crash inside G__memfunc

Discussion:

crash inside G__memfunc_setup

Corey Reed

2014-10-16 03:20:00 UTC

Hi,

I am seeing a very strange crash when I try to instantiate particular
objects in CINT. These objects inherit from abstract base classes.

The issue is reproducible within my full software. However, I tried to
build a simple example by copying the relevant source code to a smaller
package -- but the small example does not show the problem!

The small, working example with the exact same source code files is at:

http://arianna.ps.uci.edu/~cjreed/calibTest.tar.gz

cd calibTest
make
root.exe
root [0] .L libsigprocdat.so
root [1] TSnDualGainCalibSet a("x",4)
root [2]

With my full software, I instead see the error below.

Any help is greatly appreciated! I am not sure how to proceed. It seems
to me like CINT is trying to access G__struct.memfunc[-1] and crashing.

root [0] .L lib/libsigprocdat.so
root [1] TSnDualGainCalibSet a("x",4)

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff5e1cf38 in G__memfunc_setup (funcname=0x7ffff4699031
"~TSnDualGainCalibSet", hash=1951, funcp=0x7ffff46649cf
<G__G__sigprocdat_193_0_27(G__value*, char const*, G__param*, int)>,
type=121, tagnum=-1, typenum=-1, reftype=0, para_nu=0, ansi=1,
accessin=1, isconst=0, paras=0x7ffff4697098 "", comment=0x0,
truep2f=0x0, isvirtual=1) at cint/cint/src/newlink.cxx:11229
11229 if('~'==funcname[0] &&
0==G__struct.memfunc[G__p_ifunc->tagnum]->hash[0]) {
(gdb) p funcname
$1 = 0x7ffff4699031 "~TSnDualGainCalibSet"
(gdb) p G__p_ifunc->tagnum
$2 = -1
(gdb) p G__struct.memfunc
$3 = {0x651ad0, 0x651f80, 0x65a680, 0x65ab60, 0x65aff0, 0x66dbb0,
0x66dfc0, 0x66f680, 0x670a70, 0x670970, 0x672280, 0x672180, 0x673a90,
0x673990, 0x683bc0, 0x6840a0, 0x6845c0, 0x684a80,
0x684f40, 0x6853d0, 0x685850, 0x685d30, 0x6861c0, 0x686620, 0x686a80,
0x686f90, 0x687410, 0x687b00, 0x687ef0, 0x688370, 0x688b50, 0x689040,
0x6893a0, 0x689760, 0x689be0, 0x68a070,
0x68a500, 0x68a960, 0x68adf0, 0x68b250, 0x68b6e0, 0x68bba0, 0x68c030,
0x68c4c0, 0x68c920, 0x68ce00, 0x68d520, 0x68daf0, 0x68de50, 0x68e1b0,
0x68e510, 0x68e870, 0x68ebd0, 0x68f0a0,
0x68f550, 0x68fa00, 0x68fe80, 0x690310, 0x690820, 0x690cc0, 0x691170,
0x691620, 0x691ab0, 0x691fa0, 0x692400, 0x692890, 0x692d20, 0x693180,
0x693640, 0x693ad0, 0x693f90, 0x6943f0,
0x6948b0, 0x694d30, 0x695200, 0x6956d0, 0x695ba0, 0x696050, 0x696500,
0x6969b0, 0x696e90, 0x697330, 0x6977e0, 0x697c90, 0x698140, 0x6985f0,
0x698ac0, 0x698f10, 0x6993d0, 0x699850,
0x699cd0, 0x69a160, 0x69a650, 0x69aad0, 0x69afb0, 0x69b460, 0x69b8e0,
0x69bf30, 0x69c600, 0x69c9e0, 0x69ce60, 0x69d2e0, 0x69d900, 0x69dd20,
0x69e1c0, 0x69e640, 0x69eaa0, 0x69ef20,
0x69f3c0, 0x69f840, 0x69fca0, 0x6a0130, 0x6a0590, 0x6a0a70, 0x6a0fb0,
0x6a1530, 0x6a1a10, 0x6a1e70, 0x6a22d0, 0x6a2730, 0x6a2be0, 0x6a3060,
0x6a3540, 0x6a39e0, 0x6a3eb0, 0x6a4360,
0x6a4880, 0x6a51a0, 0x6a55a0, 0x6a5a00, 0x6a5ea0, 0x6a64d0, 0x6a6860,
0x6a6ce0, 0x6a70a0, 0x6a74c0, 0x6a7940, 0x6a7dc0, 0x6a8240, 0x6a86a0,
0x6a8b00, 0x6a8fc0, 0x6a9470, 0x6a9910,
0x6a9df0, 0x6aa280, 0x6aa740, 0x6aabc0, 0x6ab090, 0x6ab560, 0x6aba10,
0x6abea0, 0x6ac350, 0x6ac7f0, 0x6acd20, 0x6ad1a0, 0x6ad600, 0x6ada90,
0x6adf20, 0x6ae4a0, 0x6aeaa0, 0x6ae7d0,
