bugGnash - The GNU Flash player - Bugs: bug #27542, Infinite recursion leading to...

 
 

bug #27542: Infinite recursion leading to stack overflow in jemalloc on FreeBSD

Submitted by:  None
Submitted on:  Sun 27 Sep 2009 07:57:17 PM UTC  
 
Category: coreSeverity: 5 - Blocker
Release: NoneStatus: Ready For Test
Privacy: PublicAssigned to: Rob Savoye <rsavoye>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 08 Mar 2011 03:49:16 AM UTC, comment #5:

Seems like I've forgotten about this bug completely. FreeBSD port of gnash had --disable-jemalloc in configure args for a long time and it works normally. Seems like now it's not even needed as it's disabled on FreeBSD by default. The bug may be closed I guess.

Anonymous
Tue 08 Mar 2011 02:24:49 AM UTC, comment #4:

rsavoye said jemalloc was disabled for FreeBSD.

Bastiaan Jacques <bjacques>
Project Member
Tue 08 Mar 2011 01:56:21 AM UTC, comment #3:

Dmitry, could you please answer rsavoye's questions in comment #2?

Bastiaan Jacques <bjacques>
Project Member
Sun 27 Sep 2009 08:08:40 PM UTC, comment #2:

Does the problem still exist if you reconfigure with --disable-jemalloc ? Does it happen for all swf files ? On FreeBSD I should probably disable jemalloc, as that's the default system malloc anyway. The Gnash version was initially based on the Mozilla version.

Rob Savoye <rsavoye>
Project AdministratorIn charge of this item.
Sun 27 Sep 2009 08:03:42 PM UTC, comment #1:

Seems like that should be fixed here: libbase/jemalloc.c:4981:

-#if (defined(WIN32) || defined(DARWIN))
+#if (defined(WIN32) || defined(DARWIN) || defined(_FreeBSD_))

however after that fix it still recurses, however via another path:

(gdb) bt -30
#2932 0x289e0d62 in huge_malloc (size=272, zero=false) at jemalloc.c:4481
#2933 0x289e1ea1 in imalloc (size=272) at jemalloc.c:3627
#2934 0x289e1e33 in malloc (size=272) at jemalloc.c:5586
#2935 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#2936 0x2921d806 in pthread_join () from /lib/libthr.so.3
#2937 0x2921bc7f in pthread_mutex_lock () from /lib/libthr.so.3
#2938 0x289da98c in malloc_mutex_lock (mutex=0x28a50748) at jemalloc.c:1242
#2939 0x289daba1 in base_node_alloc () at jemalloc.c:1672
#2940 0x289e0d62 in huge_malloc (size=272, zero=false) at jemalloc.c:4481
#2941 0x289e1ea1 in imalloc (size=272) at jemalloc.c:3627
#2942 0x289e1e33 in malloc (size=272) at jemalloc.c:5586
#2943 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#2944 0x2921d806 in pthread_join () from /lib/libthr.so.3
#2945 0x2921bc7f in pthread_mutex_lock () from /lib/libthr.so.3
#2946 0x289da98c in malloc_mutex_lock (mutex=0x28a50748) at jemalloc.c:1242
#2947 0x289daba1 in base_node_alloc () at jemalloc.c:1672
#2948 0x289e0d62 in huge_malloc (size=272, zero=false) at jemalloc.c:4481
#2949 0x289e1ea1 in imalloc (size=272) at jemalloc.c:3627
#2950 0x289e1e33 in malloc (size=272) at jemalloc.c:5586
#2951 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#2952 0x2921d806 in pthread_join () from /lib/libthr.so.3
#2953 0x2921da69 in pthread_join () from /lib/libthr.so.3
#2954 0x292204e9 in __error () from /lib/libthr.so.3
#2955 0x29214cb5 in ?? () from /lib/libthr.so.3
#2956 0x2a3bc700 in ?? ()
#2957 0x2819c318 in ?? () from /libexec/ld-elf.so.1
#2958 0xbfbfe4d8 in ?? ()
#2959 0x281718eb in dlsym () from /libexec/ld-elf.so.1
#2960 0x28172ca5 in dlopen () from /libexec/ld-elf.so.1
#2961 0x2816d60e in ?? () from /libexec/ld-elf.so.1

Anonymous
Sun 27 Sep 2009 07:57:17 PM UTC, original submission:

Trying to play any clip with gnash 0.8.6 leads to segfault because of stack overflow.

(gdb) bt -30
#621 0x2921bc7f in pthread_mutex_lock () from /lib/libthr.so.3
#622 0x289da98c in malloc_mutex_lock (mutex=0x28a50748) at jemalloc.c:1242
#623 0x289e1565 in malloc_init_hard () at jemalloc.c:5009
#624 0x289e1e86 in malloc_init () at jemalloc.c:4988
#625 0x289e1e20 in malloc (size=272) at jemalloc.c:5568
#626 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#627 0x2921d806 in pthread_join () from /lib/libthr.so.3
#628 0x2921bc7f in pthread_mutex_lock () from /lib/libthr.so.3
#629 0x289da98c in malloc_mutex_lock (mutex=0x28a50748) at jemalloc.c:1242
#630 0x289e1565 in malloc_init_hard () at jemalloc.c:5009
#631 0x289e1e86 in malloc_init () at jemalloc.c:4988
#632 0x289e1e20 in malloc (size=272) at jemalloc.c:5568
#633 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#634 0x2921d806 in pthread_join () from /lib/libthr.so.3
#635 0x2921bc7f in pthread_mutex_lock () from /lib/libthr.so.3
#636 0x289da98c in malloc_mutex_lock (mutex=0x28a50748) at jemalloc.c:1242
#637 0x289e1565 in malloc_init_hard () at jemalloc.c:5009
#638 0x289e1e86 in malloc_init () at jemalloc.c:4988
#639 0x289e1e20 in malloc (size=272) at jemalloc.c:5568
#640 0x2921cd88 in pthread_kill () from /lib/libthr.so.3
#641 0x2921d806 in pthread_join () from /lib/libthr.so.3
#642 0x2921da69 in pthread_join () from /lib/libthr.so.3
#643 0x292204e9 in __error () from /lib/libthr.so.3
#644 0x29214cb5 in ?? () from /lib/libthr.so.3
#645 0x2a3bc700 in ?? ()
#646 0x2819c318 in ?? () from /libexec/ld-elf.so.1
#647 0xbfbfe4d8 in ?? ()
#648 0x281718eb in dlsym () from /libexec/ld-elf.so.1
#649 0x28172ca5 in dlopen () from /libexec/ld-elf.so.1
#650 0x2816d60e in ?? () from /libexec/ld-elf.so.1

mailto: Dmitry Marakasov <amdmi3@amdmi3.ru>

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by bjacques (original submitter)
  • -unavailable- added by bjacques (Updated the item)
  • -unavailable- added by rsavoye (Posted a comment)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 5 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 08 Mar 2011 10:16:37 AM UTCbjacquesOpen/ClosedOpen=>Closed
    Tue 08 Mar 2011 02:24:49 AM UTCbjacquesStatusNone=>Ready For Test
    Tue 08 Mar 2011 01:56:21 AM UTCbjacquesCarbon-Copy-=>Added -unavailable-
    Tue 08 Mar 2011 01:43:54 AM UTCbjacquesSeverity3 - Normal=>5 - Blocker
    Sun 27 Sep 2009 08:08:40 PM UTCrsavoyeAssigned toNone=>rsavoye

    Back to the top


    Powered by Savane 3.1-cleanup1