Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-18551

ThreadSanitizer: heap-use-after-free in threads_initiate_bucket_deletion

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 4.5.0
    • 4.5.0
    • memcached
    • None
    • Ubuntu12.04
    • Untriaged
    • Unknown
    • KV: Mar 16 - Mar 29

    Description

      Triggered during AuditTest.AuditIllegalPacket:

      31/34 Test #24: memcached-audit-unit-tests ................***Failed   42.79 sec
      00:09:47.774 Note: Google Test filter = AuditTest.*
      00:09:47.774 [==========] Running 4 tests from 1 test case.
      00:09:47.774 [----------] Global test environment set-up.
      00:09:47.774 [----------] 4 tests from AuditTest
      00:09:47.774 [ RUN      ] AuditTest.AuditIllegalPacket
      00:09:47.774 ==================
      00:09:47.774 WARNING: ThreadSanitizer: heap-use-after-free (pid=163295)
      00:09:47.774   Atomic read of size 1 at 0x7d88000a20a8 by thread T43:
      00:09:47.774     #0 pthread_mutex_lock <null> (memcached+0x00000048b610)
      00:09:47.774     #1 cb_mutex_enter /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/platform/src/cb_pthreads.cc:192 (libplatform.so.0.1.0+0x000000005b62)
      00:09:47.774     #2 threads_initiate_bucket_deletion() /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/memcached/daemon/thread.cc:595 (memcached+0x0000004e6c51)
      00:09:47.774     #3 DestroyBucketThread::destroy() /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/memcached/daemon/memcached.cc:1980 (memcached+0x0000004d275a)
      00:09:47.774     #4 DestroyBucketThread::run() /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/memcached/daemon/memcached.cc:2050 (memcached+0x0000004d3121)
      00:09:47.774     #5 Couchbase::Thread::thread_entry() /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/platform/src/thread.cc:46 (libplatform.so.0.1.0+0x00000000ce3d)
      00:09:47.774     #6 task_thread_main(void*) /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/platform/src/thread.cc:60 (libplatform.so.0.1.0+0x00000000d1a5)
      00:09:47.774     #7 platform_thread_wrap(void*) /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/platform/src/cb_pthreads.cc:54 (libplatform.so.0.1.0+0x00000000568b)
      00:09:47.774 
      00:09:47.774   Previous write of size 8 at 0x7d88000a20a8 by main thread:
      00:09:47.774     #0 free <null> (memcached+0x000000468eeb)
      00:09:47.774     #1 threads_cleanup() /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/memcached/daemon/thread.cc:570 (memcached+0x0000004e69eb)
      00:09:47.774     #2 memcached_main /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/memcached/daemon/memcached.cc:2658 (memcached+0x0000004d50ca)
      00:09:47.774     #3 main crtstuff.c (memcached+0x0000004ceb3b)
      00:09:47.774 
      00:09:47.774   Thread T43 'mc:bucket_del' (tid=163552, running) created by main thread at:
      00:09:47.774     #0 pthread_create <null> (memcached+0x00000046c7c1)
      00:09:47.774     #1 cb_create_named_thread /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/platform/src/cb_pthreads.cc:104 (libplatform.so.0.1.0+0x0000000054e5)
      00:09:47.774     #2 cb_create_thread /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/platform/src/cb_pthreads.cc:76 (libplatform.so.0.1.0+0x000000005400)
      00:09:47.774     #3 Couchbase::Thread::start() /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/platform/src/thread.cc:73 (libplatform.so.0.1.0+0x00000000d04e)
      00:09:47.774     #4 memcached_main /home/couchbase/cvjenkins/workspace/memcached-threadsanitizer-watson/memcached/daemon/mcbpdestroybuckettask.h:39 (memcached+0x0000004d4d59)
      00:09:47.774     #5 main crtstuff.c (memcached+0x0000004ceb3b)
      00:09:47.774 
      00:09:47.774 SUMMARY: ThreadSanitizer: heap-use-after-free ??:0 pthread_mutex_lock
      

      Full log: http://cv.jenkins.couchbase.com/job/memcached-threadsanitizer-watson/31/consoleFull#1123375093c5751633-7aa5-473a-91e8-426e0afa5a7b

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            trond Trond Norbye
            drigby Dave Rigby (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty