RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1431278 - ns-slapd killed by SIGSEGV
Summary: ns-slapd killed by SIGSEGV
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: 389-ds-base
Version: 7.4
Hardware: Unspecified
OS: Unspecified
unspecified
urgent
Target Milestone: rc
: ---
Assignee: wibrown@redhat.com
QA Contact: Viktor Ashirov
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-03-10 20:21 UTC by Viktor Ashirov
Modified: 2017-11-28 11:06 UTC (History)
6 users (show)

Fixed In Version: 389-ds-base-1.3.6.1-3.el7
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-11-28 11:06:58 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Viktor Ashirov 2017-03-10 20:21:45 UTC 
Description of problem:

ns-slapd segfaults during full acceptance tests.

{   "signal": 11
,   "executable": "/usr/sbin/ns-slapd"
,   "stacktrace":
      [ {   "crash_thread": true
        ,   "frames":
              [ {   "address": 139784703787125
                ,   "build_id": "e5d8782e2fcfaf259b364a8a58ca0480b64c79b6"
                ,   "build_id_offset": 819317
                ,   "function_name": "slapi_counter_get_value"
                ,   "file_name": "/usr/lib64/dirsrv/libslapd.so.0.1.0"
                }
              , {   "address": 139784703649437
                ,   "build_id": "e5d8782e2fcfaf259b364a8a58ca0480b64c79b6"
                ,   "build_id_offset": 681629
                ,   "function_name": "plugin_op_all_finished"
                ,   "file_name": "/usr/lib64/dirsrv/libslapd.so.0.1.0"
                }
              , {   "address": 139784703660184
                ,   "build_id": "e5d8782e2fcfaf259b364a8a58ca0480b64c79b6"
                ,   "build_id_offset": 692376
                ,   "function_name": "plugin_dependency_closeall"
                ,   "file_name": "/usr/lib64/dirsrv/libslapd.so.0.1.0"
                }
              , {   "address": 139784713010528
                ,   "build_id": "39b96c47cbdd971adc9af682b2dff62198f7e540"
                ,   "build_id_offset": 138592
                ,   "function_name": "slapd_daemon"
                ,   "file_name": "/usr/sbin/ns-slapd"
                }
              , {   "address": 139784712947669
                ,   "build_id": "39b96c47cbdd971adc9af682b2dff62198f7e540"
                ,   "build_id_offset": 75733
                ,   "function_name": "main"
                ,   "file_name": "/usr/sbin/ns-slapd"
                } ]
        } ]
}

Full stacktrace will be attached later since test instance is already gone.

Version-Release number of selected component (if applicable):
389-ds-base-1.3.6.1-1.el7.x86_64

How reproducible:
always

Steps to Reproduce:
I'm yet to identify which test case triggers the crash. I'll update the bug later with more details.

Actual results:


Expected results:


Additional info:
Comment 2 Noriko Hosoi 2017-03-10 20:51:05 UTC 
Hi William,

Could you please take a look?

Thanks!
Comment 3 wibrown@redhat.com 2017-03-13 00:50:46 UTC 
Is this a dynamic plugin test perhaps?
Comment 4 wibrown@redhat.com 2017-03-13 00:52:32 UTC 
So the problem is that there is a design issue in dynamic plugins, that when I fixed our memory leaks that is now exposed. Dynamic plugins are not safe across multiple threads. We have an open issue here:

https://pagure.io/389-ds-base/issue/49100

The truth is that dynamic plugins have never been safe, and we need to commit to repairing this. I do not believe the fix I have in mind is possible before the 1.3.6 release date.
Comment 5 mreynolds 2017-03-22 14:10:18 UTC 
Viktor, is this TET or lib389 suite tests that cause the crash?  I'm assuming TET, which means no dynamic plugin tests, but I want to confirm.  Thanks
Comment 6 Viktor Ashirov 2017-03-22 15:01:57 UTC 
It's TET tests that cause the crash.
But in the latest build (389-ds-base-1.3.6.1-3.el7) there was no crash. Looks like it was fixed.
Comment 8 Viktor Ashirov 2017-04-06 11:20:52 UTC 
Build tested:
389-ds-base-1.3.6.1-6.el7.x86_64

No crashes were observed with this build, marking as VERIFIED.
Comment 14 wibrown@redhat.com 2017-05-24 00:07:07 UTC 
>               [ {   "address": 139784703787125
>                 ,   "build_id": "e5d8782e2fcfaf259b364a8a58ca0480b64c79b6"
>                 ,   "build_id_offset": 819317
>                 ,   "function_name": "slapi_counter_get_value"

Mark and I have made changes in this area of the code, so is this still possible to reproduce?
Comment 16 Viktor Ashirov 2017-11-28 11:06:58 UTC 
(In reply to wibrown from comment #14)
> >               [ {   "address": 139784703787125
> >                 ,   "build_id": "e5d8782e2fcfaf259b364a8a58ca0480b64c79b6"
> >                 ,   "build_id_offset": 819317
> >                 ,   "function_name": "slapi_counter_get_value"
> 
> Mark and I have made changes in this area of the code, so is this still
> possible to reproduce?

I wasn't able to reproduce it anymore with 1.3.7.

Closing as WORKSFORME.
Note You need to log in before you can comment on or make changes to this bug.