search

inevity / cacheboy

Automatically exported from code.google.com/p/cacheboy
0 stars 0 forks source link

assertion failed: client_side.c:3115 "ref->node.data" #11

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
Cacheboy from SVN crashes almost immediately after startup.

Original issue reported on code.google.com by adrian.c...@gmail.com on 7 May 2008 at 1:27

GoogleCodeExporter commented 9 years ago 
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 182894087968 (LWP 16346)]
storeUpdateCopy (data=0x2aa975d3c8, nr={node = 0x0, offset = 0}, size=4096) at 
store_update.c:112
112             assert(size <= nr.node->len - nr.offset);
(gdb) backtrace full
#0  storeUpdateCopy (data=0x2aa975d3c8, nr={node = 0x0, offset = 0}, size=4096) 
at 
store_update.c:112
        buf = 0x0
        state = Variable "state" is not available.
(gdb) info registers
rax            0x0      0
rbx            0x2aa975d3c8     183231697864
rcx            0x0      0
rdx            0x0      0
rsi            0x0      0
rdi            0x794b440        127185984
rbp            0x1000   0x1000
rsp            0x7fbfffe5b0     0x7fbfffe5b0
r8             0x1000   4096
r9             0x47ca70 4704880
r10            0x0      0
r11            0xaaa    2730
r12            0x0      0
r13            0x2aa975d3c8     183231697864
r14            0xb608710        190875408
r15            0x2aaa53de90     183246249616
rip            0x47cacb 0x47cacb <storeUpdateCopy+91>
eflags         0x10206  66054
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0
(gdb) thread apply all backtrace

Thread 17 (Thread 1077999968 (LWP 16365)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fcf3 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 16 (Thread 1077733728 (LWP 16364)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fcf3 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 15 (Thread 1077467488 (LWP 16363)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fcf3 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 14 (Thread 1077201248 (LWP 16362)):
#0  0x00000038e100be5c in __pread_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fd59 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:701
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 13 (Thread 1076935008 (LWP 16361)):
#0  0x00000038e100be5c in __pread_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fd59 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:701
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 12 (Thread 1076668768 (LWP 16360)):
#0  0x00000038e100be5c in __pread_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fd59 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:701
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 11 (Thread 1076402528 (LWP 16359)):
#0  0x00000038e100be5c in __pread_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fd59 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:701
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 10 (Thread 1076136288 (LWP 16358)):
#0  0x00000038e100bbff in __open_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fd76 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:659
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 9 (Thread 1075870048 (LWP 16357)):
#0  0x00000038e100bbff in __open_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fd76 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:659
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 8 (Thread 1075603808 (LWP 16356)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fcf3 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 7 (Thread 1075337568 (LWP 16355)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fcf3 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 6 (Thread 1075071328 (LWP 16354)):
#0  0x00000038e100bbff in __open_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fd76 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:659
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 5 (Thread 1074805088 (LWP 16353)):
#0  0x00000038e100bbff in __open_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fd76 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:659
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 4 (Thread 1074538848 (LWP 16352)):
#0  0x00000038e100be5c in __pread_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fd59 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:701
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 3 (Thread 1074272608 (LWP 16351)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fcf3 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 2 (Thread 1074006368 (LWP 16350)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fcf3 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 1 (Thread 182894087968 (LWP 16346)):
#0  storeUpdateCopy (data=0x2aa975d3c8, nr={node = 0x0, offset = 0}, size=4096) 
at 
store_update.c:112
#1  0x00000000004772ac in storeClientCallback (sc=0xd085e8, sz=-1) at 
store_client.c:149
#2  0x000000000047766b in storeClientCopy2 (e=0xb608710, sc=0xd085e8) at 
store_client.c:324
#3  0x000000000047ce99 in storeUpdate (entry=0xb608710, request=0x2b8c7490) at 
store_update.c:192
#4  0x0000000000422ee9 in clientHandleIMSReply (data=0x2b85bd38, 
rep=0x2aa9ddf010) 
at client_side.c:887
#5  0x0000000000478819 in storeClientCopyHeadersCB (data=0xc25ef8, nr={node = 
0x0, 
offset = -1}, size=331) at store_client.c:755
#6  0x00000000004772ac in storeClientCallback (sc=0xc25ef8, sz=331) at 
store_client.c:149
#7  0x000000000047766b in storeClientCopy2 (e=0x9817b30, sc=0xc25ef8) at 
store_client.c:324
#8  0x000000000047831a in InvokeHandlers (e=0x9817b30) at store_client.c:664
#9  0x0000000000472afc in storeBufferFlush (e=0x9817b30) at store.c:1963
#10 0x00000000004421da in httpAppendBody (httpState=0x2b8f9878, buf=0x65f66b 
"", 
len=0, buffer_filled=0) at http.c:723
#11 0x00000000004428df in httpReadReply (fd=115, data=Variable "data" is not 
available.
) at http.c:991
#12 0x00000000004297c3 in comm_select (msec=Variable "msec" is not available.
) at comm_generic.c:264
#13 0x0000000000453572 in main (argc=Variable "argc" is not available.
) at main.c:862

Original comment by hawkevi...@gmail.com on 8 May 2008 at 12:31

GoogleCodeExporter commented 9 years ago 
ok!
that bit of code ends up here in src/store_client.c:

    if (sc->copy_offset >= mem->inmem_lo && sc->copy_offset < mem->inmem_hi) {
        /* What the client wants is in memory */
        debug(20, 3) ("storeClientCopy3: Copying from memory\n");
        assert(sc->new_callback);
        assert(sc->node_ref.node == NULL);      /* We should never, ever have a node here; or we'd leak! */
        sz = stmemRef(&mem->data_hdr, sc->copy_offset, &sc->node_ref);
        if (EBIT_TEST(e->flags, RELEASE_REQUEST))
            storeSwapOutMaintainMemObject(e);
        storeClientCallback(sc, sz);
        return;
    }

It goes through this code twice though (I wonder if the re-entry screws things 
somehow; it shouldn't..)

in the traceback:

#1  0x00000000004772ac in storeClientCallback (sc=0xd085e8, sz=-1) at 
store_client.c:149
#2  0x000000000047766b in storeClientCopy2 (e=0xb608710, sc=0xd085e8) at 
store_client.c:324

Go "frame 2", then "print sz" and see what stmemRef() returned.

You might have to go digging in the e->mem_obj->{whatever the storemem entry 
is} to see whether the 
offset requested actually exists in memory.

Its possible that this was actually a proper failure (ie, there's no data to 
copy!) and that storeUpdateCopy() is 
just busted in expecting a NULL memref + sz == -1; but I'd like to first make 
sure that this "error" return 
state is valid. First we figure out whether the return state is valid, then we 
fix storeUpdateCopy() to better 
handle errors.

Original comment by adrian.c...@gmail.com on 9 May 2008 at 8:03

GoogleCodeExporter commented 9 years ago 
At first glance, it looks like within that function, mem is no longer defined, 
and sz
loses its assignment too.  I'll take a better look at it when I get home 
tonight.

Original comment by hawkevi...@gmail.com on 9 May 2008 at 12:02

GoogleCodeExporter commented 9 years ago 
Yeah, you will have to recompile with -O0 rather than -O2 in order to get 
sensible variables out of gdb.

The store client stuff is still messy. Looking at it, i think thread 1, stack 
frame #5 is where things get 
interesting.

#5  0x0000000000478819 in storeClientCopyHeadersCB (data=0xc25ef8, nr={node = 
0x0, 
offset = -1}, size=331) at store_client.c:755
#6  0x00000000004772ac in storeClientCallback (sc=0xc25ef8, sz=331) at 
store_client.c:149

ie, there's 331 bytes being returned in the storeClientCallback(); but 
storeClientCopyHeadersCB() is being 
passed a NULL memref. Ok, thats fine - its just for headers.

Then you get to this:

#4  0x0000000000422ee9 in clientHandleIMSReply (data=0x2b85bd38, 
rep=0x2aa9ddf010) 
at client_side.c:887

This called clientHandleIMSReply(), which ends up in storeUpdate(). That kicks 
off a storeClientRef() call to 
grab some data from the oldentry; I wonder what that looks like (ie, are there 
two store clients referencing the 
same StoreEntry.)

Gah, I need to find a local way to trigger this bug..

Original comment by adrian.c...@gmail.com on 12 May 2008 at 6:11

GoogleCodeExporter commented 9 years ago 
Try this:

Index: store_client.c
===================================================================
--- store_client.c      (revision 12736)
+++ store_client.c      (working copy)
@@ -319,6 +319,9 @@
        assert(sc->new_callback);
        assert(sc->node_ref.node == NULL);      /* We should never, ever have a node here; or we'd leak! */
        sz = stmemRef(&mem->data_hdr, sc->copy_offset, &sc->node_ref);
+        assert(sc->node_ref.node != NULL);
+        assert(sc->node_ref.offset > -1);
+        assert(sz > -1);
        if (EBIT_TEST(e->flags, RELEASE_REQUEST))
            storeSwapOutMaintainMemObject(e);
        storeClientCallback(sc, sz);

Original comment by adrian.c...@gmail.com on 12 May 2008 at 6:45

GoogleCodeExporter commented 9 years ago 
With extra asserts added:

