Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Workflow crashes (L1TTwinMuxProducer:simTwinMuxDigis) #21059

Closed
davidlt opened this issue Oct 28, 2017 · 17 comments
Closed

Workflow crashes (L1TTwinMuxProducer:simTwinMuxDigis) #21059

davidlt opened this issue Oct 28, 2017 · 17 comments

Comments

@davidlt
Copy link
Contributor

davidlt commented Oct 28, 2017

There are a number of workflows crashing for slc7_aarch64_gcc700. A quick look at one of them 136.7321 (step2_L1REPACK_HLT.py) pointed to the issue in L1Trigger/L1TTwinMux/src/RPCHitCleaner.cc:92. vcluster_size.size() was returning abnormally high value (jumped from 8 to 209594323). I suspected a stack smashing thus recompiled with:

scram b vclean && USER_CXXFLAGS='-g -fexceptions -fstack-protector-all --param=ssp-buffer-size=4' scram b -v -k -j 64 2>&1 | tee b.log

Smashed stack was confimed on aarch64 and x86_64.
From aarch64:

Begin processing the 5th record. Run 274199, Event 1694768, LumiSection 1 at 28-Oct-2017 15:12:25.835 CEST
*** stack smashing detected ***: cmsRun terminated
======= Backtrace: =========
/lib64/libc.so.6(__fortify_fail+0x48)[0xffffaa5d2d90]
/lib64/libc.so.6(__fortify_fail+0x0)[0xffffaa5d2d48]
/build/davidlt/CMSSW_10_0_X_2017-10-27-1100/lib/slc7_aarch64_gcc700/libL1TriggerL1TTwinMux.so(+0x1ac24)[0xffff8f9fac24]
/build/davidlt/CMSSW_10_0_X_2017-10-27-1100/lib/slc7_aarch64_gcc700/libL1TriggerL1TTwinMux.so(_ZN19L1TTwinMuxAlgorithm3runEN3edm6HandleI22L1MuDTChambPhContainerEENS1_I22L1MuDTChambThContainerEENS1_I18MuonDigiCollectionI8RPCDetId7RPCDigiEEERKNS0_10EventSetupE+0x44c)[0xffff8f9f1c3c]
/build/davidlt/CMSSW_10_0_X_2017-10-27-1100/lib/slc7_aarch64_gcc700/pluginL1TriggerL1TTwinMuxPlugins.so(_ZN18L1TTwinMuxProducer7produceERN3edm5EventERKNS0_10EventSetupE+0x480)[0xffff8fa2f200]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc7_aarch64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc7_aarch64_gcc700/libFWCoreFramework.so(_ZN3edm6stream21EDProducerAdaptorBase7doEventERKNS_14EventPrincipalERKNS_10EventSetupEPNS_16ActivityRegistryEPKNS_20ModuleCallingCont
extE+0xdc)[0xffffac8307b4]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc7_aarch64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc7_aarch64_gcc700/libFWCoreFramework.so(_ZN3edm7WorkerTINS_6stream21EDProducerAdaptorBaseEE6implDoERKNS_14EventPrincipalERKNS_10EventSetupEPKNS_20ModuleCallingContextE+0x6c)
[0xffffac76923c]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc7_aarch64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc7_aarch64_gcc700/libFWCoreFramework.so(_ZN3edm16convertException4wrapIZNS_6Worker9runModuleINS_16OccurrenceTraitsINS_14EventPrincipalELNS_16BranchActionTypeE1EEEEEbRKNT_11M
yPrincipalERKNS_10EventSetupENS_8StreamIDERKNS_13ParentContextEPKNS8_7ContextEEUlvE_EEDTclfp_EES8_+0x28)[0xffffac7111c8]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc7_aarch64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc7_aarch64_gcc700/libFWCoreFramework.so(_ZN3edm6Worker9runModuleINS_16OccurrenceTraitsINS_14EventPrincipalELNS_16BranchActionTypeE1EEEEEbRKNT_11MyPrincipalERKNS_10EventSetup
ENS_8StreamIDERKNS_13ParentContextEPKNS6_7ContextE+0xdc)[0xffffac7113b4]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc7_aarch64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc7_aarch64_gcc700/libFWCoreFramework.so(_ZN3edm6Worker27runModuleAfterAsyncPrefetchINS_16OccurrenceTraitsINS_14EventPrincipalELNS_16BranchActionTypeE1EEEEENSt15__exception_p
tr13exception_ptrEPKS7_RKNT_11MyPrincipalERKNS_10EventSetupENS_8StreamIDERKNS_13ParentContextEPKNSA_7ContextE+0x194)[0xffffac7132dc]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc7_aarch64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc7_aarch64_gcc700/libFWCoreFramework.so(+0x113d7c)[0xffffac713d7c]
/cvmfs/cms-ib.cern.ch/week1/slc7_aarch64_gcc700/cms/cmssw-patch/CMSSW_10_0_X_2017-10-27-1100/external/slc7_aarch64_gcc700/lib/libtbb.so.2(+0x1f128)[0xffffaaedf128]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc7_aarch64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc7_aarch64_gcc700/libFWCoreFramework.so(_ZN3edm14EventProcessor20readAndProcessEventsEv+0x198)[0xffffac7b14c8]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc7_aarch64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc7_aarch64_gcc700/libFWCoreFramework.so(_ZN3edm14EventProcessor15runToCompletionEv+0x4f8)[0xffffac7bae60]
cmsRun[0x40decc]
cmsRun(main+0xd0)[0x40c8b0]
/lib64/libc.so.6(__libc_start_main+0xf0)[0xffffaa500d64]
cmsRun[0x40cba4]

From x86_64:

Begin processing the 1st record. Run 274199, Event 1602598, LumiSection 1 at 28-Oct-2017 15:35:09.565 CEST
Begin processing the 2nd record. Run 274199, Event 30561, LumiSection 1 at 28-Oct-2017 15:35:21.593 CEST
Begin processing the 3rd record. Run 274199, Event 1334257, LumiSection 1 at 28-Oct-2017 15:35:21.836 CEST
Begin processing the 4th record. Run 274199, Event 798589, LumiSection 1 at 28-Oct-2017 15:35:22.080 CEST
Begin processing the 5th record. Run 274199, Event 1694768, LumiSection 1 at 28-Oct-2017 15:35:22.313 CEST
*** stack smashing detected ***: cmsRun terminated
======= Backtrace: =========
/lib64/libc.so.6(__fortify_fail+0x37)[0x7f0917100567]
/lib64/libc.so.6(__fortify_fail+0x0)[0x7f0917100530]
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-27-1100/lib/slc6_amd64_gcc700/libL1TriggerL1TTwinMux.so(_ZN13RPCHitCleaner3runERKN3edm10EventSetupE+0x1127)[0x7f08f9439dd7]
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-27-1100/lib/slc6_amd64_gcc700/libL1TriggerL1TTwinMux.so(_ZN19L1TTwinMuxAlgorithm3runEN3edm6HandleI22L1MuDTChambPhContainerEENS1_I22L1MuDTChambThContainerEENS1_I18MuonDigiCollectionI8RPCDetId7RPCDigiEEERKNS0_10EventSetupE+0x523)[0x7f
08f942ff73]
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-27-1100/lib/slc6_amd64_gcc700/pluginL1TriggerL1TTwinMuxPlugins.so(_ZN18L1TTwinMuxProducer7produceERN3edm5EventERKNS0_10EventSetupE+0x691)[0x7f08f9450091]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so(_ZN3edm6stream21EDProducerAdaptorBase7doEventERKNS_14EventPrincipalERKNS_10EventSetupEPNS_16ActivityRegistryEPKNS_20ModuleCallingContextE
+0xe3)[0x7f0919b42443]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so(_ZN3edm7WorkerTINS_6stream21EDProducerAdaptorBaseEE6implDoERKNS_14EventPrincipalERKNS_10EventSetupEPKNS_20ModuleCallingContextE+0x62)[0x7
f0919a6b3a2]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so(_ZN3edm16convertException4wrapIZNS_6Worker9runModuleINS_16OccurrenceTraitsINS_14EventPrincipalELNS_16BranchActionTypeE1EEEEEbRKNT_11MyPri
ncipalERKNS_10EventSetupENS_8StreamIDERKNS_13ParentContextEPKNS8_7ContextEEUlvE_EEDTclfp_EES8_+0x27)[0x7f0919a23417]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so(_ZN3edm6Worker9runModuleINS_16OccurrenceTraitsINS_14EventPrincipalELNS_16BranchActionTypeE1EEEEEbRKNT_11MyPrincipalERKNS_10EventSetupENS_
8StreamIDERKNS_13ParentContextEPKNS6_7ContextE+0xdd)[0x7f0919a235cd]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so(_ZN3edm6Worker27runModuleAfterAsyncPrefetchINS_16OccurrenceTraitsINS_14EventPrincipalELNS_16BranchActionTypeE1EEEEENSt15__exception_ptr13
exception_ptrEPKS7_RKNT_11MyPrincipalERKNS_10EventSetupENS_8StreamIDERKNS_13ParentContextEPKNSA_7ContextE+0x16b)[0x7f0919a252db]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so(+0x118cfa)[0x7f0919a25cfa]
/cvmfs/cms-ib.cern.ch/week1/slc6_amd64_gcc700/cms/cmssw-patch/CMSSW_10_0_X_2017-10-27-1100/external/slc6_amd64_gcc700/lib/libtbb.so.2(+0x27056)[0x7f091866f056]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so(_ZN3edm14EventProcessor20readAndProcessEventsEv+0x12a)[0x7f0919abc7fa]
/cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so(_ZN3edm14EventProcessor15runToCompletionEv+0x629)[0x7f0919ac7219]
cmsRun[0x40db36]
cmsRun(main+0x13f)[0x40c3ef]
/lib64/libc.so.6(__libc_start_main+0xfd)[0x7f091701cd5d]

Valgrind on x86_64 showed even more issues:

==22835== Invalid read of size 4
==22835==    at 0x2993F3EE: l1t::L1TGlobalUtil::retrieveL1Setup(edm::EventSetup const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libL1TriggerL1TGlobal.so)
==22835==    by 0x2954C45B: L1TGlobalSummary::beginRun(edm::Run const&, edm::EventSetup const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/pluginL1TriggerL1TGlobalPlugins.so)
==22835==    by 0x4C5658A: edm::one::EDAnalyzerBase::doBeginRun(edm::RunPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B7B2DF: edm::WorkerT<edm::one::EDAnalyzerBase>::implDoBegin(edm::RunPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B62121: decltype ({parm#1}()) edm::convertException::wrap<bool edm::Worker::runModule<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >(edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::Context const*)::{lambda()#1}>(bool edm::Worker::runModule<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >(edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::Context const*)::{lambda()#1}) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B62332: bool edm::Worker::runModule<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >(edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::Context const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B62612: std::__exception_ptr::exception_ptr edm::Worker::runModuleAfterAsyncPrefetch<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >(std::__exception_ptr::exception_ptr const*, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::Context const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B629D4: void edm::SerialTaskQueueChain::actionToRun<edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1}>(edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1} const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B62A50: edm::SerialTaskQueue::QueuedTask<void edm::SerialTaskQueueChain::push<edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1}>(edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1} const&)::{lambda()#1}>::execute() (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x5FA6055: tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) (custom_scheduler.h:509)
==22835==    by 0x4BDB0E6: edm::EventProcessor::beginRun(edm::Hash<2> const&, unsigned int) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4BDC074: edm::EventProcessor::runToCompletion() (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==  Address 0x36191b98 is 0 bytes after a block of size 24 alloc'd
==22835==    at 0x402919A: operator new(unsigned long) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/external/valgrind/3.12.99-fmblme3/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==22835==    by 0x21F60ABA: RPCRollSpecs::RPCRollSpecs(GeomDetEnumerators::SubDetector, std::string const&, std::vector<float, std::allocator<float> > const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libGeometryRPCGeometry.so)
==22835==    by 0x28A0C90E: RPCGeometryBuilderFromCondDB::build(RecoIdealGeometry const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libGeometryRPCGeometryBuilder.so)
==22835==    by 0x289F932A: RPCGeometryESModule::produce(MuonGeometryRecord const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/pluginRPCGeometryESModule.so)
==22835==    by 0x289FB36F: edm::eventsetup::CallbackProxy<edm::eventsetup::Callback<RPCGeometryESModule, std::shared_ptr<RPCGeometry>, MuonGeometryRecord, edm::eventsetup::CallbackSimpleDecorator<MuonGeometryRecord> >, MuonGeometryRecord, std::shared_ptr<RPCGeometry> >::getImpl(edm::eventsetup::EventSetupRecord const&, edm::eventsetup::DataKey const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/pluginRPCGeometryESModule.so)
==22835==    by 0x4BBEBA6: edm::eventsetup::DataProxy::get(edm::eventsetup::EventSetupRecord const&, edm::eventsetup::DataKey const&, bool) const (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4BB876A: edm::eventsetup::EventSetupRecord::getFromProxy(edm::eventsetup::DataKey const&, edm::eventsetup::ComponentDescription const*&, bool) const (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x3C420D12: AngleConverter::checkAndUpdateGeometry(edm::EventSetup const&, unsigned int) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libL1TriggerL1TMuonOverlap.so)
==22835==    by 0x3C440F1E: OMTFinputMaker::initialize(edm::EventSetup const&, OMTFConfiguration const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libL1TriggerL1TMuonOverlap.so)
==22835==    by 0x3C41854A: OMTFReconstruction::beginRun(edm::Run const&, edm::EventSetup const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libL1TriggerL1TMuonOverlap.so)
==22835==    by 0x4B6866A: edm::EDProducer::doBeginRun(edm::RunPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B7A2DF: edm::WorkerT<edm::EDProducer>::implDoBegin(edm::RunPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)

==22835== Invalid read of size 4
==22835==    at 0x2993D218: l1t::L1TGlobalUtil::retrieveL1Event(edm::Event const&, edm::EventSetup const&, edm::EDGetToken) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libL1TriggerL1TGlobal.so)
==22835==    by 0x2954F8F5: L1TGlobalSummary::analyze(edm::Event const&, edm::EventSetup const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/pluginL1TriggerL1TGlobalPlugins.so)
==22835==    by 0x4C56469: edm::one::EDAnalyzerBase::doEvent(edm::EventPrincipal const&, edm::EventSetup const&, edm::ActivityRegistry*, edm::ModuleCallingContext const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/sl
c6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B7FCE1: edm::WorkerT<edm::one::EDAnalyzerBase>::implDo(edm::EventPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gc
c700/libFWCoreFramework.so)
==22835==    by 0x4B38416: decltype ({parm#1}()) edm::convertException::wrap<bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::E
ventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*)::{lambda()#1}>(bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::Occurre
nceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*)::{lambda()#1}) (in /cvmfs/cms-ib.cern.ch/n
week-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B385CC: bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContex
t const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B3A2DA: std::__exception_ptr::exception_ptr edm::Worker::runModuleAfterAsyncPrefetch<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(std::__exception_ptr::exception_ptr const*, edm::OccurrenceTraits<edm::EventPrincipal, (edm::Bran
chActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017
-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B3AFD3: void edm::SerialTaskQueueChain::actionToRun<edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::execute()::{lambda()#1}>(edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::B
ranchActionType)1> >::execute()::{lambda()#1} const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B3B0E0: edm::SerialTaskQueue::QueuedTask<void edm::SerialTaskQueueChain::push<edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::execute()::{lambda()#1}>(edm::Worker::RunModuleTask<edm::OccurrenceTraits<ed
m::EventPrincipal, (edm::BranchActionType)1> >::execute()::{lambda()#1} const&)::{lambda()#1}>::execute() (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x5FA6055: tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) (custom_scheduler.h:509)
==22835==    by 0x4BD17F9: edm::EventProcessor::readAndProcessEvents() (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4BDC218: edm::EventProcessor::runToCompletion() (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==  Address 0x36191b98 is 0 bytes after a block of size 24 alloc'd
==22835==    at 0x402919A: operator new(unsigned long) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/external/valgrind/3.12.99-fmblme3/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==22835==    by 0x21F60ABA: RPCRollSpecs::RPCRollSpecs(GeomDetEnumerators::SubDetector, std::string const&, std::vector<float, std::allocator<float> > const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libGeometryRPCGeometry.so)
==22835==    by 0x28A0C90E: RPCGeometryBuilderFromCondDB::build(RecoIdealGeometry const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libGeometryRPCGeometryBuilder.so)
==22835==    by 0x289F932A: RPCGeometryESModule::produce(MuonGeometryRecord const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/pluginRPCGeometryESModule.so)
==22835==    by 0x289FB36F: edm::eventsetup::CallbackProxy<edm::eventsetup::Callback<RPCGeometryESModule, std::shared_ptr<RPCGeometry>, MuonGeometryRecord, edm::eventsetup::CallbackSimpleDecorator<MuonGeometryRecord> >, MuonGeometryRecord, std::shared_ptr<RPCGeometry> >::getImpl(edm::eventsetup::EventSetupRecord const&, edm::eventsetup::DataKey const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/pluginRPCGeometryESModule.so)
==22835==    by 0x4BBEBA6: edm::eventsetup::DataProxy::get(edm::eventsetup::EventSetupRecord const&, edm::eventsetup::DataKey const&, bool) const (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4BB876A: edm::eventsetup::EventSetupRecord::getFromProxy(edm::eventsetup::DataKey const&, edm::eventsetup::ComponentDescription const*&, bool) const (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x3C420D12: AngleConverter::checkAndUpdateGeometry(edm::EventSetup const&, unsigned int) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libL1TriggerL1TMuonOverlap.so)
==22835==    by 0x3C440F1E: OMTFinputMaker::initialize(edm::EventSetup const&, OMTFConfiguration const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libL1TriggerL1TMuonOverlap.so)
==22835==    by 0x3C41854A: OMTFReconstruction::beginRun(edm::Run const&, edm::EventSetup const&) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libL1TriggerL1TMuonOverlap.so)
==22835==    by 0x4B6866A: edm::EDProducer::doBeginRun(edm::RunPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)
==22835==    by 0x4B7A2DF: edm::WorkerT<edm::EDProducer>::implDoBegin(edm::RunPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libFWCoreFramework.so)

==22835== Invalid read of size 4
==22835==    at 0x705F880: pthread_mutex_unlock (in /lib64/libpthread-2.12.so)
==22835==    by 0x129420C9: UnLock (XrdSysPthread.hh:151)
==22835==    by 0x129420C9: UnLock (XrdSysPthread.hh:201)
==22835==    by 0x129420C9: ~XrdSysMutexHelper (XrdSysPthread.hh:212)
==22835==    by 0x129420C9: Destroy (XrdClFileStateHandler.cc:248)
==22835==    by 0x129420C9: XrdCl::FileStateHandler::~FileStateHandler() (XrdClFileStateHandler.cc:378)
==22835==    by 0x1293FEF2: XrdCl::File::~File() (XrdClFile.cc:71)
==22835==    by 0x1293FFB0: XrdCl::File::~File() (XrdClFile.cc:73)
==22835==    by 0x129D3100: DelayedClose::HandleResponseWithHosts(XrdCl::XRootDStatus*, XrdCl::AnyObject*, std::vector<XrdCl::HostInfo, std::allocator<XrdCl::HostInfo> >*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libUtilitiesXrdAdaptor.so)
==22835==    by 0x129455FE: (anonymous namespace)::CloseHandler::HandleResponseWithHosts(XrdCl::XRootDStatus*, XrdCl::AnyObject*, std::vector<XrdCl::HostInfo, std::allocator<XrdCl::HostInfo> >*) (XrdClFileStateHandler.cc:137)
==22835==    by 0x1292DF42: XrdCl::XRootDMsgHandler::HandleResponse() (XrdClXRootDMsgHandler.cc:1113)
==22835==    by 0x1293266E: XrdCl::XRootDMsgHandler::Process(XrdCl::Message*) (XrdClXRootDMsgHandler.cc:335)
==22835==    by 0x12912279: XrdCl::Stream::HandleIncMsgJob::Run(void*) (XrdClStream.hh:289)
==22835==    by 0x1297627A: XrdCl::JobManager::RunJobs() (XrdClJobManager.cc:148)
==22835==    by 0x129764F8: RunRunnerThread (XrdClJobManager.cc:33)
==22835==    by 0x705CAA0: start_thread (in /lib64/libpthread-2.12.so)
==22835==  Address 0x4499c9d8 is 40 bytes inside a block of size 64 free'd
==22835==    at 0x402A1B8: operator delete(void*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/external/valgrind/3.12.99-fmblme3/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==22835==    by 0x129422B8: ~ResponseHandlerHolder (XrdClFileStateHandler.cc:302)
==22835==    by 0x129422B8: DestroyMyself (XrdClFileStateHandler.cc:297)
==22835==    by 0x129422B8: Destroy (XrdClFileStateHandler.cc:256)
==22835==    by 0x129422B8: XrdCl::FileStateHandler::~FileStateHandler() (XrdClFileStateHandler.cc:378)
==22835==    by 0x1293FEF2: XrdCl::File::~File() (XrdClFile.cc:71)
==22835==    by 0x1293FFB0: XrdCl::File::~File() (XrdClFile.cc:73)
==22835==    by 0x129D3100: DelayedClose::HandleResponseWithHosts(XrdCl::XRootDStatus*, XrdCl::AnyObject*, std::vector<XrdCl::HostInfo, std::allocator<XrdCl::HostInfo> >*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/slc6_amd64_gcc700/libUtilitiesXrdAdaptor.so)
==22835==    by 0x129455FE: (anonymous namespace)::CloseHandler::HandleResponseWithHosts(XrdCl::XRootDStatus*, XrdCl::AnyObject*, std::vector<XrdCl::HostInfo, std::allocator<XrdCl::HostInfo> >*) (XrdClFileStateHandler.cc:137)
==22835==    by 0x1292DF42: XrdCl::XRootDMsgHandler::HandleResponse() (XrdClXRootDMsgHandler.cc:1113)
==22835==    by 0x1293266E: XrdCl::XRootDMsgHandler::Process(XrdCl::Message*) (XrdClXRootDMsgHandler.cc:335)
==22835==    by 0x12912279: XrdCl::Stream::HandleIncMsgJob::Run(void*) (XrdClStream.hh:289)
==22835==    by 0x1297627A: XrdCl::JobManager::RunJobs() (XrdClJobManager.cc:148)
==22835==    by 0x129764F8: RunRunnerThread (XrdClJobManager.cc:33)
==22835==    by 0x705CAA0: start_thread (in /lib64/libpthread-2.12.so)
==22835==  Block was alloc'd at
==22835==    at 0x402919A: operator new(unsigned long) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/external/valgrind/3.12.99-fmblme3/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==22835==    by 0x129441F6: XrdCl::FileStateHandler::ReOpenFileAtServer(XrdCl::URL const&, unsigned short) (XrdClFileStateHandler.cc:1622)
==22835==    by 0x129464FE: XrdCl::FileStateHandler::RunRecovery() (XrdClFileStateHandler.cc:1532)
==22835==    by 0x12947088: XrdCl::FileStateHandler::RecoverMessage(XrdCl::FileStateHandler::RequestData, bool) (XrdClFileStateHandler.cc:1494)
==22835==    by 0x1294BEEB: XrdCl::FileStateHandler::OnStateError(XrdCl::XRootDStatus*, XrdCl::Message*, XrdCl::ResponseHandler*, XrdCl::MessageSendParams&) (XrdClFileStateHandler.cc:1242)
==22835==    by 0x1294C2E8: (anonymous namespace)::StatefulHandler::HandleResponseWithHosts(XrdCl::XRootDStatus*, XrdCl::AnyObject*, std::vector<XrdCl::HostInfo, std::allocator<XrdCl::HostInfo> >*) (XrdClFileStateHandler.cc:199)
==22835==    by 0x1292DF42: XrdCl::XRootDMsgHandler::HandleResponse() (XrdClXRootDMsgHandler.cc:1113)
==22835==    by 0x12930558: XrdCl::XRootDMsgHandler::HandleError(XrdCl::Status, XrdCl::Message*) (XrdClXRootDMsgHandler.cc:1856)
==22835==    by 0x12930B07: XrdCl::XRootDMsgHandler::OnStatusReady(XrdCl::Message const*, XrdCl::Status) (XrdClXRootDMsgHandler.cc:1010)
==22835==    by 0x1291AE20: XrdCl::OutQueue::Report(XrdCl::Status) (XrdClOutQueue.cc:79)
==22835==    by 0x1290FA86: XrdCl::Stream::OnError(unsigned short, XrdCl::Status) (XrdClStream.cc:845)
==22835==    by 0x1290FEF9: XrdCl::Stream::OnReadTimeout(unsigned short, bool&) (XrdClStream.cc:960)

