[tor-bugs] #9602 [Tor]: Segfault in Tor 0.2.4.1[67]-rc after SIGUSR1

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Feb 8 19:53:36 UTC 2014


#9602: Segfault in Tor 0.2.4.1[67]-rc after SIGUSR1
---------------------------+--------------------------------
     Reporter:  pyllyukko  |      Owner:
         Type:  defect     |     Status:  reopened
     Priority:  normal     |  Milestone:  Tor: 0.2.4.x-final
    Component:  Tor        |    Version:  Tor: 0.2.4.16-rc
   Resolution:             |   Keywords:
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+--------------------------------
Changes (by arma):

 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 The plot thickens! On shutdown, my Tor running Andrea's branch asserted.

 {{{
 Feb 07 09:11:08.978 [notice] Clean shutdown finished. Exiting.
 Feb 07 09:11:09.057 [info] or_state_save(): Saved state to "moria1/state"
 Feb 07 09:11:09.548 [info] cpuworker_main(): read request failed. Exiting.
 Feb 07 09:11:09.549 [info] connection_free_(): Freeing orconn at
 0x69b4bf0, saw channel 0x155ae650 with ID 423724 left un-NULLed
 Feb 07 09:11:09.549 [info] connection_free_(): Freeing linked Exit
 connection [open] with 0 bytes on inbuf, 0 on outbuf.
 Feb 07 09:11:09.549 [info] connection_free_(): Freeing orconn at
 0x5fb5550, saw channel 0x6319af0 with ID 221628 left un-NULLed
 Feb 07 09:11:09.549 [info] connection_free_(): Freeing orconn at
 0x24020620, saw channel 0x5a6e920 with ID 59814 left un-NULLed
 Feb 07 09:11:09.549 [info] connection_free_(): Freeing orconn at
 0x1c8b6b50, saw channel 0x22e8a9c0 with ID 423837 left un-NULLed
 Feb 07 09:11:09.549 [info] connection_free_(): Freeing orconn at
 0x25765c70, saw channel 0x614cd90 with ID 193228 left un-NULLed
 Feb 07 09:11:09.549 [info] connection_free_(): Freeing orconn at
 0x11401660, saw channel 0x6ad94e0 with ID 346149 left un-NULLed
 Feb 07 09:11:09.549 [info] connection_free_(): Freeing orconn at
 0x5d6db10, saw channel 0x25996270 with ID 84891 left un-NULLed
 Feb 07 09:11:09.549 [info] connection_free_(): Freeing orconn at
 0x6891ab0, saw channel 0x5bf0760 with ID 585161680 left un-NULLed
 Feb 07 09:11:09.550 [info] connection_free_(): Freeing orconn at
 0x6be89c0, saw channel 0x652e7e0 with ID 265367 left un-NULLed
 Feb 07 09:11:09.550 [info] connection_free_(): Freeing orconn at
 0x690b510, saw channel 0x54822a0 with ID 21468 left un-NULLed
 Feb 07 09:11:09.550 [info] connection_free_(): Freeing orconn at
 0x7b489f0, saw channel 0x6613530 with ID 310365 left un-NULLed
 Feb 07 09:11:09.550 [info] connection_free_(): Freeing linked Directory
 connection [waiting for command] with 3486 bytes on inbuf, 0 on outbuf.
 Feb 07 09:11:09.550 [info] connection_free_(): Freeing linked Exit
 connection [open] with 16423 bytes on inbuf, 0 on outbuf.