0x6af1a0, 0x6af500, 0x6af860, 0x6afc50, 0x6b00d0, 0x6b0560, 0x6b09d0,
0x6b0e50, 0x6b1280, 0x6c7a50, 0x6c7f30, 0x6c83e0, 0x6c88e0, 0x6c8d60,
0x6c9310, 0x6c9790, 0x6c9c30, 0x6ca050,
0x6ca530, 0x6ca9b0, 0x6cae90, 0x6cb370, 0x6cb7e0, 0x6cbcc0, 0x6cc120,
0x6cc580, 0x6ccaa0, 0x6cd030, 0x6cd4b0, 0x6cd970, 0x6cde00, 0x6ce2b0,
0x6ce730, 0x6cec40, 0x6cf110, 0x6cf470,
0x6cf880, 0x6cfd50...}
(gdb) up
#1 0x00007ffff467d9d2 in G__setup_memfuncTSnDualGainCalibSet () at
sigprocdat/G__sigprocdat.cxx:7934
7934 G__memfunc_setup("~TSnDualGainCalibSet", 1951,
G__G__sigprocdat_193_0_27, (int) ('y'), -1, -1, 0, 0, 1, 1, 0, "",
(char*) NULL, (void*) NULL, 1);
(gdb)
#2 0x00007ffff5e234b2 in G__incsetup_memfunc (tagnum=582) at
cint/cint/src/newlink.cxx:13147
13147 if (*iter) (*iter)();
(gdb)
#3 0x00007ffff5db3fd6 in G__getfunction (item=0x65f360
"TSnDualGainCalibSet(\"x\",4)", known3=0x7fffffffa0a4, memfunc_flag=3)
at cint/cint/src/func.cxx:2653
2653 G__incsetup_memfunc(G__tagnum);
(gdb)
#4 0x00007ffff5d7d7a8 in G__define_var (tagnum=582, typenum=-1) at
cint/cint/src/decl.cxx:2232
2232 reg = G__getfunction(temp1, &known, G__CALLCONSTRUCTOR);
(gdb)
#5 0x00007ffff5e3e379 in G__defined_type (type_name=..., len=19) at
cint/cint/src/parse.cxx:4652
4652 G__define_var(G__tagnum, G__typenum);
(gdb)
#6 0x00007ffff5e44dc2 in G__exec_statement (mparen=0x7fffffffaaf0) at
cint/cint/src/parse.cxx:6672
6672 int processed = G__defined_type(statement, iout);
(gdb)
#7 0x00007ffff5d72e54 in G__exec_tempfile_core (file=0x0, fp=0xf605d0)
at cint/cint/src/debug.cxx:266
266 buf = G__exec_statement(&brace_level);
(gdb)
#8 0x00007ffff5d748c6 in G__exec_tempfile_fp (fp=0xf605d0) at
cint/cint/src/debug.cxx:807
807 return G__exec_tempfile_core(0, fp);
(gdb)
#9 0x00007ffff5e568cf in G__process_cmd (line=0xf25930
"TSnDualGainCalibSet a(\"x\",4)", prompt=0x625f98 "", more=0x625f90,
err=0x7fffffffbdcc, rslt=0x7fffffffbe00)
at cint/cint/src/pause.cxx:3343
3343 buf = G__exec_tempfile_fp(ftemp.fp);
(gdb)
#10 0x00007ffff763ca5a in TCint::ProcessLine (this=0x625f50,
line=0xf25930 "TSnDualGainCalibSet a(\"x\",4)", error=0x0) at
/opt/root_v5.34.21/core/meta/src/TCint.cxx:545
545 ret = G__process_cmd((char *)line, fPrompt, &fMore,
&local_error, &local_res);
(gdb)
#11 0x00007ffff75a4cd6 in TApplication::ProcessLine(char const*, bool,
int*) () from /opt/root_v5.34.21/lib/libCore.so
(gdb)
#12 0x00007ffff71e7229 in TRint::HandleTermInput() () from
/opt/root_v5.34.21/lib/libRint.so
(gdb)
#13 0x00007ffff767fa15 in TUnixSystem::CheckDescriptors() () from
/opt/root_v5.34.21/lib/libCore.so
(gdb)
#14 0x00007ffff768053a in TUnixSystem::DispatchOneEvent(bool) () from
/opt/root_v5.34.21/lib/libCore.so
(gdb)
#15 0x00007ffff7600131 in TSystem::InnerLoop (this=0x61fea0) at
/opt/root_v5.34.21/core/base/src/TSystem.cxx:410
410 DispatchOneEvent();
(gdb)
#16 0x00007ffff75ffecc in TSystem::Run (this=0x61fea0) at
/opt/root_v5.34.21/core/base/src/TSystem.cxx:360
360 InnerLoop();
(gdb)
#17 0x00007ffff75a335f in TApplication::Run(bool) () from
/opt/root_v5.34.21/lib/libCore.so
(gdb)
#18 0x00007ffff71e845e in TRint::Run(bool) () from
/opt/root_v5.34.21/lib/libRint.so
(gdb)
#19 0x0000000000400fdc in main ()