Program received signal SIGABRT, Aborted.
[Switching to Thread 182894087968 (LWP 20202)]
0x00000038dfd2e21d in raise () from /lib64/tls/libc.so.6
(gdb) backtrace full
#0  0x00000038dfd2e21d in raise () from /lib64/tls/libc.so.6
No symbol table info available.
#1  0x00000038dfd2fa1e in abort () from /lib64/tls/libc.so.6
No symbol table info available.
#2  0x0000000000429fcd in xassert (msg=0x4eea <Address 0x4eea out of bounds>,
file=0x4eea <Address 0x4eea out of bounds>, line=6) at debug.c:505
No locals.
#3  0x0000000000424880 in clientSendMoreData (data=0xfd0b1a8, ref={node = 0x0, 
offset
= -1}, size=4096) at client_side.c:3115
        buf = Variable "buf" is not available.
(gdb) info registers
rax            0x0      0
rbx            0xfd0b5a0        265336224
rcx            0xffffffffffffffff       -1
rdx            0x6      6
rsi            0x4eea   20202
rdi            0x4eea   20202
rbp            0x2a95564f20     0x2a95564f20
rsp            0x7fbfffe5d8     0x7fbfffe5d8
r8             0x6      6
r9             0x4eea   20202
r10            0x8      8
r11            0x202    514
r12            0x5e09438        98604088
r13            0x1000   4096
r14            0x9a3210 10105360
r15            0xa1     161
rip            0x38dfd2e21d     0x38dfd2e21d <raise+61>
eflags         0x202    514
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0
(gdb) thread apply all backtrace

Thread 17 (Thread 1077999968 (LWP 20221)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fd63 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 16 (Thread 1077733728 (LWP 20220)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fd63 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 15 (Thread 1077467488 (LWP 20219)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fd63 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 14 (Thread 1077201248 (LWP 20218)):
#0  0x00000038e100bbff in __open_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fde6 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:659
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 13 (Thread 1076935008 (LWP 20217)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fd63 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 12 (Thread 1076668768 (LWP 20216)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fd63 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 11 (Thread 1076402528 (LWP 20215)):
#0  0x00000038e100be5c in __pread_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fdc9 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:701
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 10 (Thread 1076136288 (LWP 20214)):
#0  0x00000038e100be5c in __pread_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fdc9 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:701
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 9 (Thread 1075870048 (LWP 20213)):
#0  0x00000038e100bbff in __open_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fde6 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:659
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 8 (Thread 1075603808 (LWP 20212)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fd63 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 7 (Thread 1075337568 (LWP 20211)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fd63 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 6 (Thread 1075071328 (LWP 20210)):
#0  0x00000038e100bbff in __open_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fde6 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:659
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 5 (Thread 1074805088 (LWP 20209)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fd63 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 4 (Thread 1074538848 (LWP 20208)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fd63 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 3 (Thread 1074272608 (LWP 20207)):
#0  0x00000038dfdc2089 in truncate64 () from /lib64/tls/libc.so.6
#1  0x000000000048fd63 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:830
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 2 (Thread 1074006368 (LWP 20206)):
#0  0x00000038e100be5c in __pread_nocancel () from /lib64/tls/libpthread.so.0
#1  0x000000000048fdc9 in squidaio_thread_loop (ptr=Variable "ptr" is not 
available.
) at aufs/aiops.c:701
#2  0x00000038e1006137 in start_thread () from /lib64/tls/libpthread.so.0
#3  0x00000038dfdc7113 in clone () from /lib64/tls/libc.so.6

Thread 1 (Thread 182894087968 (LWP 20202)):
#0  0x00000038dfd2e21d in raise () from /lib64/tls/libc.so.6
#1  0x00000038dfd2fa1e in abort () from /lib64/tls/libc.so.6
#2  0x0000000000429fcd in xassert (msg=0x4eea <Address 0x4eea out of bounds>,
file=0x4eea <Address 0x4eea out of bounds>, line=6) at debug.c:505
#3  0x0000000000424880 in clientSendMoreData (data=0xfd0b1a8, ref={node = 0x0, 
offset
= -1}, size=4096) at client_side.c:3115
#4  0x00000000004772ac in storeClientCallback (sc=0xfdbde98, sz=-1) at 
store_client.c:149
#5  0x0000000000477693 in storeClientCopy2 (e=0x9a3210, sc=0xfdbde98) at
store_client.c:327
#6  0x0000000000421855 in clientWriteComplete (fd=161, bufnotused=Variable
"bufnotused" is not available.
) at client_side.c:3326
#7  0x0000000000425da4 in CommWriteStateCallbackAndFree (fd=161, code=0) at 
comm.c:106
#8  0x00000000004296a7 in comm_select (msec=Variable "msec" is not available.
) at comm_generic.c:300
#9  0x0000000000453572 in main (argc=Variable "argc" is not available.
) at main.c:862

Original comment by hawkevi...@gmail.com on 13 May 2008 at 11:21

GoogleCodeExporter commented 9 years ago 
squid bug # 2335 ; fixed in Squid-2.HEAD; merged into CACHEBOY_PRE.

Original comment by adrian.c...@gmail.com on 17 May 2008 at 5:51

GoogleCodeExporter commented 9 years ago 
Tony reports the crash no longer occurs.

Original comment by adrian.c...@gmail.com on 19 May 2008 at 5:46

GoogleCodeExporter commented 9 years ago 
Fixed a while ago!

Original comment by adrian.c...@gmail.com on 24 May 2008 at 4:48

GoogleCodeExporter commented 9 years ago 
.. why isn't this closed?

Original comment by adrian.c...@gmail.com on 27 May 2008 at 4:13