qpid-proton mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Michael Ivanov <iv...@logit-ag.de>
Subject Re: proton crash in pn_messenger_free()
Date Mon, 19 Oct 2015 22:28:33 GMT
Hallo,

I have investigated the crash a bit further. I have added decref/incref
trace printout and I got the following at the moment of crash:

COLLECTOR 0xba9050 FREE
COLLECTOR 0xba9050 RELEASE
COLLECTOR 0xba9050 DRAIN
COLLECTOR 0xba9050 POP: event 0xbcdd10/pn_link
PN_OBJ_DECREF: object 0xbcdd10 class [pn_event] refcount 1
PN_OBJ_DECREF: object 0xbd68c0 class [pn_link] refcount 1
PN_OBJ_INCREF: object 0xbd68c0 class [pn_link] refcount 0
PN_OBJ_DECREF: object 0xbd57f0 class [pn_session] refcount 1
PN_OBJ_INCREF: object 0xbd57f0 class [pn_session] refcount 0
PN_OBJ_DECREF: object 0xbaf370 class [pn_connection] refcount 3
PN_OBJ_INCREF: object 0xbcdd10 class [pn_event] refcount 0
PN_OBJ_DECREF: object 0xba9090 class [pn_list] refcount 5
COLLECTOR 0xba9050 POP: event 0xbd0940/pn_transport
PN_OBJ_DECREF: object 0xbd0940 class [pn_event] refcount 1
PN_OBJ_DECREF: object 0xbc1430 class [pn_transport] refcount 1
PN_OBJ_INCREF: object 0xbc1430 class [pn_transport] refcount 0
PN_OBJ_DECREF: object 0xbaf370 class [pn_connection] refcount 2
PN_OBJ_INCREF: object 0xbd0940 class [pn_event] refcount 0
PN_OBJ_DECREF: object 0xba9090 class [pn_list] refcount 4
COLLECTOR 0xba9050 POP: event 0xbcddb0/pn_connection
PN_OBJ_DECREF: object 0xbcddb0 class [pn_event] refcount 1
PN_OBJ_DECREF: object 0xbaf370 class [pn_connection] refcount 1
PN_OBJ_DECREF: object 0xbc1430 class [pn_transport] refcount 1
PN_OBJ_DECREF: object 0xbc25b0 class [pn_record] refcount 1
PN_OBJ_DECREF: object 0xbc2600 class [pn_data] refcount 1
PN_OBJ_DECREF: object 0xbc27c0 class [pn_string] refcount 1
PN_OBJ_DECREF: object 0xbc26e0 class [pn_decoder] refcount 1
PN_OBJ_DECREF: object 0xbc2740 class [pn_encoder] refcount 1
PN_OBJ_DECREF: object 0xbc2810 class [pn_data] refcount 1
. . . . . . . . . . . . . .
PN_OBJ_DECREF: object 0xbda230 class [pn_string] refcount 1
PN_OBJ_DECREF: object 0xbda150 class [pn_decoder] refcount 1
PN_OBJ_DECREF: object 0xbda1b0 class [pn_encoder] refcount 1
PN_OBJ_DECREF: object 0xbda020 class [pn_string] refcount 1
PN_OBJ_DECREF: object 0xbd9fd0 class [pn_string] refcount 1
PN_OBJ_INCREF: object 0xbcddb0 class [pn_event] refcount 0
PN_OBJ_DECREF: object 0xba9090 class [pn_list] refcount 3
COLLECTOR 0xba9050 POP: event 0xbcde50/pn_transport
PN_OBJ_DECREF: object 0xbcde50 class [pn_event] refcount 1
PN_OBJ_DECREF: object 0xbc1430 class [pn_transport] refcount 0
evtst: /home/ivans/misc/mq/qpid-proton-0.10.fix/proton-c/src/object/object.c:244: pn_object_decref:
Assertion `head->refcount >
0' failed.

Transport object 0xbc1430 seems to have been deleted when event 0xbcddb0
for pn_connection was destroyed. But next event popped for the collector
refers to the same transport (0xbc1430, already destroyed).

Any suggestions how to fix this or speed the investigation up?

best regards,
-- 
 \   / |			           |
 (OvO) |  Mikhail Iwanow                   |
 (^^^) |                                   |
  \^/  |      E-mail:  ivans@logit-ag.de   |
  ^ ^  |                                   |

Mime
View raw message