[tor-bugs] #9754 [Tor]: Tor 0.2.4.17-rc crashed with failed assertion

[Tor Bug Tracker & Wiki]

#9754: Tor 0.2.4.17-rc crashed with failed assertion
------------------------------+--------------------------------
     Reporter:  communicator  |      Owner:
         Type:  defect        |     Status:  needs_information
     Priority:  major         |  Milestone:  Tor: 0.2.4.x-final
    Component:  Tor           |    Version:  Tor: unspecified
   Resolution:                |   Keywords:  tor-relay
Actual Points:                |  Parent ID:
       Points:                |
------------------------------+--------------------------------

Comment (by communicator):

 Here you go:

 {{{
 Core was generated by `/usr/bin/tor --defaults-torrc /usr/share/tor/tor-
 service-defaults-torrc --hush'.
 Program terminated with signal 6, Aborted.
 #0  0x00007f822b8ab1e5 in raise () from /lib/x86_64-linux-gnu/libc.so.6
 (gdb) up 5
 #5  0x00007f822d0b003f in circuitmux_detach_circuit (cmux=0x7f8235060760,
 circ=0x7f823354d160) at ../src/or/circuitmux.c:1061
 1061          cmux->policy->free_circ_data(cmux,
 (gdb) p *cmux
 $1 = {n_circuits = 46, n_active_circuits = 0, n_cells = 0,
 chanid_circid_map = 0x7f82336a42c0, active_circuits_head = 0x0,
   active_circuits_tail = 0x0, policy = 0x7f822d3d49c0, policy_data =
 0x7f8232472860}
 (gdb) p *circ
 $2 = {magic = 2561392719, n_chan = 0x7f8239335120, n_circ_id = 2147556202,
 n_mux = 0x7f8234c82a70, n_chan_cells = {head = 0x0,
     tail = 0x0, n = 0, insertion_times = 0x0}, n_hop = 0x0,
 streams_blocked_on_n_chan = 0, streams_blocked_on_p_chan = 0,
   state = 3 '\003', purpose = 1 '\001', package_window = 1000,
 deliver_window = 1000, n_chan_create_cell = 0x0,
   timestamp_began = {tv_sec = 1380050459, tv_usec = 116624},
 timestamp_created = {tv_sec = 1380050459, tv_usec = 116624},
   timestamp_dirty = 0, marked_for_close = 0, marked_for_close_file = 0x0,
 dirreq_id = 0, next = 0x7f8234690830,
   next_active_on_n_chan = 0x0, prev_active_on_n_chan = 0x0}
 (gdb) p *cmux->policy
 $3 = {alloc_cmux_data = 0x7f822d0b35a0 <ewma_alloc_cmux_data>,
 free_cmux_data = 0x7f822d0b24d0 <ewma_free_cmux_data>,
   alloc_circ_data = 0x7f822d0b3340 <ewma_alloc_circ_data>, free_circ_data
 = 0x7f822d0b20a0 <ewma_free_circ_data>,
   notify_circ_active = 0x7f822d0b2b10 <ewma_notify_circ_active>,
   notify_circ_inactive = 0x7f822d0b2800 <ewma_notify_circ_inactive>,
 notify_set_n_cells = 0,
   notify_xmit_cells = 0x7f822d0b2d40 <ewma_notify_xmit_cells>,
 pick_active_circuit = 0x7f822d0b25e0 <ewma_pick_active_circuit>}
 (gdb) p *cmux->policy_data
 $4 = {magic = 802730346}
 (gdb) p hashent
 $5 = (chanid_circid_muxinfo_t *) 0x7f8232ab8bd0
 (gdb) p *hashent
 $6 = {node = {hte_next = 0x0, hte_hash = 25845233}, chan_id = 7764721,
 circ_id = 2147613735, muxinfo = {cell_count = 0,
     direction = CELL_DIRECTION_IN, policy_data = 0x7f82365e2f90, mark =
 0}}
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9754#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online