Uploaded image for project: 'WiredTiger'
  1. WiredTiger
  2. WT-5956

double free of update structure

    • Type: Icon: Bug Bug
    • Resolution: Duplicate
    • Priority: Icon: Major - P3 Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None

      While running test_random_abort to answer the question about the child generating core files, I hit a double free error of an update structure crash.
      Here's the error:

      *** Error in `./test_random_abort': double free or corruption (out): 0x00007f5e20287ae0 ***
      

      Here's the stack:

      (gdb) bt
      #0  0x00007f5e351a35f7 in raise () from /lib64/libc.so.6
      #1  0x00007f5e351a4ce8 in abort () from /lib64/libc.so.6
      #2  0x00007f5e351e3327 in __libc_message () from /lib64/libc.so.6
      #3  0x00007f5e351eb053 in _int_free () from /lib64/libc.so.6
      #4  0x0000000000473f88 in __wt_free_int (session=0x7f5e36368268, p_arg=0x7f5e25fd04b8) at ../src/os_common/os_alloc.c:301
      #5  0x00000000005134e4 in __wt_free_update_list (session=0x7f5e36368268, updp=0x7f5e0802f380) at ../src/btree/bt_discard.c:446
      #6  0x0000000000545019 in __split_multi_inmem_final (session=0x7f5e36368268, orig=0x7f5e2027ffb0, multi=0x7f5e084b5688)
          at ../src/btree/bt_split.c:1569
      #7  0x0000000000546a91 in __split_multi (session=0x7f5e36368268, ref=0x7f5df8255cf0, closing=false) at ../src/btree/bt_split.c:2107
      #8  0x0000000000546b8b in __split_multi_lock (session=0x7f5e36368268, ref=0x7f5df8255cf0, closing=0) at ../src/btree/bt_split.c:2138
      #9  0x0000000000546c56 in __wt_split_multi (session=0x7f5e36368268, ref=0x7f5df8255cf0, closing=0) at ../src/btree/bt_split.c:2165
      #10 0x000000000044a0df in __evict_page_dirty_update (session=0x7f5e36368268, ref=0x7f5df8255cf0, evict_flags=0) at ../src/evict/evict_page.c:396
      #11 0x0000000000449385 in __wt_evict (session=0x7f5e36368268, ref=0x7f5df8255cf0, previous_state=3 '\003', flags=0)
          at ../src/evict/evict_page.c:219
      #12 0x0000000000445ccc in __evict_page (session=0x7f5e36368268, is_server=false) at ../src/evict/evict_lru.c:2246
      #13 0x00000000004462a1 in __wt_cache_eviction_worker (session=0x7f5e36368268, busy=false, readonly=false, pct_full=100.10070972346583)
          at ../src/evict/evict_lru.c:2336
      #14 0x00000000004cb3ff in __wt_cache_eviction_check (session=0x7f5e36368268, busy=false, readonly=false, didworkp=0x0)
          at ../src/include/cache.i:427
      #15 0x00000000004ceebe in __wt_txn_commit (session=0x7f5e36368268, cfg=0x0) at ../src/txn/txn.c:1126
      #16 0x00000000004297c1 in __curfile_insert (cursor=0x7f5e08006f40) at ../src/cursor/cur_file.c:280
      #17 0x000000000040328f in thread_run (arg=0x241a158) at ../../../test/csuite/random_abort/main.c:200
      #18 0x00007f5e35b5ddc5 in start_thread () from /lib64/libpthread.so.0
      #19 0x00007f5e35264c9d in clone () from /lib64/libc.so.6
      (gdb) frame 5
      #5  0x00000000005134e4 in __wt_free_update_list (session=0x7f5e36368268, updp=0x7f5e0802f380) at ../src/btree/bt_discard.c:446
      446	        __wt_free(session, upd);
      

            Assignee:
            backlog-server-storage-engines [DO NOT USE] Backlog - Storage Engines Team
            Reporter:
            sue.loverso@mongodb.com Susan LoVerso
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: