segfault in serf upon Ctrl-C

[Stefan Sperling <st...@elego.de>]

Hi,

in case anyone's interested, I got a segfault in serf when
I cancelled a merge with Ctrl-C:

U    subversion/mod_dav_svn/util.c
U    subversion/libsvn_fs_fs/rep-cache.c
A    subversion/libsvn_fs_fs/rep-cache-db.sql
U    subversion/libsvn_fs_fs/lock.c
^Csubversion/svn/main.c:1059: (apr_err=200015)
svn: Caught signal
Segmentation fault (core dumped)

#0  serf_bucket_mem_free (allocator=0x88e11058, block=0x8608e8a0)
    at buckets/allocator.c:223
223         --allocator->num_alloc;
(gdb) p *allocator
Cannot access memory at address 0x88e11058
(gdb) bt
#0  serf_bucket_mem_free (allocator=0x88e11058, block=0x8608e8a0)
    at buckets/allocator.c:223
#1  0x1c0aa141 in serf_response_destroy_and_data (bucket=0x8608ec20)
    at buckets/response_buckets.c:86
#2  0x1c0a7cda in cancel_request (request=0x81ad84a0, list=0x7d7ac04c, 
    notify_request=0) at context.c:437
#3  0x1c0a8b67 in serf_request_cancel (request=0x2) at context.c:1384
#4  0x1c0a89cf in serf_connection_close (conn=0x7d7ac018) at context.c:1249
#5  0x1c0a7986 in clean_conn (data=0x7d7ac018) at context.c:184
#6  0x1c1ac6d1 in run_cleanups (cref=0x7c54d028)
    at /home/stsp/svn/src/apr-1.3.3/memory/unix/apr_pools.c:2306
#7  0x1c1abe05 in apr_pool_destroy (pool=0x7c54d018)
    at /home/stsp/svn/src/apr-1.3.3/memory/unix/apr_pools.c:774
#8  0x1c1abec7 in apr_pool_destroy (pool=0x81559018)
    at /home/stsp/svn/src/apr-1.3.3/memory/unix/apr_pools.c:771
#9  0x1c00ee52 in main (argc=3, argv=0xcfbc1c98) at subversion/svn/main.c:2127
(gdb) 

The merge was "svn merge ^/trunk" in this working copy:
	Path: .
	URL: https://svn.collab.net/repos/svn/branches/issue-2382
	Repository Root: https://svn.collab.net/repos/svn
	Repository UUID: 612f8ebc-c883-4be0-9ee0-a4e9ef946e3a
	Revision: 37181
	Node Kind: directory
	Schedule: normal
	Last Changed Author: pburba
	Last Changed Rev: 34275
	Last Changed Date: 2008-11-19 23:38:12 +0000 (Wed, 19 Nov 2008)

using r1221 of serf trunk.

Stefan