==22835== Invalid write of size 4
==22835==    at 0x705F8DF: pthread_mutex_unlock (in /lib64/libpthread-2.12.so)
==22835==    by 0x129420C9: UnLock (XrdSysPthread.hh:151)
==22835==    by 0x129420C9: UnLock (XrdSysPthread.hh:201)
==22835==    by 0x129420C9: ~XrdSysMutexHelper (XrdSysPthread.hh:212)
==22835==    by 0x129420C9: Destroy (XrdClFileStateHandler.cc:248)
==22835==    by 0x129420C9: XrdCl::FileStateHandler::~FileStateHandler() (XrdClFileStateHandler.cc:378)
==22835==    by 0x1293FEF2: XrdCl::File::~File() (XrdClFile.cc:71)
==22835==    by 0x1293FFB0: XrdCl::File::~File() (XrdClFile.cc:73)
==22835==    by 0x129D3100: DelayedClose::HandleResponseWithHosts(XrdCl::XRootDStatus*, XrdCl::AnyObject*, std::vector<XrdCl::HostInfo, std::allocator<XrdCl::HostInfo> >*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/s
lc6_amd64_gcc700/libUtilitiesXrdAdaptor.so)
==22835==    by 0x129455FE: (anonymous namespace)::CloseHandler::HandleResponseWithHosts(XrdCl::XRootDStatus*, XrdCl::AnyObject*, std::vector<XrdCl::HostInfo, std::allocator<XrdCl::HostInfo> >*) (XrdClFileStateHandler.cc:137)
==22835==    by 0x1292DF42: XrdCl::XRootDMsgHandler::HandleResponse() (XrdClXRootDMsgHandler.cc:1113)
==22835==    by 0x1293266E: XrdCl::XRootDMsgHandler::Process(XrdCl::Message*) (XrdClXRootDMsgHandler.cc:335)
==22835==    by 0x12912279: XrdCl::Stream::HandleIncMsgJob::Run(void*) (XrdClStream.hh:289)
==22835==    by 0x1297627A: XrdCl::JobManager::RunJobs() (XrdClJobManager.cc:148)
==22835==    by 0x129764F8: RunRunnerThread (XrdClJobManager.cc:33)
==22835==    by 0x705CAA0: start_thread (in /lib64/libpthread-2.12.so)
==22835==  Address 0x4499c9cc is 28 bytes inside a block of size 64 free'd
==22835==    at 0x402A1B8: operator delete(void*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/external/valgrind/3.12.99-fmblme3/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==22835==    by 0x129422B8: ~ResponseHandlerHolder (XrdClFileStateHandler.cc:302)
==22835==    by 0x129422B8: DestroyMyself (XrdClFileStateHandler.cc:297)
==22835==    by 0x129422B8: Destroy (XrdClFileStateHandler.cc:256)
==22835==    by 0x129422B8: XrdCl::FileStateHandler::~FileStateHandler() (XrdClFileStateHandler.cc:378)
==22835==    by 0x1293FEF2: XrdCl::File::~File() (XrdClFile.cc:71)
==22835==    by 0x1293FFB0: XrdCl::File::~File() (XrdClFile.cc:73)
==22835==    by 0x129D3100: DelayedClose::HandleResponseWithHosts(XrdCl::XRootDStatus*, XrdCl::AnyObject*, std::vector<XrdCl::HostInfo, std::allocator<XrdCl::HostInfo> >*) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-26-1100/lib/s
lc6_amd64_gcc700/libUtilitiesXrdAdaptor.so)
==22835==    by 0x129455FE: (anonymous namespace)::CloseHandler::HandleResponseWithHosts(XrdCl::XRootDStatus*, XrdCl::AnyObject*, std::vector<XrdCl::HostInfo, std::allocator<XrdCl::HostInfo> >*) (XrdClFileStateHandler.cc:137)
==22835==    by 0x1292DF42: XrdCl::XRootDMsgHandler::HandleResponse() (XrdClXRootDMsgHandler.cc:1113)
==22835==    by 0x1293266E: XrdCl::XRootDMsgHandler::Process(XrdCl::Message*) (XrdClXRootDMsgHandler.cc:335)
==22835==    by 0x12912279: XrdCl::Stream::HandleIncMsgJob::Run(void*) (XrdClStream.hh:289)
==22835==    by 0x1297627A: XrdCl::JobManager::RunJobs() (XrdClJobManager.cc:148)
==22835==    by 0x129764F8: RunRunnerThread (XrdClJobManager.cc:33)
==22835==    by 0x705CAA0: start_thread (in /lib64/libpthread-2.12.so)
==22835==  Block was alloc'd at
==22835==    at 0x402919A: operator new(unsigned long) (in /cvmfs/cms-ib.cern.ch/nweek-02495/slc6_amd64_gcc700/external/valgrind/3.12.99-fmblme3/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==22835==    by 0x129441F6: XrdCl::FileStateHandler::ReOpenFileAtServer(XrdCl::URL const&, unsigned short) (XrdClFileStateHandler.cc:1622)
==22835==    by 0x129464FE: XrdCl::FileStateHandler::RunRecovery() (XrdClFileStateHandler.cc:1532)
==22835==    by 0x12947088: XrdCl::FileStateHandler::RecoverMessage(XrdCl::FileStateHandler::RequestData, bool) (XrdClFileStateHandler.cc:1494)
==22835==    by 0x1294BEEB: XrdCl::FileStateHandler::OnStateError(XrdCl::XRootDStatus*, XrdCl::Message*, XrdCl::ResponseHandler*, XrdCl::MessageSendParams&) (XrdClFileStateHandler.cc:1242)
==22835==    by 0x1294C2E8: (anonymous namespace)::StatefulHandler::HandleResponseWithHosts(XrdCl::XRootDStatus*, XrdCl::AnyObject*, std::vector<XrdCl::HostInfo, std::allocator<XrdCl::HostInfo> >*) (XrdClFileStateHandler.cc:199)
==22835==    by 0x1292DF42: XrdCl::XRootDMsgHandler::HandleResponse() (XrdClXRootDMsgHandler.cc:1113)
==22835==    by 0x12930558: XrdCl::XRootDMsgHandler::HandleError(XrdCl::Status, XrdCl::Message*) (XrdClXRootDMsgHandler.cc:1856)
==22835==    by 0x12930B07: XrdCl::XRootDMsgHandler::OnStatusReady(XrdCl::Message const*, XrdCl::Status) (XrdClXRootDMsgHandler.cc:1010)
==22835==    by 0x1291AE20: XrdCl::OutQueue::Report(XrdCl::Status) (XrdClOutQueue.cc:79)
==22835==    by 0x1290FA86: XrdCl::Stream::OnError(unsigned short, XrdCl::Status) (XrdClStream.cc:845)
==22835==    by 0x1290FEF9: XrdCl::Stream::OnReadTimeout(unsigned short, bool&) (XrdClStream.cc:960)
==22835==
@cmsbuild
Copy link
Contributor

A new Issue was created by @davidlt .

