develooper Front page | perl.perl5.porters | Postings from May 2013

[perl #117885] double free or corruption in thread->join

From:
Côme BERNIGAUD
Date:
May 6, 2013 18:43
Subject:
[perl #117885] double free or corruption in thread->join
Message ID:
rt-3.6.HEAD-28177-1367834348-458.117885-75-0@perl.org
# New Ticket Created by  Côme BERNIGAUD 
# Please include the string:  [perl #117885]
# in the subject line of all future correspondence about this issue. 
# <URL: https://rt.perl.org:443/rt3/Ticket/Display.html?id=117885 >


Hello,
When running file pre_interface.t from 
http://search.cpan.org/~tag/POE-Component-Pool-Thread-0.015/Thread.pm I 
get a glibc crash.
It seems to me that the problem occurs in thread->join.

I know the bug occurs in a module but as this is a glibc crash and not a 
perl crash it seems like a perl bug to me. Correct me if I'm wrong on this.
Backtrace:
*** glibc detected *** perl: double free or corruption (!prev): 
0x09c1de20 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6(+0x6af71)[0xb7605f71]
/lib/i686/cmov/libc.so.6(+0x6c7c8)[0xb76077c8]
/lib/i686/cmov/libc.so.6(cfree+0x6d)[0xb760a8ad]
/usr/lib/perl/5.10/auto/POSIX/POSIX.so(XS_POSIX__SigSet_DESTROY+0xb3)[0xb73e29c3]
perl(Perl_pp_entersub+0x52b)[0x80d5ddb]
perl(Perl_call_sv+0x5a8)[0x8078c18]
perl(Perl_sv_clear+0xa0)[0x80e80f0]
perl(Perl_sv_free2+0x4a)[0x80e883a]
perl[0x80dd939]
perl(Perl_sv_clean_objs+0x29)[0x80dd999]
perl(perl_destruct+0x11bf)[0x807dd0f]
/usr/local/lib/perl/5.10.1/auto/threads/threads.so(+0x483c)[0xb73a583c]
/usr/local/lib/perl/5.10.1/auto/threads/threads.so(+0x5339)[0xb73a6339]
perl(Perl_pp_entersub+0x52b)[0x80d5ddb]
perl(Perl_runops_standard+0x18)[0x80d43b8]
perl(perl_run+0x342)[0x80794d2]
perl(main+0x14d)[0x806435d]
/lib/i686/cmov/libc.so.6(__libc_start_main+0xe6)[0xb75b1ca6]
perl[0x8064171]
======= Memory map: ========
08048000-08176000 r-xp 00000000 08:01 808909     /usr/bin/perl
08176000-08178000 rw-p 0012e000 08:01 808909     /usr/bin/perl
09bce000-0a2f4000 rw-p 00000000 00:00 0          [heap]
b5fff000-b6000000 ---p 00000000 00:00 0
b6000000-b6800000 rw-p 00000000 00:00 0
b6800000-b68f0000 rw-p 00000000 00:00 0
b68f0000-b6900000 ---p 00000000 00:00 0
b6900000-b69f5000 rw-p 00000000 00:00 0
b69f5000-b6a00000 ---p 00000000 00:00 0
b6a00000-b6b00000 rw-p 00000000 00:00 0
b6b49000-b6b66000 r-xp 00000000 08:01 919299     /lib/libgcc_s.so.1
b6b66000-b6b67000 rw-p 0001c000 08:01 919299     /lib/libgcc_s.so.1
b6b7c000-b6b7d000 ---p 00000000 00:00 0
b6b7d000-b737d000 rw-p 00000000 00:00 0
b737d000-b7387000 r-xp 00000000 08:01 1079298    
/usr/local/lib/perl/5.10.1/auto/threads/shared/shared.so
b7387000-b7388000 rw-p 00009000 08:01 1079298    
/usr/local/lib/perl/5.10.1/auto/threads/shared/shared.so
b7388000-b7391000 r-xp 00000000 08:01 805284     
/usr/lib/perl/5.10.1/auto/List/Util/Util.so
b7391000-b7392000 rw-p 00008000 08:01 805284     
/usr/lib/perl/5.10.1/auto/List/Util/Util.so
b7392000-b7399000 r-xp 00000000 08:01 923154     
/lib/i686/cmov/librt-2.11.3.so
b7399000-b739a000 r--p 00006000 08:01 923154     
/lib/i686/cmov/librt-2.11.3.so
b739a000-b739b000 rw-p 00007000 08:01 923154     
/lib/i686/cmov/librt-2.11.3.so
b73a1000-b73aa000 r-xp 00000000 08:01 1078427    
/usr/local/lib/perl/5.10.1/auto/threads/threads.so