- Corey

Corey Reed

2014-10-16 06:53:35 UTC

Permalink

Hi,

In case anyone runs into a similar problem (doubtful), the cause of the
issue was that some required libraries were not being loaded.

I have added the dependency libraries (the ones my libsigprocdat.so
depends on) to the rootmap, and all is now well.

- Corey

Post by Corey Reed
Hi,
I am seeing a very strange crash when I try to instantiate particular
objects in CINT. These objects inherit from abstract base classes.
The issue is reproducible within my full software. However, I tried to
build a simple example by copying the relevant source code to a smaller
package -- but the small example does not show the problem!
http://arianna.ps.uci.edu/~cjreed/calibTest.tar.gz
cd calibTest
make
root.exe
root [0] .L libsigprocdat.so
root [1] TSnDualGainCalibSet a("x",4)
root [2]
With my full software, I instead see the error below.
Any help is greatly appreciated! I am not sure how to proceed. It seems
to me like CINT is trying to access G__struct.memfunc[-1] and crashing.
root [0] .L lib/libsigprocdat.so
root [1] TSnDualGainCalibSet a("x",4)
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff5e1cf38 in G__memfunc_setup (funcname=0x7ffff4699031
"~TSnDualGainCalibSet", hash=1951, funcp=0x7ffff46649cf
<G__G__sigprocdat_193_0_27(G__value*, char const*, G__param*, int)>,
type=121, tagnum=-1, typenum=-1, reftype=0, para_nu=0, ansi=1,
accessin=1, isconst=0, paras=0x7ffff4697098 "", comment=0x0,
truep2f=0x0, isvirtual=1) at cint/cint/src/newlink.cxx:11229
11229 if('~'==funcname[0] &&
0==G__struct.memfunc[G__p_ifunc->tagnum]->hash[0]) {
(gdb) p funcname
$1 = 0x7ffff4699031 "~TSnDualGainCalibSet"
(gdb) p G__p_ifunc->tagnum
$2 = -1
(gdb) p G__struct.memfunc
$3 = {0x651ad0, 0x651f80, 0x65a680, 0x65ab60, 0x65aff0, 0x66dbb0,
0x66dfc0, 0x66f680, 0x670a70, 0x670970, 0x672280, 0x672180, 0x673a90,
0x673990, 0x683bc0, 0x6840a0, 0x6845c0, 0x684a80,
0x684f40, 0x6853d0, 0x685850, 0x685d30, 0x6861c0, 0x686620, 0x686a80,
0x686f90, 0x687410, 0x687b00, 0x687ef0, 0x688370, 0x688b50, 0x689040,
0x6893a0, 0x689760, 0x689be0, 0x68a070,
0x68a500, 0x68a960, 0x68adf0, 0x68b250, 0x68b6e0, 0x68bba0, 0x68c030,
0x68c4c0, 0x68c920, 0x68ce00, 0x68d520, 0x68daf0, 0x68de50, 0x68e1b0,
0x68e510, 0x68e870, 0x68ebd0, 0x68f0a0,
0x68f550, 0x68fa00, 0x68fe80, 0x690310, 0x690820, 0x690cc0, 0x691170,
