Project

General

Profile

Bug #3816

MSC ttcn3 test TC_sgsap_reset crashes ttcn3-msc-test-latest

Added by daniel 3 months ago. Updated about 1 month ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
-
Target version:
-
Start date:
02/25/2019
Due date:
% Done:

100%

Resolution:
Tags:

Description

It doesn't seem to happen every time, I just found one occurrence here:
https://jenkins.osmocom.org/jenkins/view/TTCN3/job/ttcn3-msc-test-latest/137/

There is a core file here:
https://jenkins.osmocom.org/jenkins/view/TTCN3/job/ttcn3-msc-test-latest/137/artifact/logs/msc-tester/core

MSC_Tests.TC_cipher_complete_with_invalid_cipher pass' was executed successfully (exit status: 0).
MTC@209d54173aa7: Starting external command `../ttcn3-tcpdump-start.sh MSC_Tests.TC_sgsap_reset'.
Waiting for tcpdump to start... 0
MTC@209d54173aa7: External command `../ttcn3-tcpdump-start.sh MSC_Tests.TC_sgsap_reset' was executed successfully (exit status: 0).
MTC@209d54173aa7: Test case TC_sgsap_reset started.
MTC@209d54173aa7: Connecting BSSMAP Emulation to SCCP_SP_PORT and starting emulation
MSC_Test_0-M3UA(677)@209d54173aa7: *************************************************
MSC_Test_0-M3UA(677)@209d54173aa7: M3UA emulation initiated, the test can be started
MSC_Test_0-M3UA(677)@209d54173aa7: *************************************************
MSC_Test_0-SCCP(675)@209d54173aa7: v_sccp_pdu_maxlen:268
MSC_Test-MNCC(679)@209d54173aa7: Ignoring MNCC { msg_type := MNCC_SOCKET_HELLO (1024), u := { hello := { version := 5, mncc_size := 836, data_frame_size := 8, called_offset := 104, signal_offset := 796, emergency_offset := 812, lchan_type_offset := 832 } } }
MSC_Test-GSUP-IPA(681)@209d54173aa7: IPA: Connected
MSC_Test-GSUP-IPA(681)@209d54173aa7: CCM Tx:{ msg_type := IPAC_MSGT_ID_GET (4), u := { get := { { len := 1, tag := IPAC_IDTAG_UNITNAME (1) } } } }
MSC_Test-GSUP-IPA(681)@209d54173aa7: CCM Rx:{ msg_type := IPAC_MSGT_PING (0), u := omit }
MSC_Test-GSUP-IPA(681)@209d54173aa7: CCM Tx:{ msg_type := IPAC_MSGT_PONG (1), u := omit }
MSC_Test-GSUP-IPA(681)@209d54173aa7: CCM Rx:{ msg_type := IPAC_MSGT_ID_RESP (5), u := { resp := { { len := 23, tag := IPAC_IDTAG_UNITNAME (1), data := '4D53432D30302D30302D30302D30302D30302D303000'O } } } }
MSC_Test-GSUP-IPA(681)@209d54173aa7: IPA ID RESP: { { len := 23, tag := IPAC_IDTAG_UNITNAME (1), data := '4D53432D30302D30302D30302D30302D30302D303000'O } }
MSC_Test-GSUP-IPA(681)@209d54173aa7: CCM Tx:{ msg_type := IPAC_MSGT_ID_ACK (6), u := omit }
MSC_Test-GSUP-IPA(681)@209d54173aa7: CCM Rx:{ msg_type := IPAC_MSGT_ID_ACK (6), u := omit }
MC@209d54173aa7: Test Component 684 has requested to stop MTC. Terminating current testcase execution.
MSC_Test_0-M3UA(677)@209d54173aa7: Warning: The maximum number of open file descriptors (1048576) is greater than FD_SETSIZE (1024). Ensure that Test Ports using Install_Handler do not try to wait for events of file descriptors with values greater than FD_SETSIZE (1024). (Current caller of Install_Handler is "SCTP_PORT")
MSC_Test_0-M3UA(677)@209d54173aa7: Dynamic test case error: Fd_And_Timeout_User::remove_all_fds Internal error 4: fdCount: 1
MSC_Test_0-M3UA(677)@209d54173aa7: Dynamic test case error: Fd_And_Timeout_User::remove_all_fds Internal error 4: fdCount: 1
MSC_Test_0-M3UA(677)@209d54173aa7: Dynamic test case error: Fd_And_Timeout_User::remove_all_fds Internal error 4: fdCount: 1
MC@209d54173aa7: Unexpected message KILLED was received from PTC 677.
MC@209d54173aa7: Unexpected end of PTC connection (677) from 209d54173aa7 [172.18.1.103].
MTC@209d54173aa7: Test case TC_sgsap_reset finished. Verdict: error
MTC@209d54173aa7: Starting external command `../ttcn3-tcpdump-stop.sh MSC_Tests.TC_sgsap_reset error'.
------ MSC_Tests.TC_sgsap_reset error ------

