New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 793646 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Data race in user_sctp_timer_iterate

Project Member Reported by ClusterFuzz, Dec 10 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=4601202875826176

Fuzzer: inferno_twister
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: Data race WRITE 4
Crash Address: 0x7b54000918c8
Crash State:
  user_sctp_timer_iterate
  sctp_med_chunk_output
  sctp_chunk_output
  
Sanitizer: thread (TSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_tsan_chrome_mp&range=482762:482763

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4601202875826176

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Cc: msrchandra@chromium.org tue...@fh-muenster.de pnangunoori@chromium.org
Components: Blink>Network>StreamsAPI
Labels: M-63 Test-Predator-Wrong
tuexen@ -- Could you please look into the issue as recent changes are done by you for the files sctp_callout.c and sctp_output.c.

please look into this issue, kindly reassign if it has nothing to do with your changes.

Note: CC'd the suspect as we were unable to assign.
Thank You.

Components: Blink>WebRTC>Network
When clicking on the link after "Detailed report:"
https://clusterfuzz.com/v2/testcase-detail/4601202875826176?noredirect=1
I can "Access denied". How can I see the report?

Best regards
Michael

Comment 4 by deadbeef@webrtc.org, Dec 11 2017

Here's a dump of most the relevant information:

WARNING: ThreadSanitizer: data race (pid=923)
Write of size 4 at 0x7b54000918c8 by thread T28 (mutexes: write M17168):
 #0 0x7f718ee4c467 in user_sctp_timer_iterate third_party/usrsctp/usrsctplib/usrsctplib/netinet/sctp_callout.c:164:15
Previous read of size 4 at 0x7b54000918c8 by thread T14 (mutexes: write M17185):
 #0 0x7f718ee2db37 in sctp_med_chunk_output third_party/usrsctp/usrsctplib/usrsctplib/netinet/sctp_output.c:9312:23
 #1 0x7f718ee26d73 in sctp_chunk_output third_party/usrsctp/usrsctplib/usrsctplib/netinet/sctp_output.c:10689:11
#2 0x7f718ee3dd25 in sctp_common_input_processing third_party/usrsctp/usrsctplib/usrsctplib/netinet/sctp_input.c:6097:3
#3 0x7f718edd14c1 in usrsctp_conninput third_party/usrsctp/usrsctplib/usrsctplib/user_socket.c:3490:2
#4 0x7f718edca969 in cricket::SctpTransport::OnPacketRead(rtc::PacketTransportInternal*, char const*, unsigned long, rtc::PacketTime const&, int) third_party/webrtc/media/sctp/sctptransport.cc:871:5
#5 0x7f718edcdab4 in void sigslot::_opaque_connection::emitter<cricket::SctpTransport, rtc::PacketTransportInternal*, char const*, unsigned long, rtc::PacketTime const&, int>(sigslot::_opaque_connection const*, rtc::PacketTransportInternal*, char const*, unsigned long, rtc::PacketTime const&, int) third_party/webrtc/rtc_base/sigslot.h:340:5
#6 0x7f718eda5496 in cricket::DtlsTransport::OnDtlsEvent(rtc::StreamInterface*, int, int) third_party/webrtc/rtc_base/sigslot.h:331:5
#7 0x7f718eda694d in void sigslot::_opaque_connection::emitter<cricket::DtlsTransport, rtc::StreamInterface*, int, int>(sigslot::_opaque_connection const*, rtc::StreamInterface*, int, int) third_party/webrtc/rtc_base/sigslot.h:340:5
#8 0x7f718ea9c4f3 in rtc::StreamAdapterInterface::OnEvent(rtc::StreamInterface*, int, int) third_party/webrtc/rtc_base/sigslot.h:331:5
Components: -Blink>Network>StreamsAPI
This is not related to core/streams.
Ping for triaging.
Will look at it next week.

Best regards
Michael
tuexen@ have you got any update on this issue?
Sorry, I thought it is addressed by https://github.com/sctplab/usrsctp/pull/202
but by looking at it, it isn't. Sorry for the delay, will look into it.

Best regards
Michael
Labels: Needs-Feedback
tuexen@ Could you provide the latest update on this issue...
Will try to work on it next week at the IETF...

Best regards
Michael
Michael@ -- Gentle ping!
Labels: CF-NeedsTriage
Unable to provide possible suspect using Predator, CL and Code Search.
Could someone please look into the issue.

Thank You...

Sign in to add a comment