@davidlange6, @Dr15Jones, @smuzaffar can you please review it and eventually sign/assign? Thanks.

cms-bot commands are listed here

@Dr15Jones
Copy link
Contributor

@bbockelm looks like some of the valgrind errors are from DelayedClose::HandleResponseWithHosts

@Dr15Jones
Copy link
Contributor

assign l1, core

@cmsbuild
Copy link
Contributor

New categories assigned: core,l1

@Dr15Jones,@smuzaffar,@mulhearn,@rekovic you have been requested to review this Pull request/Issue and eventually sign? Thanks

@davidlt
Copy link
Contributor Author

davidlt commented Oct 29, 2017

I bumped last night xrootd to tip of stable-4.7.x (4.7.1 is soon to be released) and that seems to solve xrootd issues reported by valgrind. Other L1 issues (reported by valgrind and stack smashing) are still present.

@davidlt
Copy link
Contributor Author

davidlt commented Oct 29, 2017

According to ASan we start making damage stack already on 2nd event. Below are the report. This one was executed with -O0. Seems that here digi->bx() returns 2, then 2 + 3 ends up outside of int strips[5]. There are no checks or protections.

Begin processing the 1st record. Run 274199, Event 1602598, LumiSection 1 at 29-Oct-2017 12:03:55.897 CET
Begin processing the 2nd record. Run 274199, Event 30561, LumiSection 1 at 29-Oct-2017 12:04:21.439 CET
=================================================================
==18719==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffe28943064 at pc 0x7fbcb48a4365 bp 0x7ffe28942cb0 sp 0x7ffe28942ca8
WRITE of size 4 at 0x7ffe28943064 thread T0
    #0 0x7fbcb48a4364 in RPCHitCleaner::run(edm::EventSetup const&) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCHitCleaner.cc:96
    #1 0x7fbcb4880535 in L1TTwinMuxAlgorithm::run(edm::Handle<L1MuDTChambPhContainer>, edm::Handle<L1MuDTChambThContainer>, edm::Handle<MuonDigiCollection<RPCDetId, RPCDigi> >, edm::EventSetup const&) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/L1TTwinMuxAlgorithm.cc:61
    #2 0x7fbcb492c3ae in L1TTwinMuxProducer::produce(edm::Event&, edm::EventSetup const&) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/plugins/L1TTwinMuxProducer.cc:94
    #3 0x7fbcd633a907 in edm::stream::EDProducerAdaptorBase::doEvent(edm::EventPrincipal const&, edm::EventSetup const&, edm::ActivityRegistry*, edm::ModuleCallingContext const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/stream/EDProducerAdaptorBase.cc:58
    #4 0x7fbcd6009d2d in edm::WorkerT<edm::stream::EDProducerAdaptorBase>::implDo(edm::EventPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) (/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/lib/slc6_amd64_gcc700/libFWCoreFramework.so+0x764d2d)
    #5 0x7fbcd5ee05d7 in edm::workerhelper::CallImpl<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::call(edm::Worker*, edm::StreamID, edm::EventPrincipal const&, edm::EventSetup const&, edm::ActivityRegistry*, edm::ModuleCallingContext const*, edm::StreamContext const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:486
    #6 0x7fbcd5ee69e0 in bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*)::{lambda()#1}::operator()() const /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:881
    #7 0x7fbcd5ee8759 in decltype ({parm#1}()) edm::convertException::wrap<bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*)::{lambda()#1}>(bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*)::{lambda()#1}) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Utilities/interface/ConvertException.h:20
    #8 0x7fbcd5ee6d43 in bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:879
    #9 0x7fbcd5ef1220 in std::__exception_ptr::exception_ptr edm::Worker::runModuleAfterAsyncPrefetch<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(std::__exception_ptr::exception_ptr const*, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:699
    #10 0x7fbcd5ef096f in edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::execute() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:410
    #11 0x7fbcd4185055 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) ../../src/tbb/custom_scheduler.h:509
    #12 0x7fbcd619c0bf in tbb::task::spawn_and_wait_for_all(tbb::task&) /cvmfs/cms-ib.cern.ch/nweek-02496/slc6_amd64_gcc700/external/tbb/2018-fmblme/include/tbb/task.h:744
    #13 0x7fbcd618d8aa in edm::EventProcessor::readAndProcessEvents() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/EventProcessor.cc:1423
    #14 0x7fbcd61830c9 in processEvents /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:147
    #15 0x7fbcd618342f in processLumis /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:180
    #16 0x7fbcd6183bac in processRuns /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:241
    #17 0x7fbcd6184407 in processFiles /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:307
    #18 0x7fbcd6184e9f in operator() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/EventProcessor.cc:772
    #19 0x7fbcd6191f2f in wrap<edm::EventProcessor::runToCompletion()::<lambda()> > /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Utilities/interface/ConvertException.h:20
    #20 0x7fbcd61855b5 in edm::EventProcessor::runToCompletion() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/EventProcessor.cc:761
    #21 0x431b0d in operator() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/bin/cmsRun.cpp:362
    #22 0x433a2f in wrap<main(int, char**)::<lambda()> > /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Utilities/interface/ConvertException.h:20
    #23 0x43360c in main /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/bin/cmsRun.cpp:143
    #24 0x7fbcd2b32d5c in __libc_start_main (/lib64/libc.so.6+0x1ed5c)
    #25 0x42d058  (/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/bin/slc6_amd64_gcc700/cmsRun+0x42d058)

Address 0x7ffe28943064 is located in stack of thread T0 at offset 884 in frame
    #0 0x7fbcb48a2b01 in RPCHitCleaner::run(edm::EventSetup const&) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCHitCleaner.cc:33