terminate called after throwing an instance of 'TC_Error'
 /osmo-ttcn3-hacks/msc/MSC_Tests: Abort was called
Waiting for tcpdump to finish... 0 (prev_count=-1, count=9056)
/usr/lib/titan/libttcn3-parallel-dynamic.so(_Z14signal_handleri+0xa3)[0x7ff5d14972d3]
/lib/x86_64-linux-gnu/libc.so.6(+0x33060)[0x7ff5cfaf4060]
/lib/x86_64-linux-gnu/libc.so.6(gsignal+0xcf)[0x7ff5cfaf3fff]
/lib/x86_64-linux-gnu/libc.so.6(abort+0x16a)[0x7ff5cfaf542a]
/usr/lib/x86_64-linux-gnu/libstdc++.so.6(_ZN9__gnu_cxx27__verbose_terminate_handlerEv+0x15d)[0x7ff5d040c0ad]
/usr/lib/x86_64-linux-gnu/libstdc++.so.6(+0x8f066)[0x7ff5d040a066]
/usr/lib/x86_64-linux-gnu/libstdc++.so.6(+0x8e089)[0x7ff5d0409089]
/usr/lib/x86_64-linux-gnu/libstdc++.so.6(__gxx_personality_v0+0x2cd)[0x7ff5d04099dd]
/lib/x86_64-linux-gnu/libgcc_s.so.1(+0xff33)[0x7ff5cfe6ff33]
/lib/x86_64-linux-gnu/libgcc_s.so.1(_Unwind_RaiseException+0xfb)[0x7ff5cfe7029b]
/usr/lib/x86_64-linux-gnu/libstdc++.so.6(__cxa_throw+0x5c)[0x7ff5d040a2bc]
/usr/lib/titan/libttcn3-parallel-dynamic.so(_Z10TTCN_errorPKcz+0x1af)[0x7ff5d142006f]
/usr/lib/titan/libttcn3-parallel-dynamic.so(_ZN19Fd_And_Timeout_User14remove_all_fdsEP28Fd_And_Timeout_Event_Handler+0x3af)[0x7ff5d145a0bf]
/usr/lib/titan/libttcn3-parallel-dynamic.so(_ZN4PORT15deactivate_portEb+0x144)[0x7ff5d1451524]
/usr/lib/titan/libttcn3-parallel-dynamic.so(_ZN4PORTD1Ev+0x1f)[0x7ff5d14515ff]
/osmo-ttcn3-hacks/msc/SCTPasp_PT.so(_ZN17SCTPasp__PortType20SCTPasp__PT_PROVIDERD1Ev+0xbc)[0x7ff5d4450d3c]
/osmo-ttcn3-hacks/msc/SCTPasp_PortType.so(_ZN17SCTPasp__PortType11SCTPasp__PTD1Ev+0x36)[0x7ff5dedcccce]
/lib/x86_64-linux-gnu/libc.so.6(__cxa_finalize+0x8f)[0x7ff5cfaf6caf]
/osmo-ttcn3-hacks/msc/M3UA_Emulation.so(+0x243b3)[0x7ff5e61453b3]
Waiting for tcpdump to finish... 1 (prev_count=9056, count=10216)
MTC@209d54173aa7: External command `../ttcn3-tcpdump-stop.sh MSC_Tests.TC_sgsap_reset error' was executed successfully (exit status: 0).
MTC@209d54173aa7: Starting external command `../ttcn3-tcpdump-start.sh MSC_Tests.TC_sgsap_lu'.
Waiting for tcpdump to start... 0
MTC@209d54173aa7: External command `../ttcn3-tcpdump-start.sh MSC_Tests.TC_sgsap_lu' was executed successfully (exit status: 0).
MTC@209d54173aa7: Test case TC_sgsap_lu started.
MTC@209d54173aa7: Connecting BSSMAP Emulation to SCCP_SP_PORT and starting emulation
MSC_Test_0-M3UA(687)@209d54173aa7: *************************************************
MSC_Test_0-M3UA(687)@209d54173aa7: M3UA emulation initiated, the test can be started
MSC_Test_0-M3UA(687)@209d54173aa7: *************************************************
MSC_Test_0-SCCP(685)@209d54173aa7: v_sccp_pdu_maxlen:268
MSC_Test-MNCC(689)@209d54173aa7: Ignoring MNCC { msg_type := MNCC_SOCKET_HELLO (1024), u := { hello := { version := 5, mncc_size := 836, data_frame_size := 8, called_offset := 104, signal_offset := 796, emergency_offset := 812, lchan_type_offset := 832 } } }

History

#1 Updated by laforge 3 months ago

  • Assignee set to dexter

#2 Updated by dexter about 2 months ago

  • Status changed from New to In Progress
  • % Done changed from 0 to 90

I was able to spot a nullpointer deref in sgs_tx(). I think I introduced this bug recently while adding more log context to the sgsap code.

https://gerrit.osmocom.org/#/c/osmo-msc/+/13513/

#3 Updated by dexter about 1 month ago

  • Status changed from In Progress to Resolved
  • % Done changed from 90 to 100

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 48.8 MB)