Project

General

Profile

RE: application crash when user connected ยป valgrind.txt

Steven Descheemaeker, 12/14/2015 09:31 AM

 
==20999== Thread 10:
==20999== Invalid read of size 8
==20999== at 0x4C2B5A0: memmove (mc_replace_strmem.c:981)
==20999== by 0x14A454B: std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> >::erase(__gnu_cxx::__normal_iterator<Wt::WebSession::Handler**, std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> > >) (stl_algobase.h:366)
==20999== by 0x14A4CAD: bool Wt::Utils::erase<Wt::WebSession::Handler*>(std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> >&, Wt::WebSession::Handler* const&) (WebUtils.h:116)
==20999== by 0x14A146D: Wt::WebSession::Handler::~Handler() (WebSession.C:1008)
==20999== by 0x148B291: Wt::WebController::handleApplicationEvent(Wt::ApplicationEvent const&) (WebController.C:528)
==20999== by 0x137C092: boost::asio::detail::completion_handler<boost::function<void ()()> >::do_complete(boost::asio::detail::task_io_service*, boost::asio::detail::task_io_service_operation*, boost::system::error_code const&, unsigned long) (function_template.hpp:767)
==20999== by 0xD3CC09: boost::asio::detail::task_io_service_operation::complete(boost::asio::detail::task_io_service&, boost::system::error_code const&, unsigned long) (task_io_service_operation.hpp:38)
==20999== by 0xD3EEAE: boost::asio::detail::task_io_service::do_run_one(boost::asio::detail::scoped_lock<boost::asio::detail::posix_mutex>&, boost::asio::detail::task_io_service_thread_info&, boost::system::error_code const&) (task_io_service.ipp:384)
==20999== by 0xD3EA8C: boost::asio::detail::task_io_service::run(boost::system::error_code&) (task_io_service.ipp:153)
==20999== by 0x137AEFA: Wt::WIOService::run() (io_service.ipp:59)
==20999== by 0x158CB71: thread_proxy (in /home/limotec/Server/Debug/web_app_debug_C913_steven)
==20999== by 0x703AB4F: start_thread (pthread_create.c:304)
==20999== Address 0x1b1de9b0 is 8 bytes after a block of size 8 alloc'd
==20999== at 0x4C286E7: operator new(unsigned long) (vg_replace_malloc.c:287)
==20999== by 0x14A43EF: void std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> >::_M_emplace_back_aux<Wt::WebSession::Handler* const&>(Wt::WebSession::Handler* const&&&) (new_allocator.h:94)
==20999== by 0x1497B18: Wt::WebSession::Handler::init() (stl_vector.h:891)
==20999== by 0x14981D4: Wt::WebSession::Handler::Handler(boost::shared_ptr<Wt::WebSession>, Wt::WebRequest&, Wt::WebResponse&) (WebSession.C:813)
==20999== by 0x148DA0B: Wt::WebController::handleRequest(Wt::WebRequest*) (WebController.C:708)
==20999== by 0x12B024F: boost::asio::detail::completion_handler<boost::_bi::bind_t<void, boost::_mfi::mf1<void, Wt::WebController, Wt::WebRequest*>, boost::_bi::list2<boost::_bi::value<Wt::WebController*>, boost::_bi::value<http::server::HTTPRequest*> > > >::do_complete(boost::asio::detail::task_io_service*, boost::asio::detail::task_io_service_operation*, boost::system::error_code const&, unsigned long) (mem_fn_template.hpp:165)
==20999== by 0xD3CC09: boost::asio::detail::task_io_service_operation::complete(boost::asio::detail::task_io_service&, boost::system::error_code const&, unsigned long) (task_io_service_operation.hpp:38)
==20999== by 0xD3EEAE: boost::asio::detail::task_io_service::do_run_one(boost::asio::detail::scoped_lock<boost::asio::detail::posix_mutex>&, boost::asio::detail::task_io_service_thread_info&, boost::system::error_code const&) (task_io_service.ipp:384)
==20999== by 0xD3EA8C: boost::asio::detail::task_io_service::run(boost::system::error_code&) (task_io_service.ipp:153)
==20999== by 0x137AEFA: Wt::WIOService::run() (io_service.ipp:59)
==20999== by 0x158CB71: thread_proxy (in /home/limotec/Server/Debug/web_app_debug_C913_steven)
==20999== by 0x703AB4F: start_thread (pthread_create.c:304)
==20999==
==20999== Invalid write of size 8