0x691620, 0x691ab0, 0x691fa0, 0x692400, 0x692890, 0x692d20, 0x693180,
0x693640, 0x693ad0, 0x693f90, 0x6943f0,
0x6948b0, 0x694d30, 0x695200, 0x6956d0, 0x695ba0, 0x696050, 0x696500,
0x6969b0, 0x696e90, 0x697330, 0x6977e0, 0x697c90, 0x698140, 0x6985f0,
0x698ac0, 0x698f10, 0x6993d0, 0x699850,
0x699cd0, 0x69a160, 0x69a650, 0x69aad0, 0x69afb0, 0x69b460, 0x69b8e0,
0x69bf30, 0x69c600, 0x69c9e0, 0x69ce60, 0x69d2e0, 0x69d900, 0x69dd20,
0x69e1c0, 0x69e640, 0x69eaa0, 0x69ef20,
0x69f3c0, 0x69f840, 0x69fca0, 0x6a0130, 0x6a0590, 0x6a0a70, 0x6a0fb0,
0x6a1530, 0x6a1a10, 0x6a1e70, 0x6a22d0, 0x6a2730, 0x6a2be0, 0x6a3060,
0x6a3540, 0x6a39e0, 0x6a3eb0, 0x6a4360,
0x6a4880, 0x6a51a0, 0x6a55a0, 0x6a5a00, 0x6a5ea0, 0x6a64d0, 0x6a6860,
0x6a6ce0, 0x6a70a0, 0x6a74c0, 0x6a7940, 0x6a7dc0, 0x6a8240, 0x6a86a0,
0x6a8b00, 0x6a8fc0, 0x6a9470, 0x6a9910,
0x6a9df0, 0x6aa280, 0x6aa740, 0x6aabc0, 0x6ab090, 0x6ab560, 0x6aba10,
0x6abea0, 0x6ac350, 0x6ac7f0, 0x6acd20, 0x6ad1a0, 0x6ad600, 0x6ada90,
0x6adf20, 0x6ae4a0, 0x6aeaa0, 0x6ae7d0,
0x6af1a0, 0x6af500, 0x6af860, 0x6afc50, 0x6b00d0, 0x6b0560, 0x6b09d0,
0x6b0e50, 0x6b1280, 0x6c7a50, 0x6c7f30, 0x6c83e0, 0x6c88e0, 0x6c8d60,
0x6c9310, 0x6c9790, 0x6c9c30, 0x6ca050,
0x6ca530, 0x6ca9b0, 0x6cae90, 0x6cb370, 0x6cb7e0, 0x6cbcc0, 0x6cc120,
0x6cc580, 0x6ccaa0, 0x6cd030, 0x6cd4b0, 0x6cd970, 0x6cde00, 0x6ce2b0,
0x6ce730, 0x6cec40, 0x6cf110, 0x6cf470,
0x6cf880, 0x6cfd50...}
(gdb) up
#1 0x00007ffff467d9d2 in G__setup_memfuncTSnDualGainCalibSet () at
sigprocdat/G__sigprocdat.cxx:7934
7934 G__memfunc_setup("~TSnDualGainCalibSet", 1951,
G__G__sigprocdat_193_0_27, (int) ('y'), -1, -1, 0, 0, 1, 1, 0, "",
(char*) NULL, (void*) NULL, 1);
(gdb)
#2 0x00007ffff5e234b2 in G__incsetup_memfunc (tagnum=582) at
cint/cint/src/newlink.cxx:13147
13147 if (*iter) (*iter)();
(gdb)
#3 0x00007ffff5db3fd6 in G__getfunction (item=0x65f360
"TSnDualGainCalibSet(\"x\",4)", known3=0x7fffffffa0a4, memfunc_flag=3)
at cint/cint/src/func.cxx:2653
2653 G__incsetup_memfunc(G__tagnum);
(gdb)
#4 0x00007ffff5d7d7a8 in G__define_var (tagnum=582, typenum=-1) at
cint/cint/src/decl.cxx:2232
2232 reg = G__getfunction(temp1, &known,
G__CALLCONSTRUCTOR);
(gdb)
#5 0x00007ffff5e3e379 in G__defined_type (type_name=..., len=19) at
cint/cint/src/parse.cxx:4652
4652 G__define_var(G__tagnum, G__typenum);
(gdb)
#6 0x00007ffff5e44dc2 in G__exec_statement (mparen=0x7fffffffaaf0) at
