Uploaded image for project: 'WiredTiger'
  1. WiredTiger
  2. WT-2699

Test format sanitizer crash on PPC in snappy code

    • Type: Icon: Bug Bug
    • Resolution: Done
    • Priority: Icon: Major - P3 Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None

      Jenkins Run: http://build.wiredtiger.com:8080/job/wiredtiger-test-format-stress-sanitizer-ppc/815/console

      Run Config:

      abort=0
      auto_throttle=1
      backups=0
      bitcnt=4
      bloom=1
      bloom_bit_count=63
      bloom_hash_count=23
      bloom_oldest=0
      cache=94
      checkpoints=1
      checksum=uncompressed
      chunk_size=6
      compaction=0
      compression=snappy
      data_extend=0
      data_source=file
      delete_pct=5
      dictionary=0
      direct_io=0
      encryption=none
      evict_max=0
      file_type=row-store
      firstfit=1
      huffman_key=0
      huffman_value=0
      in_memory=0
      insert_pct=18
      internal_key_truncation=1
      internal_page_max=10
      isolation=random
      key_gap=15
      key_max=48
      key_min=29
      leaf_page_max=14
      leak_memory=0
      logging=1
      logging_archive=0
      logging_compression=snappy
      logging_prealloc=0
      long_running_txn=0
      lsm_worker_threads=4
      merge_max=4
      mmap=1
      ops=100000
      prefix_compression=0
      prefix_compression_min=3
      quiet=1
      repeat_data_pct=3
      reverse=0
      rows=100000
      runs=1
      rebalance=1
      salvage=1
      split_pct=53
      statistics=0
      statistics_server=0
      threads=7
      timer=20
      transaction-frequency=85
      value_max=2491
      value_min=11
      verify=1
      wiredtiger_config=
      write_pct=54
      

      Segfault trace is as follows:

