Opened 11 years ago

Last modified 7 years ago

#804 closed defect (Fixed)

seg fault on r16563 v3 authority

Reported by: arma Owned by:
Priority: Low Milestone:
Component: Core Tor/Tor Version: 0.2.1.4-alpha
Severity: Keywords:
Cc: arma Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

moria1 on Tor 0.2.1.4-alpha-dev (r16563)

Aug 16 20:55:01.039 [notice] Time to compute a consensus.
Aug 16 20:55:01.039 [info] networkstatus_compute_consensus(): Generating consens
us using method 3.

#0 0x00002b93dfb35580 in strlen () from /lib/libc.so.6
#1 0x00002b93dfb07560 in vfprintf () from /lib/libc.so.6
#2 0x00002b93dfb276fa in vsnprintf () from /lib/libc.so.6
#3 0x00000000004963e3 in tor_vsnprintf (

str=0x7fffcb8f1900 "p Bandwidth=6266160\n", size=4981567,
format=0x7fffcb8f0201 "3\v\002", args=0x5) at compat.c:340

#4 0x0000000000496481 in tor_snprintf (

str=0x2b9300002b93 <Address 0x2b9300002b93 out of bounds>, size=4981567,
format=0x7fffcb8f0201 "3\v\002") at compat.c:321

#5 0x000000000044dbf0 in networkstatus_compute_consensus (votes=0x16a4d00,

total_authorities=6, identity_key=0x62c0e0, signing_key=0x62bff0,
legacy_id_key_digest=0x0, legacy_signing_key=0x0) at dirvote.c:1049

#6 0x000000000044ec11 in dirvote_act (options=0x5faf00, now=1218934501)

at dirvote.c:1907

#7 0x0000000000459213 in second_elapsed_callback (fd=<value optimized out>,

event=<value optimized out>, args=<value optimized out>) at main.c:1067

#8 0x00002b93df3e90e2 in event_base_loop () from /usr/lib/libevent-1.1a.so.1
#9 0x00000000004599f8 in do_main_loop () at main.c:1459
#10 0x0000000000459b95 in tor_main (argc=3, argv=<value optimized out>)

at main.c:2025

#11 0x00002b93dfadf4ca in libc_start_main () from /lib/libc.so.6
#12 0x0000000000406b0a in _start () at ../sysdeps/x86_64/elf/start.S:113

#3 0x00000000004963e3 in tor_vsnprintf (

str=0x7fffcb8f1900 "p Bandwidth=6266160\n", size=4981567,
format=0x7fffcb8f0201 "3\v\002", args=0x5) at compat.c:340

340 r = vsnprintf(str, size, format, args);

#5 0x000000000044dbf0 in networkstatus_compute_consensus (votes=0x16a4d00,

total_authorities=6, identity_key=0x62c0e0, signing_key=0x62bff0,
legacy_id_key_digest=0x0, legacy_signing_key=0x0) at dirvote.c:1049

1049 int r = tor_snprintf(buf, sizeof(buf), "p %s\n", rs_out.exitsummary);

(gdb) print buf
$7 = 6401584
(gdb) print sizeof(buf)
$8 = 4

(gdb) print rs_out
No symbol "rs_out" in current context.

(another victim of optimization i guess)

[Automatically added by flyspray2trac: Operating System: All]

Child Tickets

Change History (4)

comment:1 Changed 11 years ago by arma

moria1 seg faulted again after I started it. Same place, same time (55 minutes
after the hour).

I've restarted with -O0 and will hopefully get more useful data.

comment:2 Changed 11 years ago by weasel

Did r16575 fix this for you?

comment:3 Changed 11 years ago by weasel

flyspray2trac: bug closed.
reopen should it show up again

comment:4 Changed 7 years ago by nickm

Component: Tor RelayTor
Note: See TracTickets for help on using tickets.