[syslog-ng] [Bug 177] New: crashes in syslog-ng-2.0.10-1 in Fedora i386

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Thu May 3 20:26:04 CEST 2012


https://bugzilla.balabit.com/show_bug.cgi?id=177

           Summary: crashes in syslog-ng-2.0.10-1 in Fedora i386
           Product: syslog-ng
           Version: 2.0.x
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: rcp at sentientmeat.ca
Type of the Report: bug
   Estimated Hours: 0.0


Let me start by apologizing for the age of the software and the
platform. Our situation is that we need to support millisecond
timestamps on an older branch of an embedded platform. This platform
was previously happily running the Fedora Core 4 package
syslog-ng-1.6.11-1.fc4.i386.rpm.

We took the syslog-ng-2.0.10-1.fc10.src.rpm and
eventlog-0.2.7-1.fc10.src.rpm packages from Fedora 10, and have
recompiled them for Fedora 4. Unfortunately we've ended up with
stability issues, in that the daemon crashes. We haven't yet found a
recipe for reproducing the problem, but it happens daily in our lab.

We'd like to know if these issues have been encountered before and if
there are fixes available.

We've attempted upgrading past the issue, by recompiling Fedora 12's
syslog-ng-2.1.4-6.fc12.src.rpm and eventlog-0.2.7-4.fc12.src.rpm, and
when that also suffered crashes, we added glib2-2.22.5-1.fc12.src.rpm.

We've looked at syslog-ng 3, but the long list of dependancies that
need to be updated for this platform is rather daunting.

I'm including below the backtraces from our corefiles.


We've seen the following many times. The environment included:
    export MALLOC_CHECK_=3
    export LIBC_FATAL_STDERR_=1
    export MALLOC_PERTURB_=171

core.2196.b50
warning: Can't read pathname for load map: Input/output error.
Failed to read a valid object file image from memory.
Core was generated by `/sbin/syslog-ng -p /var/run/syslogd.pid'.
Program terminated with signal 6, Aborted.
#0  0x002f0410 in ?? ()
(gdb) bt
#0  0x002f0410 in ?? ()
#1  0xbff5de20 in ?? ()
#2  0x00000006 in ?? ()
#3  0x00000894 in ?? ()
#4  0x4ddda1f8 in raise () from /lib/tls/libc.so.6
#5  0x4dddb948 in abort () from /lib/tls/libc.so.6
#6  0x4de0f52a in __libc_message () from /lib/tls/libc.so.6
#7  0x4de15424 in _int_free () from /lib/tls/libc.so.6
#8  0x4de1595f in free () from /lib/tls/libc.so.6
#9  0x4dfb8b44 in g_free () from /usr/lib/libglib-2.0.so.0
#10 0x0806000a in log_reader_free (s=0x8ece698) at logreader.c:457
#11 0x08054274 in log_pipe_unref (self=0x8ece698) at logpipe.c:51
#12 0x0805f582 in log_reader_fd_finalize (source=0x8ecf560) at logreader.c:167
#13 0x4dfb0e7a in ?? () from /usr/lib/libglib-2.0.so.0
#14 0x4dfb250e in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#15 0x4dfb53f6 in ?? () from /usr/lib/libglib-2.0.so.0
#16 0x4dfb58d8 in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#17 0x0804b73e in main_loop_run (cfg=0xbff5e940) at main.c:167
#18 0x0804c0e4 in main (argc=3, argv=0xbff5e9e4) at main.c:483
(gdb) frame 6
#6  0x4de0f52a in __libc_message () from /lib/tls/libc.so.6
(gdb) info registers
eax            0x0      0
ecx            0x894    2196
edx            0x6      6
ebx            0x4ded7ff4       1307410420
esp            0xbff5df54       0xbff5df54
ebp            0xbff5e5a4       0xbff5e5a4
esi            0x0      0
edi            0xc      12
eip            0x4de0f52a       0x4de0f52a <__libc_fatal>
eflags         0x202    [ IF ]
cs             0x73     115
ss             0x7b     123
ds             0x7b     123
es             0xc010007b       -1072693125
fs             0x0      0
gs             0x33     51
(gdb) x/32x 0xbff5df54
0xbff5df54:     0x0000000c      0xbff5e090      0x00000400      0x4decd3b4
0xbff5df64:     0x00000017      0xbff5eeab      0x0000000f      0x4decd3cd
0xbff5df74:     0x00000002      0x4decd46c      0x0000001f      0x4decd3d1
0xbff5df84:     0x00000004      0xbff5e607      0x00000008      0x4decd3d7
0xbff5df94:     0x00000005      0x00000000      0x4e01317c      0x08eca1b0
0xbff5dfa4:     0x4e01317c      0x00000000      0x00000000      0x4decd3d7
0xbff5dfb4:     0x00000005      0xbff5dfd0      0x00000025      0x00000000
0xbff5dfc4:     0x00000000      0x00000000      0xffffffff      0xbff5e607
(gdb) x/s 0x4decd3b4
0x4decd3b4:      "*** glibc detected *** %s: %s: 0x%s ***\n"
(gdb) x/s 0xbff5eeab
0xbff5eeab:      "/sbin/syslog-ng"
(gdb) x/s 0x4decd3cd
0x4decd3cd:      ": %s: 0x%s ***\n"
(gdb) x/s 0x4decd46c
0x4decd46c:      "double free or corruption (out)"
(gdb) x/s 0x4decd3d1
0x4decd3d1:      ": 0x%s ***\n"
(gdb) x/s 0xbff5e607
0xbff5e607:      "08ee8bd0"


