sleyzerzon / soar

Automatically exported from code.google.com/p/soar
1 stars 0 forks source link

GDS memory corruption when causing retractions before reinit #66

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1. Copy with :o-support from the input link to an impasse substate.
2. Change what is on the input link, causing the substate to retract.
3. reinit.
4. Go to step 1.

There may be extra steps involved, unfortunately.  I'm going to hold onto
my agent capable of causing the problem.  It is currently too large / too
dependent on other things to upload.

What is the expected output? What do you see instead?
I expect it not to crash, but it does.

Revision 11940

#0  0x00007ffff51924b5 in *__GI_raise (sig=<value optimized out>)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x00007ffff5195f50 in *__GI_abort () at abort.c:92
#2  0x00007ffff51cac97 in __libc_message (do_abort=<value optimized out>, 
    fmt=<value optimized out>) at ../sysdeps/unix/sysv/linux/libc_fatal.c:189
#3  0x00007ffff51d4dd6 in malloc_printerr (action=3, 
    str=0x7ffff5296748 "double free or corruption (fasttop)", 
    ptr=<value optimized out>) at malloc.c:6217
#4  0x00007ffff51d974c in *__GI___libc_free (mem=<value optimized out>)
    at malloc.c:3716
#5  0x00007fffefb3e45a in free_memory (thisAgent=0x841400, mem=0x8a77c0, 
    usage_code=0) at SoarKernel/src/mem.cpp:93
#6  0x00007fffefb1ed3e in elaborate_gds (thisAgent=0x841400)
    at SoarKernel/src/decide.cpp:2917
#7  0x00007fffefb1c9a8 in decide_non_context_slot (thisAgent=0x841400, 
    s=0x8904e0) at SoarKernel/src/decide.cpp:1917
#8  0x00007fffefb1cbd4 in decide_non_context_slots (thisAgent=0x841400)
    at SoarKernel/src/decide.cpp:1986
#9  0x00007fffefb1e6b6 in do_working_memory_phase (thisAgent=0x841400)
    at SoarKernel/src/decide.cpp:2661
#10 0x00007fffefb387d8 in do_one_top_level_phase (thisAgent=0x841400)
    at SoarKernel/src/init_soar.cpp:825
#11 0x00007fffefb39778 in run_for_n_decision_cycles (thisAgent=0x841400, n=1)
    at SoarKernel/src/init_soar.cpp:1257
#12 0x00007fffefa6d535 in sml::AgentSML::Step (this=0x852e40, 
    stepSize=sml::sml_DECISION) at KernelSML/src/sml_AgentSML.cpp:493
#13 0x00007fffefa6d379 in sml::AgentSML::StepInClientThread (this=0x852e40, 
    stepSize=sml::sml_DECISION) at KernelSML/src/sml_AgentSML.cpp:446
#14 0x00007fffefa84f5e in sml::RunScheduler::RunScheduledAgents (
    this=0x83c230, forever=false, runStepSize=sml::sml_DECISION, count=99, 
    runFlags=sml::sml_RUN_SELF, interleaveStepSize=sml::sml_DECISION, 
    synchronize=true) at KernelSML/src/sml_RunScheduler.cpp:799
#15 0x00007fffefac3e57 in cli::CommandLineInterface::DoRun (this=0x82f5b0, 
    options=..., count=100, interleaveIn=cli::RUN_INTERLEAVE_DEFAULT)
    at CLI/src/cli_run.cpp:221
#16 0x00007fffefac3a17 in cli::CommandLineInterface::ParseRun (this=0x82f5b0, 
    argv=...) at CLI/src/cli_run.cpp:104
#17 0x00007fffefae0483 in cli::CommandLineInterface::DoCommandInternal (
    this=0x82f5b0, argv=...) at CLI/src/cli_CommandLineInterface.cpp:644
#18 0x00007fffefadfc08 in cli::CommandLineInterface::DoCommandInternal (
    this=0x82f5b0, commandLine=...) at CLI/src/cli_CommandLineInterface.cpp:531
#19 0x00007fffefac8331 in cli::CommandLineInterface::StreamSource (
    this=0x82f5b0, soarStream=..., pFilename=0x0) at CLI/src/cli_source.cpp:332
#20 0x00007fffefadeb1b in cli::CommandLineInterface::DoCommand (this=0x82f5b0, 
    pConnection=0x830590, pAgent=0x852e40, 
    pCommandLine=0x7fffe8012c70 "run --self -d 100", echoResults=false,
    rawOutput=true, pResponse=0x2d2c3d0)
    at CLI/src/cli_CommandLineInterface.cpp:255
#21 0x00007fffefa7f70b in sml::KernelSML::HandleCommandLine (this=0x82f520, 
    pAgentSML=0x852e40, pCommandName=0x7fffe800ffa0 "cmdline", 
    pConnection=0x830590, pIncoming=0x7fffef0b4d80, pResponse=0x2d2c3d0)
    at KernelSML/src/sml_KernelSMLHandlers.cpp:922
#22 0x00007fffefa7b57f in sml::KernelSML::ProcessCommand (this=0x82f520, 
    pCommandName=0x7fffe800ffa0 "cmdline", pConnection=0x830590, 
    pIncoming=0x7fffef0b4d80, pResponse=0x2d2c3d0)
    at KernelSML/src/sml_KernelSML.cpp:669
#23 0x00007fffefa7b7ad in sml::KernelSML::ProcessIncomingSML (this=0x82f520, 
    pConnection=0x830590, pIncomingMsg=0x2dbf430)
    at KernelSML/src/sml_KernelSML.cpp:721
#24 0x00007fffefa6ab30 in ReceivedCall (pConnection=0x830590, 
    pIncoming=0x2dbf430) at KernelSML/src/KernelSMLInterface.cpp:38
#25 0x00007fffefb09198 in sml::Callback::Invoke (this=0x83c930, 
    pIncomingMessage=0x2dbf430) at ConnectionSML/src/sml_Connection.h:111
#26 0x00007fffefb01357 in sml::Connection::InvokeCallbacks (this=0x830590, 
    pIncomingMsg=0x2dbf430) at ConnectionSML/src/sml_Connection.cpp:434
#27 0x00007fffefb03bdb in sml::EmbeddedConnectionAsynch::ReceiveMessages (
    this=0x830590, allMessages=true)
    at ConnectionSML/src/sml_EmbeddedConnectionAsynch.cpp:310
#28 0x00007fffefa71edd in sml::ConnectionManager::ReceiveAllMessages (
    this=0x832680) at KernelSML/src/sml_ConnectionManager.cpp:231
#29 0x00007fffefa814b6 in sml::ReceiverThread::Run (this=0x83c3d0)
    at KernelSML/src/sml_ReceiverThread.cpp:66
#30 0x00007fffefb08d1a in ThreadStartFunction (pThreadObject=0x83c3d0)
    at ConnectionSML/src/thread_Thread.cpp:25
#31 0x00007fffefb08bc7 in LinuxThreadFunc (thread_args=0x83c470)
    at ConnectionSML/src/thread_OSspecific.cpp:105
#32 0x00007ffff4d45a04 in start_thread (arg=<value optimized out>)
    at pthread_create.c:300
#33 0x00007ffff523e80d in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#34 0x0000000000000000 in ?? ()

Original issue reported on code.google.com by baz...@gmail.com on 7 Apr 2010 at 7:08