==20999== at 0x4C2B5A3: memmove (mc_replace_strmem.c:981)
==20999== by 0x14A454B: std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> >::erase(__gnu_cxx::__normal_iterator<Wt::WebSession::Handler**, std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> > >) (stl_algobase.h:366)
==20999== by 0x14A4CAD: bool Wt::Utils::erase<Wt::WebSession::Handler*>(std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> >&, Wt::WebSession::Handler* const&) (WebUtils.h:116)
==20999== by 0x14A146D: Wt::WebSession::Handler::~Handler() (WebSession.C:1008)
==20999== by 0x148B291: Wt::WebController::handleApplicationEvent(Wt::ApplicationEvent const&) (WebController.C:528)
==20999== by 0x137C092: boost::asio::detail::completion_handler<boost::function<void ()()> >::do_complete(boost::asio::detail::task_io_service*, boost::asio::detail::task_io_service_operation*, boost::system::error_code const&, unsigned long) (function_template.hpp:767)
==20999== by 0xD3CC09: boost::asio::detail::task_io_service_operation::complete(boost::asio::detail::task_io_service&, boost::system::error_code const&, unsigned long) (task_io_service_operation.hpp:38)
==20999== by 0xD3EEAE: boost::asio::detail::task_io_service::do_run_one(boost::asio::detail::scoped_lock<boost::asio::detail::posix_mutex>&, boost::asio::detail::task_io_service_thread_info&, boost::system::error_code const&) (task_io_service.ipp:384)
==20999== by 0xD3EA8C: boost::asio::detail::task_io_service::run(boost::system::error_code&) (task_io_service.ipp:153)
==20999== by 0x137AEFA: Wt::WIOService::run() (io_service.ipp:59)
==20999== by 0x158CB71: thread_proxy (in /home/limotec/Server/Debug/web_app_debug_C913_steven)
==20999== by 0x703AB4F: start_thread (pthread_create.c:304)
==20999== Address 0x1b1de9a8 is 0 bytes after a block of size 8 alloc'd
==20999== at 0x4C286E7: operator new(unsigned long) (vg_replace_malloc.c:287)
==20999== by 0x14A43EF: void std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> >::_M_emplace_back_aux<Wt::WebSession::Handler* const&>(Wt::WebSession::Handler* const&&&) (new_allocator.h:94)
==20999== by 0x1497B18: Wt::WebSession::Handler::init() (stl_vector.h:891)
==20999== by 0x14981D4: Wt::WebSession::Handler::Handler(boost::shared_ptr<Wt::WebSession>, Wt::WebRequest&, Wt::WebResponse&) (WebSession.C:813)
==20999== by 0x148DA0B: Wt::WebController::handleRequest(Wt::WebRequest*) (WebController.C:708)
==20999== by 0x12B024F: boost::asio::detail::completion_handler<boost::_bi::bind_t<void, boost::_mfi::mf1<void, Wt::WebController, Wt::WebRequest*>, boost::_bi::list2<boost::_bi::value<Wt::WebController*>, boost::_bi::value<http::server::HTTPRequest*> > > >::do_complete(boost::asio::detail::task_io_service*, boost::asio::detail::task_io_service_operation*, boost::system::error_code const&, unsigned long) (mem_fn_template.hpp:165)
==20999== by 0xD3CC09: boost::asio::detail::task_io_service_operation::complete(boost::asio::detail::task_io_service&, boost::system::error_code const&, unsigned long) (task_io_service_operation.hpp:38)
==20999== by 0xD3EEAE: boost::asio::detail::task_io_service::do_run_one(boost::asio::detail::scoped_lock<boost::asio::detail::posix_mutex>&, boost::asio::detail::task_io_service_thread_info&, boost::system::error_code const&) (task_io_service.ipp:384)
==20999== by 0xD3EA8C: boost::asio::detail::task_io_service::run(boost::system::error_code&) (task_io_service.ipp:153)
==20999== by 0x137AEFA: Wt::WIOService::run() (io_service.ipp:59)
==20999== by 0x158CB71: thread_proxy (in /home/limotec/Server/Debug/web_app_debug_C913_steven)
==20999== by 0x703AB4F: start_thread (pthread_create.c:304)
==20999==
==20999== Invalid read of size 8
==20999== at 0x4C2B5AE: memmove (mc_replace_strmem.c:981)
