3.0.1: good old "die on exit" again

Stefan Winter stefan.winter at restena.lu
Mon Feb 3 14:30:35 CET 2014


Hi,

this moved the crash to a different nuance :-/

Stefan

rlm_sql_mysql: Socket destructor called, closing socket
talloc: access after free error - first free may be at <command-line>:2024 
Bad talloc magic value - access after free 

Program received signal SIGABRT, Aborted.
0x00007ffff5ca1849 in raise () from /lib64/libc.so.6
(gdb) bt
#0  0x00007ffff5ca1849 in raise () from /lib64/libc.so.6
#1  0x00007ffff5ca2cd8 in abort () from /lib64/libc.so.6
#2  0x00007ffff70fafac in ?? () from /usr/lib64/libtalloc.so.2
#3  0x00007ffff70fa6ff in ?? () from /usr/lib64/libtalloc.so.2
#4  0x00007ffff70fe198 in ?? () from /usr/lib64/libtalloc.so.2
#5  0x00007ffff70fde73 in ?? () from /usr/lib64/libtalloc.so.2
#6  0x00007ffff70fde73 in ?? () from /usr/lib64/libtalloc.so.2
#7  0x00007ffff70faabb in _talloc_free () from /usr/lib64/libtalloc.so.2
#8  0x00007ffff7bc13a6 in cf_file_free (cs=0x68cd30) at <command-line>:2024
#9  0x000000000041fbfd in free_mainconfig () at <command-line>:1023
#10 0x0000000000428c0f in main (argc=2, argv=0x7fffffffe3f8) at <command-line>:596
(gdb) c
Continuing.
FATAL SIGNAL: Aborted
Backtrace of last 15 frames:
/usr/local/freeradius/3.0.2-pre-201402023/lib64/libfreeradius-radius.so(+0x987f) [0x7ffff798287f]
/lib64/libpthread.so.0(+0xf9f0) [0x7ffff64cb9f0]
/lib64/libc.so.6(gsignal+0x39) [0x7ffff5ca1849]
/lib64/libc.so.6(abort+0x148) [0x7ffff5ca2cd8]
/usr/lib64/libtalloc.so.2(+0x2fac) [0x7ffff70fafac]
/usr/lib64/libtalloc.so.2(+0x26ff) [0x7ffff70fa6ff]
/usr/lib64/libtalloc.so.2(+0x6198) [0x7ffff70fe198]
/usr/lib64/libtalloc.so.2(+0x5e73) [0x7ffff70fde73]
/usr/lib64/libtalloc.so.2(+0x5e73) [0x7ffff70fde73]
/usr/lib64/libtalloc.so.2(_talloc_free+0x10b) [0x7ffff70faabb]
/usr/local/freeradius/3.0.2-pre-201402023/lib64/libfreeradius-server.so(cf_file_free+0x1f) [0x7ffff7bc13a6]
/usr/local/freeradius/3.0.2-pre-201402023/sbin/radiusd(free_mainconfig+0x59) [0x41fbfd]
/usr/local/freeradius/3.0.2-pre-201402023/sbin/radiusd(main+0xc90) [0x428c0f]
/lib64/libc.so.6(__libc_start_main+0xf5) [0x7ffff5c8dbe5]
/usr/local/freeradius/3.0.2-pre-201402023/sbin/radiusd() [0x40d7a9]
No panic action set
_EXIT CALLED <command-line>[261]: 1: 


On 03.02.2014 12:59, Arran Cudbard-Bell wrote:
> 
> On 3 Feb 2014, at 11:16, Arran Cudbard-Bell <a.cudbardb at freeradius.org> wrote:
> 
>>
>> On 3 Feb 2014, at 10:46, Stefan Winter <stefan.winter at restena.lu> wrote:
>>
>>> Hi,
>>>
>>>> Well not very much seeing as you've not provided the backtrace.
>>>>
>>>> Could you try with 3.0.x and see if the issue is still present. 
>>>> You can use panic_action to produce the backtrace.
>>>
>>> Program received signal SIGABRT, Aborted.
>>> 0x00007ffff5ca4849 in raise () from /lib64/libc.so.6
>>> (gdb) bt
>>> #0  0x00007ffff5ca4849 in raise () from /lib64/libc.so.6
>>> #1  0x00007ffff5ca5cd8 in abort () from /lib64/libc.so.6
>>> #2  0x00007ffff70fdfac in ?? () from /usr/lib64/libtalloc.so.2
>>> #3  0x00007ffff70fdd5e in _talloc_free () from /usr/lib64/libtalloc.so.2
>>> #4  0x000000000043a6f6 in home_server_free (data=0x89eb70) at
>>> <command-line>:108
>>> #5  0x00007ffff799a522 in FreeWalker (tree=0x89dba0, X=0x89ed60) at
>>> <command-line>:75
>>> #6  0x00007ffff799a4d5 in FreeWalker (tree=0x89dba0, X=0x89e740) at
>>> <command-line>:72
>>> #7  0x00007ffff799a58e in rbtree_free (tree=0x89dba0) at <command-line>:88
>>> #8  0x000000000043ac1a in realms_free () at <command-line>:251
>>> #9  0x000000000041fdb4 in free_mainconfig () at <command-line>:979
>>> #10 0x0000000000428e73 in main (argc=2, argv=0x7fffffffe418) at
>>> <command-line>:585
>>> (gdb) quit
>>
>> Thanks.
> 
> Ok. Probably fixed... Home server was being alloced with normal malloc at
> realms.c:1181, it wasn't in master.
> 
> It was a bug anyway, even if it wasn't the thing you're seeing, the alloced
> home server was being inserted into the home_servers_byaddr tree, which uses
> talloc_free as it's free callback.
> 
> Thanks for the bug report.
> 
> -Arran
> 
> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
> FreeRADIUS Development Team
> 
> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
> 
> 
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
> 


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x8A39DC66.asc
Type: application/pgp-keys
Size: 3243 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20140203/388004b7/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 901 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20140203/388004b7/attachment.pgp>


More information about the Freeradius-Devel mailing list