::process_event(Event*, int)+0x11e)[0x6f9978]
/usr/bin/traffic_server(EThread::execute()+0x1e4)[0x6f9cba]
/usr/bin/traffic_server[0x6f92c9]
/lib64/libpthread.so.0[0x30ec2064a7]
/lib64/libc.so.6(clone+0x6d)[0x30eb6d3c2d]
/lib64/libc.so.6(clone+0x6d)[0x30eb6d3c2d]
[Jun 17 16:22:52.570] Manager {47840561255424} FATAL:
[LocalManager::pollMgmtProcessServer] Error in read (errno: 104)
{code}
gdb:
{code}
(gdb) bt
#0 0x00000000006424b0 in write_dns_event (h=0x1e3c1fb0, e=0x2aaab006a690) at
DNS.cc:898
#1 0x00000000006427b6 in write_dns (h=0x1e3c1fb0) at DNS.cc:804
#2 0x0000000000643b65 in DNSEntry::mainEvent (this=0x2aaab006ba50, event=1,
e=0x0) at DNS.cc:965
#3 0x00000000004d302f in Continuation::handleEvent (this=0x2aaab006ba50,
event=1, data=0x0) at I_Continuation.h:146
#4 0x0000000000641472 in DNSProcessor::getby (this=0xac22e0, x=0x1e3dda14
"img04.taobaocdn.com", len=0, type=1, cont=0x1e3dd960, adnsH=0x0, timeout=0)
at DNS.cc:999
#5 0x00000000006378c7 in DNSProcessor::gethostbyname (this=0xac22e0,
cont=0x1e3dd960, name=0x1e3dda14 "img04.taobaocdn.com", adnsH=0x0, timeout=0)
at I_DNSProcessor.h:123
#6 0x0000000000630125 in HostDBContinuation::do_dns (this=0x1e3dd960) at
HostDB.cc:1771
#7 0x00000000006313b3 in HostDBContinuation::probeEvent (this=0x1e3dd960,
event=2, e=0x215c9980) at HostDB.cc:1696
#8 0x00000000004d302f in Continuation::handleEvent (this=0x1e3dd960, event=2,
data=0x215c9980) at I_Continuation.h:146
#9 0x00000000006f9978 in EThread::process_event (this=0x2aaaaaf2a010,
e=0x215c9980, calling_code=2) at UnixEThread.cc:140
#10 0x00000000006f9cba in EThread::execute (this=0x2aaaaaf2a010) at
UnixEThread.cc:217
#11 0x00000000006f92c9 in spawn_thread_internal (a=0x1e393b40) at Thread.cc:88
#12 0x00000030ec2064a7 in start_thread () from /lib64/libpthread.so.0
#13 0x00000030eb6d3c2d in clone () from /lib64/libc.so.6
(gdb) info f
Stack level 0, frame at 0x40ee0a70:
rip = 0x6424b0 in write_dns_event (DNS.cc:898); saved rip 0x6427b6
called by frame at 0x40ee0ac0
source language c++.
Arglist at 0x40ee0a60, args: h=0x1e3c1fb0, e=0x2aaab006a690
Locals at 0x40ee0a60, Previous frame's sp is 0x40ee0a70
Saved registers:
rbx at 0x40ee0a48, rbp at 0x40ee0a60, r12 at 0x40ee0a50, r13 at 0x40ee0a58,
rip at 0x40ee0a68
{code}
> Crash Report: Continuation::handleEvent, event=2, 0xdeadbeef,
> ink_freelist_free related
> ---------------------------------------------------------------------------------------
>
> Key: TS-833
> URL: https://issues.apache.org/jira/browse/TS-833
> Project: Traffic Server
> Issue Type: Bug
> Components: Core
> Affects Versions: 3.1.0
> Environment: current trunk, with --enable-debug
> Reporter: Zhao Yongming
> Labels: freelist
> Attachments: TS-833-2.diff, TS-833-3.diff, TS-833.diff
>
>
> bt #1
> {code}
> #0 0x00000000004d2c5c in Continuation::handleEvent (this=0x19581df0,
> event=2, data=0x197c4fc0) at I_Continuation.h:146
> 146 return (this->*handler) (event, data);
> (gdb) bt
> #0 0x00000000004d2c5c in Continuation::handleEvent (this=0x19581df0,
> event=2, data=0x197c4fc0) at I_Continuation.h:146
> #1 0x00000000006f5830 in EThread::process_event (this=0x2aaaaae29010,
> e=0x197c4fc0, calling_code=2) at UnixEThread.cc:140
> #2 0x00000000006f5b72 in EThread::execute (this=0x2aaaaae29010) at
> UnixEThread.cc:217
> #3 0x00000000004ff37d in main (argc=3, argv=0x7fff76c41528) at Main.cc:1958
> (gdb) info f
> Stack level 0, frame at 0x7fff76c40e40:
> rip = 0x4d2c5c in Continuation::handleEvent(int, void*)
> (I_Continuation.h:146); saved rip 0x6f5830
> called by frame at 0x7fff76c40eb0
> source language c++.
