[tor-bugs] #18116 [Tor]: abort in circuitmux_detach_all_circuits on Tor Browser exit with stem scripts running

[Tor Bug Tracker & Wiki]

#18116: abort in circuitmux_detach_all_circuits on Tor Browser exit with stem
scripts running
-------------------------------------+------------------------------------
 Reporter:  teor                     |          Owner:
     Type:  defect                   |         Status:  new
 Priority:  Medium                   |      Milestone:  Tor: 0.2.8.x-final
Component:  Tor                      |        Version:
 Severity:  Normal                   |     Resolution:
 Keywords:  crash TorCoreTeam201602  |  Actual Points:
Parent ID:                           |         Points:
  Sponsor:                           |
-------------------------------------+------------------------------------

Comment (by teor):

 Here's the specific assertion and surrounding log messages:
 {{{
 27:07.000 [notice] No circuits are opened. Relaxed timeout for circuit
 170239 (a Circuit made by controller 3-hop circuit in state doing
 handshakes with channel state open) to 60000ms. However, it appears the
 circuit has timed out anyway. 20 guards are live. [59 similar message(s)
 suppressed in last 3600 seconds]
 00:12.000 [notice] Owning controller connection has closed -- exiting now.
 00:12.000 [notice] Catching signal TERM, exiting cleanly.
 00:12.000 [warn] Couldn't find circuit 2162585894 (for channel 599)
 00:12.000 [err] tor_assertion_failed_: Bug: src/or/circuitmux.c:501:
 circuitmux_detach_all_circuits: Assertion to_remove->muxinfo.policy_data
 == NULL failed; aborting. (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug: Assertion to_remove->muxinfo.policy_data == NULL
 failed in circuitmux_detach_all_circuits at src/or/circuitmux.c:501. Stack
 trace: (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     0   tor
 0x000000010378ba79 log_backtrace + 73 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     1   tor
 0x0000000103799467 tor_assertion_failed_ + 151 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     2   tor
 0x00000001036b3e52 circuitmux_detach_all_circuits + 738 (on Tor 0.2.8.0
 -alpha-dev )
 00:12.000 [err] Bug:     3   tor
 0x00000001036a0abc channel_free_list + 236 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     4   tor
 0x00000001036a0863 channel_free_all + 147 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     5   tor
 0x0000000103727a43 tor_free_all + 131 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     6   tor
 0x0000000103727cb8 tor_cleanup + 296 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     7   tor
 0x0000000103727262 signal_callback + 2498 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     8   libevent-2.0.5.dylib
 0x0000000103902be0 event_signal_closure + 185 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     9   libevent-2.0.5.dylib
 0x00000001039029f7 event_process_active_single_queue + 237 (on Tor 0.2.8.0
 -alpha-dev )
 00:12.000 [err] Bug:     10  libevent-2.0.5.dylib
 0x00000001039030b1 event_process_active + 122 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     11  libevent-2.0.5.dylib
 0x00000001039036ca event_base_loop + 647 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     12  tor
 0x0000000103725aac do_main_loop + 1532 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     13  tor
 0x0000000103727dbf tor_main + 223 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     14  tor
 0x00000001036943a9 main + 25 (on Tor 0.2.8.0-alpha-dev )
 00:12.000 [err] Bug:     15  libdyld.dylib
 0x00007fff903cb5ad start + 1 (on Tor 0.2.8.0-alpha-dev )
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18116#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online