  This frame has 26 object(s):
    [32, 36) 'cluster_size'
    [96, 104) 'chamber'
    [160, 168) '<unknown>'
    [224, 232) 'detid'
    [288, 296) 'digi'
    [352, 360) 'chamber'
    [416, 424) '<unknown>'
    [480, 488) 'detid'
    [544, 552) 'digi'
    [608, 616) 'digi'
    [672, 688) 'tmp'
    [736, 752) 'tmp'
    [800, 816) 'tmp'
    [864, 884) 'strips' <== Memory access at offset 884 overflows this variable
    [928, 952) 'vcluster_size'
    [992, 1016) '<unknown>'
    [1056, 1080) '<unknown>'
    [1120, 1144) '<unknown>'
    [1184, 1208) '<unknown>'
    [1248, 1272) '<unknown>'
    [1312, 1336) '<unknown>'
    [1376, 1400) '<unknown>'
    [1440, 1464) '<unknown>'
    [1504, 1552) 'hits'
    [1600, 1648) 'bx_hits'
    [1696, 1760) 'digi_out'
HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext
      (longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCHitCleaner.cc:96 in RPCHitCleaner::run(edm::EventSetup const&)
Shadow bytes around the buggy address:
  0x1000451205b0: f2 f2 f8 f2 f2 f2 f2 f2 f2 f2 f8 f2 f2 f2 f2 f2
  0x1000451205c0: f2 f2 f8 f2 f2 f2 f2 f2 f2 f2 00 f2 f2 f2 f2 f2
  0x1000451205d0: f2 f2 f8 f2 f2 f2 f2 f2 f2 f2 00 f2 f2 f2 f2 f2
  0x1000451205e0: f2 f2 f8 f2 f2 f2 f2 f2 f2 f2 00 f2 f2 f2 f2 f2
  0x1000451205f0: f2 f2 f8 f8 f2 f2 f2 f2 f2 f2 f8 f8 f2 f2 f2 f2
=>0x100045120600: f2 f2 00 00 f2 f2 f2 f2 f2 f2 00 00[04]f2 f2 f2
  0x100045120610: f2 f2 00 00 00 f2 f2 f2 f2 f2 f8 f8 f8 f2 f2 f2
  0x100045120620: f2 f2 f8 f8 f8 f2 f2 f2 f2 f2 f8 f8 f8 f2 f2 f2
  0x100045120630: f2 f2 f8 f8 f8 f2 f2 f2 f2 f2 f8 f8 f8 f2 f2 f2
  0x100045120640: f2 f2 f8 f8 f8 f2 f2 f2 f2 f2 f8 f8 f8 f2 f2 f2
  0x100045120650: f2 f2 f8 f8 f8 f2 f2 f2 f2 f2 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==18719==ABORTING

@davidlt
Copy link
Contributor Author

davidlt commented Oct 29, 2017

digi->bx() can also return 3 (at least in this workflow).

@davidlt
Copy link
Contributor Author

davidlt commented Oct 29, 2017

Below you can see details on another bug (might be related to the first one reported by valgrind). Looks like we rely on memory allocated and freed by XML parser. Basically we rely on internal data from XML parser.

29-Oct-2017 12:20:35 CET  Successfully opened file root://eoscms.cern.ch//eos/cms/store/data/Run2016B/ZeroBias/RAW/v2/000/274/199/00000/28AE6C59-8726-E611-BC09-02163E014373.root
=================================================================
==24972==ERROR: AddressSanitizer: heap-use-after-free on address 0x619003e02d88 at pc 0x7f107052790c bp 0x7fff1e73afb0 sp 0x7fff1e73afa8
READ of size 4 at 0x619003e02d88 thread T0
    #0 0x7f107052790b in l1t::L1TGlobalUtil::retrieveL1Setup(edm::EventSetup const&) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/src/L1TGlobalUtil.cc:170
    #1 0x7f1070c7ff35 in L1TGlobalSummary::beginRun(edm::Run const&, edm::EventSetup const&) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/L1TGlobalSummary.cc:106
    #2 0x7f109316c045 in edm::one::impl::RunWatcher<edm::one::EDAnalyzerBase>::doBeginRun_(edm::Run const&, edm::EventSetup const&) (/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/lib/slc6_amd64_gcc700/libFWCoreFramework.so+0xa8b045)
    #3 0x7f10931743f5 in edm::one::EDAnalyzerBase::doBeginRun(edm::RunPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/one/EDAnalyzerBase.cc:89
    #4 0x7f1092e3f248 in edm::WorkerT<edm::one::EDAnalyzerBase>::implDoBegin(edm::RunPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) (/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/lib/slc6_amd64_gcc700/libFWCoreFramework.so+0x75e248)
    #5 0x7f1092d71518 in edm::workerhelper::CallImpl<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::call(edm::Worker*, edm::StreamID, edm::RunPrincipal const&, edm::EventSetup const&, edm::ActivityRegistry*, edm::ModuleCallingContext const*, edm::Gl
obalContext const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:505
    #6 0x7f1092dd70be in bool edm::Worker::runModule<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >(edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext cons
t&, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::Context const*)::{lambda()#1}::operator()() const /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:881
    #7 0x7f1092ddb0ff in decltype ({parm#1}()) edm::convertException::wrap<bool edm::Worker::runModule<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >(edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::MyPrincipal const&, edm::EventSe
tup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::Context const*)::{lambda()#1}>(bool edm::Worker::runModule<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >(edm::OccurrenceTraits<
edm::RunPrincipal, (edm::BranchActionType)0>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::Context const*)::{lambda()#1}) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-2
9-0000/src/FWCore/Utilities/interface/ConvertException.h:20
    #8 0x7f1092dd73b1 in bool edm::Worker::runModule<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >(edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::Context const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:879
    #9 0x7f1092dd28f6 in std::__exception_ptr::exception_ptr edm::Worker::runModuleAfterAsyncPrefetch<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >(std::__exception_ptr::exception_ptr const*, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0>::Context const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:699
    #10 0x7f1092dd0011 in edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1}::operator()() const /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:399
    #11 0x7f1092ddb618 in void edm::SerialTaskQueueChain::actionToRun<edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1}>(edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1} const&) /cvmfs/cms-ib.cern.ch/week0/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Concurrency/interface/SerialTaskQueueChain.h:160
    #12 0x7f1092dd7880 in void edm::SerialTaskQueueChain::push<edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1}>(edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1} const&)::{lambda()#1}::operator()() const /cvmfs/cms-ib.cern.ch/week0/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Concurrency/interface/SerialTaskQueueChain.h:94
    #13 0x7f1092ddf86b in edm::SerialTaskQueue::QueuedTask<void edm::SerialTaskQueueChain::push<edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1}>(edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::RunPrincipal, (edm::BranchActionType)0> >::execute()::{lambda()#1} const&)::{lambda()#1}>::execute() /cvmfs/cms-ib.cern.ch/week0/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Concurrency/interface/SerialTaskQueue.h:216
    #14 0x7f1090fc1055 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) ../../src/tbb/custom_scheduler.h:509
    #15 0x7f1092d1abb4 in tbb::task::wait_for_all() /cvmfs/cms-ib.cern.ch/nweek-02496/slc6_amd64_gcc700/external/tbb/2018-fmblme/include/tbb/task.h:763
    #16 0x7f1092fc370e in edm::EventProcessor::beginRun(edm::Hash<2> const&, unsigned int) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/EventProcessor.cc:970
    #17 0x7f1092fc00ca in processRun /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:272
    #18 0x7f1092fbfb4b in processRuns /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:235
    #19 0x7f1092fc0407 in processFiles /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:307
    #20 0x7f1092fc0e9f in operator() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/EventProcessor.cc:772
    #21 0x7f1092fcdf2f in wrap<edm::EventProcessor::runToCompletion()::<lambda()> > /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Utilities/interface/ConvertException.h:20
    #22 0x7f1092fc15b5 in edm::EventProcessor::runToCompletion() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/EventProcessor.cc:761
    #23 0x431b0d in operator() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/bin/cmsRun.cpp:362
    #24 0x433a2f in wrap<main(int, char**)::<lambda()> > /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Utilities/interface/ConvertException.h:20
    #25 0x43360c in main /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/bin/cmsRun.cpp:143
    #26 0x7f108f96ed5c in __libc_start_main (/lib64/libc.so.6+0x1ed5c)
    #27 0x42d058  (/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/bin/slc6_amd64_gcc700/cmsRun+0x42d058)

0x619003e02d88 is located 520 bytes inside of 1036-byte region [0x619003e02b80,0x619003e02f8c)
freed by thread T0 here:
    #0 0x7f1093542768 in __interceptor_free ../../../../libsanitizer/asan/asan_malloc_linux.cc:45
    #1 0x7f106fa635f1 in poolDestroy lib/xmlparse.c:6139

previously allocated by thread T0 here:
    #0 0x7f1093542ac0 in __interceptor_malloc ../../../../libsanitizer/asan/asan_malloc_linux.cc:62
    #1 0x7f106fa64268 in poolGrow lib/xmlparse.c:6256

SUMMARY: AddressSanitizer: heap-use-after-free /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/src/L1TGlobalUtil.cc:170 in l1t::L1TGlobalUtil::retrieveL1Setup(edm::EventSetup const&)
Shadow bytes around the buggy address:
  0x0c32807b8560: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c32807b8570: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c32807b8580: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c32807b8590: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c32807b85a0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x0c32807b85b0: fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c32807b85c0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c32807b85d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c32807b85e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c32807b85f0: fd fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c32807b8600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==24972==ABORTING

@davidlt
Copy link
Contributor Author

davidlt commented Oct 29, 2017

Looks like in the reported line (m_prescales[algBit]).second = prescaleSet[algBit]; algBit is 450 while the prescaleSet vector has only 256 elements. This probably lands in unused heap memory which was used previously by XML parser.