b73aa000-b73ab000 rw-p 00008000 08:01 1078427    
/usr/local/lib/perl/5.10.1/auto/threads/threads.so
b73ab000-b73af000 r-xp 00000000 08:01 805286     
/usr/lib/perl/5.10.1/auto/Socket/Socket.so
b73af000-b73b0000 rw-p 00004000 08:01 805286     
/usr/lib/perl/5.10.1/auto/Socket/Socket.so
b73b0000-b73b5000 r-xp 00000000 08:01 1081614    
/usr/lib/perl/5.10.1/auto/Time/HiRes/HiRes.so
b73b5000-b73b6000 rw-p 00005000 08:01 1081614    
/usr/lib/perl/5.10.1/auto/Time/HiRes/HiRes.so
b73b6000-b73d9000 r--p 00000000 08:01 793216     
/usr/share/locale/fr/LC_MESSAGES/libc.mo
b73d9000-b73f1000 r-xp 00000000 08:01 805280     
/usr/lib/perl/5.10.1/auto/POSIX/POSIX.so
b73f1000-b73f3000 rw-p 00017000 08:01 805280     
/usr/lib/perl/5.10.1/auto/POSIX/POSIX.so
b73f3000-b7568000 r--p 00000000 08:01 793796     
/usr/lib/locale/locale-archive
b7568000-b7569000 rw-p 00000000 00:00 0
b7569000-b7572000 r-xp 00000000 08:01 923108     
/lib/i686/cmov/libcrypt-2.11.3.so
b7572000-b7573000 r--p 00008000 08:01 923108     
/lib/i686/cmov/libcrypt-2.11.3.so
b7573000-b7574000 rw-p 00009000 08:01 923108     
/lib/i686/cmov/libcrypt-2.11.3.so
b7574000-b759b000 rw-p 00000000 00:00 0
b759b000-b76db000 r-xp 00000000 08:01 923155     
/lib/i686/cmov/libc-2.11.3.so
b76db000-b76dc000 ---p 00140000 08:01 923155     
/lib/i686/cmov/libc-2.11.3.so
b76dc000-b76de000 r--p 00140000 08:01 923155     
/lib/i686/cmov/libc-2.11.3.so
b76de000-b76df000 rw-p 00142000 08:01 923155     
/lib/i686/cmov/libc-2.11.3.so
b76df000-b76e2000 rw-p 00000000 00:00 0
b76e2000-b76f7000 r-xp 00000000 08:01 923128     
/lib/i686/cmov/libpthread-2.11.3.so
b76f7000-b76f8000 r--p 00014000 08:01 923128     
/lib/i686/cmov/libpthread-2.11.3.so
b76f8000-b76f9000 rw-p 00015000 08:01 923128     
/lib/i686/cmov/libpthread-2.11.3.so
b76f9000-b76fc000 rw-p 00000000 00:00 0
b76fc000-b7720000 r-xp 00000000 08:01 923096     
/lib/i686/cmov/libm-2.11.3.so
b7720000-b7721000 r--p 00023000 08:01 923096     
/lib/i686/cmov/libm-2.11.3.so
b7721000-b7722000 rw-p 00024000 08:01 923096     
/lib/i686/cmov/libm-2.11.3.so
b7722000-b7724000 r-xp 00000000 08:01 923092     
/lib/i686/cmov/libdl-2.11.3.so
b7724000-b7725000 r--p 00001000 08:01 923092     
/lib/i686/cmov/libdl-2.11.3.so
b7725000-b7726000 rw-p 00002000 08:01 923092     
/lib/i686/cmov/libdl-2.11.3.so
b7728000-b772c000 r-xp 00000000 08:01 805287     
/usr/lib/perl/5.10.1/auto/IO/IO.so
b772c000-b772d000 rw-p 00003000 08:01 805287     
/usr/lib/perl/5.10.1/auto/IO/IO.so
b772d000-b772f000 r-xp 00000000 08:01 1080431    
/usr/lib/perl/5.10.1/auto/Sys/Hostname/Hostname.so
b772f000-b7730000 rw-p 00001000 08:01 1080431    
/usr/lib/perl/5.10.1/auto/Sys/Hostname/Hostname.so
b7730000-b7737000 r--s 00000000 08:01 793962     
/usr/lib/gconv/gconv-modules.cache
b7737000-b773a000 r-xp 00000000 08:01 805283     
/usr/lib/perl/5.10.1/auto/Fcntl/Fcntl.so
b773a000-b773b000 rw-p 00002000 08:01 805283     
/usr/lib/perl/5.10.1/auto/Fcntl/Fcntl.so
b773b000-b773d000 rw-p 00000000 00:00 0
b773d000-b773e000 r-xp 00000000 00:00 0          [vdso]
b773e000-b7759000 r-xp 00000000 08:01 923059     /lib/ld-2.11.3.so
b7759000-b775a000 r--p 0001b000 08:01 923059     /lib/ld-2.11.3.so
b775a000-b775b000 rw-p 0001c000 08:01 923059     /lib/ld-2.11.3.so
bfcd9000-bfcfa000 rw-p 00000000 00:00 0          [stack]
Abandon


