Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
1.17.0
-
None
Description
https://travis-ci.com/github/apache/qpid-dispatch/jobs/508201388#L7343
55: ==15370==ERROR: AddressSanitizer: use-after-poison on address 0x6160001042e8 at pc 0x7f63a25b1959 bp 0x7ffc39441730 sp 0x7ffc39441720 55: READ of size 4 at 0x6160001042e8 thread T0 55: #0 0x7f63a25b1958 in qdr_core_delete_link_route /home/travis/build/apache/qpid-dispatch/src/router_core/router_core.c:565 55: #1 0x7f63a25ac33c in qdr_core_free /home/travis/build/apache/qpid-dispatch/src/router_core/router_core.c:286 55: #2 0x7f63a26236ae in qd_router_free /home/travis/build/apache/qpid-dispatch/src/router_node.c:2160 55: #3 0x7f63a24b07b8 in qd_dispatch_free /home/travis/build/apache/qpid-dispatch/src/dispatch.c:375 55: #4 0x401de2 in main_process /home/travis/build/apache/qpid-dispatch/router/src/main.c:119 55: #5 0x403927 in main /home/travis/build/apache/qpid-dispatch/router/src/main.c:369 55: #6 0x7f63a0e1082f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f) 55: #7 0x401ad8 in _start (/home/travis/build/apache/qpid-dispatch/build/router/qdrouterd+0x401ad8) 55: 55: 0x6160001042e8 is located 360 bytes inside of 576-byte region [0x616000104180,0x6160001043c0) 55: allocated by thread T1 here: 55: #0 0x7f63a2d53076 in __interceptor_posix_memalign (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x99076) 55: #1 0x7f63a247d369 in qd_alloc /home/travis/build/apache/qpid-dispatch/src/alloc_pool.c:396 55: #2 0x7f63a25a583f in new_qdr_address_t /home/travis/build/apache/qpid-dispatch/src/router_core/router_core.c:31 55: #3 0x7f63a25af82b in qdr_address_CT /home/travis/build/apache/qpid-dispatch/src/router_core/router_core.c:461 55: #4 0x7f63a25c9b28 in qdr_subscribe_CT /home/travis/build/apache/qpid-dispatch/src/router_core/route_tables.c:643 55: #5 0x7f63a25c0ff1 in router_core_thread /home/travis/build/apache/qpid-dispatch/src/router_core/router_core_thread.c:239 55: #6 0x7f63a25112b4 in _thread_init /home/travis/build/apache/qpid-dispatch/src/posix/threading.c:172 55: #7 0x7f63a1ece6b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9) 55: 55: Thread T1 created by T0 here: 55: #0 0x7f63a2cf0253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253) 55: #1 0x7f63a25113b8 in sys_thread /home/travis/build/apache/qpid-dispatch/src/posix/threading.c:181 55: #2 0x7f63a25a6e27 in qdr_core /home/travis/build/apache/qpid-dispatch/src/router_core/router_core.c:124 55: #3 0x7f63a2623281 in qd_router_setup_late /home/travis/build/apache/qpid-dispatch/src/router_node.c:2123 55: #4 0x7f639aa58e3f in ffi_call_unix64 (/usr/lib/x86_64-linux-gnu/libffi.so.6+0x5e3f) 55: #5 0x7ffc394411cf (<unknown module>) 55: 55: SUMMARY: AddressSanitizer: use-after-poison /home/travis/build/apache/qpid-dispatch/src/router_core/router_core.c:565 qdr_core_delete_link_route 55: Shadow bytes around the buggy address: 55: 0x0c2c80018800: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 55: 0x0c2c80018810: f7 f7 f7 f7 f7 f7 00 00 fa fa fa fa fa fa fa fa 55: 0x0c2c80018820: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 55: 0x0c2c80018830: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55: 0x0c2c80018840: 00 00 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 55: =>0x0c2c80018850: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7[f7]f7 f7 55: 0x0c2c80018860: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 55: 0x0c2c80018870: f7 f7 f7 f7 f7 f7 00 00 fa fa fa fa fa fa fa fa 55: 0x0c2c80018880: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 55: 0x0c2c80018890: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55: 0x0c2c800188a0: 00 00 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 55: Shadow byte legend (one shadow byte represents 8 application bytes): 55: Addressable: 00 55: Partially addressable: 01 02 03 04 05 06 07 55: Heap left redzone: fa 55: Heap right redzone: fb 55: Freed heap region: fd 55: Stack left redzone: f1 55: Stack mid redzone: f2 55: Stack right redzone: f3 55: Stack partial redzone: f4 55: Stack after return: f5 55: Stack use after scope: f8 55: Global redzone: f9 55: Global init order: f6 55: Poisoned by user: f7 55: Container overflow: fc 55: Array cookie: ac 55: Intra object redzone: bb 55: ASan internal: fe 55: ==15370==ABORTING 55: <<<< 55: 55: ---------------------------------------------------------------------- 55: Ran 89 tests in 628.294s 55: 55: FAILED (errors=3) 55/72 Test #55: system_tests_edge_router ..........................***Failed 628.47 sec