> Arglist at 0x7fff76c40e30, args: this=0x19581df0, event=2, data=0x197c4fc0
> Locals at 0x7fff76c40e30, Previous frame's sp is 0x7fff76c40e40
> Saved registers:
> rbp at 0x7fff76c40e30, rip at 0x7fff76c40e38
> (gdb) x/40x this
> 0x19581df0: 0x19581901 0x00000000 0xefbeadde 0xefbeadde
> 0x19581e00: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde
> 0x19581e10: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde
> 0x19581e20: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde
> 0x19581e30: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde
> 0x19581e40: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde
> 0x19581e50: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde
> 0x19581e60: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde
> 0x19581e70: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde
> 0x19581e80: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde
> {code}
> bt #2
> {code}
> #0 0x00000000004d637c in Continuation::handleEvent (this=0xc3cc390, event=2,
> data=0xc4408a0) at I_Continuation.h:146
> 146 return (this->*handler) (event, data);
> (gdb) bt
> #0 0x00000000004d637c in Continuation::handleEvent (this=0xc3cc390, event=2,
> data=0xc4408a0) at I_Continuation.h:146
> #1 0x000000000070364c in EThread::process_event (this=0x2aaaaae29010,
> e=0xc4408a0, calling_code=2) at UnixEThread.cc:140
> #2 0x000000000070398e in EThread::execute (this=0x2aaaaae29010) at
> UnixEThread.cc:217
> #3 0x0000000000502aac in main (argc=3, argv=0x7fff32ef2f58) at Main.cc:1961
> (gdb) p *this
> $1 = {<force_VFPT_to_top> = {_vptr.force_VFPT_to_top = 0x2aaab002f011},
> handler = 0xefbeaddeefbeadde, this adjustment -1171307680053154338,
> handler_name = 0xefbeaddeefbeadde <Address 0xefbeaddeefbeadde out of
> bounds>, mutex = {m_ptr = 0xefbeaddeefbeadde}, link = {<SLink<Continuation>>
> = {
> next = 0xefbeaddeefbeadde}, prev = 0xefbeaddeefbeadde}}
> (gdb)
> {code}
> bt #3
> {code}
> #0 0x00000000004d2c5c in Continuation::handleEvent (this=0x2aaab00615b0,
> event=2, data=0x2aaab00d1570) at I_Continuation.h:146
> 146 return (this->*handler) (event, data);
> (gdb) bt
> #0 0x00000000004d2c5c in Continuation::handleEvent (this=0x2aaab00615b0,
> event=2, data=0x2aaab00d1570) at I_Continuation.h:146
> #1 0x00000000006f5830 in EThread::process_event (this=0x2aaaaae29010,
> e=0x2aaab00d1570, calling_code=2) at UnixEThread.cc:140
> #2 0x00000000006f5b72 in EThread::execute (this=0x2aaaaae29010) at
> UnixEThread.cc:217
> #3 0x00000000004ff37d in main (argc=3, argv=0x7fff421f08d8) at Main.cc:1958
> (gdb) info f
> Stack level 0, frame at 0x7fff421f01f0:
> rip = 0x4d2c5c in Continuation::handleEvent(int, void*)
> (I_Continuation.h:146); saved rip 0x6f5830
> called by frame at 0x7fff421f0260
> source language c++.
> Arglist at 0x7fff421f01e0, args: this=0x2aaab00615b0, event=2,
> data=0x2aaab00d1570
> Locals at 0x7fff421f01e0, Previous frame's sp is 0x7fff421f01f0
> Saved registers:
> rbp at 0x7fff421f01e0, rip at 0x7fff421f01e8
> (gdb) p this->handler
> $1 = 0xefbeaddeefbeadde, this adjustment -1171307680053154338
> {code}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
