[Flightgear-devel] Reproducible crash in mk_viii.cxx

[Durk T. <d.t...@xs...>]

Hi all,

Haven't seen this reported yet, but yesterday I ran into a situation that 
leads to a 100% reproducible crash on my system, while attempting a Flight 
from Ottawa to Montreal:

All tests were done after updating SimGear / FlightGear and base package to 
current CVS this morning, sat March 7, 2009, approx 8:30 AM, CET. 

Given that the actual error was preceded by the CullVisitor nan message, I 
hope this crash situation might also give some insights as what's going on 
there. Note that I am using some custom settings in my local preferences, 
file, but I have no reason to assume yet that these will be affecting the 
reproducibility of this crash.

start FlightGear using fgfs --aircraft=CitationX --airport=CYOW --runway=25

take off, and make a left turn to heading 98, while maintaining an IAS of 
approx 250 kts, and an altitude of approx 2500 ft. Maintain this heading for 
approx 13 minutes and FlightGear will seg fault:

ullVisitor::apply(Geode&) detected NaN,
    depth=nan, center=(0.001656 0.000196999 0.0438475),
    matrix={
        nan nan nan nan
        nan nan nan nan
        nan nan nan nan
        nan nan nan nan
}

CullVisitor::apply(Geode&) detected NaN,
    depth=nan, center=(0.006986 0.000522999 0.089738),
    matrix={
        nan nan nan nan
        nan nan nan nan
        nan nan nan nan
        nan nan nan nan
}


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fd44f1af740 (LWP 16609)]
MK_VIII::TCFHandler::update_runway (this=0x9ab8938) at mk_viii.cxx:4525
4525              runway.center.latitude = _runway->latitude();


Note that terrasync reports at that moment:
pos in msg = -21474837,-21474837
lat = -21474837 lon = -21474837

and the gdb backtrace looks like:
#0  MK_VIII::TCFHandler::update_runway (this=0x9ab8938) at mk_viii.cxx:4525
#1  0x00000000007ec4c6 in MK_VIII::TCFHandler::update (this=0x9ab8938) at 
mk_viii.cxx:4788
#2  0x00000000007f602f in MK_VIII::update (this=0x9ab7eb0, dt=<value optimized 
out>) at mk_viii.cxx:4934
#3  0x0000000000a20b21 in SGSubsystemGroup::Member::update (this=0x9adb060, 
delta_time_sec=<value optimized out>) at subsystem_mgr.cxx:309
#4  0x0000000000a224aa in SGSubsystemGroup::update (this=0x9b63f70, 
delta_time_sec=0.14999999999999999) at subsystem_mgr.cxx:162
#5  0x0000000000a20b21 in SGSubsystemGroup::Member::update (this=0x9adb370, 
delta_time_sec=<value optimized out>) at subsystem_mgr.cxx:309
#6  0x0000000000a224aa in SGSubsystemGroup::update (this=0xdf77e8, 
delta_time_sec=0.14999999999999999) at subsystem_mgr.cxx:162
#7  0x0000000000428b1f in fgMainLoop () at main.cxx:496
#8  0x00000000004711df in fgOSMainLoop () at fg_os_osgviewer.cxx:177
#9  0x0000000000427f95 in fgMainInit (argc=4, argv=0x7fff5d486378) at 
main.cxx:1070
#10 0x0000000000425ebc in main (argc=4, argv=0x7fff5d486378) at 
bootstrap.cxx:177



Cheers,
Durk