bugGnash - The GNU Flash player - Bugs: bug #27542, Infinite recursion leading to...

 
 

bug #27542: Infinite recursion leading to stack overflow in jemalloc on FreeBSD

Submitter:  None
Submitted:  Sun 27 Sep 2009 07:57:17 PM UTC
   
 
Category:  core Severity:  5 - Blocker
Release:  None Status:  Ready For Test
Privacy:  Public Assigned to:  rsavoye
Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 08 Mar 2011 03:49:16 AM UTC, comment #5: 

Seems like I've forgotten about this bug completely. FreeBSD port of gnash had --disable-jemalloc in configure args for a long time and it works normally. Seems like now it's not even needed as it's disabled on FreeBSD by default. The bug may be closed I guess.

Anonymous
Tue 08 Mar 2011 02:24:49 AM UTC, comment #4: 

rsavoye said jemalloc was disabled for FreeBSD.

Bastiaan Jacques <bjacques>
Group Member
Tue 08 Mar 2011 01:56:21 AM UTC, comment #3: 

Dmitry, could you please answer rsavoye's questions in comment #2?

Bastiaan Jacques <bjacques>
Group Member
Sun 27 Sep 2009 08:08:40 PM UTC, comment #2: 

Does the problem still exist if you reconfigure with --disable-jemalloc ? Does it happen for all swf files ? On FreeBSD I should probably disable jemalloc, as that's the default system malloc anyway. The Gnash version was initially based on the Mozilla version.


Rob Savoye <rsavoye>
Group administrator
Sun 27 Sep 2009 08:03:42 PM UTC, comment #1: 

Seems like that should be fixed here: libbase/jemalloc.c:4981:

-#if (defined(WIN32) || defined(DARWIN))
+#if (defined(WIN32) || defined(DARWIN) || defined(_FreeBSD_))

however after that fix it still recurses, however via another path:

(gdb) bt -30
#2932 0x289e0d62 in huge_malloc (size=272, zero=false) at jemalloc.c:4481
#2933 0x289e1ea1 in imalloc (size=272) at jemalloc.c:3627
#2934 0x289e1e33 in malloc (size=272) at jemalloc.c:5586
#2935 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#2936 0x2921d806 in pthread_join () from /lib/libthr.so.3
#2937 0x2921bc7f in pthread_mutex_lock () from /lib/libthr.so.3
#2938 0x289da98c in malloc_mutex_lock (mutex=0x28a50748) at jemalloc.c:1242
#2939 0x289daba1 in base_node_alloc () at jemalloc.c:1672
#2940 0x289e0d62 in huge_malloc (size=272, zero=false) at jemalloc.c:4481
#2941 0x289e1ea1 in imalloc (size=272) at jemalloc.c:3627
#2942 0x289e1e33 in malloc (size=272) at jemalloc.c:5586
#2943 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#2944 0x2921d806 in pthread_join () from /lib/libthr.so.3
#2945 0x2921bc7f in pthread_mutex_lock () from /lib/libthr.so.3
#2946 0x289da98c in malloc_mutex_lock (mutex=0x28a50748) at jemalloc.c:1242
#2947 0x289daba1 in base_node_alloc () at jemalloc.c:1672
#2948 0x289e0d62 in huge_malloc (size=272, zero=false) at jemalloc.c:4481
#2949 0x289e1ea1 in imalloc (size=272) at jemalloc.c:3627
#2950 0x289e1e33 in malloc (size=272) at jemalloc.c:5586
#2951 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#2952 0x2921d806 in pthread_join () from /lib/libthr.so.3
#2953 0x2921da69 in pthread_join () from /lib/libthr.so.3
#2954 0x292204e9 in __error () from /lib/libthr.so.3
#2955 0x29214cb5 in ?? () from /lib/libthr.so.3
#2956 0x2a3bc700 in ?? ()
#2957 0x2819c318 in ?? () from /libexec/ld-elf.so.1
#2958 0xbfbfe4d8 in ?? ()
#2959 0x281718eb in dlsym () from /libexec/ld-elf.so.1
#2960 0x28172ca5 in dlopen () from /libexec/ld-elf.so.1
#2961 0x2816d60e in ?? () from /libexec/ld-elf.so.1

Anonymous
Sun 27 Sep 2009 07:57:17 PM UTC, original submission:  

Trying to play any clip with gnash 0.8.6 leads to segfault because of stack overflow.

(gdb) bt -30
#621 0x2921bc7f in pthread_mutex_lock () from /lib/libthr.so.3
#622 0x289da98c in malloc_mutex_lock (mutex=0x28a50748) at jemalloc.c:1242
#623 0x289e1565 in malloc_init_hard () at jemalloc.c:5009
#624 0x289e1e86 in malloc_init () at jemalloc.c:4988
#625 0x289e1e20 in malloc (size=272) at jemalloc.c:5568
#626 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#627 0x2921d806 in pthread_join () from /lib/libthr.so.3
#628 0x2921bc7f in pthread_mutex_lock () from /lib/libthr.so.3
#629 0x289da98c in malloc_mutex_lock (mutex=0x28a50748) at jemalloc.c:1242
#630 0x289e1565 in malloc_init_hard () at jemalloc.c:5009
#631 0x289e1e86 in malloc_init () at jemalloc.c:4988
#632 0x289e1e20 in malloc (size=272) at jemalloc.c:5568
#633 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#634 0x2921d806 in pthread_join () from /lib/libthr.so.3
#635 0x2921bc7f in pthread_mutex_lock () from /lib/libthr.so.3
#636 0x289da98c in malloc_mutex_lock (mutex=0x28a50748) at jemalloc.c:1242
#637 0x289e1565 in malloc_init_hard () at jemalloc.c:5009
#638 0x289e1e86 in malloc_init () at jemalloc.c:4988
#639 0x289e1e20 in malloc (size=272) at jemalloc.c:5568
#640 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#641 0x2921d806 in pthread_join () from /lib/libthr.so.3
#642 0x2921da69 in pthread_join () from /lib/libthr.so.3
#643 0x292204e9 in __error () from /lib/libthr.so.3
#644 0x29214cb5 in ?? () from /lib/libthr.so.3
#645 0x2a3bc700 in ?? ()
#646 0x2819c318 in ?? () from /libexec/ld-elf.so.1
#647 0xbfbfe4d8 in ?? ()
#648 0x281718eb in dlsym () from /libexec/ld-elf.so.1
#649 0x28172ca5 in dlopen () from /libexec/ld-elf.so.1
#650 0x2816d60e in ?? () from /libexec/ld-elf.so.1

mailto: Dmitry Marakasov <amdmi3@amdmi3.ru>

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by bjacques (original submitter)
  • -email is unavailable- added by bjacques (Updated the item)
  • -email is unavailable- added by rsavoye (Posted a comment)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 5 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2011-03-08 bjacques Open/ClosedOpen Closed
    2011-03-08 bjacques StatusNone Ready For Test
    2011-03-08 bjacques Carbon-Copy- Added -email is unavailable-
    2011-03-08 bjacques Severity3 - Normal 5 - Blocker
    2009-09-27 rsavoye Assigned toNone rsavoye

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code