Hi, this moved the crash to a different nuance :-/ Stefan rlm_sql_mysql: Socket destructor called, closing socket talloc: access after free error - first free may be at <command-line>:2024 Bad talloc magic value - access after free Program received signal SIGABRT, Aborted. 0x00007ffff5ca1849 in raise () from /lib64/libc.so.6 (gdb) bt #0 0x00007ffff5ca1849 in raise () from /lib64/libc.so.6 #1 0x00007ffff5ca2cd8 in abort () from /lib64/libc.so.6 #2 0x00007ffff70fafac in ?? () from /usr/lib64/libtalloc.so.2 #3 0x00007ffff70fa6ff in ?? () from /usr/lib64/libtalloc.so.2 #4 0x00007ffff70fe198 in ?? () from /usr/lib64/libtalloc.so.2 #5 0x00007ffff70fde73 in ?? () from /usr/lib64/libtalloc.so.2 #6 0x00007ffff70fde73 in ?? () from /usr/lib64/libtalloc.so.2 #7 0x00007ffff70faabb in _talloc_free () from /usr/lib64/libtalloc.so.2 #8 0x00007ffff7bc13a6 in cf_file_free (cs=0x68cd30) at <command-line>:2024 #9 0x000000000041fbfd in free_mainconfig () at <command-line>:1023 #10 0x0000000000428c0f in main (argc=2, argv=0x7fffffffe3f8) at <command-line>:596 (gdb) c Continuing. FATAL SIGNAL: Aborted Backtrace of last 15 frames: /usr/local/freeradius/3.0.2-pre-201402023/lib64/libfreeradius-radius.so(+0x987f) [0x7ffff798287f] /lib64/libpthread.so.0(+0xf9f0) [0x7ffff64cb9f0] /lib64/libc.so.6(gsignal+0x39) [0x7ffff5ca1849] /lib64/libc.so.6(abort+0x148) [0x7ffff5ca2cd8] /usr/lib64/libtalloc.so.2(+0x2fac) [0x7ffff70fafac] /usr/lib64/libtalloc.so.2(+0x26ff) [0x7ffff70fa6ff] /usr/lib64/libtalloc.so.2(+0x6198) [0x7ffff70fe198] /usr/lib64/libtalloc.so.2(+0x5e73) [0x7ffff70fde73] /usr/lib64/libtalloc.so.2(+0x5e73) [0x7ffff70fde73] /usr/lib64/libtalloc.so.2(_talloc_free+0x10b) [0x7ffff70faabb] /usr/local/freeradius/3.0.2-pre-201402023/lib64/libfreeradius-server.so(cf_file_free+0x1f) [0x7ffff7bc13a6] /usr/local/freeradius/3.0.2-pre-201402023/sbin/radiusd(free_mainconfig+0x59) [0x41fbfd] /usr/local/freeradius/3.0.2-pre-201402023/sbin/radiusd(main+0xc90) [0x428c0f] /lib64/libc.so.6(__libc_start_main+0xf5) [0x7ffff5c8dbe5] /usr/local/freeradius/3.0.2-pre-201402023/sbin/radiusd() [0x40d7a9] No panic action set _EXIT CALLED <command-line>[261]: 1: On 03.02.2014 12:59, Arran Cudbard-Bell wrote:
On 3 Feb 2014, at 11:16, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On 3 Feb 2014, at 10:46, Stefan Winter <stefan.winter@restena.lu> wrote:
Hi,
Well not very much seeing as you've not provided the backtrace.
Could you try with 3.0.x and see if the issue is still present. You can use panic_action to produce the backtrace.
Program received signal SIGABRT, Aborted. 0x00007ffff5ca4849 in raise () from /lib64/libc.so.6 (gdb) bt #0 0x00007ffff5ca4849 in raise () from /lib64/libc.so.6 #1 0x00007ffff5ca5cd8 in abort () from /lib64/libc.so.6 #2 0x00007ffff70fdfac in ?? () from /usr/lib64/libtalloc.so.2 #3 0x00007ffff70fdd5e in _talloc_free () from /usr/lib64/libtalloc.so.2 #4 0x000000000043a6f6 in home_server_free (data=0x89eb70) at <command-line>:108 #5 0x00007ffff799a522 in FreeWalker (tree=0x89dba0, X=0x89ed60) at <command-line>:75 #6 0x00007ffff799a4d5 in FreeWalker (tree=0x89dba0, X=0x89e740) at <command-line>:72 #7 0x00007ffff799a58e in rbtree_free (tree=0x89dba0) at <command-line>:88 #8 0x000000000043ac1a in realms_free () at <command-line>:251 #9 0x000000000041fdb4 in free_mainconfig () at <command-line>:979 #10 0x0000000000428e73 in main (argc=2, argv=0x7fffffffe418) at <command-line>:585 (gdb) quit
Thanks.
Ok. Probably fixed... Home server was being alloced with normal malloc at realms.c:1181, it wasn't in master.
It was a bug anyway, even if it wasn't the thing you're seeing, the alloced home server was being inserted into the home_servers_byaddr tree, which uses talloc_free as it's free callback.
Thanks for the bug report.
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
-- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66