Skip to content
GitLab
Closed
Issue created by Peter Bortas@zinoOwner

debug_fatal(fmt="Using %s freed svalue

Imported from https://youtrack.roxen.com/issue/PIKE-223

Reported by KG Sterneberg kg@roxen.com

**Looking for references to 0x0:
**Done looking for references to 0x0, found 0 refs.
Image Processor: PDF Processor: Ghostscript test succeeded.
[archive-main.pike@882 in Test REP Archive]: > GET     /list-indices
InDesign server request #1:i0 (spool dir check) http error: Host unreachable. (code 700)
**Looking for references to 0x0:
**Done looking for references to 0x0, found 0 refs.
**Looking for references to 0x0:
/Users/kg/dev/Pike/pike/src/svalue.c:2040: Fatal error:
Process 62347 stopped
* thread #26, stop reason = breakpoint 1.1
    frame #0: 0x00000001000820ff roxen`debug_fatal(fmt="Using %s freed svalue at %p.\n") at error.c:579:3
   576 	PMOD_EXPORT DECLSPEC(noreturn) void debug_fatal(const char *fmt, ...) ATTRIBUTE((noreturn))
   577 	{
   578 	  va_list args;
-> 579 	  va_start(args,fmt);
   580 	  debug_va_fatal (fmt, args);
   581 	  va_end (args);
   582 	}
Target 0: (roxen) stopped.
(lldb) bt
* thread #26, stop reason = breakpoint 1.1
  * frame #0: 0x00000001000820ff roxen`debug_fatal(fmt="Using %s freed svalue at %p.\n") at error.c:579:3
    frame #1: 0x00000001001b09a4 roxen`debug_svalue_type_error(s=0x000000010eae1030) at svalue.c:2040:5
    frame #2: 0x00000001001b7d15 roxen`debug_check_svalue(s=0x000000010eae1030) at svalue.c:2056:3
    frame #3: 0x00000001001b7e5e roxen`real_gc_mark_external_svalues(s=0x000000010eae1030, num=8, place=" on svalue stack") at svalue.c:2102:7
    frame #4: 0x000000010000ed94 roxen`gc_mark_stack_external(f=0x000000010101a008, stack_p=0x000000010eae10b0, stack=0x000000010eae1000) at interpret.c:150:6
    frame #5: 0x0000000100061439 roxen`low_call_callback(lst=0x000000010032cb58, arg=0x0000000000000000) at callback.c:90:7
    frame #6: 0x000000010008dcc1 roxen`locate_references(a=0x0000000000000000) at gc.c:2123:5
    frame #7: 0x00000001001efc9a roxen`f__locate_references(args=1) at builtin_functions.c:8574:5
    frame #8: 0x000000010a21b839
    frame #9: 0x0000000100032882 roxen`eval_instruction [inlined] eval_instruction_low(pc=<unavailable>) at interpret.c:1711:5
    frame #10: 0x000000010003287d roxen`eval_instruction(pc="") at interpret.c:1663
    frame #11: 0x0000000100017952 roxen`mega_apply_low(args=246288624, arg1=0x000000010c1a07e0, arg2=16) at interpret.c:2722:5
    frame #12: 0x0000000100107e24 roxen`call_destroy(o=0x000000010c1a07e0, reason=<unavailable>) at object.c:808:2
    frame #13: 0x0000000100107305 roxen`destruct_object(o=0x000000010c1a07e0, reason=DESTRUCT_EXPLICIT) at object.c:886:7
    frame #14: 0x00000001001dee6d roxen`f_destruct(args=1) at builtin_functions.c:3353:3
    frame #15: 0x000000010d4bc909
    frame #16: 0x0000000100032882 roxen`eval_instruction [inlined] eval_instruction_low(pc=<unavailable>) at interpret.c:1711:5
    frame #17: 0x000000010003287d roxen`eval_instruction(pc="") at interpret.c:1663
    frame #18: 0x0000000100017952 roxen`mega_apply_low(args=246288592, arg1=0x000000010c1a0f18, arg2=4) at interpret.c:2722:5
    frame #19: 0x0000000100107e24 roxen`call_destroy(o=0x000000010c1a0f18, reason=<unavailable>) at object.c:808:2
    frame #20: 0x0000000100107305 roxen`destruct_object(o=0x000000010c1a0f18, reason=DESTRUCT_NO_REFS) at object.c:886:7
    frame #21: 0x00000001001055c2 roxen`schedule_really_free_object(o=0x000000010c1a0f18) at object.c:1116:5
    frame #22: 0x00000001000225f0 roxen`low_return at interpret.c:2546:3
    frame #23: 0x000000010002ea41 roxen`mega_apply(type=<unavailable>, args=1, arg1=0x0000000000000000, arg2=0x0000000000000000) at interpret.c:2700:5
    frame #24: 0x000000010005714c roxen`backend_do_call_outs(me=0x000000010ca5f650) at backend.cmod:1049:1
    frame #25: 0x000000010005acda roxen`pdb_low_backend_once(pdb=0x000000010ca5f600, timeout=0x0000700001964b80) at backend.cmod:4182:1
    frame #26: 0x000000010005b0d8 roxen`f_PollDeviceBackend_cq__backtick_28_29(args=0) at backend.cmod:4314:1
    frame #27: 0x00000001000296af roxen`low_mega_apply(type=<unavailable>, args=<unavailable>, arg1=<unavailable>, arg2=<unavailable>) at apply_low.h:221:2
    frame #28: 0x00000001000284c4 roxen`jump_opcode_F_MARK_CALL_LFUN_AND_POP(arg1=25) at interpret_functions.h:2418:1
    frame #29: 0x000000010d09c4de
    frame #30: 0x0000000100032882 roxen`eval_instruction [inlined] eval_instruction_low(pc=<unavailable>) at interpret.c:1711:5
    frame #31: 0x000000010003287d roxen`eval_instruction(pc="") at interpret.c:1663
    frame #32: 0x000000010002ea3c roxen`mega_apply(type=<unavailable>, args=1, arg1=0x0000000000000000, arg2=0x0000000000000000) at interpret.c:2695:5
    frame #33: 0x000000010017d0aa roxen`new_thread_func(data=<unavailable>) at threads.c:1930:5
    frame #34: 0x00007fff5c9c72eb libsystem_pthread.dylib`_pthread_body + 126
    frame #35: 0x00007fff5c9ca249 libsystem_pthread.dylib`_pthread_start + 66
    frame #36: 0x00007fff5c9c640d libsystem_pthread.dylib`thread_start + 13