corrupted double-linked list

[BiscuitKrueger]

Describe the bug

process gets SIGABRT and displays error in title; crashes happen randomly every 10-12 hours

Steps to reproduce

1. install the ARM64 version
2. ???

Version

Server: MTA:SA Server v1.6-release-22314
OS: Ubuntu 22.04.3 LTS aarch64

Additional context

did not happen with the exact same set of resources on x86; pinpointing poorly coded memory management on arm binaries as the issue

Relevant log output

(gdb) i sh
From                To                  Syms Read   Shared Object Library
0x0000fffff7fc3c40  0x0000fffff7fe20a4  Yes         /lib/ld-linux-aarch64.so.1
0x0000fffff7fa0550  0x0000fffff7fa0644  Yes         /lib/aarch64-linux-gnu/libdl.so.2
0x0000fffff7e0df00  0x0000fffff7f0f0ac  Yes (*)     /lib/aarch64-linux-gnu/libstdc++.so.6
0x0000fffff7d42bc0  0x0000fffff7d50e50  Yes (*)     /lib/aarch64-linux-gnu/libgcc_s.so.1
0x0000fffff7d20730  0x0000fffff7d20824  Yes         /lib/aarch64-linux-gnu/libpthread.so.0
0x0000fffff7b97040  0x0000fffff7ca3090  Yes         /lib/aarch64-linux-gnu/libc.so.6
0x0000fffff7adca50  0x0000fffff7b23e80  Yes         /lib/aarch64-linux-gnu/libm.so.6
0x0000fffff7a76770  0x0000fffff7aad70c  Yes (*)     ./arm64/core.so
0x0000fffff7a37440  0x0000fffff7a564a8  Yes (*)     /lib/aarch64-linux-gnu/libncursesw.so.5
0x0000fffff79fcf80  0x0000fffff7a0a688  Yes (*)     /lib/aarch64-linux-gnu/libtinfo.so.5
0x0000fffff73ffc50  0x0000fffff753888c  Yes (*)     /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/net.so
0x0000fffff7352040  0x0000fffff7361d58  Yes (*)     /lib/aarch64-linux-gnu/libz.so.1
0x0000fffff72f6e20  0x0000fffff732b2dc  Yes (*)     /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/xmll.so
0x0000fffff693a380  0x0000fffff6f67090  Yes (*)     /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
(*): Shared library is missing debugging information.
(gdb) bt
#0  __pthread_kill_implementation (threadid=281474842230816, signo=signo@entry=6, no_tid=no_tid@entry=0) at ./nptl/pthread_kill.c:44
#1  0x0000fffff7bef254 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at ./nptl/pthread_kill.c:78
#2  0x0000fffff7baa67c in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#3  0x0000fffff7b97130 in __GI_abort () at ./stdlib/abort.c:79
#4  0x0000fffff7be3308 in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0xfffff7cc43b8 "%s\n") at ../sysdeps/posix/libc_fatal.c:155
#5  0x0000fffff7bf957c in malloc_printerr (str=str@entry=0xfffff7cbf4f8 "corrupted double-linked list") at ./malloc/malloc.c:5664
#6  0x0000fffff7bf9ec4 in unlink_chunk (p=p@entry=0xaaaaadd128c0, av=<optimized out>) at ./malloc/malloc.c:1635
#7  0x0000fffff7bfa044 in malloc_consolidate (av=av@entry=0xfffff7d0bb10 <main_arena>) at ./malloc/malloc.c:4779
#8  0x0000fffff7bfc244 in _int_malloc (av=av@entry=0xfffff7d0bb10 <main_arena>, bytes=bytes@entry=1592) at ./malloc/malloc.c:3965
#9  0x0000fffff7bfd6dc in __GI___libc_malloc (bytes=1592) at ./malloc/malloc.c:3329
#10 0x0000fffff7e143ac in operator new(unsigned long) () from /lib/aarch64-linux-gnu/libstdc++.so.6
#11 0x0000fffff742b5cc in ?? () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/net.so
#12 0x0000fffff6b374f4 in CStaticFunctionDefinitions::MoveObject(CResource*, CElement*, unsigned long, CVector const&, CVector const&, CEasingCurve::eType, double, double, double) ()
   from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#13 0x0000fffff6c472d0 in CLuaObjectDefs::MoveObject(lua_State*) () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#14 0x0000fffff6d107b8 in luaD_precall () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#15 0x0000fffff6d25ae8 in luaV_execute () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#16 0x0000fffff6d10e10 in luaD_call () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#17 0x0000fffff6d10138 in luaD_rawrunprotected () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#18 0x0000fffff6d11120 in luaD_pcall () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#19 0x0000fffff6d09938 in lua_pcall () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#20 0x0000fffff6b72ce4 in CLuaMain::PCall(lua_State*, int, int, int) () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#21 0x0000fffff6b5bb8c in CLuaArguments::Call(CLuaMain*, CLuaFunctionRef const&, CLuaArguments*) const () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#22 0x0000fffff6b79a74 in CLuaTimer::ExecuteTimer(CLuaMain*) () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#23 0x0000fffff6b7afa8 in CLuaTimerManager::DoPulse(CLuaMain*) () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#24 0x0000fffff6b760f0 in CLuaManager::DoPulse() () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#25 0x0000fffff69ffed8 in CGame::DoPulse() () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#26 0x0000fffff69593ac in CServer::DoPulse() () from /home/ubuntu/multitheftauto_linux_arm64-1.6.0-rc-22374/arm64/deathmatch.so
#27 0x0000fffff7a7acd8 in CServerImpl::MainLoop() () from ./arm64/core.so
