[tor-bugs] #7212 [Tor]: circuitmux assertion failure in 0.2.4.4-alpha

[Tor Bug Tracker & Wiki]

#7212: circuitmux assertion failure in 0.2.4.4-alpha
-----------------------+----------------------------------------------------
 Reporter:  nickm      |          Owner:                    
     Type:  defect     |         Status:  new               
 Priority:  major      |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor        |        Version:  Tor: 0.2.4.4-alpha
 Keywords:  tor-relay  |         Parent:                    
   Points:             |   Actualpoints:                    
-----------------------+----------------------------------------------------

Comment(by aagbsn):

 {{{
 (gdb) select-frame 6
 (gdb) info frame
 Stack level 6, frame at 0x7fffffffdc40:
  rip = 0x7ffff7eee947 in circuit_unlink_all_from_channel
     (src/or/circuitlist.c:1047); saved rip 0x7ffff7ede308
  called by frame at 0x7fffffffdc70, caller of frame at 0x7fffffffdc00
  source language c.
  Arglist at 0x7fffffffdbf8, args: chan=0x7fffe3fa13b0, reason=8
  Locals at 0x7fffffffdbf8, Previous frame's sp is 0x7fffffffdc40
  Saved registers:
   rbx at 0x7fffffffdc20, rbp at 0x7fffffffdc28, r12 at 0x7fffffffdc30,
   rip at 0x7fffffffdc38
 (gdb) info locals
 mark = 0
 circ = 0x7ffff8decff0
 (gdb) p *circ
 $1 = {magic = 2561392719, n_chan = 0x0, n_circ_id = 0, n_mux = 0x0,
   n_chan_cells = {head = 0x0, tail = 0x0, n = 0, insertion_times = 0x0},
   n_hop = 0x0, streams_blocked_on_n_chan = 0, streams_blocked_on_p_chan =
 0,
   state = 3 '\003', purpose = 4 '\004', package_window = 1000,
   deliver_window = 1000, n_chan_onionskin = 0x0, timestamp_created = {
     tv_sec = 1352138892, tv_usec = 948938}, timestamp_dirty = 0,
   marked_for_close = 1047,
   marked_for_close_file = 0x7ffff7fb3a0f "src/or/circuitlist.c",
   dirreq_id = 0, next = 0x7ffff8a6b730, next_active_on_n_chan = 0x0,
   prev_active_on_n_chan = 0x0}
 (gdb) p *chan
 $2 = {magic = 2316903463, state = CHANNEL_STATE_CLOSING,
   global_identifier = 116130, registered = 1 '\001',
   reason_for_closing = CHANNEL_CLOSE_FOR_ERROR,
   timestamp_created = 1352131496, timestamp_active = 1352139161, free = 0,
   close = 0x7ffff7ee31f0 <channel_tls_close_method>,
   describe_transport = 0x7ffff7ee30d0
 <channel_tls_describe_transport_method>,
   dumpstats = 0, cell_handler = 0x7ffff7efdfd0 <command_process_cell>,
   var_cell_handler = 0x7ffff7efdc80 <command_process_var_cell>,
   get_remote_addr = 0x7ffff7ee2f20 <channel_tls_get_remote_addr_method>,
   get_remote_descr = 0x7ffff7ee2cd0 <channel_tls_get_remote_descr_method>,
   has_queued_writes = 0x7ffff7ee2b80
 <channel_tls_has_queued_writes_method>,
   is_canonical = 0x7ffff7ede820 <channel_tls_is_canonical_method>,
   matches_extend_info = 0x7ffff7ee1380
 <channel_tls_matches_extend_info_method>, matches_target = 0x7ffff7ee11d0
 <channel_tls_matches_target_method>,
   write_cell = 0x7ffff7ee29d0 <channel_tls_write_cell_method>,
   write_packed_cell = 0x7ffff7ee2810
 <channel_tls_write_packed_cell_method>,
   write_var_cell = 0x7ffff7ee2660 <channel_tls_write_var_cell_method>,
   identity_digest = ")�1:x O��PILu\f����Rt", nickname = 0x0,
   next_with_same_id = 0x0, prev_with_same_id = 0x0, incoming_queue = 0x0,
   outgoing_queue = 0x0, cmux = 0x7fffe1953ed0,
   circ_id_type = CIRC_ID_TYPE_LOWER, next_circ_id = 20738,
   num_n_circuits = 4294967280, num_p_circuits = 4294967290,
   is_bad_for_new_circs = 0, is_client = 0, is_incoming = 1, is_local = 0,
 ---Type <return> to continue, or q <return> to quit---
   timestamp_client = 0, timestamp_drained = 1352139161,
   timestamp_recv = 1352139160, timestamp_xmit = 1352139161,
   timestamp_last_added_nonpadding = 1352139160, dirreq_id = 0,
   n_cells_recved = 98393, n_cells_xmitted = 37552}
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7212#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online