[tor-bugs] #5072 [Obfsproxy]: obfsproxy assertion failure src/network.c:726: down->buffer == bev

[Tor Bug Tracker & Wiki]

#5072: obfsproxy assertion failure src/network.c:726: down->buffer == bev
-----------------------+----------------------------------------------------
 Reporter:  arma       |          Owner:  asn
     Type:  defect     |         Status:  new
 Priority:  normal     |      Milestone:     
Component:  Obfsproxy  |        Version:     
 Keywords:             |         Parent:     
   Points:             |   Actualpoints:     
-----------------------+----------------------------------------------------

Comment(by arma):

 gcc sure isn't a fan of leaving these variables in place.
 {{{
 #0  0x00007ffdafe911b5 in *__GI_raise (sig=<value optimized out>)
     at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
         pid = <value optimized out>
         selftid = <value optimized out>
 #1  0x00007ffdafe93fc0 in *__GI_abort () at abort.c:92
         act = {__sigaction_handler = {sa_handler = 0xbae94a9b660dc8a4,
             sa_sigaction = 0xbae94a9b660dc8a4}, sa_mask = {__val = {
               9521807005097767791, 14725201737993313616,
 3719836312890456229,
               11323701844346537692, 9696617352571939357, 140727554562824,
               140727566413824, 16679215976743444622, 4294967295,
               12635715657266764497, 1, 6354472, 0, 0, 1, 0}},
           sa_flags = -1334102254, sa_restorer = 0x5d70663500000001}
         sigs = {__val = {32, 0 <repeats 15 times>}}
 #2  0x0000000000406298 in log_error_abort (format=<value optimized out>)
     at src/util.c:580
         ap = {{gp_offset = 32, fp_offset = 48,
             overflow_arg_area = 0x7fff3290f1d0,
             reg_save_area = 0x7fff3290f110}}
 #3  0x0000000000404363 in downstream_read_cb (bev=0x1fec380,
 arg=0x20459d0)
     at src/network.c:740
         r = <value optimized out>
         __func__ = "downstream_read_cb"
 #4  0x00007ffdb057cba5 in bufferevent_readcb (fd=<value optimized out>,
     event=<value optimized out>, arg=0x1fec380) at bufferevent_sock.c:183
         input = 0x1fec580
         res = <value optimized out>
         howmuch = <value optimized out>
         readmax = <value optimized out>
 #5  0x00007ffdb057493c in event_process_active_single_queue
 (base=0x1feac40,
     flags=<value optimized out>) at event.c:1325
         ev = 0x1fec390
 #6  event_process_active (base=0x1feac40, flags=<value optimized out>)
     at event.c:1392
         i = 0
 #7  event_base_loop (base=0x1feac40, flags=<value optimized out>)
     at event.c:1589
         n = 1
         evsel = 0x7ffdb07a4160
         tv = {tv_sec = 1, tv_usec = 140727564342821}
         tv_p = <value optimized out>
         res = <value optimized out>
         retval = <value optimized out>
         __func__ = "event_base_loop"
 #8  0x000000000040af79 in launch_external_proxy (begin=0x1)
     at src/external.c:78
         configs = 0x1fdc010
         end = 0x1
 #9  0x0000000000402368 in obfs_main (argc=<value optimized out>,
 argv=0x30c1)
     at src/main.c:262
         begin = 0x7fff3290f490
 #10 0x00007ffdafe7dc8d in __libc_start_main (main=<value optimized out>,
     argc=<value optimized out>, ubp_av=<value optimized out>,
     init=<value optimized out>, fini=<value optimized out>,
     rtld_fini=<value optimized out>, stack_end=0x7fff3290f468)
     at libc-start.c:228
         result = <value optimized out>
         unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0,
 1202158516013877494,
                 4202624, 140734041748592, 0, 0, -1202309449877305098,
                 -1200856901397001994}, mask_was_saved = 0}}, priv = {pad =
 {
               0x0, 0x0, 0x40b0a0, 0x7fff3290f478}, data = {prev = 0x0,
               cleanup = 0x0, canceltype = 4239520}}}
         not_first_call = <value optimized out>
 #11 0x00000000004020a9 in _start ()
 No symbol table info available.
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5072#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online