 Feb 07 09:11:09.550 [info] connection_free_(): Freeing orconn at
 0x28556550, saw channel 0x25065fc0 with ID 297190 left un-NULLed
 Feb 07 09:11:09.550 [info] connection_free_(): Freeing orconn at
 0x7a72dd0, saw channel 0x21bfa090 with ID 424411 left un-NULLed
 Feb 07 09:11:09.550 [info] connection_free_(): Freeing orconn at
 0x260d2ff0, saw channel 0x7cf11b0 with ID 131868 left un-NULLed
 Feb 07 09:11:09.550 [info] connection_free_(): Freeing orconn at
 0x5716980, saw channel 0x2588fca0 with ID 423042 left un-NULLed
 Feb 07 09:11:09.550 [info] connection_free_(): Freeing orconn at
 0x28955600, saw channel 0x289553d0 with ID 131927 left un-NULLed
 Feb 07 09:11:09.551 [info] connection_free_(): Freeing orconn at
 0x66bb880, saw channel 0x15fd0a60 with ID 425162 left un-NULLed
 Feb 07 09:11:09.551 [info] connection_free_(): Freeing orconn at
 0x5c439e0, saw channel 0x273908c0 with ID 117204 left un-NULLed
 Feb 07 09:11:09.551 [info] connection_free_(): Freeing orconn at
 0x663a250, saw channel 0x2300e810 with ID 126573 left un-NULLed
 Feb 07 09:11:09.551 [info] connection_free_(): Freeing linked Directory
 connection [waiting for command] with 996 bytes on inbuf, 0 on outbuf.
 Feb 07 09:11:09.551 [info] connection_free_(): Freeing orconn at
 0x24711e80, saw channel 0x5f5b250 with ID 154510 left un-NULLed
 Feb 07 09:11:09.551 [info] connection_free_(): Freeing orconn at
 0x6383d50, saw channel 0x26720d10 with ID 421042 left un-NULLed
 Feb 07 09:11:09.551 [info] connection_free_(): Freeing linked Exit
 connection [open] with 14976 bytes on inbuf, 0 on outbuf.
 Feb 07 09:11:09.551 [info] cpuworker_main(): read request failed. Exiting.
 Feb 07 09:11:09.551 [info] connection_free_(): Freeing orconn at
 0x60d3350, saw channel 0x52298a0 with ID 150267 left un-NULLed
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing orconn at
 0x5cd3600, saw channel 0x6a83f60 with ID 247606 left un-NULLed
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing linked Directory
 connection [waiting for command] with 0 bytes on inbuf, 0 on outbuf.
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing linked Directory
 connection [waiting for command] with 0 bytes on inbuf, 0 on outbuf.
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing orconn at
 0x756e2a0, saw channel 0x2699c5d0 with ID 424209 left un-NULLed
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing linked Exit
 connection [open] with 16387 bytes on inbuf, 0 on outbuf.
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing orconn at
 0x6371710, saw channel 0x5e453e0 with ID 309581 left un-NULLed
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing orconn at
 0x5635100, saw channel 0x2540ef90 with ID 13594 left un-NULLed
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing orconn at
 0x629d240, saw channel 0x23ad1ee0 with ID 210607 left un-NULLed
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing orconn at
 0x77c84c0, saw channel 0x67ec370 with ID 104223 left un-NULLed
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing orconn at
 0x789dfe0, saw channel 0x35ee0d0 with ID 110394928 left un-NULLed
 Feb 07 09:11:09.552 [info] connection_free_(): Freeing orconn at
 0x257652e0, saw channel 0x6c4a860 with ID 420851 left un-NULLed
 Feb 07 09:11:09.553 [info] connection_free_(): Freeing orconn at
 0x5fce9c0, saw channel 0x6491a90 with ID 15824 left un-NULLed
 Feb 07 09:11:09.553 [info] connection_free_(): Freeing orconn at
 0x5af1db0, saw channel 0x5bd1620 with ID 69650 left un-NULLed
 Feb 07 09:11:09.553 [info] connection_free_(): Freeing orconn at
 0x66e5ca0, saw channel 0x26c558d0 with ID 8419 left un-NULLed
 Feb 07 09:11:09.553 [info] connection_free_(): Freeing orconn at
 0x6b5b4d0, saw channel 0x23a795e0 with ID 365863 left un-NULLed
 Feb 07 09:11:09.553 [info] connection_free_(): Freeing orconn at
 0x24e92d80, saw channel 0x637d5f0 with ID 199493 left un-NULLed
 Feb 07 09:11:09.553 [info] connection_free_(): Freeing linked Exit
 connection [open] with 16466 bytes on inbuf, 0 on outbuf.