---
Flags:
     category=
     severity=medium
---
Site configuration information for perl 5.10.1:

Configured by Debian Project at Wed Mar  6 17:26:52 UTC 2013.

Summary of my perl5 (revision 5 version 10 subversion 1) configuration:

   Platform:
     osname=linux, osvers=2.6.32-5-amd64, 
archname=i486-linux-gnu-thread-multi
     uname='linux biber 2.6.32-5-amd64 #1 smp mon feb 25 00:26:11 utc 
2013 i686 gnulinux '
     config_args='-Dusethreads -Duselargefiles -Dccflags=-DDEBIAN 
-Dcccdlflags=-fPIC -Darchname=i486-linux-gnu -Dprefix=/usr 
-Dprivlib=/usr/share/perl/5.10 -Darchlib=/usr/lib/perl/5.10 
-Dvendorprefix=/usr -Dvendorlib=/usr/share/perl5 
-Dvendorarch=/usr/lib/perl5 -Dsiteprefix=/usr/local 
-Dsitelib=/usr/local/share/perl/5.10.1 
-Dsitearch=/usr/local/lib/perl/5.10.1 -Dman1dir=/usr/share/man/man1 
-Dman3dir=/usr/share/man/man3 -Dsiteman1dir=/usr/local/man/man1 
-Dsiteman3dir=/usr/local/man/man3 -Dman1ext=1 -Dman3ext=3perl 
-Dpager=/usr/bin/sensible-pager -Uafs -Ud_csh -Ud_ualarm -Uusesfio 
-Uusenm -DDEBUGGING=-g -Doptimize=-O2 -Duseshrplib 
-Dlibperl=libperl.so.5.10.1 -Dd_dosuid -des'
     hint=recommended, useposix=true, d_sigaction=define
     useithreads=define, usemultiplicity=define
     useperlio=define, d_sfio=undef, uselargefiles=define, usesocks=undef
     use64bitint=undef, use64bitall=undef, uselongdouble=undef
     usemymalloc=n, bincompat5005=undef
   Compiler:
     cc='cc', ccflags ='-D_REENTRANT -D_GNU_SOURCE -DDEBIAN 
-fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include 
-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64',
     optimize='-O2 -g',
     cppflags='-D_REENTRANT -D_GNU_SOURCE -DDEBIAN -fno-strict-aliasing 
-pipe -fstack-protector -I/usr/local/include'
     ccversion='', gccversion='4.4.5', gccosandvers=''
     intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234
     d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12
     ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', 
lseeksize=8
     alignbytes=4, prototype=define
   Linker and Libraries:
     ld='cc', ldflags =' -fstack-protector -L/usr/local/lib'
     libpth=/usr/local/lib /lib /usr/lib /usr/lib64
     libs=-lgdbm -lgdbm_compat -ldb -ldl -lm -lpthread -lc -lcrypt
     perllibs=-ldl -lm -lpthread -lc -lcrypt
     libc=/lib/libc-2.11.3.so, so=so, useshrplib=true, 
libperl=libperl.so.5.10.1
     gnulibc_version='2.11.3'
   Dynamic Linking:
     dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-Wl,-E'
     cccdlflags='-fPIC', lddlflags='-shared -O2 -g -L/usr/local/lib 
-fstack-protector'

