[Gluster-devel] memory corruption in 3.4.0alpha

[Emmanuel Dreyfus]

More reports on 3.4.0alpha

I had a glusterfsd crash on GF_FREE (iosstat->filename). The memory
referenced is still valid, and looking at the code I do not see any
room for double free or free from static storage. I suspect an
unrelated heap corruption.

Program terminated with signal 11, Segmentation fault.
#0  0xbb93048f in ?? () from /lib/libc.so.12
(gdb) bt
#0  0xbb93048f in ?? () from /lib/libc.so.12
#1  0xbb93287b in free () from /lib/libc.so.12
#2  0xbbbb1edb in __gf_free (free_ptr=0xb9c04040) at mem-pool.c:237
#3  0xb9d1ebc2 in ios_stat_unref (iosstat=0xb9c171a0) at io-stats.c:374
#4  0xb9d1ee20 in ios_stats_cleanup (inode=0xb8a52ab8, this=0xb9c27000)
    at io-stats.c:526
#5  io_stats_forget (this=0xb9c27000, inode=0xb8a52ab8) at io-stats.c:2449
#6  0xbbba32fe in __inode_destroy (inode=0xb8a52ab8) at inode.c:319
#7  inode_table_prune (table=<optimized out>) at inode.c:1279
#8  0xbbba342f in inode_unref (inode=0xb8a524dc) at inode.c:444
#9  0xbbb94057 in loc_wipe (loc=0xba602cd0) at xlator.c:553
#10 0xbbbac257 in call_stub_destroy_wind (stub=0xba602cac) at call-stub.c:3795
#11 call_stub_destroy (stub=0xba602cac) at call-stub.c:4117
#12 0xbbbac4fc in call_resume (stub=0xba602cac) at call-stub.c:4148
#13 0xb9d565c5 in iot_worker (data=0xb9c42040) at io-threads.c:191
(gdb) frame 3
#3  0xb9d1ebc2 in ios_stat_unref (iosstat=0xb9c171a0) at io-stats.c:374
374     io-stats.c: No such file or directory.
        in io-stats.c
(gdb) print *iosstat
$1 = {lock = {pts_magic = 2004287495, pts_spin = 1 '\001', pts_flags = 0},
  gfid = "\004Y\342\253[%B\224\230\025!*}\364\213\206",
  filename = 0xb9c04040 "/manu/netbsd/usr/src/Makefile.inc.00558c",
  counters = {0, 0, 0, 1, 0, 0, 0, 0}, thru_counters = {{time = {tv_sec = 0,
        tv_usec = 0}, throughput = 0}, {time = {tv_sec = 1360765119,
        tv_usec = 104154}, throughput = inf}}, refcnt = 0}


-- 
Emmanuel Dreyfus
manu at netbsd.org