Bogus svalue in object to free
Imported from http://bugzilla.roxen.com/bugzilla/show_bug.cgi?id=1770
Reported by Martin Stjernholm mast@roxen.com
In my development Roxen server I get the following error. It seems hard to minimize, but I have an easily reproducible case in my setup. (Old dumped files are ruled out.)
/home/mast/Pike/7.2/src/object.c:599: Fatal error:
Type error: 31
Attempting to dump backlog (may fail)...
Backtrace at time of fatal:
Unknown program: unknown function()
module.Context: RXML.Context->handle_exception(({"Indexing the NUL"+[54]+"e
container=\"\">\n",({({"/home/mast/Roxen"+[24]+"erver/roxen.pike",550,@0=roxen->handler_thread,0}),({"/home/mast/Roxen"+[21]+"tocols/http.pike",1858,@1=RequestID()->handle_request}),({"/home/mast/Roxen"+[32]+"nfiguration.pike",1649,@2=Configuration(test)->handle_request,@3=RequestID()}),({"/home/mast/Roxen"+[32]+"nfiguration.pike",1681,@4=Configuration(test)->get_file,@3,0,0}),({"/home/mast/Roxen"+[32]+"nfiguration.pike",1538,@5=Configuration(test)->low_get_file,@3,0}),({"/home/mast/Roxen"+[38]+"directories.pike",206,@6=RoxenModule(test/directories#0)->parse_directory,@3}),({"/home/mast/Roxen"+[32]+"nfiguration.pike",1681,@4,@3,0,0}),({"/home/mast/Roxen"+[32]+"nfiguration.pike",1580,@5,@3,0}),({"/home/mast/Roxen"+[29]+"s/rxmlparse.pike",159,@7=RoxenModule(test/rxmlparse#0)->handle_file_extension,@8=Stdio.File("/home/mast/html/index.html",
"r", 666 /* fd=28
*/),"html",@3}),({"/home/mast/Roxen"+[24]+"dules/Roxen.pmod",765,@9=compile_rxml,"<html>\n<title>fo"+[6608]+"/body>\n\n</html>\n",@3}),/.../
etc/modules/RXML.pmod/module.pmod:428:
RXML.Tag(define)->_p_xml_handle_tag(@14,@15,"<contents/>")
/.../
(gdb) bt
#0 0xdfbce4c9 in __sigprocmask () from /usr/lib/libthread.so.1
#1 0xdfbc5639 in _resetsig () from /usr/lib/libthread.so.1
#2 0xdfbc4fb6 in _sigon () from /usr/lib/libthread.so.1
#3 0xdfbc3134 in _lmutex_unlock () from /usr/lib/libthread.so.1
#4 0xdfbc7547 in _thrp_kill () from /usr/lib/libthread.so.1
#5 0xdfbc7434 in thr_kill () from /usr/lib/libthread.so.1
#6 0xdfabbf87 in raise () from /usr/lib/libc.so.1
#7 0xdfaac334 in abort () from /usr/lib/libc.so.1
#8 0xdedab92d in Abort () from
/i/jdk/1.2.2_006/jre/lib/i386/classic/libjvm.so
#9 0xdedd21ce in panicHandler () from
/i/jdk/1.2.2_006/jre/lib/i386/classic/libjvm.so
#10 0xded7cc53 in userSignalHandler () from
/i/jdk/1.2.2_006/jre/lib/i386/native_threads/libhpi.so
#11 0xded7cc3d in intrDispatch () from
/i/jdk/1.2.2_006/jre/lib/i386/native_threads/libhpi.so
#12 0xded7b77e in intrDispatchMD () from
/i/jdk/1.2.2_006/jre/lib/i386/native_threads/libhpi.so
#13 0xdfbc0343 in __sighndlr () from /usr/lib/libthread.so.1
#14 0xdfbcd43b in sigacthandler () from /usr/lib/libthread.so.1
#15 <signal handler called>
#16 0xdfbce4c9 in __sigprocmask () from /usr/lib/libthread.so.1
#17 0xdfbc4fb6 in _sigon () from /usr/lib/libthread.so.1
#18 0xdfbc3134 in _lmutex_unlock () from /usr/lib/libthread.so.1
#19 0xdfbc7547 in _thrp_kill () from /usr/lib/libthread.so.1
#20 0xdfbc7434 in thr_kill () from /usr/lib/libthread.so.1
#21 0xdfabbf87 in raise () from /usr/lib/libc.so.1
#22 0xdfaac2fb in abort () from /usr/lib/libc.so.1
#23 0x80b7223 in debug_fatal () at /home/mast/Pike/7.2/src/error.c:523
#24 0x80e3362 in low_destruct (o=0x8db4bf4, do_free=1) at
/home/mast/Pike/7.2/src/object.c:599
#25 0x80e352c in destruct (o=0x8db4bf4) at
/home/mast/Pike/7.2/src/object.c:632
#26 0x80e35f8 in destruct_objects_to_destruct () at
/home/mast/Pike/7.2/src/object.c:677
#27 0x80a8291 in call_callback (lst=0x8241994, arg=0x0) at
/home/mast/Pike/7.2/src/callback.c:143
#28 0x8084645 in mega_apply (type=APPLY_STACK, args=2, arg1=0x0, arg2=0x0)
at /home/mast/Pike/7.2/src/interpret.c:1320
#29 0x8082c6e in eval_instruction_without_debug (pc=0x85d0fb6
"EZ\001i\006lH\006EZ\001\030\f")
at /home/mast/Pike/7.2/src/interpret_functions.h:1489
/.../
(gdb won't let me look at the svalue in question; "cannot access memory..."
:\ )