 Feb 07 09:11:09.554 [info] connection_free_(): Freeing linked Exit
 connection [open] with 0 bytes on inbuf, 0 on outbuf.
 Feb 07 09:11:09.554 [info] connection_free_(): Freeing orconn at
 0x16a592c0, saw channel 0x159708d0 with ID 417527 left un-NULLed
 Feb 07 09:11:09.554 [info] connection_free_(): Freeing orconn at
 0x22aae6c0, saw channel 0x24ec09c0 with ID 425063 left un-NULLed
 Feb 07 09:11:09.554 [info] connection_free_(): Freeing linked Directory
 connection [writing] with 0 bytes on inbuf, 4094 on outbuf.
 Feb 07 09:11:09.554 [info] connection_free_(): Freeing orconn at
 0x5abe8b0, saw channel 0x67ff9c0 with ID 104023552 left un-NULLed
 Feb 07 09:11:09.554 [info] connection_free_(): Freeing orconn at
 0x76bcdb0, saw channel 0x2706cc50 with ID 626755120 left un-NULLed
 Feb 07 09:11:09.554 [info] connection_free_(): Freeing orconn at
 0x25b7f370, saw channel 0x7a79ff0 with ID 86479 left un-NULLed
 Feb 07 09:11:09.554 [info] connection_free_(): Freeing orconn at
 0x6aee8e0, saw channel 0x65cf250 with ID 425191 left un-NULLed
 Feb 07 09:11:09.555 [info] connection_free_(): Freeing orconn at
 0x67609f0, saw channel 0x23a01de0 with ID 425169 left un-NULLed
 Feb 07 09:11:09.555 [info] connection_free_(): Freeing orconn at
 0x79af5c0, saw channel 0x2868c3b0 with ID 424331 left un-NULLed
 Feb 07 09:11:09.555 [info] connection_free_(): Freeing orconn at
 0x5fdf470, saw channel 0x2618e4b0 with ID 151121 left un-NULLed
 Feb 07 09:11:09.555 [info] connection_free_(): Freeing orconn at
 0x79caf30, saw channel 0x61f9490 with ID 300089 left un-NULLed
 Feb 07 09:11:09.555 [info] connection_free_(): Freeing orconn at
 0x745e650, saw channel 0x67fe0b0 with ID 650459024 left un-NULLed
 Feb 07 09:11:09.555 [info] connection_free_(): Freeing orconn at
 0x27ec16e0, saw channel 0x7a2ff40 with ID 424989 left un-NULLed
 Feb 07 09:11:09.555 [info] connection_free_(): Freeing orconn at
 0x38a9f20, saw channel 0x23e6b6c0 with ID 424770 left un-NULLed
 Feb 07 09:11:09.555 [info] connection_free_(): Freeing orconn at
 0x6022430, saw channel 0x25f01020 with ID 421990 left un-NULLed
 Feb 07 09:11:09.555 [info] connection_free_(): Freeing orconn at
 0x22e24890, saw channel 0x27249180 with ID 425070 left un-NULLed
 Feb 07 09:11:09.556 [info] connection_free_(): Freeing orconn at
 0x5079f40, saw channel 0x5ff7050 with ID 126805 left un-NULLed
 Feb 07 09:11:09.556 [info] connection_free_(): Freeing orconn at
 0x25a491b0, saw channel 0x22116f90 with ID 424986 left un-NULLed
