[naviserver-devel] Segfault in async writer

[Stephen D. <sd...@gm...>]

This crashes most of the time to me:

#0  0x00539d34 in NsWriterQueue (conn=0x9507838, nsend=2048,
chan=0x96af320, fp=0x0, fd=-1, data=0x0) at driver.c:2927
2927        Ns_Log(Notice, "Writer: %d: started sock=%d, fd=%d:
size=%u, flags=%X: %s",
(gdb) bt
#0  0x00539d34 in NsWriterQueue (conn=0x9507838, nsend=2048,
chan=0x96af320, fp=0x0, fd=-1, data=0x0) at driver.c:2927
#1  0x005347f7 in ConnSend (conn=0x9507838, nsend=2048,
chan=0x96af320, fp=0x0, fd=-1) at connio.c:955
#2  0x0053418f in Ns_ConnSendChannel (conn=0x9507838, chan=0x96af320,
nsend=2048) at connio.c:581
#3  0x0054cc94 in ReturnOpen (conn=0x9507838, status=200,
type=0x578319 "*/*", chan=0x96af320, fp=0x0, fd=-1, len=2048) at
return.c:1380
#4  0x0054cae8 in Ns_ConnReturnOpenChannel (conn=0x9507838,
status=200, type=0x578319 "*/*", chan=0x96af320, len=2048) at
return.c:1263
#5  0x0053e04f in ReturnRange (conn=0x9507838, rangesPtr=0xb0fb20e0,
chan=0x96af320, data=0x0, len=2048, type=0x578319 "*/*") at
fastpath.c:922
#6  0x0053d803 in FastReturn (servPtr=0x94fa218, conn=0x9507838,
status=200, type=0x578319 "*/*",
    file=0xb0fb21f0
"/home/sd/ns/naviserver-cfix/tests/testserver/pages/2048bytes",
stPtr=0xb0fb2184) at fastpath.c:579
#7  0x0053d132 in NsFastPathProc (arg=0x94fa218, conn=0x9507838) at
fastpath.c:304
#8  0x0054740d in Ns_ConnRunRequest (conn=0x9507838) at op.c:259
#9  0x00549fe4 in ConnRun (connPtr=0x9507838) at queue.c:735
#10 0x00549b39 in NsConnThread (arg=0x9633a90) at queue.c:591
#11 0x003b12bb in NsThreadMain (arg=0x9630ae0) at thread.c:224
#12 0x003b2338 in ThreadMain (arg=0x9630ae0) at pthread.c:736
#13 0x0010640b in start_thread () from /lib/libpthread.so.0
#14 0x00b67b7e in clone () from /lib/libc.so.6

(gdb) print *wrSockPtr

$1 = {nextPtr = 0x78787878, sockPtr = 0x78787878, data = 0x78787878
<Address 0x78787878 out of bounds>, fd = 2021161080, nread =
2021161080,
  nsent = 2021161080, size = 2021161080, flags = 2021161080, bufsize =
2021161080, buf = 0x78787878 <Address 0x78787878 out of bounds>}


The sock has already been pushed to another queue by this point.