#28 0x0000fffff7a7bc78 in CServerImpl::Run(int, char**) () from ./arm64/core.so
#29 0x0000fffff7a93028 in Run () from ./arm64/core.so
#30 0x0000aaaaaaaa1694 in main ()
(gdb) info threads
  Id   Target Id                                           Frame
* 1    Thread 0xfffff7fc0020 (LWP 38133) "mta-server-arm6" __pthread_kill_implementation (threadid=281474842230816, signo=signo@entry=6, no_tid=no_tid@entry=0) at ./nptl/pthread_kill.c:44
  2    Thread 0xfffff688f100 (LWP 38135) "mta-server-arm6" 0x0000fffff7c21994 in __GI___clock_nanosleep (clock_id=<optimized out>, clock_id@entry=0, flags=flags@entry=0, req=0xfffff688e7e0, rem=0xfffff688e7e0)
    at ../sysdeps/unix/sysv/linux/clock_nanosleep.c:78
  3    Thread 0xfffff607f100 (LWP 38136) "mta-server-arm6" 0x0000fffff7c21994 in __GI___clock_nanosleep (clock_id=<optimized out>, clock_id@entry=0, flags=flags@entry=0, req=0xfffff607e7e0, rem=0xfffff607e7e0)
    at ../sysdeps/unix/sysv/linux/clock_nanosleep.c:78
  4    Thread 0xfffff586f100 (LWP 38137) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0xfffff586e7e8, op=393, expected=0, futex_word=0xaaaaaada1780) at ./nptl/futex-internal.c:57
  5    Thread 0xfffff505f100 (LWP 38138) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0, futex_word=0xaaaaaadb32ac) at ./nptl/futex-internal.c:57
  6    Thread 0xfffff484f100 (LWP 38139) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0, futex_word=0xaaaaaadb32ac) at ./nptl/futex-internal.c:57
  7    Thread 0xffffeffff100 (LWP 38140) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0, futex_word=0xaaaaaadb32ac) at ./nptl/futex-internal.c:57
  8    Thread 0xffffef7ef100 (LWP 38141) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0, futex_word=0xaaaaaadb32ac) at ./nptl/futex-internal.c:57
  9    Thread 0xffffeefdf100 (LWP 38142) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0, futex_word=0xaaaaaadb32ac) at ./nptl/futex-internal.c:57
  10   Thread 0xffffee7cf100 (LWP 38143) "mta-server-arm6" 0x0000fffff7c4be38 in __GI___poll (fds=0xaaaaaadb3324, nfds=1, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:41
  11   Thread 0xffffedfbf100 (LWP 38144) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0, futex_word=0xaaaaaadb32ac) at ./nptl/futex-internal.c:57
  12   Thread 0xffffed7af100 (LWP 38145) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0, futex_word=0xaaaaaadb32ac) at ./nptl/futex-internal.c:57
  13   Thread 0xffffecf9f100 (LWP 38146) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0,
    futex_word=0xfffff72b5e2c <SharedUtil::CThreadPool::getDefaultThreadPool()::DefaultThreadPool+196>) at ./nptl/futex-internal.c:57
  14   Thread 0xffffec78f100 (LWP 38147) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0,
    futex_word=0xfffff72b5e2c <SharedUtil::CThreadPool::getDefaultThreadPool()::DefaultThreadPool+196>) at ./nptl/futex-internal.c:57
  15   Thread 0xffffebf7f100 (LWP 38148) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0,
    futex_word=0xfffff72b5e28 <SharedUtil::CThreadPool::getDefaultThreadPool()::DefaultThreadPool+192>) at ./nptl/futex-internal.c:57
  16   Thread 0xffffeb76f100 (LWP 38149) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0,
    futex_word=0xfffff72b5e28 <SharedUtil::CThreadPool::getDefaultThreadPool()::DefaultThreadPool+192>) at ./nptl/futex-internal.c:57
  17   Thread 0xffffeaf5f100 (LWP 38151) "mta-server-arm6" 0x0000fffff7c21994 in __GI___clock_nanosleep (clock_id=<optimized out>, clock_id@entry=0, flags=flags@entry=0, req=req@entry=0xffffeaf5e7d8, rem=rem@entry=0x0)
    at ../sysdeps/unix/sysv/linux/clock_nanosleep.c:78
  18   Thread 0xffffea74f100 (LWP 38152) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0xffffea74e808, op=393, expected=0, futex_word=0xaaaaaafc3848) at ./nptl/futex-internal.c:57
  20   Thread 0xffffe972f100 (LWP 38154) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0xffffe972e808, op=393, expected=0, futex_word=0xaaaaaaec41a0) at ./nptl/futex-internal.c:57
  21   Thread 0xffffe8f1f100 (LWP 38155) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0xffffe8f1e7e8, op=393, expected=0, futex_word=0xaaaaab331b70) at ./nptl/futex-internal.c:57
  22   Thread 0xffffe9f3f100 (LWP 38156) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0xffffe9f3e808, op=393, expected=0, futex_word=0xaaaaab387fa8) at ./nptl/futex-internal.c:57
  24   Thread 0xffffe3fff100 (LWP 38158) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0xffffe3ffe808, op=393, expected=0, futex_word=0xaaaaade7b5f8) at ./nptl/futex-internal.c:57
  25   Thread 0xffffe37ef100 (LWP 38159) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0xffffe37ee808, op=393, expected=0, futex_word=0xaaaaaebec4cc) at ./nptl/futex-internal.c:57
  26   Thread 0xffffe2fdf100 (LWP 38160) "mta-server-arm6" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0xffffe2fde808, op=393, expected=0, futex_word=0xffffc0000da8) at ./nptl/futex-internal.c:57

Security Policy

• I have read and understood the Security Policy and this issue is not security related.