[Valgrind-users] double free corruption (fasttop)

[Roberto D. <rd...@ti...>]

Hello everybody.

I need help to understand the followind valgrind traces:

 Invalid free() / delete / delete[]
==19141==    at 0x4004EFA: free (vg_replace_malloc.c:235)
==19141==    by 0x4058947: borra_hb_sc (moncv.cpp:142)
==19141==    by 0x42124D1: Comunicaciones::Hilo::Mutex::~Mutex()
(Hilo.cpp:254)
==19141==    by 0x425C757: __tcf_7 (ServicioLog.cpp:40)
==19141==    by 0xB5C7A3: __cxa_finalize (in /lib/tls/libc-2.3.4.so)
==19141==    by 0x41E2CBD: (within
/home/manager/roberto/pruebas_enza/libNuevosComunicadores.so)
==19141==    by 0x426F56D: (within
/home/manager/roberto/pruebas_enza/libNuevosComunicadores.so)
==19141==    by 0xB20906: _dl_fini (in /lib/ld-2.3.4.so)
==19141==    by 0xB5C526: exit (in /lib/tls/libc-2.3.4.so)
                                  ^^^^
==19141==    by 0xB46DEC: (below main) (in /lib/tls/libc-2.3.4.so)


==19141==  Address 0x43E3FA8 is 0 bytes inside a block of size 40 free'd
==19141==    at 0x4004EFA: free (vg_replace_malloc.c:235)
==19141==    by 0x4058947: borra_hb_sc (moncv.cpp:142)
==19141==    by 0x42124D1: Comunicaciones::Hilo::Mutex::~Mutex()
(Hilo.cpp:254)
==19141==    by 0x80616D9: __tcf_7 (ServicioLog.cpp:40)
==19141==    by 0xB5C526: exit (in /lib/tls/libc-2.3.4.so)
                                 ^^^^
==19141==    by 0xB46DEC: (below main) (in /lib/tls/libc-2.3.4.so)


It seems free is being called from exit.. which is calling _tcf_7 and
then is also calling _dl_fini which also calls _tcf_7 and causes a
double free.

The double free is happening in some static class variables I have into
libNuevosComunicadores.so.. I do not understand how is that my
destructors are being called twice.

Any help will be quite appreciated.


Best Regards

Roberto