Bug 1319704

Created attachment 1138535 [details]
abrt_dbus memory leak

Hi.

Description of problem:
It was detected that abrt-dbus-2.1.11-35.0.1.0.1.el7 has a memory leak.
Sometimes it happens that it might use more then 3Gb of RAM.
In general I have added a short script which hourly collects the RAM size of abrt-dbus. So in that attached graph you can see how the memory usage grows.

Version-Release number of selected component (if applicable):
Installed Packages
Name        : abrt-dbus
Arch        : x86_64
Version     : 2.1.11
Release     : 35.0.1.0.1.el7
Size        : 129 k
Repo        : installed
Summary     : ABRT DBus service
URL         : https://fedorahosted.org/abrt/
License     : GPLv2+
Description : ABRT DBus service which provides org.freedesktop.problems API on dbus and
            : uses PolicyKit to authorize to access the problem data.



How reproducible:
I wasn't able to detect any steps how it might be reproduced. On the usual system without any cores the memory size increases every hour.

Using valgrind I've found the following information:
============
==7586== LEAK SUMMARY:
==7586== definitely lost: 15 bytes in 1 blocks
==7586== indirectly lost: 0 bytes in 0 blocks
==7586== possibly lost: 7,572 bytes in 136 blocks
==7586== still reachable: 100,671 bytes in 1,139 blocks
==7586== suppressed: 0 bytes in 0 blocks
==7586== Reachable blocks (those to which a pointer was found) are not shown.
==7586== To see them, rerun with: --leak-check=full --show-leak-kinds=all
==7586== 
==7586== ERROR SUMMARY: 132 errors from 132 contexts (suppressed: 1 from 1)
============

Also from gdb I saw:
=====
#0 0x00007fd91e9ca00d in poll () from /lib64/libc.so.6
#1 0x00007fd91eeeac94 in g_main_context_iterate.isra.24 () from /lib64/libglib-2.0.so.0
#2 0x00007fd91eeeafda in g_main_loop_run () from /lib64/libglib-2.0.so.0
#3 0x00007fd920436d6d in main (argc=2, argv=<optimized out>) at abrt-dbus.c:1054
=====

Once I get strace for abrt-dbus process I sow a lot of:
================
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] futex(0x7f293ee32860, FUTEX_WAKE_PRIVATE, 1) = 1
[pid 16709] <... futex resumed> )       = 0
[pid 16729] poll([{fd=4, events=POLLIN}], 1, 0) = 0 (Timeout)
[pid 16709] futex(0x7f293ee32860, FUTEX_WAKE_PRIVATE, 1) = 0
[pid 16729] write(5, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] poll([{fd=5, events=POLLIN}, {fd=4, events=POLLIN}], 2, 4294967295) = 1 ([{fd=5, revents=POLLIN}])
[pid 16729] poll([{fd=5, events=POLLIN}, {fd=4, events=POLLIN}], 2, 4294967295) = 1 ([{fd=5, revents=POLLIN}])
[pid 16729] read(5, "\1\0\0\0\0\0\0\0", 16) = 8
[pid 16729] poll([{fd=5, events=POLLIN}, {fd=4, events=POLLIN}], 2, 4294967295 <unfinished ...>
[pid 16709] poll([{fd=3, events=POLLIN}], 1, 0) = 1 ([{fd=3, revents=POLLIN}])
[pid 16709] read(3, "\0367\0\0\0\0\0\0", 16) = 8
[pid 16709] poll([{fd=3, events=POLLIN}], 1, 122393^C <unfinished ...>
[pid 16729] <... poll resumed> )        = 1 ([{fd=4, revents=POLLIN}])
[pid 16729] read(5, 0x7f2935e13c40, 16) = -1 EAGAIN (Resource temporarily unavailable)
[pid 16729] write(5, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] recvmsg(4, {msg_name(0)=NULL, msg_iov(1)=[{"l\4\1\1'\0\0\0\327\26\n\0\211\0\0\0", 16}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 16
[pid 16729] poll([{fd=4, events=POLLIN}], 1, 0) = 1 ([{fd=4, revents=POLLIN}])
[pid 16729] recvmsg(4, {msg_name(0)=NULL, msg_iov(1)=[{"\1\1o\0\25\0\0\0/org/freedesktop/DBus\0\0\0\2\1s\0\24\0\0\0org.freedesktop.DBus\0\0\0\0\3\1s\0\20\0\0\0NameOwnerChanged\0\0\0\0\0\0\0\0\7\1s"..., 183}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 183
[pid 16729] write(5, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] write(5, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] poll([{fd=5, events=POLLIN}], 1, 0) = 1 ([{fd=5, revents=POLLIN}])
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16709] <... poll resumed> )        = 1 ([{fd=3, revents=POLLIN}])
[pid 16729] futex(0x7f293ee36d70, FUTEX_WAKE_PRIVATE, 1 <unfinished ...>
[pid 16709] futex(0x7f293ee36d70, FUTEX_WAIT_PRIVATE, 2, NULL <unfinished ...>
[pid 16729] <... futex resumed> )       = 0
[pid 16709] <... futex resumed> )       = -1 EAGAIN (Resource temporarily unavailable)
[pid 16729] futex(0x7f293ee36d70, FUTEX_WAIT_PRIVATE, 2, NULL <unfinished ...>
[pid 16709] read(3, "\1\0\0\0\0\0\0\0", 16) = 8
[pid 16709] futex(0x7f293ee36d70, FUTEX_WAKE_PRIVATE, 1 <unfinished ...>
[pid 16729] <... futex resumed> )       = 0
[pid 16709] <... futex resumed> )       = 1
[pid 16729] futex(0x7f293ee36d70, FUTEX_WAKE_PRIVATE, 1 <unfinished ...>
[pid 16709] futex(0x7f293ee32860, FUTEX_WAIT_PRIVATE, 2, NULL <unfinished ...>
[pid 16729] <... futex resumed> )       = 0
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 16729] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
================

So please check and provide the solution.
Thanks in advance.
--
Sincerely,
Evgeniy Patlan