[dev.icinga.com #8553] Crash in ApiClient::TimeoutTimerHandler

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/8553

Created by gbeutner on 2015-02-27 11:54:46 +00:00

Assignee: gbeutner
Status: Resolved (closed on 2015-02-27 13:15:03 +00:00)
Target Version: 2.3.0
Last Update: 2015-02-27 13:15:03 +00:00 (in Redmine)

Icinga Version: 2.3.0
Backport?: No
Include in Changelog: 0

---

Application information:
  Application version: v2.2.0-573-g9567cd6
  Installation root: /usr
  Sysconf directory: /etc
  Run directory: /run
  Local state directory: /var
  Package data directory: /usr/share/icinga2
  State path: /var/lib/icinga2/icinga2.state
  Objects path: /var/cache/icinga2/icinga2.debug
  Vars path: /var/cache/icinga2/icinga2.vars
  PID path: /run/icinga2/icinga2.pid
  Application type: icinga/IcingaApplication
Stacktrace:

    (0) libpthread.so.0:  (+0x10340) [0x7fdf9855e340]
    (1) libc.so.6: gsignal (+0x39) [0x7fdf96d3ccc9]
    (2) libc.so.6: abort (+0x148) [0x7fdf96d400d8]
    (3) libc.so.6:  (+0x73394) [0x7fdf96d79394]
    (4) libc.so.6:  (+0x7f66e) [0x7fdf96d8566e]
    (5) libbase.so: icinga::Object::~Object() (+0x24) [0x7fdf981b1d6c]
    (6) icinga2: icinga::intrusive_ptr_release(icinga::Object*) (+0x51) [0x42a200]
    (7) libremote.so: boost::intrusive_ptr::~intrusive_ptr() (+0x27) [0x7fdf95180f83]
    (8) libremote.so: icinga::ApiClient::TimeoutTimerHandler() (+0x184) [0x7fdf9517c40a]
    (9) libremote.so: boost::_mfi::mf0::operator()(icinga::ApiClient*) const (+0x65) [0x7fdf95190eed]
    (10) libremote.so: void boost::_bi::list1 >::operator(), boost::_bi::list1 const&> >(boost::_bi::type, boost::_mfi::mf0&, boost::_bi::list1 const&>&, int) (+0x4a) [0x7fdf951965ac]
    (11) libremote.so: void boost::_bi::bind_t, boost::_bi::list1 > >::operator() >(boost::intrusive_ptr const&) (+0x44) [0x7fdf95193bac]
    (12) libremote.so: boost::detail::function::void_function_obj_invoker1, boost::_bi::list1 > >, void, boost::intrusive_ptr const&>::invoke(boost::detail::function::function_buffer&, boost::intrusive_ptr const&) (+0x2b) [0x7fdf95190f58]
    (13) libbase.so: boost::function1 const&>::operator()(boost::intrusive_ptr const&) const (+0x5d) [0x7fdf981fbe2f]
    (14) libbase.so: boost::signals2::detail::signal1_impl const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker::m_invoke(boost::shared_ptr >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > const&, boost::signals2::detail::void_type const*) const (+0x41) [0x7fdf981fbd69]
    (15) libbase.so: boost::signals2::detail::signal1_impl const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker::operator()(boost::shared_ptr >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > const&) const (+0x30) [0x7fdf981fbc2e]
    (16) libbase.so: boost::signals2::detail::slot_call_iterator_t const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> >::dereference() const (+0x47) [0x7fdf981fb1ef]
    (17) libbase.so: boost::signals2::detail::slot_call_iterator_t const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> >::reference boost::iterator_core_access::dereference const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >(boost::signals2::detail::slot_call_iterator_t const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > const&) (+0x18) [0x7fdf981f975c]
    (18) libbase.so: boost::iterator_facade const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> >, boost::signals2::detail::void_type, boost::single_pass_traversal_tag, boost::signals2::detail::void_type const&, long>::operator*() const (+0x20) [0x7fdf981f8f04]
    (19) libbase.so: void boost::signals2::optional_last_value::operator() const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >(boost::signals2::detail::slot_call_iterator_t const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> >, boost::signals2::detail::slot_call_iterator_t const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> >) const (+0x17) [0x7fdf981f837b]