@davidlt
Copy link
Contributor Author

davidlt commented Oct 29, 2017

Here are the details for next one. Seems to the same issue as in previous. algBit is multiple times out-of-bounds compared to the size of prescaleSet.

=================================================================
==3610==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x619003e160c4 at pc 0x7fb66b9fe002 bp 0x7fffdfc89890 sp 0x7fffdfc89888
READ of size 4 at 0x619003e160c4 thread T0
    #0 0x7fb66b9fe001 in l1t::L1TGlobalUtil::retrieveL1Event(edm::Event const&, edm::EventSetup const&, edm::EDGetToken) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/src/L1TGlobalUtil.cc:249
    #1 0x7fb66b9fcc34 in l1t::L1TGlobalUtil::retrieveL1(edm::Event const&, edm::EventSetup const&, edm::EDGetToken) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/src/L1TGlobalUtil.cc:85
    #2 0x7fb66c158097 in L1TGlobalSummary::analyze(edm::Event const&, edm::EventSetup const&) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/L1TGlobalSummary.cc:169
    #3 0x7fb68e64ac83 in edm::one::EDAnalyzerBase::doEvent(edm::EventPrincipal const&, edm::EventSetup const&, edm::ActivityRegistry*, edm::ModuleCallingContext const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/one/EDAnalyzerBase.cc:62
    #4 0x7fb68e316167 in edm::WorkerT<edm::one::EDAnalyzerBase>::implDo(edm::EventPrincipal const&, edm::EventSetup const&, edm::ModuleCallingContext const*) (/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/lib/slc6_amd64_gcc700/libFWCoreFramework.so+0x75e167)
    #5 0x7fb68e1f35d7 in edm::workerhelper::CallImpl<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::call(edm::Worker*, edm::StreamID, edm::EventPrincipal const&, edm::EventSetup const&, edm::ActivityRegistry*, edm::ModuleCallingContext const*, edm::StreamContext const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:486
    #6 0x7fb68e1f99e0 in bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*)::{lambda()#1}::operator()() const /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:881
    #7 0x7fb68e1fb759 in decltype ({parm#1}()) edm::convertException::wrap<bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*)::{lambda()#1}>(bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*)::{lambda()#1}) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Utilities/interface/ConvertException.h:20
    #8 0x7fb68e1f9d43 in bool edm::Worker::runModule<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:879
    #9 0x7fb68e204220 in std::__exception_ptr::exception_ptr edm::Worker::runModuleAfterAsyncPrefetch<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >(std::__exception_ptr::exception_ptr const*, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::MyPrincipal const&, edm::EventSetup const&, edm::StreamID, edm::ParentContext const&, edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1>::Context const*) /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:699
    #10 0x7fb68e202fb1 in edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::execute()::{lambda()#1}::operator()() const /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/Worker.h:399
    #11 0x7fb68e20556e in void edm::SerialTaskQueueChain::actionToRun<edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::execute()::{lambda()#1}>(edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::execute()::{lambda()#1} const&) (/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/lib/slc6_amd64_gcc700/libFWCoreFramework.so+0x64d56e)
    #12 0x7fb68e2045aa in void edm::SerialTaskQueueChain::push<edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::execute()::{lambda()#1}>(edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::execute()::{lambda()#1} const&)::{lambda()#1}::operator()() const (/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/lib/slc6_amd64_gcc700/libFWCoreFramework.so+0x64c5aa)
    #13 0x7fb68e206da9 in edm::SerialTaskQueue::QueuedTask<void edm::SerialTaskQueueChain::push<edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::execute()::{lambda()#1}>(edm::Worker::RunModuleTask<edm::OccurrenceTraits<edm::EventPrincipal, (edm::BranchActionType)1> >::execute()::{lambda()#1} const&)::{lambda()#1}>::execute() (/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/lib/slc6_amd64_gcc700/libFWCoreFramework.so+0x64eda9)
    #14 0x7fb68c498055 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) ../../src/tbb/custom_scheduler.h:509
    #15 0x7fb68e4af0bf in tbb::task::spawn_and_wait_for_all(tbb::task&) /cvmfs/cms-ib.cern.ch/nweek-02496/slc6_amd64_gcc700/external/tbb/2018-fmblme/include/tbb/task.h:744
    #16 0x7fb68e4a08aa in edm::EventProcessor::readAndProcessEvents() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/EventProcessor.cc:1423
    #17 0x7fb68e4960c9 in processEvents /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:147
    #18 0x7fb68e49642f in processLumis /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:180
    #19 0x7fb68e496bac in processRuns /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:241
    #20 0x7fb68e497407 in processFiles /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/TransitionProcessors.icc:307
    #21 0x7fb68e497e9f in operator() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/EventProcessor.cc:772
    #22 0x7fb68e4a4f2f in wrap<edm::EventProcessor::runToCompletion()::<lambda()> > /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Utilities/interface/ConvertException.h:20
    #23 0x7fb68e4985b5 in edm::EventProcessor::runToCompletion() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/src/EventProcessor.cc:761
    #24 0x431b0d in operator() /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/bin/cmsRun.cpp:362
    #25 0x433a2f in wrap<main(int, char**)::<lambda()> > /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Utilities/interface/ConvertException.h:20
    #26 0x43360c in main /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/FWCore/Framework/bin/cmsRun.cpp:143
    #27 0x7fb68ae45d5c in __libc_start_main (/lib64/libc.so.6+0x1ed5c)
    #28 0x42d058  (/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/bin/slc6_amd64_gcc700/cmsRun+0x42d058)

0x619003e160c4 is located 68 bytes to the right of 1024-byte region [0x619003e15c80,0x619003e16080)
allocated by thread T0 here:
    #0 0x7fb68ea1b1e0 in operator new(unsigned long) ../../../../libsanitizer/asan/asan_new_delete.cc:80
    #1 0x7fb67f3b1e8e in std::vector<int, std::allocator<int> >::reserve(unsigned long) (/cvmfs/cms-ib.cern.ch/week0/slc6_amd64_gcc700/cms/cmssw/CMSSW_10_0_X_2017-10-29-0000/lib/slc6_amd64_gcc700/libIOPoolTFileAdaptor.so+0x1fe8e)

SUMMARY: AddressSanitizer: heap-buffer-overflow /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/src/L1TGlobalUtil.cc:249 in l1t::L1TGlobalUtil::retrieveL1Event(edm::Event const&, edm::EventSetup const&, edm::EDGetToken)
Shadow bytes around the buggy address:
  0x0c32807babc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c32807babd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c32807babe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c32807babf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c32807bac00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0c32807bac10: fa fa fa fa fa fa fa fa[fa]fa fa fa fa fa fa fa
  0x0c32807bac20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c32807bac30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c32807bac40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c32807bac50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c32807bac60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==3610==ABORTING