Locally applied patches:
     DEBPKG:debian/arm_thread_stress_timeout - 
http://bugs.debian.org/501970 Raise the timeout of 
ext/threads/shared/t/stress.t to accommodate slower build hosts
     DEBPKG:debian/cpan_config_path - Set location of CPAN::Config to 
/etc/perl as /usr may not be writable.
     DEBPKG:debian/cpan_definstalldirs - Provide a sensible INSTALLDIRS 
default for modules installed from CPAN.
     DEBPKG:debian/db_file_ver - http://bugs.debian.org/340047 Remove 
overly restrictive DB_File version check.
     DEBPKG:debian/doc_info - Replace generic man(1) instructions with 
Debian-specific information.
     DEBPKG:debian/enc2xs_inc - http://bugs.debian.org/290336 Tweak 
enc2xs to follow symlinks and ignore missing @INC directories.
     DEBPKG:debian/errno_ver - http://bugs.debian.org/343351 Remove 
Errno version check due to upgrade problems with long-running processes.
     DEBPKG:debian/extutils_hacks - Various debian-specific ExtUtils changes
     DEBPKG:debian/fakeroot - Postpone LD_LIBRARY_PATH evaluation to the 
binary targets.
     DEBPKG:debian/instmodsh_doc - Debian policy doesn't install 
.packlist files for core or vendor.
     DEBPKG:debian/ld_run_path - Remove standard libs from LD_RUN_PATH 
as per Debian policy.
     DEBPKG:debian/libnet_config_path - Set location of libnet.cfg to 
/etc/perl/Net as /usr may not be writable.
     DEBPKG:debian/m68k_thread_stress - http://bugs.debian.org/495826 
Disable some threads tests on m68k for now due to missing TLS.
     DEBPKG:debian/mod_paths - Tweak @INC ordering for Debian
     DEBPKG:debian/module_build_man_extensions - 
http://bugs.debian.org/479460 Adjust Module::Build manual page 
extensions for the Debian Perl policy
     DEBPKG:debian/perl_synopsis - http://bugs.debian.org/278323 
Rearrange perl.pod
     DEBPKG:debian/prune_libs - http://bugs.debian.org/128355 Prune the 
list of libraries wanted to what we actually need.
     DEBPKG:debian/use_gdbm - Explicitly link against -lgdbm_compat in 
ODBM_File/NDBM_File.
     DEBPKG:fixes/assorted_docs - http://bugs.debian.org/443733 
[384f06a] Math::BigInt::CalcEmu documentation grammar fix
     DEBPKG:fixes/net_smtp_docs - http://bugs.debian.org/100195 
[rt.cpan.org #36038] Document the Net::SMTP 'Port' option
     DEBPKG:fixes/processPL - http://bugs.debian.org/357264 [rt.cpan.org 
#17224] Always use PERLRUNINST when building perl modules.
     DEBPKG:debian/perlivp - http://bugs.debian.org/510895 Make perlivp 
skip include directories in /usr/local
     DEBPKG:fixes/pod2man-index-backslash - 
http://bugs.debian.org/521256 Escape backslashes in .IX entries
     DEBPKG:debian/disable-zlib-bundling - Disable zlib bundling in 
Compress::Raw::Zlib
     DEBPKG:fixes/kfreebsd_cppsymbols - http://bugs.debian.org/533098 
[3b910a0] Add gcc predefined macros to $Config{cppsymbols} on GNU/kFreeBSD.
     DEBPKG:debian/cpanplus_definstalldirs - 
http://bugs.debian.org/533707 Configure CPANPLUS to use the site 
directories by default.
     DEBPKG:debian/cpanplus_config_path - Save local versions of 
CPANPLUS::Config::System into /etc/perl.
     DEBPKG:fixes/kfreebsd-filecopy-pipes - 
http://bugs.debian.org/537555 [16f708c] Fix File::Copy::copy with pipes 
on GNU/kFreeBSD
     DEBPKG:fixes/anon-tmpfile-dir - http://bugs.debian.org/528544 [perl 
#66452] Honor TMPDIR when open()ing an anonymous temporary file
     DEBPKG:fixes/abstract-sockets - http://bugs.debian.org/329291 
[89904c0] Add support for Abstract namespace sockets.
     DEBPKG:fixes/hurd_cppsymbols - http://bugs.debian.org/544307 
[eeb92b7] Add gcc predefined macros to $Config{cppsymbols} on GNU/Hurd.
     DEBPKG:fixes/autodie-flock - http://bugs.debian.org/543731 Allow 
for flock returning EAGAIN instead of EWOULDBLOCK on linux/parisc
     DEBPKG:fixes/archive-tar-instance-error - 
http://bugs.debian.org/539355 [rt.cpan.org #48879] Separate Archive::Tar 
instance error strings from each other