 Feb 07 09:11:09.556 [info] connection_free_(): Freeing orconn at
 0x747e4e0, saw channel 0x6c36cf0 with ID 423938 left un-NULLed
 Feb 07 09:11:09.556 [info] connection_free_(): Freeing orconn at
 0x5d46630, saw channel 0x232a6250 with ID 267096 left un-NULLed
 Feb 07 09:11:09.556 [info] connection_free_(): Freeing orconn at
 0x24713850, saw channel 0x28573210 with ID 424763 left un-NULLed
 Feb 07 09:11:09.556 [info] connection_free_(): Freeing orconn at
 0x26aa5bf0, saw channel 0xe71cf50 with ID 288727 left un-NULLed
 Feb 07 09:11:09.556 [info] connection_free_(): Freeing orconn at
 0x63bb1a0, saw channel 0x64f5020 with ID 293784 left un-NULLed
 Feb 07 09:11:09.556 [info] connection_free_(): Freeing orconn at
 0x27b03c80, saw channel 0x7a5f710 with ID 423969 left un-NULLed
 Feb 07 09:11:09.556 [info] connection_free_(): Freeing orconn at
 0x6646bc0, saw channel 0x62b7710 with ID 425278 left un-NULLed
 Feb 07 09:11:09.557 [info] connection_free_(): Freeing orconn at
 0x69f8130, saw channel 0x25ea8fd0 with ID 420942 left un-NULLed
 Feb 07 09:11:09.557 [info] connection_free_(): Freeing orconn at
 0x5ec3a70, saw channel 0x6da8f10 with ID 280086 left un-NULLed
 Feb 07 09:11:09.557 [info] connection_free_(): Freeing orconn at
 0x27a0f570, saw channel 0x27dfa920 with ID 424741 left un-NULLed
 Feb 07 09:11:09.557 [info] connection_free_(): Freeing orconn at
 0x2dfffe0, saw channel 0x25721080 with ID 51710 left un-NULLed
 Feb 07 09:11:09.557 [info] connection_free_(): Freeing orconn at
 0x2664ecc0, saw channel 0x6c5da70 with ID 425161 left un-NULLed
 Feb 07 09:11:09.557 [info] connection_free_(): Freeing orconn at
 0x622fc80, saw channel 0x258eb020 with ID 296957 left un-NULLed
 Feb 07 09:11:09.557 [info] connection_free_(): Freeing orconn at
 0x506ce90, saw channel 0x63f55a0 with ID 110020 left un-NULLed
 Feb 07 09:11:09.557 [info] connection_free_(): Freeing orconn at
 0x62c5490, saw channel 0x6850da0 with ID 4019 left un-NULLed
 Feb 07 09:11:09.558 [info] connection_free_(): Freeing orconn at
 0x573fd20, saw channel 0x260f16a0 with ID 424055 left un-NULLed
 Feb 07 09:11:09.558 [info] connection_free_(): Freeing orconn at
 0x5a4fd80, saw channel 0x65c31c0 with ID 420753 left un-NULLed
 Feb 07 09:11:09.558 [info] connection_free_(): Freeing orconn at
 0x7f014c6e0e90, saw channel 0x7f014c6e10d0 with ID 139643546766288 left
 un-NULLed
 Feb 07 09:11:09.558 [err] channel_change_state(): Bug:
 src/or/channel.c:1864: channel_change_state: Assertion
 channel_state_is_valid(from_state) failed; aborting.
