Re: conntrack segfault

[Bernhard Schmidt <berni@birkenwald.de>]

Hi,

not sure whether this helps, but after what felt like 500 attempts of
running conntrack -L in valgrind I just captured one crash.

secomat2:~ # valgrind -v conntrack -L > /dev/null
==24699== Memcheck, a memory error detector.
==24699== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et
al.
==24699== Using LibVEX rev 1854, a library for dynamic binary
translation.
==24699== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP.
==24699== Using valgrind-3.3.1, a dynamic binary instrumentation
framework.
==24699== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et
al.
==24699== 
--24699-- Command line
--24699--    conntrack
--24699--    -L
--24699-- Startup, with flags:
--24699--    -v
--24699-- Contents of /proc/version:
--24699--   Linux version 2.6.27.23-0.1-default (geeko@buildhost) (gcc
version 4.3.2 [gcc-4_3-branch revision 141291] (SUSE Linux) ) #1 SMP
2009-05-26 17:02:05 -0400
--24699-- Arch and hwcaps: AMD64, amd64-sse2
--24699-- Page sizes: currently 4096, max supported 4096
--24699-- Valgrind library directory: /usr/lib64/valgrind
--24699-- Reading syms from /usr/local/sbin/conntrack (0x400000)
--24699-- Reading syms from /lib64/ld-2.9.so (0x4000000)
--24699--    object doesn't have a symbol table
--24699-- Reading syms from /usr/lib64/valgrind/amd64-linux/memcheck
(0x38000000)
--24699--    object doesn't have a symbol table
--24699--    object doesn't have a dynamic symbol table
--24699-- Reading suppressions file: /usr/lib64/valgrind/default.supp
--24699-- Reading syms from
/usr/lib64/valgrind/amd64-linux/vgpreload_core.so (0x4A1F000)
--24699--    object doesn't have a symbol table
--24699-- Reading syms from
/usr/lib64/valgrind/amd64-linux/vgpreload_memcheck.so (0x4C21000)
--24699--    object doesn't have a symbol table
--24699-- Reading syms from
/usr/local/lib/libnetfilter_conntrack.so.1.2.0 (0x4E2A000)
--24699-- Reading syms from /usr/local/lib/libnfnetlink.so.0.2.0
(0x5043000)
--24699-- Reading syms from /lib64/libc-2.9.so (0x524B000)
--24699--    object doesn't have a symbol table
--24699-- Reading syms from /lib64/libdl-2.9.so (0x55A4000)
--24699--    object doesn't have a symbol table
--24699-- REDIR: 0x52c7c30 (rindex) redirected to 0x4c25a00 (rindex)
--24699-- REDIR: 0x52c93f0 (memset) redirected to 0x4c26ca0 (memset)
--24699-- REDIR: 0x52c67b0 (strcmp) redirected to 0x4c26100 (strcmp)
--24699-- REDIR: 0x52c7540 (strlen) redirected to 0x4c25e20 (strlen)
--24699-- REDIR: 0x52c6600 (index) redirected to 0x4c25b20 (index)
--24699-- REDIR: 0x52c37f0 (malloc) redirected to 0x4c255e0 (malloc)
--24699-- REDIR: 0xffffffffff600400 (???) redirected to 0x3802d13d (???)
--24699-- REDIR: 0x52c3430 (calloc) redirected to 0x4c233b0 (calloc)
--24699-- REDIR: 0x52cad30 (memcpy) redirected to 0x4c26270 (memcpy)
--24699-- REDIR: 0x52cd840 (strchrnul) redirected to 0x4c26d70
(strchrnul)
--24699-- REDIR: 0x52c9f20 (mempcpy) redirected to 0x4c26dd0 (mempcpy)
--24699-- REDIR: 0x52c0c00 (free) redirected to 0x4c242e0 (free)
--24699-- REDIR: 0x52c7b60 (strncpy) redirected to 0x4c25f50 (strncpy)
vex amd64->IR: unhandled instruction bytes: 0x6 0xDF 0xA1 0xBF 0x8 0x0
==24699== Invalid read of size 1
==24699==    at 0x7FEFFD3E4: ???
==24699==    by 0x7FEFFD3EB: ???
==24699==    by 0x7FEFFD3F3: ???
==24699==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==24699== 
==24699== Process terminating with default action of signal 11 (SIGSEGV)
==24699==  Access not within mapped region at address 0x0
==24699==    at 0x7FEFFD3E4: ???
==24699==    by 0x7FEFFD3EB: ???
==24699==    by 0x7FEFFD3F3: ???
==24699== 
==24699== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 2 from 1)
==24699== 
==24699== 1 errors in context 1 of 1:
==24699== Invalid read of size 1
==24699==    at 0x7FEFFD3E4: ???
==24699==    by 0x7FEFFD3EB: ???
==24699==    by 0x7FEFFD3F3: ???
==24699==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
--24699-- 
--24699-- supp:      2 dl-hack3-cond-1
==24699== 
==24699== IN SUMMARY: 1 errors from 1 contexts (suppressed: 2 from 1)
==24699== 
==24699== malloc/free: in use at exit: 984 bytes in 5 blocks.
==24699== malloc/free: 8,293 allocs, 8,288 frees, 2,586,840 bytes
allocated.
==24699== 
==24699== searching for pointers to 5 not-freed blocks.
==24699== checked 100,824 bytes.
==24699== 
==24699== LEAK SUMMARY:
==24699==    definitely lost: 0 bytes in 0 blocks.
==24699==      possibly lost: 0 bytes in 0 blocks.
==24699==    still reachable: 984 bytes in 5 blocks.
==24699==         suppressed: 0 bytes in 0 blocks.
==24699== Rerun with --leak-check=full to see details of leaked memory.
--24699--  memcheck: sanity checks: 300 cheap, 12 expensive
--24699--  memcheck: auxmaps: 0 auxmap entries (0k, 0M) in use
--24699--  memcheck: auxmaps_L1: 0 searches, 0 cmps, ratio 0:10
--24699--  memcheck: auxmaps_L2: 0 searches, 0 nodes
--24699--  memcheck: SMs: n_issued      = 64 (1024k, 1M)
--24699--  memcheck: SMs: n_deissued    = 0 (0k, 0M)
--24699--  memcheck: SMs: max_noaccess  = 524287 (8388592k, 8191M)
--24699--  memcheck: SMs: max_undefined = 0 (0k, 0M)
--24699--  memcheck: SMs: max_defined   = 210 (3360k, 3M)
--24699--  memcheck: SMs: max_non_DSM   = 64 (1024k, 1M)
--24699--  memcheck: max sec V bit nodes:    0 (0k, 0M)
--24699--  memcheck: set_sec_vbits8 calls: 0 (new: 0, updates: 0)
--24699--  memcheck: max shadow mem size:   5168k, 5M
--24699-- translate:            fast SP updates identified: 1,595 (
85.4%)
--24699-- translate:   generic_known SP updates identified: 184 (  9.8%)
--24699-- translate: generic_unknown SP updates identified: 88 (  4.7%)
--24699--     tt/tc: 21,344 tt lookups requiring 21,427 probes
--24699--     tt/tc: 21,344 fast-cache updates, 2 flushes
--24699--  transtab: new        2,351 (54,368 -> 830,549; ratio 152:10)
[1 scs]
--24699--  transtab: dumped     0 (0 -> ??)
--24699--  transtab: discarded  0 (0 -> ??)
--24699-- scheduler: 30,068,731 jumps (bb entries).
--24699-- scheduler: 300/37,001 major/minor sched events.
--24699--    sanity: 301 cheap, 12 expensive checks.
--24699--    exectx: 769 lists, 9 contexts (avg 0 per list)
--24699--    exectx: 16,584 searches, 16,575 full compares (999 per
1000)
--24699--    exectx: 0 cmp2, 1 cmp4, 0 cmpAll
--24699--  errormgr: 3 supplist searches, 69 comparisons during search
--24699--  errormgr: 3 errlist searches, 3 comparisons during search
Segmentation fault

Does this help any more?

Bernhard