cint/cint/src/parse.cxx:6672
6672 int processed = G__defined_type(statement,
iout);
(gdb)
#7 0x00007ffff5d72e54 in G__exec_tempfile_core (file=0x0, fp=0xf605d0)
at cint/cint/src/debug.cxx:266
266 buf = G__exec_statement(&brace_level);
(gdb)
#8 0x00007ffff5d748c6 in G__exec_tempfile_fp (fp=0xf605d0) at
cint/cint/src/debug.cxx:807
807 return G__exec_tempfile_core(0, fp);
(gdb)
#9 0x00007ffff5e568cf in G__process_cmd (line=0xf25930
"TSnDualGainCalibSet a(\"x\",4)", prompt=0x625f98 "", more=0x625f90,
err=0x7fffffffbdcc, rslt=0x7fffffffbe00)
at cint/cint/src/pause.cxx:3343
3343 buf = G__exec_tempfile_fp(ftemp.fp);
(gdb)
#10 0x00007ffff763ca5a in TCint::ProcessLine (this=0x625f50,
line=0xf25930 "TSnDualGainCalibSet a(\"x\",4)", error=0x0) at
/opt/root_v5.34.21/core/meta/src/TCint.cxx:545
545 ret = G__process_cmd((char *)line, fPrompt, &fMore,
&local_error, &local_res);
(gdb)
#11 0x00007ffff75a4cd6 in TApplication::ProcessLine(char const*, bool,
int*) () from /opt/root_v5.34.21/lib/libCore.so
(gdb)
#12 0x00007ffff71e7229 in TRint::HandleTermInput() () from
/opt/root_v5.34.21/lib/libRint.so
(gdb)
#13 0x00007ffff767fa15 in TUnixSystem::CheckDescriptors() () from
/opt/root_v5.34.21/lib/libCore.so
(gdb)
#14 0x00007ffff768053a in TUnixSystem::DispatchOneEvent(bool) () from
/opt/root_v5.34.21/lib/libCore.so
(gdb)
#15 0x00007ffff7600131 in TSystem::InnerLoop (this=0x61fea0) at
/opt/root_v5.34.21/core/base/src/TSystem.cxx:410
410 DispatchOneEvent();
(gdb)
#16 0x00007ffff75ffecc in TSystem::Run (this=0x61fea0) at
/opt/root_v5.34.21/core/base/src/TSystem.cxx:360
360 InnerLoop();
(gdb)
#17 0x00007ffff75a335f in TApplication::Run(bool) () from
/opt/root_v5.34.21/lib/libCore.so
(gdb)
#18 0x00007ffff71e845e in TRint::Run(bool) () from
/opt/root_v5.34.21/lib/libRint.so
(gdb)
#19 0x0000000000400fdc in main ()
- Corey

Axel Naumann

2014-10-16 06:58:31 UTC

Permalink

Hi Corey,

Great, thanks for finding out and reporting!

It's too bad that you did not see an error message before the crash -
that would have helped understanding the source of the problems...

Cheers, Axel

Post by Corey Reed
Hi,
In case anyone runs into a similar problem (doubtful), the cause of the
issue was that some required libraries were not being loaded.
I have added the dependency libraries (the ones my libsigprocdat.so
depends on) to the rootmap, and all is now well.
- Corey