      =================================================================
      ==7206==ERROR: AddressSanitizer: SEGV on unknown address 0x3fffa4490000 (pc 0x000010026994 bp 0x00000000002d sp 0x3fffa4c89b80 T12)
          #0 0x10026990 in __sanitizer::SizeClassAllocatorLocalCache<__sanitizer::SizeClassAllocator64<10995116277760ul, 2199023255552ul, 0ul, __sanitizer::SizeClassMap<17ul, 128ul, 16ul>, __asan::AsanMapUnmapCallback> >::Refill(__sanitizer::SizeClassAllocator64<10995116277760ul, 2199023255552ul, 0ul, __sanitizer::SizeClassMap<17ul, 128ul, 16ul>, __asan::AsanMapUnmapCallback>*, unsigned long) /home/mcahill/src/llvm-3.8.0.src/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_allocator.h:982
          #1 0x10025bac in __sanitizer::SizeClassAllocatorLocalCache<__sanitizer::SizeClassAllocator64<10995116277760ul, 2199023255552ul, 0ul, __sanitizer::SizeClassMap<17ul, 128ul, 16ul>, __asan::AsanMapUnmapCallback> >::Allocate(__sanitizer::SizeClassAllocator64<10995116277760ul, 2199023255552ul, 0ul, __sanitizer::SizeClassMap<17ul, 128ul, 16ul>, __asan::AsanMapUnmapCallback>*, unsigned long) /home/mcahill/src/llvm-3.8.0.src/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_allocator.h:928
          #2 0x10025bac in __sanitizer::CombinedAllocator<__sanitizer::SizeClassAllocator64<10995116277760ul, 2199023255552ul, 0ul, __sanitizer::SizeClassMap<17ul, 128ul, 16ul>, __asan::AsanMapUnmapCallback>, __sanitizer::SizeClassAllocatorLocalCache<__sanitizer::SizeClassAllocator64<10995116277760ul, 2199023255552ul, 0ul, __sanitizer::SizeClassMap<17ul, 128ul, 16ul>, __asan::AsanMapUnmapCallback> >, __sanitizer::LargeMmapAllocator<__asan::AsanMapUnmapCallback> >::Allocate(__sanitizer::SizeClassAllocatorLocalCache<__sanitizer::SizeClassAllocator64<10995116277760ul, 2199023255552ul, 0ul, __sanitizer::SizeClassMap<17ul, 128ul, 16ul>, __asan::AsanMapUnmapCallback> >*, unsigned long, unsigned long, bool, bool) /home/mcahill/src/llvm-3.8.0.src/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_allocator.h:1300
          #3 0x10025bac in __asan::Allocator::Allocate(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool) /home/mcahill/src/llvm-3.8.0.src/projects/compiler-rt/lib/asan/asan_allocator.cc:368
          #4 0x10025bac in __asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*) /home/mcahill/src/llvm-3.8.0.src/projects/compiler-rt/lib/asan/asan_allocator.cc:718
          #5 0x100dabb4 in __interceptor_malloc /home/mcahill/src/llvm-3.8.0.src/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:53
          #6 0x3fffafc8c0cc in operator new(unsigned long) (/lib64/libstdc++.so.6+0x8c0cc)
          #7 0x3fffafc8c294 in operator new[](unsigned long) (/lib64/libstdc++.so.6+0x8c294)
          #8 0x3fffb00a2188 in snappy::internal::WorkingMemory::GetHashTable(unsigned long, int*) (/lib64/libsnappy.so.1+0x2188)
          #9 0x3fffb00a2c34 in snappy::Compress(snappy::Source*, snappy::Sink*) (/lib64/libsnappy.so.1+0x2c34)
          #10 0x3fffb00a3c6c in snappy::RawCompress(char const*, unsigned long, char*, unsigned long*) (/lib64/libsnappy.so.1+0x3c6c)
          #11 0x3fffb00a44a0 in snappy_compress (/lib64/libsnappy.so.1+0x44a0)
          #12 0x103b2a68 in wt_snappy_compress /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/ext/compressors/snappy/../../../../ext/compressors/snappy/snappy_compress.c:119:10
          #13 0x101f99c0 in __wt_log_write /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/../src/log/log.c:1893:3
          #14 0x10396b70 in __wt_txn_log_commit /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/../src/txn/txn_log.c:222:10
          #15 0x10379d7c in __wt_txn_commit /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/../src/txn/txn.c:550:9
          #16 0x10531f78 in __curfile_update /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/../src/cursor/cur_file.c:286:6
          #17 0x10136638 in row_update /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/test/format/../../../test/format/ops.c:1053:16
          #18 0x1012fce4 in ops /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/test/format/../../../test/format/ops.c:666:11
          #19 0x100eefe8 in __asan::AsanThread::ThreadStart(unsigned long, __sanitizer::atomic_uintptr_t*) /home/mcahill/src/llvm-3.8.0.src/projects/compiler-rt/lib/asan/asan_thread.cc:183
          #20 0x100322e8 in asan_thread_start(void*) /home/mcahill/src/llvm-3.8.0.src/projects/compiler-rt/lib/asan/asan_interceptors.cc:228
          #21 0x3fffb0158940 in start_thread (/lib64/power8/libpthread.so.0+0x8940)
          #22 0x3fffafea763c in __clone (/lib64/power8/libc.so.6+0x11763c)
      
      AddressSanitizer can not provide additional info.
      SUMMARY: AddressSanitizer: SEGV /home/mcahill/src/llvm-3.8.0.src/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_allocator.h:982 in __sanitizer::SizeClassAllocatorLocalCache<__sanitizer::SizeClassAllocator64<10995116277760ul, 2199023255552ul, 0ul, __sanitizer::SizeClassMap<17ul, 128ul, 16ul>, __asan::AsanMapUnmapCallback> >::Refill(__sanitizer::SizeClassAllocator64<10995116277760ul, 2199023255552ul, 0ul, __sanitizer::SizeClassMap<17ul, 128ul, 16ul>, __asan::AsanMapUnmapCallback>*, unsigned long)
      Thread T12 created by T0 here:
          #0 0x100320a0 in pthread_create /home/mcahill/src/llvm-3.8.0.src/projects/compiler-rt/lib/asan/asan_interceptors.cc:238
          #1 0x1012b2cc in wts_ops /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/test/format/../../../test/format/ops.c:110:3
          #2 0x1013f2fc in main /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/test/format/../../../test/format/t.c:222:5
          #3 0x3fffafdb457c in generic_start_main.isra.0 (/lib64/power8/libc.so.6+0x2457c)
          #4 0x3fffafdb4770 in __libc_start_main (/lib64/power8/libc.so.6+0x24770)
      
      ==7206==ABORTING
      + cleanup
      + status=1
      + '[' -f RUNDIR/CONFIG ']'
      + cat RUNDIR/CONFIG
      

            Assignee:
            backlog-server-execution [DO NOT USE] Backlog - Storage Execution Team
            Reporter:
            david.hows David Hows
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: