You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2014/03/25 20:07:06 UTC

[Bug 56313] New: Tomcat 8 crashes in tcnative-1.dll+0x7923

https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

            Bug ID: 56313
           Summary: Tomcat 8 crashes in tcnative-1.dll+0x7923
           Product: Tomcat Native
           Version: 1.1.29
          Hardware: PC
            Status: NEW
          Severity: major
          Priority: P2
         Component: Library
          Assignee: dev@tomcat.apache.org
          Reporter: ti_mo_n@poczta.fm

Created attachment 31435
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=31435&action=edit
the log from the crash

Tomcat 8 crashed when ~1000 users were browsing a website (JSP front-end,
Struts-2 backend with Java Persistence API, Hibernate, c3p0, MySQL).

No crashes are observed when using JAVA NIO (not tested with JAVA BIO).

The attached file is from the crash.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #9 from Christopher Schultz <ch...@christopherschultz.net> ---
Could you provide a JMeter test case? I'm sure that would be helpful. I'm not
win32 dev, but I'm sure something that can reproduce the issue would be helpful
to whoever looks at this.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #7 from Timcesq <ti...@poczta.fm> ---
Apaprently - yes. I wasn't able to reproduce it with low number of concurrent
users. But it's hard to say if it would never crash or it's just that it would
crash -- only much later.

I used JMeter to simulate high load.

The whole server works flawlessly (including very low request-response latency)
until the very end when it crashes. Nothing exceptional happens in the system:
no unusual disk activity, no other CPU- or RAM-hungry processes. It just
crashes suddenly for no obvious reason.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

ti_mo_n@poczta.fm changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|                            |All

--- Comment #2 from ti_mo_n@poczta.fm ---
APR version is 1.5. OpenSSL 1.0.1f.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #8 from Timcesq <ti...@poczta.fm> ---
With 4000 users, it crashes in less than a minute (Used JMeter to test).

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #10 from Timcesq <ti...@poczta.fm> ---
Created attachment 31441
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=31441&action=edit
JMeter test plan

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

Timcesq <ti...@poczta.fm> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|All                         |Windows 8

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #5 from ti_mo_n@poczta.fm ---
8.0.3 - currently the latest one, AFAIK.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #3 from ti_mo_n@poczta.fm ---
Created attachment 31437
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=31437&action=edit
third one - same issue. Just to show that this is a recurring thing.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #13 from Timcesq <ti...@poczta.fm> ---
A quick workaround would be to check for NULL before doing the read. However,
if the library is designed so that there shouldn't be any NULLs at this point
in the code, such patch would only mask the underlying bug (a race condition
maybe?).

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #4 from Konstantin Kolinko <kn...@gmail.com> ---
> Tomcat 8 crashed

What exactly version of Tomcat 8.0.x ?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #12 from Timcesq <ti...@poczta.fm> ---
What I meant is that the s->pe is NULL, so a read from that address crashes the
application.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #6 from Christopher Schultz <ch...@christopherschultz.net> ---
Does high-load appear to be a required factor?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

ti_mo_n@poczta.fm changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|                            |Windows 8

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

Timcesq <ti...@poczta.fm> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|                            |All

--- Comment #11 from Timcesq <ti...@poczta.fm> ---
I used a debugger to locate the crash address in the source code. It looks like
the crash occurs inside the function "Java_org_apache_tomcat_jni_Poll_poll",
specifically inside the following block:

for (i = 0; i < num; i++) {
    tcn_socket_t *s = (tcn_socket_t *)fd->client_data;
    p->set[i*2+0] = (jlong)(fd->rtnevents);
    p->set[i*2+1] = P2J(s);
    if (remove) {
        apr_pollset_remove(p->pollset, fd);
        APR_RING_REMOVE(s->pe, link);
        APR_RING_INSERT_TAIL(&p->dead_ring, s->pe, tcn_pfde_t, link);
        s->pe = NULL;
        p->nelts--;
#ifdef TCN_DO_STATISTICS
        p->sp_removed++;
#endif
    }
    else {
        /* Update last active with the current time
        * after the poll call.
        */
        s->last_active = now;
    }
    fd ++;
}

The crash address suggests that a read of the "s->pe" variable inside the
"if(remove)" block fails (the variable is null).

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 56313] Tomcat 8 crashes in tcnative-1.dll+0x7923

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56313

--- Comment #1 from ti_mo_n@poczta.fm ---
Created attachment 31436
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=31436&action=edit
another log - same issue

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org