 }}}

 {{{
 #0  0x00007f01574bb1b5 in *__GI_raise (sig=<value optimized out>)
     at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
 #1  0x00007f01574bdfc0 in *__GI_abort () at abort.c:92
 #2  0x000000000046ec49 in channel_change_state (chan=0x7f014c6e10d0,
     to_state=CHANNEL_STATE_CLOSING) at src/or/channel.c:1864
 #3  0x00000000004a05da in connection_free_ (conn=0x7f014c6e0e90)
     at src/or/connection.c:527
 #4  0x00000000004a0af4 in connection_free_all () at
 src/or/connection.c:4505
 #5  0x0000000000408d4a in tor_free_all (postfork=0) at src/or/main.c:2490
 #6  0x0000000000408e64 in tor_cleanup () at src/or/main.c:2549
 #7  0x00000000004e7f65 in consider_hibernation (now=1391782268)
     at src/or/hibernate.c:914
 #8  0x000000000040c8af in run_scheduled_events (timer=<value optimized
 out>,
     arg=<value optimized out>) at src/or/main.c:1183
 #9  second_elapsed_callback (timer=<value optimized out>,
     arg=<value optimized out>) at src/or/main.c:1684
 #10 0x00007f01581f6344 in event_base_loop () from
 /usr/lib/libevent-1.4.so.2
 #11 0x000000000040a0d1 in do_main_loop () at src/or/main.c:1987
 #12 0x000000000040a40d in tor_main (argc=<value optimized out>,
     argv=0x7fffc9790008) at src/or/main.c:2703
 #13 0x00007f01574a7c8d in __libc_start_main (main=<value optimized out>,
     argc=<value optimized out>, ubp_av=<value optimized out>,
     init=<value optimized out>, fini=<value optimized out>,
     rtld_fini=<value optimized out>, stack_end=0x7fffc978fff8)
     at libc-start.c:228
 #14 0x0000000000408899 in _start ()
 }}}

 {{{
 #2  0x000000000046ec49 in channel_change_state (chan=0x7f014c6e10d0,
     to_state=CHANNEL_STATE_CLOSING) at src/or/channel.c:1864
 1864      tor_assert(channel_state_is_valid(from_state));
 (gdb) print from_state
 $1 = 32513
 (gdb) print chan
 $2 = (channel_t *) 0x7f014c6e10d0
 (gdb) print *chan
 $3 = {magic = 1281393552, state = 32513, global_identifier =
 139643546766288,
   registered = 0 '\000', has_been_open = 0,
   reason_for_closing = CHANNEL_CLOSE_FOR_ERROR, timestamp_created = 0,
   timestamp_active = 1391782255, free = 0,
   close = 0x473c40 <channel_tls_close_method>,
   describe_transport = 0x473b70 <channel_tls_describe_transport_method>,
   dumpstats = 0, cell_handler = 0x48d7a0 <command_process_cell>,
   var_cell_handler = 0x48ca80 <command_process_var_cell>,
   get_remote_addr = 0x473a70 <channel_tls_get_remote_addr_method>,
   get_remote_descr = 0x4738c0 <channel_tls_get_remote_descr_method>,
   has_queued_writes = 0x4737d0 <channel_tls_has_queued_writes_method>,
   is_canonical = 0x46fdb0 <channel_tls_is_canonical_method>,
   matches_extend_info = 0x472420 <channel_tls_matches_extend_info_method>,
   matches_target = 0x4722f0 <channel_tls_matches_target_method>,
   write_cell = 0x4736a0 <channel_tls_write_cell_method>,
   write_packed_cell = 0x473550 <channel_tls_write_packed_cell_method>,
   write_var_cell = 0x473420 <channel_tls_write_var_cell_method>,
   identity_digest = '\000' <repeats 19 times>, nickname = 0x0,
   next_with_same_id = {le_next = 0x0, le_prev = 0x7f014c381308},
   incoming_queue = {sqh_first = 0x0, sqh_last = 0x7f014c6e11a0},
   outgoing_queue = {sqh_first = 0x0, sqh_last = 0x7f014c6e11b0}, cmux =
 0x0,
   circ_id_type = CIRC_ID_TYPE_LOWER, wide_circ_ids = 0, next_circ_id =
 10355,
   num_n_circuits = 0, num_p_circuits = 0, is_bad_for_new_circs = 0,
   is_client = 0, is_incoming = 1, is_local = 0, timestamp_client = 0,
   timestamp_drained = 1391777454, timestamp_recv = 1391777454,
   timestamp_xmit = 1391777454, timestamp_last_added_nonpadding =
 1391777454,
   dirreq_id = 139894, n_cells_recved = 71, n_cells_xmitted = 29}
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9602#comment:31>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list