[tor-bugs] #2001 [Tor Relay]: Reachability test for ORPort doesn't complete with --enable-bufferevents set

[Tor Bug Tracker & Wiki]

#2001: Reachability test for ORPort doesn't complete with --enable-bufferevents
set
-----------------------+----------------------------------------------------
 Reporter:  Sebastian  |       Owner:  nickm   
     Type:  defect     |      Status:  accepted
 Priority:  normal     |   Milestone:          
Component:  Tor Relay  |     Version:          
 Keywords:             |      Parent:          
-----------------------+----------------------------------------------------

Comment(by Sebastian):

 Now I get reproducible segfaults when using a bufferevent client with the
 normal network. I believe this is because some pieces of code still try to
 use connection_t.inbuf with bufferevents. Also the xxx in
 connection_add_impl() in main.c seem important.

 Here's the backtrace:

 {{{
 #0  buf_datalen (buf=0x0) at buffers.c:518
 #1  0x000000010007fa75 in circuit_resume_edge_reading_helper
 (first_conn=0x10101aff0, circ=0x10101e820, layer_hint=0x1003e3ba0) at
 relay.c:1513
 #2  0x00000001000810db in connection_edge_process_relay_cell
 (cell=0x7fff5fbff1f0, circ=0x10101e820, conn=0x0, layer_hint=0x1003e3ba0)
 at relay.c:1232
 #3  0x0000000100081bea in circuit_receive_relay_cell (cell=0x7fff5fbff1f0,
 circ=0x10101e820, cell_direction=<value temporarily unavailable, due to
 optimizations>) at relay.c:223
 #4  0x0000000100019951 in command_process_relay_cell [inlined] () at /tor-
 git/tor/src/or/command.c:437
 #5  0x0000000100019951 in command_process_cell (cell=0x7fff5fbff1f0,
 conn=0x1010027d0) at command.c:158
 #6  0x0000000100038d11 in connection_or_process_inbuf (conn=0x1010027d0)
 at connection_or.c:1453
 #7  0x000000010002b3ed in connection_handle_read_cb (bufev=<value
 temporarily unavailable, due to optimizations>, arg=0x1010027d0) at
 connection.c:2821
 #8  0x00000001001b8d82 in bufferevent_run_deferred_callbacks_locked
 (_=0x7fff5fbff1f0, arg=<value temporarily unavailable, due to
 optimizations>) at bufferevent.c:145
 #9  0x00000001001b13c7 in event_process_deferred_callbacks [inlined] () at
 /git/libevent/event.c:1326
 #10 0x00000001001b13c7 in event_base_loop (base=0x100301000, flags=<value
 temporarily unavailable, due to optimizations>) at event.c:1365
 #11 0x000000010006b811 in do_main_loop () at main.c:1725
 #12 0x000000010006baee in tor_main (argc=1, argv=<value temporarily
 unavailable, due to optimizations>) at main.c:2402
 #13 0x00000001000011a4 in start ()
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2001#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online