@davidlt
Copy link
Contributor Author

davidlt commented Oct 29, 2017

There are also instances of undefined behavior:

/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:187:102: runtime error: left shift of negative value -5
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:136:48: runtime error: left shift of negative value -67
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:142:37: runtime error: left shift of negative value -85
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:143:38: runtime error: left shift of negative value -50
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:208:104: runtime error: left shift of negative value -5
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:255:115: runtime error: index -1 out of bounds for type 'int [*]'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:256:38: runtime error: index -1 out of bounds for type 'int [*]'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:252:99: runtime error: left shift of negative value -104
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:205:26: runtime error: left shift of negative value -105
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:249:26: runtime error: left shift of negative value -36
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:1945:26: runtime error: member call on address 0x7fb7ed4bd680 which does not point to an object of type 'esObject'
0x7fb7ed4bd680: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  38 cd 5b ed b7 7f 00 00  03 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:1947:33: runtime error: member call on address 0x7fb7ed4bd680 which does not point to an object of type 'esObject'
0x7fb7ed4bd680: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  38 cd 5b ed b7 7f 00 00  03 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:1985:44: runtime error: member call on address 0x7fb7ed4bd680 which does not point to an object of type 'esObject'
0x7fb7ed4bd680: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  38 cd 5b ed b7 7f 00 00  03 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/cvmfs/cms-ib.cern.ch/nweek-02496/slc6_amd64_gcc700/external/utm/utm_0.6.5-mmelna/include/tmEventSetup/esObject.hh:77:54: runtime error: member access within address 0x7fb7ed4bd680 which does not point to an object of type 'esObject'
0x7fb7ed4bd680: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  38 cd 5b ed b7 7f 00 00  03 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:1988:39: runtime error: member call on address 0x7fb7ed4bd680 which does not point to an object of type 'esObject'
0x7fb7ed4bd680: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  38 cd 5b ed b7 7f 00 00  03 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/cvmfs/cms-ib.cern.ch/nweek-02496/slc6_amd64_gcc700/external/utm/utm_0.6.5-mmelna/include/tmEventSetup/esObject.hh:80:44: runtime error: member access within address 0x7fb7ed4bd680 which does not point to an object of type 'esObject'
0x7fb7ed4bd680: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  38 cd 5b ed b7 7f 00 00  03 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:2003:57: runtime error: member call on address 0x7fb7ed4bd680 which does not point to an object of type 'esObject'
0x7fb7ed4bd680: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  38 cd 5b ed b7 7f 00 00  03 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:3238:46: runtime error: member call on address 0x7fb7ed4bd680 which does not point to an object of type 'esObject'
0x7fb7ed4bd680: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  38 cd 5b ed b7 7f 00 00  03 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:3239:32: runtime error: member call on address 0x7fb7ed4bd680 which does not point to an object of type 'esObject'
0x7fb7ed4bd680: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  38 cd 5b ed b7 7f 00 00  03 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:3231:19: runtime error: member call on address 0x7fb7ed4bd730 which does not point to an object of type 'esObject'
0x7fb7ed4bd730: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  b8 ce 5b ed b7 7f 00 00  02 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:1949:33: runtime error: member call on address 0x7fb7ed4bd730 which does not point to an object of type 'esObject'
0x7fb7ed4bd730: note: object is of type 'L1TUtmObject'
 b7 7f 00 00  a8 ae ea 0c b8 7f 00 00  b8 ce 5b ed b7 7f 00 00  02 00 00 00 00 00 00 00  00 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmObject'
/cvmfs/cms-ib.cern.ch/nweek-02496/slc6_amd64_gcc700/external/gcc/7.0.0-fmblme3/include/c++/7.2.1/bits/unique_ptr.h:323:13: runtime error: reference binding to null pointer of type 'struct WrapperBase'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:348:31: runtime error: member call on address 0x7fb7ed18d728 which does not point to an object of type 'esCondition'
0x7fb7ed18d728: note: object is of type 'L1TUtmCondition'
 b7 7f 00 00  c8 ae ea 0c b8 7f 00 00  d8 38 18 ed b7 7f 00 00  14 00 00 00 36 39 39 01  40 6f fe ec
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmCondition'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:349:31: runtime error: member call on address 0x7fb7ed18d728 which does not point to an object of type 'esCondition'
0x7fb7ed18d728: note: object is of type 'L1TUtmCondition'
 b7 7f 00 00  c8 ae ea 0c b8 7f 00 00  d8 38 18 ed b7 7f 00 00  14 00 00 00 36 39 39 01  40 6f fe ec
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmCondition'
/mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TGlobal/plugins/TriggerMenuParser.cc:350:31: runtime error: member call on address 0x7fb7ed18d728 which does not point to an object of type 'esCondition'
0x7fb7ed18d728: note: object is of type 'L1TUtmCondition'
 b7 7f 00 00  c8 ae ea 0c b8 7f 00 00  d8 38 18 ed b7 7f 00 00  14 00 00 00 36 39 39 01  40 6f fe ec
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'L1TUtmCondition'
[and more]

I looked at the first -1 index error by adding an assert statement and got:

cmsRun: /mnt/build/davidlt/CMSSW_10_0_X_2017-10-29-0000/src/L1Trigger/L1TTwinMux/src/RPCtoDTTranslator.cc:255: void RPCtoDTTranslator::run(const edm::EventSetup&): Assertion `vrpc_hit_st4[l1].bx >= 0' failed.

// Code:
171           int hit[bx_range];
[..]
255               assert(vrpc_hit_st4[l1].bx >= 0);
256               l1ttma_hits_out.emplace_back(vrpc_hit_st4[l1].bx, wh, sec-1, st, phi2, 0, 3, hit[vrpc_hit_st4[l1].bx] , 0, 2);

I can confirm that vrpc_hit_st4[l1].bx returned -1.

@bbockelm
Copy link
Contributor

@Dr15Jones - looking at the stack traces and the contents of the ticket @davidlt filed, I agree with his diagnosis with respect to the Xrootd issues. It appears that CMSSW is using the xrootd API correctly and we triggered a bug in the client.

@Dr15Jones
Copy link
Contributor

@davidlt I think the problem is with the definition of the index for hit. hit is defined here


It looks like the intent was hit[0] was supposed to correspond to the bx of min_rpc_bx.

If that is the case, then the bug is in line 255 which should be changed to have
hit[vrpc_hit_st4[l1].bx - min_rpc_bx]
The same should be done on line 256

If one looks at other lines using hit[], such as

l1ttma_hits_out.emplace_back( vrpc_hit_st3[l1].bx, wh, sec-1, st, phi2, 0, 3, hit[vrpc_hit_st3[l1].bx+2], 0, 2);

we can see that they did attempt to shift the index of hit[] by two which is -min_rpc_bx.

So in addition to fixing line 255 and 256, I would suggest changing

l1ttma_hits_out.emplace_back( vrpc_hit_st3[l1].bx, wh, sec-1, st, phi2, 0, 3, hit[vrpc_hit_st3[l1].bx+2], 0, 2);

to declare those values as const.

@Dr15Jones
Copy link
Contributor

I'll try to make the changes I proposed and create a pull request if it works.

@Dr15Jones
Copy link
Contributor

#21151 corrects the problems with RPCHitCleaner and RPCtoDTTranslator

@davidlt
Copy link
Contributor Author

davidlt commented Nov 10, 2017

Could L1 look into bugs related to l1t::L1TGlobalUtil::retrieveL1Event and l1t::L1TGlobalUtil::retrieveL1Setup?

@smuzaffar
Copy link
Contributor

+core
looks like this has been been. We do not see such crashes in IBs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants