You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@doris.apache.org by GitBox <gi...@apache.org> on 2019/12/11 12:46:10 UTC
[GitHub] [incubator-doris] gaodayue opened a new issue #2433:
heap-use-after-free in TxnManager::force_rollback_tablet_related_txns
gaodayue opened a new issue #2433: heap-use-after-free in TxnManager::force_rollback_tablet_related_txns
URL: https://github.com/apache/incubator-doris/issues/2433
**Describe the bug**
BE built with ASAN reports the following error
```
==32722==ERROR: AddressSanitizer: heap-use-after-free on address 0x6080003bc040 at pc 0x0000013b3570 bp 0x7f45d8997c60 sp 0x7f45d8997c58
READ of size 8 at 0x6080003bc040 thread T886
#0 0x13b356f in doris::TxnManager::force_rollback_tablet_related_txns(doris::OlapMeta*, long, int, doris::UniqueId) /home/gaodayue/doris-git/be/src/olap/txn_manager.cpp:438
#1 0x28442f8 in doris::TaskWorkerPool::_drop_tablet_worker_thread_callback(void*) /home/gaodayue/doris-git/be/src/agent/task_worker_pool.cpp:508
#2 0x7f46699b7e64 in start_thread (/lib64/libpthread.so.0+0x7e64)
#3 0x7f4668dbc88c in clone (/lib64/libc.so.6+0xfe88c)
0x6080003bc040 is located 32 bytes inside of 96-byte region [0x6080003bc020,0x6080003bc080)
freed by thread T886 here:
#0 0xdd37b0 in operator delete(void*) ../../../../libsanitizer/asan/asan_new_delete.cc:124
# .... ignore some frame
#10 0x13b351e in doris::TxnManager::force_rollback_tablet_related_txns(doris::OlapMeta*, long, int, doris::UniqueId) /home/gaodayue/doris-git/be/src/olap/txn_manager.cpp:437
#11 0x28442f8 in doris::TaskWorkerPool::_drop_tablet_worker_thread_callback(void*) /home/gaodayue/doris-git/be/src/agent/task_worker_pool.cpp:508
previously allocated by thread T636 here:
#0 0xdd2ab0 in operator new(unsigned long) ../../../../libsanitizer/asan/asan_new_delete.cc:80
# .... ignore some frame
#7 0x13bc37c in doris::TxnManager::commit_txn(doris::OlapMeta*, long, long, long, int, doris::UniqueId, doris::PUniqueId const&, std::shared_ptr<doris::Rowset> const&, bool) /home/gaodayue/doris-git/be/src/olap/txn_manager.cpp:237
#8 0x12cf77f in doris::DataDir::load() /home/gaodayue/doris-git/be/src/olap/data_dir.cpp:768
#9 0x12659ba in operator() /home/gaodayue/doris-git/be/src/olap/storage_engine.cpp:134
#10 0x12659ba in __invoke_impl<void, doris::StorageEngine::load_data_dirs(const std::vector<doris::DataDir*>&)::<lambda()> > /usr/local/include/c++/7.2.0/bits/invoke.h:60
#11 0x12659ba in __invoke<doris::StorageEngine::load_data_dirs(const std::vector<doris::DataDir*>&)::<lambda()> > /usr/local/include/c++/7.2.0/bits/invoke.h:95
SUMMARY: AddressSanitizer: heap-use-after-free /home/gaodayue/doris-git/be/src/olap/txn_manager.cpp:438 in doris::TxnManager::force_rollback_tablet_related_txns(doris::OlapMeta*, long, int, doris::UniqueId)
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@doris.apache.org
For additional commands, e-mail: commits-help@doris.apache.org