     DEBPKG:fixes/positive-gpos - http://bugs.debian.org/545234 [perl 
#69056] [c584a96] Fix \\G crash on first match
     DEBPKG:debian/devel-ppport-ia64-optim - 
http://bugs.debian.org/548943 Work around an ICE on ia64
     DEBPKG:fixes/trie-logic-match - http://bugs.debian.org/552291 [perl 
#69973] [0abd0d7] Fix a DoS in Unicode processing [CVE-2009-3626]
     DEBPKG:fixes/hppa-thread-eagain - http://bugs.debian.org/554218 
make the threads-shared test suite more robust, fixing failures on hppa
     DEBPKG:fixes/crash-on-undefined-destroy - 
http://bugs.debian.org/564074 [perl #71952] [1f15e67] Fix a NULL pointer 
dereference when looking for a DESTROY method
     DEBPKG:fixes/tainted-errno - http://bugs.debian.org/574129 [perl 
#61976] [be1cf43] fix an errno stringification bug in taint mode
     DEBPKG:fixes/safe-upgrade - http://bugs.debian.org/582978 Upgrade 
Safe.pm to 2.25, fixing CVE-2010-1974
     DEBPKG:fixes/tell-crash - http://bugs.debian.org/578577 [f4817f3] 
Fix a tell() crash on bad arguments.
     DEBPKG:fixes/format-write-crash - http://bugs.debian.org/579537 
[perl #22977] [421f30e] Fix a crash in format/write
     DEBPKG:fixes/arm-alignment - http://bugs.debian.org/289884 
[f1c7503] Prevent gcc from optimizing the alignment test away on armel
     DEBPKG:fixes/fcgi-test - Fix a failure in CGI/t/fast.t when FCGI is 
installed
     DEBPKG:fixes/hurd-ccflags - http://bugs.debian.org/587901 Make 
hints/gnu.sh append to $ccflags rather than overriding them
     DEBPKG:debian/squelch-locale-warnings - 
http://bugs.debian.org/508764 Squelch locale warnings in Debian package 
maintainer scripts
     DEBPKG:fixes/lc-numeric-docs - http://bugs.debian.org/379329 [perl 
#78452] [903eb63] LC_NUMERIC documentation fixes
     DEBPKG:fixes/lc-numeric-sprintf - http://bugs.debian.org/601549 
[perl #78632] [b3fd614] Fix sprintf not to ignore LC_NUMERIC with constants
     DEBPKG:fixes/concat-stack-corruption - 
http://bugs.debian.org/596105 [perl #78674] [e3393f5] Fix stack pointer 
corruption in pp_concat() with 'use encoding'
     DEBPKG:fixes/cgi-multiline-header - http://bugs.debian.org/606995 
[CVE-2010-2761 CVE-2010-4410 CVE-2010-4411] CGI.pm MIME boundary and 
multiline header vulnerabilities
     DEBPKG:fixes/casing-taint-cve-2011-1487 - 
http://bugs.debian.org/622817 [perl #87336] fix unwanted taint 
laundering in lc(), uc() et al.
     DEBPKG:fixes/safe-reval-rdo-cve-2010-1447 - [PATCH] Wrap by default 
coderefs returned by rdo and reval
     DEBPKG:fixes/encode-heap-overflow - [PATCH] Fix decode_xs n-byte 
heap-overflow security bug in
     DEBPKG:fixes/digest_eval_hole - Close the eval \"require $module\" 
security hole in
     DEBPKG:fixes/unregister_signal_handler - [PATCH] main: Unregister 
signal handler before destroying my_perl
     DEBPKG:fixes/CVE-2012-5195 - avoid calling memset with a negative count
     DEBPKG:fixes/CVE-2012-5526 - [PATCH 1/4] CR escaping for P3P header
     DEBPKG:fixes/storable-security-warning - [PATCH] add a note about 
security concerns in Storable
     DEBPKG:fixes/maketext-code-execution - Fix misparsing of maketext 
strings.
     DEBPKG:fixes/CVE-2013-1667 - [PATCH] Prevent premature hsplit() 
calls, and only trigger REHASH
     DEBPKG:patchlevel - http://bugs.debian.org/567489 List packaged 
patches for 5.10.1-17squeeze5 in patchlevel.h

---
@INC for perl 5.10.1:
     /etc/perl
     /usr/local/lib/perl/5.10.1
     /usr/local/share/perl/5.10.1
     /usr/lib/perl5
     /usr/share/perl5
     /usr/lib/perl/5.10
     /usr/share/perl/5.10
     /usr/local/lib/site_perl
     .

---
Environment for perl 5.10.1:
     HOME=/home/mcmic
     LANG=fr_FR.utf8
     LANGUAGE (unset)
     LD_LIBRARY_PATH (unset)
     LOGDIR (unset)
     
PATH=/usr/lib/colorgcc/bin:/usr/local/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games:~/dev/bin
     PERL_BADLANG (unset)
     SHELL=/bin/bash




nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About