==20999== by 0x14A454B: std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> >::erase(__gnu_cxx::__normal_iterator<Wt::WebSession::Handler**, std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> > >) (stl_algobase.h:366)
==20999== by 0x14A4CAD: bool Wt::Utils::erase<Wt::WebSession::Handler*>(std::vector<Wt::WebSession::Handler*, std::allocator<Wt::WebSession::Handler*> >&, Wt::WebSession::Handler* const&) (WebUtils.h:116)
==20999== by 0x14A146D: Wt::WebSession::Handler::~Handler() (WebSession.C:1008)
==20999== by 0x148B291: Wt::WebController::handleApplicationEvent(Wt::ApplicationEvent const&) (WebController.C:528)
==20999== by 0x137C092: boost::asio::detail::completion_handler<boost::function<void ()()> >::do_complete(boost::asio::detail::task_io_service*, boost::asio::detail::task_io_service_operation*, boost::system::error_code const&, unsigned long) (function_template.hpp:767)
==20999== by 0xD3CC09: boost::asio::detail::task_io_service_operation::complete(boost::asio::detail::task_io_service&, boost::system::error_code const&, unsigned long) (task_io_service_operation.hpp:38)
==20999== by 0xD3EEAE: boost::asio::detail::task_io_service::do_run_one(boost::asio::detail::scoped_lock<boost::asio::detail::posix_mutex>&, boost::asio::detail::task_io_service_thread_info&, boost::system::error_code const&) (task_io_service.ipp:384)
==20999== by 0xD3EA8C: boost::asio::detail::task_io_service::run(boost::system::error_code&) (task_io_service.ipp:153)
==20999== by 0x137AEFA: Wt::WIOService::run() (io_service.ipp:59)
==20999== by 0x158CB71: thread_proxy (in /home/limotec/Server/Debug/web_app_debug_C913_steven)
==20999== by 0x703AB4F: start_thread (pthread_create.c:304)
==20999== Address 0x1b1de9c0 is not stack'd, malloc'd or (recently) free'd
==20999==
==20999== Thread 5:
==20999== Use of uninitialised value of size 8
==20999== at 0xD3CC08: boost::asio::detail::task_io_service_operation::complete(boost::asio::detail::task_io_service&, boost::system::error_code const&, unsigned long) (task_io_service_operation.hpp:38)
==20999== by 0xD3EEAE: boost::asio::detail::task_io_service::do_run_one(boost::asio::detail::scoped_lock<boost::asio::detail::posix_mutex>&, boost::asio::detail::task_io_service_thread_info&, boost::system::error_code const&) (task_io_service.ipp:384)
==20999== by 0xD3EA8C: boost::asio::detail::task_io_service::run(boost::system::error_code&) (task_io_service.ipp:153)
==20999== by 0x137AEFA: Wt::WIOService::run() (io_service.ipp:59)
==20999== by 0x158CB71: thread_proxy (in /home/limotec/Server/Debug/web_app_debug_C913_steven)
==20999== by 0x703AB4F: start_thread (pthread_create.c:304)
==20999== by 0x69470EC: clone (clone.S:112)
==20999==
==20999==
==20999== Process terminating with default action of signal 11 (SIGSEGV)
==20999== Access not within mapped region at address 0x0
==20999== at 0x1: ???
==20999== by 0xD3EEAE: boost::asio::detail::task_io_service::do_run_one(boost::asio::detail::scoped_lock<boost::asio::detail::posix_mutex>&, boost::asio::detail::task_io_service_thread_info&, boost::system::error_code const&) (task_io_service.ipp:384)
==20999== by 0xD3EA8C: boost::asio::detail::task_io_service::run(boost::system::error_code&) (task_io_service.ipp:153)
==20999== by 0x137AEFA: Wt::WIOService::run() (io_service.ipp:59)
==20999== by 0x158CB71: thread_proxy (in /home/limotec/Server/Debug/web_app_debug_C913_steven)
==20999== by 0x703AB4F: start_thread (pthread_create.c:304)
==20999== by 0x69470EC: clone (clone.S:112)
==20999== If you believe this happened as a result of a stack
==20999== overflow in your program's main thread (unlikely but
==20999== possible), you can try to increase the size of the
==20999== main thread stack using the --main-stacksize= flag.
==20999== The main thread stack size used in this run was 8388608.
--20999-- VALGRIND INTERNAL ERROR: Valgrind received a signal 11 (SIGSEGV) - exiting
--20999-- si_code=1; Faulting address: 0x374F8D28; sp: 0x40a7b3050

