Bug #3416
closed
hnb_context_release() will be called twice for the same hnb context
Added by lynxis almost 6 years ago.
Updated over 5 years ago.
Description
resulting in a expected crash, when a llist_del() is called twice.
#0 __llist_del (next=0x100100, prev=0x200200) at /srv/34c3/include/osmocom/core/linuxlist.h:114
#1 llist_del (entry=0x55b6b04bd490) at /srv/34c3/include/osmocom/core/linuxlist.h:126
#2 hnb_context_release (ctx=0x55b6b04bd490, destroy_conn=false) at hnbgw.c:302
#3 0x000055b6ae547c48 in hnb_close_cb (conn=<optimized out>) at hnbgw.c:211
#4 0x00007f726421ae98 in osmo_stream_srv_destroy (conn=0x55b6b04bd640) at stream.c:950
#5 0x000055b6ae547c0b in hnb_context_release (ctx=0x55b6b04bd490, destroy_conn=<optimized out>) at hnbgw.c:316
#6 0x000055b6ae547de5 in hnb_read_cb (conn=<optimized out>) at hnbgw.c:237
#7 0x00007f726421afeb in osmo_stream_srv_read (conn=0x55b6b04bd640) at stream.c:797
#8 osmo_stream_srv_cb (ofd=<optimized out>, what=1) at stream.c:851
#9 0x00007f7264aa841e in osmo_fd_disp_fds (_eset=0x7ffc47498eb0, _wset=0x7ffc47498e30, _rset=0x7ffc47498db0) at select.c:217
#10 osmo_select_main (polling=<optimized out>) at select.c:257
#11 0x000055b6ae53f0ce in main (argc=3, argv=0x7ffc47499078) at hnbgw.c:626
To reproduce: connect a femtocell to the hnbgw. Say reboot => the hnbgw crashes.b
- Status changed from New to Feedback
- % Done changed from 0 to 90
- Status changed from Feedback to Closed
Also available in: Atom
PDF
