[tor-bugs] #9602 [Tor]: Segfault in Tor 0.2.4.1[67]-rc after SIGUSR1

[Tor Bug Tracker & Wiki]

#9602: Segfault in Tor 0.2.4.1[67]-rc after SIGUSR1
---------------------------+--------------------------------
     Reporter:  pyllyukko  |      Owner:
         Type:  defect     |     Status:  reopened
     Priority:  normal     |  Milestone:  Tor: 0.2.4.x-final
    Component:  Tor        |    Version:  Tor: 0.2.4.16-rc
   Resolution:             |   Keywords:
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+--------------------------------

Comment (by arma):

 Here's a valgrind of the failure, on current git master (a0577aacb4)

 {{{
 ==23346== Invalid read of size 8
 ==23346==    at 0x4B1826: connection_free_ (connection.c:545)
 ==23346==    by 0x4B1C4B: connection_free_all (connection.c:4834)
 ==23346==    by 0x42B0F9: tor_free_all (main.c:2527)
 ==23346==    by 0x42B223: tor_cleanup (main.c:2588)
 ==23346==    by 0x4F3854: consider_hibernation (hibernate.c:921)
 ==23346==    by 0x42EFFF: second_elapsed_callback (main.c:1203)
 ==23346==    by 0x52C9343: event_base_loop (in
 /usr/lib/libevent-1.4.so.2.1.3)
 ==23346==    by 0x42C2C0: do_main_loop (main.c:2013)
 ==23346==    by 0x42CFC4: tor_main (main.c:2877)
 ==23346==    by 0x5EFEC8C: (below main) (libc-start.c:228)
 ==23346==  Address 0xb324cd8 is 8 bytes inside a block of size 352 free'd
 ==23346==    at 0x4C240FD: free (vg_replace_malloc.c:366)
 ==23346==    by 0x485DA0: channel_free_list (channel.c:899)
 ==23346==    by 0x4860BA: channel_free_all (channel.c:2942)
 ==23346==    by 0x42B0F4: tor_free_all (main.c:2526)
 ==23346==    by 0x42B223: tor_cleanup (main.c:2588)
 ==23346==    by 0x4F3854: consider_hibernation (hibernate.c:921)
 ==23346==    by 0x42EFFF: second_elapsed_callback (main.c:1203)
 ==23346==    by 0x52C9343: event_base_loop (in
 /usr/lib/libevent-1.4.so.2.1.3)
 ==23346==    by 0x42C2C0: do_main_loop (main.c:2013)
 ==23346==    by 0x42CFC4: tor_main (main.c:2877)
 ==23346==    by 0x5EFEC8C: (below main) (libc-start.c:228)
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9602#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online