[tor-bugs] #9602 [Tor]: Segfault in Tor 0.2.4.1[67]-rc after SIGUSR1

[Tor Bug Tracker & Wiki]

#9602: Segfault in Tor 0.2.4.1[67]-rc after SIGUSR1
---------------------------+--------------------------------
     Reporter:  pyllyukko  |      Owner:
         Type:  defect     |     Status:  needs_information
     Priority:  normal     |  Milestone:  Tor: 0.2.4.x-final
    Component:  Tor        |    Version:  Tor: 0.2.4.16-rc
   Resolution:             |   Keywords:
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+--------------------------------

Comment (by arma):

 I just killed moria1 with -USR1, and it died. Here's the trace:
 {{{
 #0  0x00007f1c27a5b1b5 in *__GI_raise (sig=<value optimized out>)
     at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
 #1  0x00007f1c27a5dfc0 in *__GI_abort () at abort.c:92
 #2  0x00000000004fa8be in crash_handler (sig=<value optimized out>,
     si=<value optimized out>, ctx_=0x3) at src/common/backtrace.c:130
 #3  <signal handler called>
 #4  0x00007f1c27a6e88d in _IO_vfprintf_internal (s=0x7fff297a8370,
     format=<value optimized out>, ap=0x7fff297a84f0) at vfprintf.c:1617
 #5  0x00007f1c27a90732 in _IO_vsnprintf (string=0x79ac60 "",
     maxlen=<value optimized out>, format=0x53cc1a "%s:%u",
 args=0x7fff297a84f0)
     at vsnprintf.c:120
 #6  0x00000000004fc9c4 in tor_vsnprintf (str=0x79ac60 "", size=4294961464,
     format=0x20 <Address 0x20 out of bounds>, args=0xffffffffffffffff)
     at src/common/compat.c:385
 #7  0x00000000004fca61 in tor_snprintf (
     str=0xcccccccccccccccc <Address 0xcccccccccccccccc out of bounds>,
     size=4294961464, format=0x20 <Address 0x20 out of bounds>)
     at src/common/compat.c:366
 #8  0x000000000048c11a in channel_tls_get_remote_descr_method (
     chan=<value optimized out>, flags=0) at src/or/channeltls.c:463
 #9  0x0000000000484435 in channel_dump_statistics (chan=0x45727f0,
 severity=6)
     at src/or/channel.c:3281
 #10 0x000000000048496c in channel_dumpstats (severity=6)
     at src/or/channel.c:2736
 #11 0x000000000042dee0 in dumpstats (sig=<value optimized out>)
     at src/or/main.c:2207
 #12 process_signal (sig=<value optimized out>) at src/or/main.c:2088
 #13 0x00007f1c28796344 in event_base_loop () from
 /usr/lib/libevent-1.4.so.2
 #14 0x000000000042c4d1 in do_main_loop () at src/or/main.c:2018
 #15 0x000000000042d1f5 in tor_main (argc=<value optimized out>,
     argv=<value optimized out>) at src/or/main.c:2882
 #16 0x00007f1c27a47c8d in __libc_start_main (main=<value optimized out>,
     argc=<value optimized out>, ubp_av=<value optimized out>,
     init=<value optimized out>, fini=<value optimized out>,
     rtld_fini=<value optimized out>, stack_end=0x7fff297a8b98)
     at libc-start.c:228
 #17 0x000000000042aff9 in _start ()
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9602#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online