Uploaded image for project: 'WiredTiger'
  1. WiredTiger
  2. WT-13047

ASAN heap-use-after-free in column-store during prepare transaction

    • StorEng - Defined Pipeline

      format-stress-sanitizer-test-no-barrier on ubuntu2004-stress-tests

      Host: i-0f7571df91b09c2a0
      Project: wiredtiger
      Commit: d70e91e3

      Task Logs:

      heap-use-after-free
      [2024/05/23 13:24:24.191]     ==60346==ERROR: AddressSanitizer: heap-use-after-free on address 0x607000832dc0 at pc 0x7f4cd8fb2b11 bp 0x7f4cbde6e9b0 sp 0x7f4cbde6e9a8
      [2024/05/23 13:24:24.191]     READ of size 8 at 0x607000832dc0 thread T151
      [2024/05/23 13:24:24.191]         #0 0x7f4cd8fb2b10 in __wt_txn_prepare /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/txn/txn.c:2175:55
      [2024/05/23 13:24:24.191]         #1 0x7f4cd8f115f6 in __session_prepare_transaction /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/session/session_api.c:2104:5
      [2024/05/23 13:24:24.191]         #2 0x4ef43b in prepare_transaction /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/test/format/ops.c:649:11
      [2024/05/23 13:24:24.191]         #3 0x4e981f in ops /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/test/format/ops.c:1377:24
      [2024/05/23 13:24:24.191]         #4 0x7f4cd88ab608 in start_thread /build/glibc-wuryBv/glibc-2.31/nptl/pthread_create.c:477:8
      [2024/05/23 13:24:24.191]         #5 0x7f4cd87a3352 in clone /build/glibc-wuryBv/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95
      
      freed by thread T138 here:
      [2024/05/23 13:24:24.191]         #0 0x498312 in free /data/mci/cf02dab68c6203199a2c4dcdba60629c/toolchain-builder/tmp/build-llvm-v4.sh-Hnp/llvm-project-llvmorg/compiler-rt/lib/asan/asan_malloc_linux.cpp:127:3
      [2024/05/23 13:24:24.191]         #1 0x7f4cd8e34edd in __wt_free_int /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/os_common/os_alloc.c:310:5
      [2024/05/23 13:24:24.191]         #2 0x7f4cd8b0a4a1 in __wt_free_update_list /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/btree/bt_discard.c:531:9
      [2024/05/23 13:24:24.191]         #3 0x7f4cd8b67587 in __split_multi_inmem_final /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/btree/bt_split.c:1594:13
      [2024/05/23 13:24:24.191]         #4 0x7f4cd8b66fe2 in __wt_split_rewrite /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/btree/bt_split.c:2269:5
      [2024/05/23 13:24:24.191]         #5 0x7f4cd8d7f4c5 in __evict_page_dirty_update /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/evict/evict_page.c:492:13
      [2024/05/23 13:24:24.191]         #6 0x7f4cd8d7c887 in __wt_evict /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/evict/evict_page.c:313:9
      [2024/05/23 13:24:24.191]         #7 0x7f4cd8d7b5b9 in __wt_page_release_evict /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/evict/evict_page.c:91:11
      [2024/05/23 13:24:24.191]         #8 0x7f4cd8acfc5a in __cursor_reset /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/include/cursor_inline.h:306:9
      [2024/05/23 13:24:24.191]         #9 0x7f4cd8acf8ab in __wt_btcur_reset /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/btree/bt_cursor.c:629:13
      [2024/05/23 13:24:24.191]         #10 0x7f4cd8c9e73c in __curfile_reset /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/cursor/cur_file.c:279:11
      [2024/05/23 13:24:24.193]         #11 0x4eeb71 in table_op /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/test/format/ops.c:916:5
      [2024/05/23 13:24:24.193]         #12 0x4e95ea in ops /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/test/format/ops.c:1302:19
      [2024/05/23 13:24:24.193]         #13 0x7f4cd88ab608 in start_thread /build/glibc-wuryBv/glibc-2.31/nptl/pthread_create.c:477:8
      
      previously allocated by thread T145 here:
      [2024/05/23 13:24:24.193]         #0 0x4986f2 in calloc /data/mci/cf02dab68c6203199a2c4dcdba60629c/toolchain-builder/tmp/build-llvm-v4.sh-Hnp/llvm-project-llvmorg/compiler-rt/lib/asan/asan_malloc_linux.cpp:154:3
      [2024/05/23 13:24:24.193]         #1 0x7f4cd8e334d5 in __wt_calloc /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/os_common/os_alloc.c:35:14
      [2024/05/23 13:24:24.193]         #2 0x7f4cd8bbc6a0 in __wt_upd_alloc /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/include/txn_inline.h:1097:5
      [2024/05/23 13:24:24.193]         #3 0x7f4cd8bbaaa1 in __wt_col_modify /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/btree/col_modify.c:133:13
      [2024/05/23 13:24:24.193]         #4 0x7f4cd8ad571c in __cursor_col_modify /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/btree/bt_cursor.c:585:13
      [2024/05/23 13:24:24.193]         #5 0x7f4cd8ad7a93 in __btcur_update /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/btree/bt_cursor.c:1597:42
      [2024/05/23 13:24:24.193]         #6 0x7f4cd8ad722b in __wt_btcur_modify /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/btree/bt_cursor.c
      [2024/05/23 13:24:24.193]         #7 0x7f4cd8cad9e3 in __curfile_modify /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/src/cursor/cur_file.c:466:5
      [2024/05/23 13:24:24.193]         #8 0x4f6c02 in modify /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/test/format/ops.c:1808:5
      [2024/05/23 13:24:24.193]         #9 0x4f2e35 in col_modify /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/test/format/ops.c:1860:5
      [2024/05/23 13:24:24.193]         #10 0x4ee9a2 in table_op /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/test/format/ops.c:801:19
      [2024/05/23 13:24:24.193]         #11 0x4e95ea in ops /data/mci/bb5bb5cf928b3afb007e801b4ab141c3/wiredtiger/test/format/ops.c:1302:19
      [2024/05/23 13:24:24.193]         #12 0x7f4cd88ab608 in start_thread /build/glibc-wuryBv/glibc-2.31/nptl/pthread_create.c:477:8
      

            Assignee:
            backlog-server-storage-engines [DO NOT USE] Backlog - Storage Engines Team
            Reporter:
            Xgen-BuildBaron-User xgen-buildbaron-user
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated: