Uploaded image for project: 'WiredTiger'
  1. WiredTiger
  2. WT-4817

heap-buffer-overflow failure in timestamp_abort

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • WT3.2.1, 4.1.13, 4.0.11
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None
    • 2
    • Storage Engines 2019-06-03
    • v3.6

      With the merge of WT-4712 and turning on debug mode in test/csuite/timestamp_abort the sanitizer build hit an error.
      http://build.wiredtiger.com:8080/job/wiredtiger-clang-sanitizer/3592/console

      =================================================================
      ==7013==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x604000000488 at pc 0x0000008ad1d6 bp 0x7fccc8dff380 sp 0x7fccc8dff378
      READ of size 8 at 0x604000000488 thread T14
          #0 0x8ad1d5 in __wt_log_ckpt /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/../src/log/log.c:256:26
          #1 0x6ec919 in __wt_txn_checkpoint_log /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/../src/txn/txn_log.c:565:4
          #2 0x6dd6b6 in __txn_checkpoint /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/../src/txn/txn_ckpt.c:1065:3
          #3 0x6dd6b6 in __txn_checkpoint_wrapper /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/../src/txn/txn_ckpt.c:1106
          #4 0x6db8cb in __wt_txn_checkpoint /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/../src/txn/txn_ckpt.c:1170:3
          #5 0x635af4 in __session_checkpoint /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/../src/session/session_api.c:1984:8
          #6 0x51664b in thread_ckpt_run /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/test/csuite/../../../test/csuite/timestamp_abort/main.c:203:3
          #7 0x4e896e in __asan::AsanThread::ThreadStart(unsigned long, __sanitizer::atomic_uintptr_t*) (/mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/test/csuite/test_timestamp_abort+0x4e896e)
          #8 0x7fccd4cb66da in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76da)
          #9 0x7fccd442988e in clone /build/glibc-OTsEL5/glibc-2.27/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95
      
      0x604000000488 is located 8 bytes to the left of 40-byte region [0x604000000490,0x6040000004b8)
      allocated by thread T0 here:
          #0 0x4daf68 in calloc (/mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/test/csuite/test_timestamp_abort+0x4daf68)
          #1 0x5b4aa0 in __wt_calloc /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/../src/os_common/os_alloc.c:52:11
          #2 0x51c98f in __wt_debug_mode_config /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/../src/conn/conn_api.c:1855:3
          #3 0x521192 in wiredtiger_open /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/../src/conn/conn_api.c:2633:2
          #4 0x515a51 in run_workload /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/test/csuite/../../../test/csuite/timestamp_abort/main.c:466:2
          #5 0x515677 in main /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/test/csuite/../../../test/csuite/timestamp_abort/main.c:706:4
          #6 0x7fccd4329b96 in __libc_start_main /build/glibc-OTsEL5/glibc-2.27/csu/../csu/libc-start.c:310
      
      Thread T14 created by T0 here:
          #0 0x433f10 in __interceptor_pthread_create (/mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/test/csuite/test_timestamp_abort+0x433f10)
          #1 0x5c6b7b in __wt_thread_create /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/../src/os_posix/os_thread.c:30:2
          #2 0x515d49 in run_workload /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/test/csuite/../../../test/csuite/timestamp_abort/main.c:500:2
          #3 0x515677 in main /mnt/data0/jenkins/workspace/wiredtiger-clang-sanitizer/build_posix/test/csuite/../../../test/csuite/timestamp_abort/main.c:706:4
          #4 0x7fccd4329b96 in __libc_start_main /build/glibc-OTsEL5/glibc-2.27/csu/../csu/libc-start.c:310
      

            Assignee:
            sue.loverso@mongodb.com Susan LoVerso
            Reporter:
            sue.loverso@mongodb.com Susan LoVerso
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: