Bug 446196

Summary: Broker seg fault
Product: Red Hat Enterprise MRG Reporter: Arnaud Simon <asimon>
Component: qpid-cppAssignee: Alan Conway <aconway>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Kim van der Riet <kim.vdriet>
Severity: high Docs Contact:
Priority: urgent    
Version: beta   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-05-13 16:27:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Arnaud Simon 2008-05-13 13:28:18 UTC
Description of problem:
The broker segs fault when running the sonic test harness. 
#0  0x00002aaaaaf634ac in qpid::framing::FieldTable::size ( this=<value
optimized out>) at qpid/framing/FieldValue.h:84
#1  0x00002aaaaaef20e1 in qpid::framing::MessageProperties::bodySize
this=0x383fd60) at gen/qpid/framing/MessageProperties.cpp:191
#2  0x00002aaaaaef2119 in qpid::framing::MessageProperties::size this=0x383ff20)
at gen/qpid/framing/MessageProperties.cpp:197
#3  0x00002aaaaaf56df1 in qpid::framing::AMQHeaderBody::size (this=<value
optimized out>) at qpid/framing/AMQHeaderBody.h:46
#4  0x00002aaaaab9251f in qpid::broker::Message::getRequiredCredit (this=<value
optimized out>) at ./qpid/framing/frame_functors.h:48
#5  0x00002aaaaab7cd0e in DeliveryRecord (this=0x43203ba0, _msg=<value optimized
out>, _queue=@0x43203c20, _tag=@0x43203c30, _token=@0x43203c10, _id={value =
102980}, _acquired=true, accepted=false) at qpid/broker/DeliveryRecord.cpp:46
#6  0x00002aaaaabadadf in qpid::broker::SemanticState::ConsumerImpl::deliver
(this=0x1985db0, msg=@0x1) at qpid/broker/SemanticState.cpp:278
#7  0x00002aaaaab677ec in qpid::broker::Queue::dispatch (this=<value optimized
out>, c=@0x1985db0) at qpid/broker/Queue.cpp:323
#8  0x00002aaaaaba5a28 in qpid::broker::SemanticState::ConsumerImpl::doOutput (
this=0x2aa8ab1f1e30) at qpid/broker/SemanticState.cpp:650
#9  0x00002aaaaaf7a28c in qpid::sys::AggregateOutput::doOutput (this=0x1984a60)
at qpid/sys/AggregateOutput.cpp:43
#10 0x00002aaaaabaf1f0 in qpid::broker::SemanticState::doOutput (this=<value
optimized out>) at qpid/broker/SemanticState.h:185
#11 0x00002aaaaaf7a28c in qpid::sys::AggregateOutput::doOutput (this=0x1983c48)
at qpid/sys/AggregateOutput.cpp:43
#12 0x00002aaaaab6fbb3 in qpid::broker::Connection::doOutput (this=0x1983bf8) at
qpid/broker/Connection.cpp:168
#13 0x00002aaaaab49ce4 in qpid::amqp_0_10::Connection::canEncode
(this=0x1983b60) at qpid/amqp_0_10/Connection.cpp:54
#14 0x00002aaaaaf7b55f in qpid::sys::AsynchIOHandler::idle (this=0x1943160) at
qpid/sys/AsynchIOHandler.cpp:160
#15 0x00002aaaaaf4f8cf in boost::function1<void, qpid::sys::AsynchIO&,
std::allocator<boost::function_base> >::operator() (this=0x2aa8ab1f1e30,
a0=@0x1)  at /usr/include/boost/function/function_template.hpp:576

Comment 1 Alan Conway 2008-05-13 16:27:55 UTC
Unable to reproduce. Appears like a deletion race during construction of a
DeliveryRecord, with the Message being deleted/invalid. Reviewed use of
intrusive_ptr and refcount, did not find any probable causes for the crash.