valgrind: the 'impossible' happened:
Killed by fatal signal
==20999== at 0x38057958: vgPlain_arena_malloc (m_mallocfree.c:285)
==20999== by 0x3802124C: vgMemCheck_new_block (mc_malloc_wrappers.c:248)
==20999== by 0x380213DA: vgMemCheck_malloc (mc_malloc_wrappers.c:285)
==20999== by 0x3808F3E6: vgPlain_scheduler (scheduler.c:1461)
==20999== by 0x380551FF: final_tidyup (m_main.c:2471)
==20999== by 0x38055304: shutdown_actions_NORETURN (m_main.c:2276)
==20999== by 0x3809E591: run_a_thread_NORETURN (syswrap-linux.c:178)
==20999== by 0x3809E6DA: vgModuleLocal_start_thread_NORETURN (syswrap-linux.c:268)
==20999== by 0x380B9E3D: ??? (in /usr/lib/valgrind/memcheck-amd64-linux)
==20999== by 0xDEADBEEFDEADBEEE: ???
==20999== by 0xDEADBEEFDEADBEEE: ???
==20999== by 0xDEADBEEFDEADBEEE: ???

sched status:
running_tid=8

Thread 8: status = VgTs_Runnable
==20999== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==20999== by 0x4013447: _dl_close_worker (dl-close.c:374)
==20999== by 0x40139CD: _dl_close (dl-close.c:754)
==20999== by 0x400DBD5: _dl_catch_error (dl-error.c:178)
==20999== by 0x697D7AE: dlerror_run (dl-libc.c:47)
==20999== by 0x69A2CB7: free_mem (in /lib/x86_64-linux-gnu/libc-2.13.so)
==20999== by 0x69A2A21: __libc_freeres (in /lib/x86_64-linux-gnu/libc-2.13.so)
==20999== by 0x4A226EC: _vgnU_freeres (vg_preloaded.c:61)
==20999== by 0xE29243F: ???
==20999== by 0xD3EF11: boost::asio::detail::task_io_service::do_run_one(boost::asio::detail::scoped_lock<boost::asio::detail::posix_mutex>&, boost::asio::detail::task_io_service_thread_info&, boost::system::error_code const&) (task_io_service.ipp:395)
==20999== by 0xD3EA8C: boost::asio::detail::task_io_service::run(boost::system::error_code&) (task_io_service.ipp:153)
==20999== by 0x137AEFA: Wt::WIOService::run() (io_service.ipp:59)
==20999== by 0x158CB71: thread_proxy (in /home/limotec/Server/Debug/web_app_debug_C913_steven)
==20999== by 0x703AB4F: start_thread (pthread_create.c:304)
==20999== by 0x69470EC: clone (clone.S:112)


Note: see also the FAQ in the source distribution.
It contains workarounds to several common problems.
In particular, if Valgrind aborted or crashed after
identifying problems in your program, there's a good chance
that fixing those problems will prevent Valgrind aborting or
crashing, especially if it happened in m_mallocfree.c.

If that doesn't help, please report this bug to: www.valgrind.org

In the bug report, send all the above text, the valgrind
version, and what OS and version you are using. Thanks.

    (1-1/1)