#15 invalid free and core dumb by 6 signal during access request
seagull 1.7.0
Linux user 2.6.18-3-686 #1 SMP Mon Dec 4 16:41:14 UTC 2006 i686 GNU/Linux
ulimit -c unlimited
export LD_LIBRARY_PATH=/usr/local/bin
seagull -conf ../config/conf.client.xml -dico ../config/radius-accounting.xml -scen ../scenario/radius-accounting.client.xml ../scenario/radius-accounting.client.xml -log ../logs/radius-accounting.client.log -llevel A
Trying to emulate radius Access-Request sending:
<send channel="trans-ip-v4">
<action>
<inc-counter name="session-counter"> </inc-counter>
<inc-counter name="identifier-counter"> </inc-counter>
<set-value name="Acct-Session-Id" format="$(session-counter)"></set-value>
<set-value name="Identifier" format="$(identifier-counter)"></set-value>
<set-value name="Authenticator" method="authentication" message_part="all" format="shared_secret=test"></set-value>
</action>
<Message name="Access-Request">
<setfield name="Authenticator" value="0000000000000000"> </setfield>
<Attribute name="Acct-Session-Id" value="value_is_replaced"> </Attribute>
<Attribute name="NAS-Identifier" value="ims.hpintelco.org"> </Attribute>
<Attribute name="User-Name" value="yarulo"> </Attribute>
</Message>
<action>
<store name="ACCT_SES_ID" entity="Acct-Session-Id"></store>
<start-timer></start-timer>
</action>
</send>
as a result:
*** glibc detected *** free(): invalid pointer: 0x081dab80 ***
gdb -c core.22664 `which seagull` GNU gdb 6.4.90-debian
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
warning: Can't read pathname for load map: Input/output error.
Reading symbols from /lib/tls/i686/cmov/libpthread.so.0...done.
Loaded symbols for /lib/tls/i686/cmov/libpthread.so.0
Reading symbols from /lib/tls/i686/cmov/libdl.so.2...done.
Loaded symbols for /lib/tls/i686/cmov/libdl.so.2
Reading symbols from /usr/lib/libstdc++.so.6...done.
Loaded symbols for /usr/lib/libstdc++.so.6
Reading symbols from /lib/tls/i686/cmov/libm.so.6...done.
Loaded symbols for /lib/tls/i686/cmov/libm.so.6
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /lib/tls/i686/cmov/libc.so.6...done.
Loaded symbols for /lib/tls/i686/cmov/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/local/bin/libtrans_ip.so...done.
Loaded symbols for /usr/local/bin/libtrans_ip.so
Reading symbols from /usr/local/bin/lib_crypto.so...done.
Loaded symbols for /usr/local/bin/lib_crypto.so
Reading symbols from /usr/lib/i686/cmov/libssl.so.0.9.8...Reading symbols from /usr/lib/debug/usr/lib/i686/cmov/libssl.so.0.9.8...done.
done.
Loaded symbols for /usr/lib/i686/cmov/libssl.so.0.9.8
Reading symbols from /usr/lib/i686/cmov/libcrypto.so.0.9.8...Reading symbols from /usr/lib/debug/usr/lib/i686/cmov/libcrypto.so.0.9.8...done.
done.
Loaded symbols for /usr/lib/i686/cmov/libcrypto.so.0.9.8
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/tls/i686/cmov/libnss_files.so.2...done.
Loaded symbols for /lib/tls/i686/cmov/libnss_files.so.2
Core was generated by `seagull -conf ../config/conf.client.xml -dico ../config/radius-accounting.xml -'.
Program terminated with signal 6, Aborted.
#0 0xb7fda410 in ?? ()
(gdb) bt
#0 0xb7fda410 in ?? ()
#1 0xbfba704c in ?? ()
#2 0x00000006 in ?? ()
#3 0x00005888 in ?? ()
#4 0xb7d8f811 in raise () from /lib/tls/i686/cmov/libc.so.6
#5 0xb7d90fb9 in abort () from /lib/tls/i686/cmov/libc.so.6
#6 0xb7dc4dfa in __fsetlocking () from /lib/tls/i686/cmov/libc.so.6
#7 0xb7dcc68f in mallopt () from /lib/tls/i686/cmov/libc.so.6
#8 0xb7dcc732 in free () from /lib/tls/i686/cmov/libc.so.6
#9 0x080d6d29 in resetMemory ()
#10 0x0819535d in C_SetValueActionMethodExtern::execute ()
#11 0x0816435a in C_Scenario::execute_action ()
#12 0x0816570e in C_Scenario::execute_cmd ()
#13 0x08156a0b in C_CallControl::execute_scenario_cmd ()
#14 0x0815715f in C_CallControl::messageSendControl ()
#15 0x08158889 in C_CallControl::TaskProcedure ()
#16 0x08158c9e in C_CallControlClient::TaskProcedure ()
#17 0x080bdac0 in C_TaskControl::run_task_once ()
#18 0x0815f7fd in C_ReadControl::TaskProcedure ()
#19 0x080bd854 in C_TaskControl::run ()
#20 0x080caa4e in C_Generator::TaskProcedure ()
#21 0x080bd996 in C_TaskControl::run_all_once ()
#22 0x080bc369 in main_tool ()
#23 0x080bc3f4 in main ()
log