Opened 13 years ago

Last modified 7 years ago

#309 closed defect (Fixed)

New routerlist.c assert in Tor cvs

Reported by: yancm Owned by: nickm
Priority: High Milestone:
Component: Core Tor/Tor Version:
Severity: Keywords:
Cc: yancm Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


I've had a couple of crashes on tor server clarity. I update from cvs daily.
Crashes started occuring about 6/21 or 6/22? Tor runs for about
24-36 hours before the crash.

(Sorry about the mistaken cvs update bug report...I knew better!)

Debug output and version info:

clarity 96 -> gdb /usr/local/bin/tor tor.core
GNU gdb 5.3nb1
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386--netbsdelf"...
Core was generated by `tor'.
Program terminated with signal 6, Aborted.
Reading symbols from /usr/libexec/ld.elf_so...done.
Loaded symbols for /usr/libexec/ld.elf_so
Reading symbols from /usr/pkg/lib/
Loaded symbols for /usr/pkg/lib/
Reading symbols from /usr/lib/
Loaded symbols for /usr/lib/
Reading symbols from /usr/lib/
Loaded symbols for /usr/lib/
Reading symbols from /usr/pkg/lib/
Loaded symbols for /usr/pkg/lib/
Reading symbols from /usr/lib/
Loaded symbols for /usr/lib/
#0 0x4822ffeb in kill () from /usr/lib/
(gdb) bt
#0 0x4822ffeb in kill () from /usr/lib/
#1 0x482a4a3f in abort () from /usr/lib/
#2 0x0808b819 in signed_descriptor_get_body (desc=0x9483540)

at routerlist.c:1165

#3 0x08089ea9 in router_rebuild_store (force=0) at routerlist.c:250
#4 0x0808d70e in router_load_routers_from_string (s=0x9867f95 "",

saved_location=SAVED_NOWHERE, requested_fingerprints=0x8d18c60)
at routerlist.c:2030

#5 0x08071200 in connection_dir_client_reached_eof (conn=0x953bc00)

at directory.c:1079

#6 0x080719d3 in connection_dir_reached_eof (conn=0x953bc00)

at directory.c:1201

#7 0x08060d6a in connection_handle_read (conn=0x953bc00) at connection.c:1228
#8 0x0807b9e7 in conn_read_callback (fd=27, event=2, _conn=0x953bc00)

at main.c:407

#9 0x48210988 in event_process_active () from /usr/pkg/lib/
#10 0x48210bee in event_base_loop () from /usr/pkg/lib/
#11 0x48210a77 in event_loop () from /usr/pkg/lib/
#12 0x482109b6 in event_dispatch () from /usr/pkg/lib/
#13 0x0807cc38 in do_main_loop () at main.c:1157
#14 0x0807d82d in tor_main (argc=7, argv=0xbfbffb1c) at main.c:2132
#15 0x08094f97 in main (argc=7, argv=0xbfbffb1c) at tor_main.c:22
#16 0x0804c072 in _start ()
clarity 97 -> tor -V
Jun 25 11:58:23.175 [notice] Tor v0.1.2.0-alpha-cvs. This is experimental software. Do not rely on it for strong anonymity.
Jun 25 07:58:23.210 [warn] config_get_commandlines(): Command-line option '-V' with no value. Failing.
Jun 25 07:58:23.211 [err] tor_init(): Reading config failed--see warnings above.

[Automatically added by flyspray2trac: Operating System: All]

Child Tickets

Change History (4)

comment:1 Changed 13 years ago by arma

I encountered this on moria2 too:

Jun 24 20:35:48.448 [err] routerlist.c:1158: signed_descriptor_get_body: Assertion !memcmp("router ", r, 7) failed; aborting.

#2 0x000000000044957e in signed_descriptor_get_body (desc=0x1cd7)

at routerlist.c:1165

#3 0x00000000004336a2 in connection_dirserv_add_servers_to_outbuf (

conn=0x2a9cab0320) at dirserv.c:1828

#4 0x000000000042e491 in directory_handle_command_get (conn=0x2a9cab0320,

headers=0x7fbfffd490 "Sun, 25 Jun 2006 00:35:48 GMT",
body=0x6 <Address 0x6 out of bounds>, body_len=18446744073709551615)
at directory.c:1549

#5 0x000000000042f343 in directory_handle_command (conn=0x2a9cab0320)

at directory.c:1777

#6 0x000000000042e088 in connection_dir_process_inbuf (conn=0x2a9cab0320)

at directory.c:1225

#7 0x000000000041c315 in connection_handle_read (conn=0x2a9cab0320)

at connection.c:1224

(gdb) print r
$2 = 0x1cd7 <Address 0x1cd7 out of bounds>
(gdb) up
#3 0x00000000004336a2 in connection_dirserv_add_servers_to_outbuf (

conn=0x2a9cab0320) at dirserv.c:1828

1828 body = signed_descriptor_get_body(sd);
(gdb) print sd
$3 = (signed_descriptor_t *) 0x2a9cb1f020
(gdb) print *sd
$4 = {signed_descriptor_body = 0x0, signed_descriptor_len = 2817,

signed_descriptor_digest = "ªÚ\az1ÖN»ëC\206x\223\032_«Þ9\207\027",
identity_digest = "ì\a\207ùê\210\004\034´hã-9äñã\212\222#Ø",
published_on = 1151167515, saved_location = SAVED_IN_CACHE,
saved_offset = 1439688}

comment:2 Changed 13 years ago by arma

Looks like this one is fixed now. Closing.

comment:3 Changed 13 years ago by arma

flyspray2trac: bug closed.

comment:4 Changed 7 years ago by nickm

Component: Tor RelayTor
Note: See TracTickets for help on using tickets.