# Same error, but without the Heap Consistency Checking environment variables:
core.2229.a34
warning: Can't read pathname for load map: Input/output error.
Failed to read a valid object file image from memory.
Core was generated by `/sbin/syslog-ng -p /var/run/syslogd.pid'.
Program terminated with signal 11, Segmentation fault.
#0  0x4de15982 in free () from /lib/tls/libc.so.6
#0  0x4de15982 in free () from /lib/tls/libc.so.6
#1  0x4dfb8b44 in g_free () from /usr/lib/libglib-2.0.so.0
#2  0x0806000a in log_reader_free (s=0x9532ae8) at logreader.c:457
#3  0x08054274 in log_pipe_unref (self=0x9532ae8) at logpipe.c:51
#4  0x0805f582 in log_reader_fd_finalize (source=0x9538190) at logreader.c:167
#5  0x4dfb0e7a in ?? () from /usr/lib/libglib-2.0.so.0
#6  0x4dfb250e in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#7  0x4dfb53f6 in ?? () from /usr/lib/libglib-2.0.so.0
#8  0x4dfb58d8 in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#9  0x0804b73e in main_loop_run (cfg=0xbfb8af40) at main.c:167
#10 0x0804c0e4 in main (argc=3, argv=0xbfb8afe4) at main.c:483

# This traceback was a one-time error:

core.2351.b79
warning: Can't read pathname for load map: Input/output error.
Failed to read a valid object file image from memory.
Core was generated by `/sbin/syslog-ng -p /var/run/syslogd.pid'.
Program terminated with signal 11, Segmentation fault.
#0  0x080555c2 in log_center_queue (s=0x88c50d0, msg=0x88bb918, path_flags=0) at center.c:354
354     center.c: No such file or directory.
        in center.c
#0  0x080555c2 in log_center_queue (s=0x88c50d0, msg=0x88bb918, path_flags=0) at center.c:354
#1  0x080547e2 in log_pipe_queue (s=0x88c50d0, msg=0x88bb918, path_flags=0) at logpipe.h:72
#2  0x080547a9 in log_source_group_queue (s=0x88c4568, msg=0x88bb918, path_flags=0) at sgroup.c:140
#3  0x080542c9 in log_pipe_queue (s=0x88c4568, msg=0x88bb918, path_flags=0) at logpipe.h:72
#4  0x080542a5 in log_pipe_forward_msg (self=0x88c5658, msg=0x88bb918, path_flags=0) at logpipe.c:60
#5  0x080599e6 in log_pipe_queue (s=0x88c5658, msg=0x88bb918, path_flags=0) at logpipe.h:72
#6  0x080599c2 in afsocket_sc_queue (s=0x88bd2c8, msg=0x88bb918, path_flags=0) at afsocket.c:261
#7  0x0805f0fc in log_pipe_queue (s=0x88bd2c8, msg=0x88bb918, path_flags=0) at logpipe.h:72
#8  0x0805f0d8 in log_source_queue (s=0x88bd2f8, msg=0x88bb918, path_flags=0) at logsource.c:49
#9  0x0805f72f in log_pipe_queue (s=0x88bd2f8, msg=0x88bb918, path_flags=0) at logpipe.h:72
#10 0x0805f700 in log_reader_handle_line (self=0x88bd2f8,
    line=0x88d9bd0 "<131>Apr 18 23:14:51 root[9796]: /usr/sw", ' ' <repeats 24 times>, "ipcMsg.cpp:297", ' ' <repeats 24 times>, "(BASE_IPC     - 0x00000000)
MplThread(4)@mgmtplane(9)", ' ' <repeats 21 times>, "ERROR        /usr/sw/loa"..., length=307, saddr=0x0, parse_flags=4) at logreader.c:210
#11 0x0805f9c8 in log_reader_iterate_buf (self=0x88bd2f8, saddr=0x0, flush=0, msg_count=0xbfa7c230)
    at logreader.c:295
#12 0x0805fe58 in log_reader_fetch_log (self=0x88bd2f8, fd=0x88c46b0) at logreader.c:400
#13 0x0805f541 in log_reader_fd_dispatch (source=0x88b50c8, callback=0, user_data=0x0)
    at logreader.c:153
#14 0x4dfb23ee in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#15 0x4dfb53f6 in ?? () from /usr/lib/libglib-2.0.so.0
#16 0x4dfb58d8 in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#17 0x0804b73e in main_loop_run (cfg=0xbfa7c4d0) at main.c:167
#18 0x0804c0e4 in main (argc=3, argv=0xbfa7c574) at main.c:483


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list