[ https://issues.apache.org/jira/browse/TS-833?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13052302#comment-13052302 ]
mohan_zl commented on TS-833: ----------------------------- {code} #0 0x000000000063f9f5 in get_dns (h=0x18ea3070, id=27816) at DNS.cc:752 752 if (e->once_written_flag) (gdb) bt #0 0x000000000063f9f5 in get_dns (h=0x18ea3070, id=27816) at DNS.cc:752 #1 0x0000000000643e33 in dns_process (handler=0x18ea3070, buf=0x2aaab1292010, len=159) at DNS.cc:1170 #2 0x0000000000645cfc in DNSHandler::recv_dns (this=0x18ea3070, event=5, e=0x18e7df50) at DNS.cc:690 #3 0x000000000064655f in DNSHandler::mainEvent (this=0x18ea3070, event=5, e=0x18e7df50) at DNS.cc:703 #4 0x00000000004d302f in Continuation::handleEvent (this=0x18ea3070, event=5, data=0x18e7df50) at I_Continuation.h:146 #5 0x00000000006f9978 in EThread::process_event (this=0x2aaaaae29010, e=0x18e7df50, calling_code=5) at UnixEThread.cc:140 #6 0x00000000006f9e96 in EThread::execute (this=0x2aaaaae29010) at UnixEThread.cc:262 #7 0x00000000004ff74d in main (argc=3, argv=0x7fff21439ac8) at Main.cc:1958 (gdb) info f Stack level 0, frame at 0x7fff214382c0: rip = 0x63f9f5 in get_dns (DNS.cc:752); saved rip 0x643e33 called by frame at 0x7fff214390a0 source language c++. Arglist at 0x7fff214382b0, args: h=0x18ea3070, id=27816 Locals at 0x7fff214382b0, Previous frame's sp is 0x7fff214382c0 Saved registers: rbp at 0x7fff214382b0, rip at 0x7fff214382b8 (gdb) info args h = (DNSHandler *) 0x18ea3070 id = 27816 (gdb) p h $1 = (DNSHandler *) 0x18ea3070 (gdb) p h->handler_name $2 = 0x755f55 "&DNSHandler::mainEvent" {code} > Crash Report: Continuation::handleEvent, event=2, 0xdeadbeef, > ink_freelist_free related > --------------------------------------------------------------------------------------- > > Key: TS-833 > URL: https://issues.apache.org/jira/browse/TS-833 > Project: Traffic Server > Issue Type: Bug > Components: Core > Affects Versions: 3.1.0 > Environment: current trunk, with --enable-debug > Reporter: Zhao Yongming > Labels: freelist > Fix For: 3.1.0 > > Attachments: TS-833-2.diff, TS-833-3.diff, TS-833.diff > > > bt #1 > {code} > #0 0x00000000004d2c5c in Continuation::handleEvent (this=0x19581df0, > event=2, data=0x197c4fc0) at I_Continuation.h:146 > 146 return (this->*handler) (event, data); > (gdb) bt > #0 0x00000000004d2c5c in Continuation::handleEvent (this=0x19581df0, > event=2, data=0x197c4fc0) at I_Continuation.h:146 > #1 0x00000000006f5830 in EThread::process_event (this=0x2aaaaae29010, > e=0x197c4fc0, calling_code=2) at UnixEThread.cc:140 > #2 0x00000000006f5b72 in EThread::execute (this=0x2aaaaae29010) at > UnixEThread.cc:217 > #3 0x00000000004ff37d in main (argc=3, argv=0x7fff76c41528) at Main.cc:1958 > (gdb) info f > Stack level 0, frame at 0x7fff76c40e40: > rip = 0x4d2c5c in Continuation::handleEvent(int, void*) > (I_Continuation.h:146); saved rip 0x6f5830 > called by frame at 0x7fff76c40eb0 > source language c++. > Arglist at 0x7fff76c40e30, args: this=0x19581df0, event=2, data=0x197c4fc0 > Locals at 0x7fff76c40e30, Previous frame's sp is 0x7fff76c40e40 > Saved registers: > rbp at 0x7fff76c40e30, rip at 0x7fff76c40e38 > (gdb) x/40x this > 0x19581df0: 0x19581901 0x00000000 0xefbeadde 0xefbeadde > 0x19581e00: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde > 0x19581e10: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde > 0x19581e20: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde > 0x19581e30: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde > 0x19581e40: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde > 0x19581e50: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde > 0x19581e60: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde > 0x19581e70: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde > 0x19581e80: 0xefbeadde 0xefbeadde 0xefbeadde 0xefbeadde > {code} > bt #2 > {code} > #0 0x00000000004d637c in Continuation::handleEvent (this=0xc3cc390, event=2, > data=0xc4408a0) at I_Continuation.h:146 > 146 return (this->*handler) (event, data); > (gdb) bt > #0 0x00000000004d637c in Continuation::handleEvent (this=0xc3cc390, event=2, > data=0xc4408a0) at I_Continuation.h:146 > #1 0x000000000070364c in EThread::process_event (this=0x2aaaaae29010, > e=0xc4408a0, calling_code=2) at UnixEThread.cc:140 > #2 0x000000000070398e in EThread::execute (this=0x2aaaaae29010) at > UnixEThread.cc:217 > #3 0x0000000000502aac in main (argc=3, argv=0x7fff32ef2f58) at Main.cc:1961 > (gdb) p *this > $1 = {<force_VFPT_to_top> = {_vptr.force_VFPT_to_top = 0x2aaab002f011}, > handler = 0xefbeaddeefbeadde, this adjustment -1171307680053154338, > handler_name = 0xefbeaddeefbeadde <Address 0xefbeaddeefbeadde out of > bounds>, mutex = {m_ptr = 0xefbeaddeefbeadde}, link = {<SLink<Continuation>> > = { > next = 0xefbeaddeefbeadde}, prev = 0xefbeaddeefbeadde}} > (gdb) > {code} > bt #3 > {code} > #0 0x00000000004d2c5c in Continuation::handleEvent (this=0x2aaab00615b0, > event=2, data=0x2aaab00d1570) at I_Continuation.h:146 > 146 return (this->*handler) (event, data); > (gdb) bt > #0 0x00000000004d2c5c in Continuation::handleEvent (this=0x2aaab00615b0, > event=2, data=0x2aaab00d1570) at I_Continuation.h:146 > #1 0x00000000006f5830 in EThread::process_event (this=0x2aaaaae29010, > e=0x2aaab00d1570, calling_code=2) at UnixEThread.cc:140 > #2 0x00000000006f5b72 in EThread::execute (this=0x2aaaaae29010) at > UnixEThread.cc:217 > #3 0x00000000004ff37d in main (argc=3, argv=0x7fff421f08d8) at Main.cc:1958 > (gdb) info f > Stack level 0, frame at 0x7fff421f01f0: > rip = 0x4d2c5c in Continuation::handleEvent(int, void*) > (I_Continuation.h:146); saved rip 0x6f5830 > called by frame at 0x7fff421f0260 > source language c++. > Arglist at 0x7fff421f01e0, args: this=0x2aaab00615b0, event=2, > data=0x2aaab00d1570 > Locals at 0x7fff421f01e0, Previous frame's sp is 0x7fff421f01f0 > Saved registers: > rbp at 0x7fff421f01e0, rip at 0x7fff421f01e8 > (gdb) p this->handler > $1 = 0xefbeaddeefbeadde, this adjustment -1171307680053154338 > {code} -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira