Uploaded image for project: 'WiredTiger'
  1. WiredTiger
  2. WT-2105

salvage failure (wiredtiger-test-format-stress-sanitizer/6979)

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: WT2.7.0
    • Labels:
      None
    • # Replies:
      4
    • Last comment by Customer:
      true

      Description

      ASAN:SIGSEGV
      =================================================================
      ==11630==ERROR: AddressSanitizer: SEGV on unknown address 0x632fff886701 (pc 0x7f015b6ab0de bp 0x7fffd9c5b010 sp 0x7fffd9c5af40 T0)
          #0 0x7f015b6ab0dd in __wt_cell_type_raw /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/include/cell.i:478:2
          #1 0x7f015b6a69be in __wt_cell_unpack_safe /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/include/cell.i:585:16
          #2 0x7f015b6a0931 in __verify_dsk_row /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/btree/bt_vrfy_dsk.c:226:7
          #3 0x7f015b69b136 in __wt_verify_dsk_image /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/btree/bt_vrfy_dsk.c:165:11
          #4 0x7f015b6a641c in __wt_verify_dsk /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/btree/bt_vrfy_dsk.c:181:10
          #5 0x7f015b5e57d2 in __slvg_read /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/btree/bt_slvg.c:440:7
          #6 0x7f015b5e193d in __wt_bt_salvage /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/btree/bt_slvg.c:201:8
          #7 0x7f015bcdd2e8 in __wt_salvage /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/session/session_salvage.c:43:2
          #8 0x7f015bc8ed73 in __wt_schema_worker /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/schema/schema_worker.c:60:5
          #9 0x7f015bcafa1c in __session_salvage /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/session/session_api.c:597:2
          #10 0x4f4914 in util_salvage /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/utilities/util_salvage.c:41:13
          #11 0x4ebfc7 in main /mnt/fast/jenkins/workspace/wiredtiger-test-format-stress-sanitizer/build_posix/../src/utilities/util_main.c:226:8
          #12 0x7f0159c3caf4 in __libc_start_main (/lib64/libc.so.6+0x21af4)
          #13 0x4b86dc in _start (/home/ec2-user/keith/build_posix/.libs/lt-wt+0x4b86dc)
      

        Issue Links

          Activity

          Hide
          xgen-internal-githook Githook User added a comment -

          Author:

          {u'username': u'keithbostic', u'name': u'Keith Bostic', u'email': u'keith@wiredtiger.com'}

          Message: WT-2105: If a corrupted WT_CELL_VALUE_COPY cell has an offset larger
          than the current cell's offset in the page, we'll read memory outside
          of the page image.
          Branch: develop
          https://github.com/wiredtiger/wiredtiger/commit/0e96683fc65845c015ed6ee7249ea1d9c3c9a67e

          Show
          xgen-internal-githook Githook User added a comment - Author: {u'username': u'keithbostic', u'name': u'Keith Bostic', u'email': u'keith@wiredtiger.com'} Message: WT-2105 : If a corrupted WT_CELL_VALUE_COPY cell has an offset larger than the current cell's offset in the page, we'll read memory outside of the page image. Branch: develop https://github.com/wiredtiger/wiredtiger/commit/0e96683fc65845c015ed6ee7249ea1d9c3c9a67e
          Hide
          michael.cahill Michael Cahill added a comment -

          Keith Bostic, since this bug could cause existing users to be unable to salvage data, it should be backported to the mongodb-3.0 branch.

          Show
          michael.cahill Michael Cahill added a comment - Keith Bostic , since this bug could cause existing users to be unable to salvage data, it should be backported to the mongodb-3.0 branch.
          Hide
          xgen-internal-githook Githook User added a comment -

          Author:

          {u'username': u'keithbostic', u'name': u'Keith Bostic', u'email': u'keith@wiredtiger.com'}

          Message: WT-2105: If a corrupted WT_CELL_VALUE_COPY cell has an offset larger
          than the current cell's offset in the page, we'll read memory outside
          of the page image.

          (cherry picked from commit 0e96683fc65845c015ed6ee7249ea1d9c3c9a67e)
          Branch: mongodb-3.0
          https://github.com/wiredtiger/wiredtiger/commit/828b4fffb727a419360a631cdd392dad005ca5e8

          Show
          xgen-internal-githook Githook User added a comment - Author: {u'username': u'keithbostic', u'name': u'Keith Bostic', u'email': u'keith@wiredtiger.com'} Message: WT-2105 : If a corrupted WT_CELL_VALUE_COPY cell has an offset larger than the current cell's offset in the page, we'll read memory outside of the page image. (cherry picked from commit 0e96683fc65845c015ed6ee7249ea1d9c3c9a67e) Branch: mongodb-3.0 https://github.com/wiredtiger/wiredtiger/commit/828b4fffb727a419360a631cdd392dad005ca5e8
          Hide
          michael.cahill Michael Cahill added a comment -

          Backported completed, I'll close.

          Show
          michael.cahill Michael Cahill added a comment - Backported completed, I'll close.

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since reply:
                1 year, 36 weeks ago
                Date of 1st Reply: