unfortunately, we do not seem to have debug symbols, so I don't see much more. Can you share your full config (including all includes, if any)? Maybe I can get it to abort in my lab as well.
Rainer 2016-07-21 22:02 GMT+02:00 Alec Swan <[email protected]>: > Rainer, here is the output from running rsyslog under valgrind: > > [root valgrind-3.11.0]# valgrind rsyslogd > ==2371== Memcheck, a memory error detector > ==2371== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al. > ==2371== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info > ==2371== Command: rsyslogd > ==2371== > ==2371== Conditional jump or move depends on uninitialised value(s) > ==2371== at 0x16A414: cnfexprDestruct (in /sbin/rsyslogd) > ==2371== by 0x16B36D: cnfstmtOptimize (in /sbin/rsyslogd) > ==2371== by 0x146317: ??? (in /sbin/rsyslogd) > ==2371== by 0x12E5BE: llExecFunc (in /sbin/rsyslogd) > ==2371== by 0x146176: rulesetOptimizeAll (in /sbin/rsyslogd) > ==2371== by 0x123EF6: ??? (in /sbin/rsyslogd) > ==2371== by 0x158A68: ??? (in /sbin/rsyslogd) > ==2371== by 0x159008: main (in /sbin/rsyslogd) > ==2371== > ==2375== Warning: invalid file descriptor 99990 in syscall close() > ==2371== > ==2371== HEAP SUMMARY: > ==2371== in use at exit: 209,122 bytes in 2,121 blocks > ==2371== total heap usage: 11,004 allocs, 8,883 frees, 4,319,525 bytes > allocated > ==2371== > ==2371== LEAK SUMMARY: > ==2371== definitely lost: 26 bytes in 1 blocks > ==2371== indirectly lost: 0 bytes in 0 blocks > ==2371== possibly lost: 88 bytes in 2 blocks > ==2371== still reachable: 209,008 bytes in 2,118 blocks > ==2371== suppressed: 0 bytes in 0 blocks > ==2371== Rerun with --leak-check=full to see details of leaked memory > ==2371== > ==2371== For counts of detected and suppressed errors, rerun with: -v > ==2371== Use --track-origins=yes to see where uninitialised values come from > ==2371== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 114 from 7) > [root valgrind-3.11.0]# ==2375== Thread 6 rs:main Q:Reg: > ==2375== Invalid read of size 8 > ==2375== at 0x56607BE: fjson_object_iter_next > (json_object_iterator.c:119) > ==2375== by 0x5660863: fjson_object_iter_begin > (json_object_iterator.c:77) > ==2375== by 0x126F09: ??? (in /sbin/rsyslogd) > ==2375== by 0x1270A0: msgAddJSON (in /sbin/rsyslogd) > ==2375== by 0x7242F2D: ??? (in /lib64/rsyslog/mmnormalize.so) > ==2375== by 0x14EA64: ??? (in /sbin/rsyslogd) > ==2375== by 0x14F561: ??? (in /sbin/rsyslogd) > ==2375== by 0x14F923: ??? (in /sbin/rsyslogd) > ==2375== by 0x146AB6: ??? (in /sbin/rsyslogd) > ==2375== by 0x1473DA: ??? (in /sbin/rsyslogd) > ==2375== by 0x156FE3: ??? (in /sbin/rsyslogd) > ==2375== by 0x1457D8: ??? (in /sbin/rsyslogd) > ==2375== Address 0xf57d338 is 0 bytes after a block of size 72 alloc'd > ==2375== at 0x4A05FEF: calloc (vg_replace_malloc.c:711) > ==2375== by 0x7659871: json_object_new (json_object.c:178) > ==2375== by 0x765A61A: json_object_new_object (json_object.c:354) > ==2375== by 0x744A355: ln_normalize (in /usr/lib64/liblognorm.so.2.0.0) > ==2375== by 0x7242EEB: ??? (in /lib64/rsyslog/mmnormalize.so) > ==2375== by 0x14EA64: ??? (in /sbin/rsyslogd) > ==2375== by 0x14F561: ??? (in /sbin/rsyslogd) > ==2375== by 0x14F923: ??? (in /sbin/rsyslogd) > ==2375== by 0x146AB6: ??? (in /sbin/rsyslogd) > ==2375== by 0x1473DA: ??? (in /sbin/rsyslogd) > ==2375== by 0x156FE3: ??? (in /sbin/rsyslogd) > ==2375== by 0x1457D8: ??? (in /sbin/rsyslogd) > ==2375== > ==2375== Invalid read of size 4 > ==2375== at 0x5660778: fjson_object_get (json_object.c:176) > ==2375== by 0x126F57: ??? (in /sbin/rsyslogd) > ==2375== by 0x1270A0: msgAddJSON (in /sbin/rsyslogd) > ==2375== by 0x7242F2D: ??? (in /lib64/rsyslog/mmnormalize.so) > ==2375== by 0x14EA64: ??? (in /sbin/rsyslogd) > ==2375== by 0x14F561: ??? (in /sbin/rsyslogd) > ==2375== by 0x14F923: ??? (in /sbin/rsyslogd) > ==2375== by 0x146AB6: ??? (in /sbin/rsyslogd) > ==2375== by 0x1473DA: ??? (in /sbin/rsyslogd) > ==2375== by 0x156FE3: ??? (in /sbin/rsyslogd) > ==2375== by 0x1457D8: ??? (in /sbin/rsyslogd) > ==2375== by 0x13FB5D: wtiWorker (in /sbin/rsyslogd) > ==2375== Address 0x60000001e is not stack'd, malloc'd or (recently) free'd > ==2375== > ==2375== > ==2375== Process terminating with default action of signal 11 (SIGSEGV) > ==2375== Access not within mapped region at address 0x60000001E > ==2375== at 0x5660778: fjson_object_get (json_object.c:176) > ==2375== by 0x126F57: ??? (in /sbin/rsyslogd) > ==2375== by 0x1270A0: msgAddJSON (in /sbin/rsyslogd) > ==2375== by 0x7242F2D: ??? (in /lib64/rsyslog/mmnormalize.so) > ==2375== by 0x14EA64: ??? (in /sbin/rsyslogd) > ==2375== by 0x14F561: ??? (in /sbin/rsyslogd) > ==2375== by 0x14F923: ??? (in /sbin/rsyslogd) > ==2375== by 0x146AB6: ??? (in /sbin/rsyslogd) > ==2375== by 0x1473DA: ??? (in /sbin/rsyslogd) > ==2375== by 0x156FE3: ??? (in /sbin/rsyslogd) > ==2375== by 0x1457D8: ??? (in /sbin/rsyslogd) > ==2375== by 0x13FB5D: wtiWorker (in /sbin/rsyslogd) > ==2375== If you believe this happened as a result of a stack > ==2375== overflow in your program's main thread (unlikely but > ==2375== possible), you can try to increase the size of the > ==2375== main thread stack using the --main-stacksize= flag. > ==2375== The main thread stack size used in this run was 10485760. > ==2375== > ==2375== HEAP SUMMARY: > ==2375== in use at exit: 2,611,014 bytes in 11,732 blocks > ==2375== total heap usage: 27,013 allocs, 15,281 frees, 8,524,299 bytes > allocated > ==2375== > ==2375== LEAK SUMMARY: > ==2375== definitely lost: 4,117 bytes in 11 blocks > ==2375== indirectly lost: 24,922 bytes in 20 blocks > ==2375== possibly lost: 4,464 bytes in 12 blocks > ==2375== still reachable: 2,577,511 bytes in 11,689 blocks > ==2375== suppressed: 0 bytes in 0 blocks > ==2375== Rerun with --leak-check=full to see details of leaked memory > ==2375== > ==2375== For counts of detected and suppressed errors, rerun with: -v > ==2375== Use --track-origins=yes to see where uninitialised values come from > ==2375== ERROR SUMMARY: 5 errors from 3 contexts (suppressed: 120 from 7) > > [root valgrind-3.11.0]# rsyslogd -v > rsyslogd 8.20.0, compiled with: > PLATFORM: x86_64-redhat-linux-gnu > PLATFORM (lsb_release -d): > FEATURE_REGEXP: Yes > GSSAPI Kerberos 5 support: No > FEATURE_DEBUG (debug build, slow code): No > 32bit Atomic operations supported: Yes > 64bit Atomic operations supported: Yes > memory allocator: system default > Runtime Instrumentation (slow code): No > uuid support: Yes > Number of Bits in RainerScript integers: 64 > > See http://www.rsyslog.com for more information. > > [root valgrind-3.11.0]# dmesg > .. > rs:main Q:Reg[1776]: segfault at 65 ip 00007f0769bcc2b6 sp 00007f0762de87e8 > error 4 in libc-2.12.so[7f0769aa4000+18a000] > > Thanks, > > Alec > > On Wed, Jul 20, 2016 at 11:32 PM, Rainer Gerhards <[email protected]> > wrote: > >> 2016-07-20 23:02 GMT+02:00 Alec Swan <[email protected]>: >> > I used test RPMs to upgrade from 8.19.0 to 8.20.0. However, now when I >> > start rsyslog it logs the following error message to dmesg and shuts >> > rsyslog down: >> > "rs:main Q:Reg[23801]: segfault at 1a ip 00007fa95ac9f778 sp >> > 00007fa94f5fd878 error 6 in libfastjson.so.4.0.0[7fa95ac9c000+9000]" >> > >> > These are the packages that were installed/updated: >> > Jul 20 20:53:11 yum[22693]: Installed: libfastjson4-0.99.3-2.el6.x86_64 >> > Jul 20 20:53:11 yum[22693]: Updated: rsyslog-8.20.0-1.el6.x86_64 >> > Jul 20 20:53:11 yum[22693]: Updated: >> rsyslog-mmutf8fix-8.20.0-1.el6.x86_64 >> > Jul 20 20:53:11 yum[22693]: Updated: >> rsyslog-mmnormalize-8.20.0-1.el6.x86_64 >> > Jul 20 20:53:11 yum[22693]: Updated: >> > rsyslog-elasticsearch-8.20.0-1.el6.x86_64 >> >> would it be possible that you do a run under valgrind control? >> >> Rainer >> > >> > >> > Thanks, >> > >> > Alec >> > >> > On Wed, Jul 20, 2016 at 12:11 PM, Michael Biebl <[email protected]> >> wrote: >> > >> >> 2016-07-12 23:12 GMT+02:00 David Lang <[email protected]>: >> >> > On Tue, 12 Jul 2016, Michael Biebl wrote: >> >> > >> >> >> Fwiw, this is the first release I felt comfortable enough uploading >> to >> >> >> Debian unstable. >> >> >> It just hit the archive a few hours ago: >> >> >> https://tracker.debian.org/pkg/libfastjson >> >> >> >> >> >> I hope we don't break the API that much anymore before 1.0.0. >> >> >> >> >> >> I'm now waiting for a liblognorm 1.1.4 release which compiles against >> >> >> libfastjson 0.99.3. >> >> > >> >> > >> >> > My understanding is that we are going to get liblognorm 2 this cycle >> >> (after >> >> > being delayed for the last couple of cycles) >> >> > >> >> >> >> >> >> Ok, so what's the plan here? Which liblognorm version should I pick? >> >> At least they currently released version doesn't compile against the >> >> latest libfastjson release (which is not a surprise, after the API >> >> rework, which I'm thankful for). >> >> >> >> Regards, >> >> Michael >> >> >> >> -- >> >> Why is it that all of the instruments seeking intelligent life in the >> >> universe are pointed away from Earth? >> >> _______________________________________________ >> >> rsyslog mailing list >> >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >> http://www.rsyslog.com/professional-services/ >> >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> >> DON'T LIKE THAT. >> >> >> > _______________________________________________ >> > rsyslog mailing list >> > http://lists.adiscon.net/mailman/listinfo/rsyslog >> > http://www.rsyslog.com/professional-services/ >> > What's up with rsyslog? Follow https://twitter.com/rgerhards >> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

