Bugs item #2884791, was opened at 2009-10-23 10:56
Message generated for change (Tracker Item Submitted) made by schan8
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=2884791&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Steve Chan (schan8)
Assigned to: Nobody/Anonymous (nobody)
Summary: Curl_llist_insert_next crash (7.19.5)

Initial Comment:
Hi,

This might be related to #1833734: When running load tests with libcurl, my application is randomly crashing. It looks like a datarace from the callstack:

> libcurl.dll!Curl_llist_insert_next(curl_llist * list=0x17798e60, curl_llist_element * e=0x00000000, const void * p=0x14237d50) Line 77 + 0x5 bytes C
         libcurl.dll!Curl_hash_add(curl_hash * h=0x17798e60, void * key=0x13db0d20, unsigned int key_len=15, void * p=0x00cb3a30) Line 162 + 0x1e bytes C

Although the next element, e, in the callstack's param values is NULL, inside Curl_llist_insert_next, list->size is non-zero and has branched to the statement, ne->next = e->next. Looking at list argument, list->tail is no longer NULL as well, even though we had originally called,

if(Curl_llist_insert_next(l, l->tail, he)) {.

passing l->tail as the parameter e.

This crash is in the gethostbynamethread, and I can see the only other thread that accesses Curl_hash_add is in Curl_sh_entry for multi.c. Both thread were likely adding the "localhost:3128" dns entry (that is what I see in the gethostbynamethread).

Am I missing some synchronization (I can see that the hostname thread does an acquire [acquire_thread_sync(&tsd)])? I have the core dump saved if you need more information.

Thanks,
Steve

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=2884791&group_id=976
Received on 2009-10-23