    (20) libbase.so: void boost::signals2::detail::combiner_invoker::operator(), boost::signals2::detail::slot_call_iterator_t const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >(boost::signals2::optional_last_value&, boost::signals2::detail::slot_call_iterator_t const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> >, boost::signals2::detail::slot_call_iterator_t const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::slot_invoker, std::_List_iterator >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> > >, boost::signals2::detail::connection_body >, boost::signals2::slot1 const&, boost::function const&)> >, boost::signals2::mutex> >) const (+0x63) [0x7fdf981f6f7f]
    (21) libbase.so: boost::signals2::detail::signal1_impl const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::operator()(boost::intrusive_ptr const&) (+0x26c) [0x7fdf981f5d46]
    (22) libbase.so: boost::signals2::signal1 const&, boost::signals2::optional_last_value, int, std::less, boost::function const&)>, boost::function const&)>, boost::signals2::mutex>::operator()(boost::intrusive_ptr const&) (+0x2f) [0x7fdf981f4fbf]
    (23) libbase.so: icinga::Timer::Call() (+0x3c) [0x7fdf981f3ee4]
    (24) libbase.so: void boost::_mfi::mf0::call >(boost::intrusive_ptr&, void const*) const (+0x6a) [0x7fdf981fbd12]
    (25) libbase.so: void boost::_mfi::mf0::operator() >(boost::intrusive_ptr&) const (+0x2f) [0x7fdf981fbb89]
    (26) libbase.so: void boost::_bi::list1 > >::operator(), boost::_bi::list0>(boost::_bi::type, boost::_mfi::mf0&, boost::_bi::list0&, int) (+0x4a) [0x7fdf981fb014]
    (27) libbase.so: boost::_bi::bind_t, boost::_bi::list1 > > >::operator()() (+0x39) [0x7fdf981f9543]
    (28) libbase.so: boost::detail::function::void_function_obj_invoker0, boost::_bi::list1 > > >, void>::invoke(boost::detail::function::function_buffer&) (+0x20) [0x7fdf981f8ad4]
    (29) libbase.so: boost::function0::operator()() const (+0x52) [0x7fdf98147a16]
    (30) libbase.so: icinga::ThreadPool::WorkerThread::ThreadProc(icinga::ThreadPool::Queue&) (+0x2cd) [0x7fdf981eadd9]
    (31) libbase.so: boost::_mfi::mf1::operator()(icinga::ThreadPool::WorkerThread&, icinga::ThreadPool::Queue&) const (+0x70) [0x7fdf981f3ba0]
    (32) libbase.so: void boost::_bi::list2, boost::reference_wrapper >::operator(), boost::_bi::list0>(boost::_bi::type, boost::_mfi::mf1&, boost::_bi::list0&, int) (+0x69) [0x7fdf981f3a87]
    (33) libbase.so: boost::_bi::bind_t, boost::_bi::list2, boost::reference_wrapper > >::operator()() (+0x39) [0x7fdf981f3779]
    (34) libbase.so: boost::detail::thread_data, boost::_bi::list2, boost::reference_wrapper > > >::run() (+0x1e) [0x7fdf981f348a]
    (35) libboost_thread.so.1.54.0:  (+0xba4a) [0x7fdf98be9a4a]
    (36) libpthread.so.0:  (+0x8182) [0x7fdf98556182]
    (37) libc.so.6: clone (+0x6d) [0x7fdf96e0047d]

***
* This would indicate a runtime problem or configuration error. If you believe this is a bug in Icinga 2
* please submit a bug report at https://dev.icinga.org/ and include this stack trace as well as any other
* information that might be useful in order to reproduce this problem.
***

Changesets

2015-02-27 13:12:50 +00:00 by (unknown) 2884e83

Fix null pointer dereference in ApiClient::TimeoutTimerHandler

fixes #8553

[icinga-migration]

Updated by gbeutner on 2015-02-27 11:56:45 +00:00

*** Error in `/usr/sbin/icinga2': double free or corruption (!prev): 0x00007fddf4055ff0 ***
Caught SIGABRT.
Current time: 2015-02-27 12:52:36 +0100

[icinga-migration]

Updated by Anonymous on 2015-02-27 13:15:03 +00:00

• Status changed from Assigned to Resolved
• Done % changed from 0 to 100

Applied in changeset 2884e83.