DO NOT REPLY [Bug 5854] New: --del (+old protocol?) sometimes leads to "double free" crashes

[samba-bugs at samba.org]

https://bugzilla.samba.org/show_bug.cgi?id=5854

           Summary: --del (+old protocol?) sometimes leads to "double free"
                    crashes
           Product: rsync
           Version: 3.0.4
          Platform: x64
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P3
         Component: core
        AssignedTo: wayned at samba.org
        ReportedBy: e.a.b.piel at tudelft.nl
         QAContact: rsync-qa at samba.org


It seems to depend on the file list to be synchronised, but sometimes, I get a
detection by glibc of a double free. If I remove "--del" (or "--delete") from
the arguments, all goes smoothly. For a given file list, it always happens, or
never happens. This is on a x86-64 and the other side is rsync 2.6.9, 32bits.
Trying with a different host having rsync 3.0.3 64bits, it goes fine.

Example:
rsync --archive --recursive --del --files-from=/home/piel/.autosync/lan/list
--exclude-from=/home/piel/.autosync/lan/exclude --cvs-exclude --verbose 
/home/piel/ 'piel at XXXXXX.st.ewi.tudelft.nl:~/backup-dutifh/'
building file list ... done
.bash_history
.mozilla/firefox/673l4j3m.default/
.mozilla/firefox/673l4j3m.default/cookies.sqlite
.mozilla/firefox/673l4j3m.default/formhistory.sqlite
.mozilla/firefox/673l4j3m.default/places.sqlite
*** glibc detected *** rsync: double free or corruption (fasttop): 0x081e3e98
***
======= Backtrace: =========
/lib/libc.so.6[0x22c1e0]
/lib/libc.so.6(__libc_free+0x77)[0x22c72b]
rsync[0x804baa1]
rsync[0x804cc92]
rsync[0x804f009]
rsync[0x8058059]
rsync[0x80584bf]
rsync[0x8059374]
/lib/libc.so.6(__libc_start_main+0xdf)[0x1ddd7f]
rsync[0x804ac21]
======= Memory map: ========
001aa000-001ab000 r-xp 001aa000 00:00 0          [vdso]
001ab000-001c5000 r-xp 00000000 03:07 5129514    /lib/ld-2.3.6.so
001c5000-001c6000 r-xp 00019000 03:07 5129514    /lib/ld-2.3.6.so
001c6000-001c7000 rwxp 0001a000 03:07 5129514    /lib/ld-2.3.6.so
001c9000-002ec000 r-xp 00000000 03:07 5129516    /lib/libc-2.3.6.so
002ec000-002ee000 r-xp 00122000 03:07 5129516    /lib/libc-2.3.6.so
002ee000-002f0000 rwxp 00124000 03:07 5129516    /lib/libc-2.3.6.so
002f0000-002f2000 rwxp 002f0000 00:00 0 
00524000-0052d000 r-xp 00000000 03:07 5129560   
/lib/libgcc_s-4.0.2-20051126.so.1
0052d000-0052e000 rwxp 00009000 03:07 5129560   
/lib/libgcc_s-4.0.2-20051126.so.1
00a1f000-00a26000 r-xp 00000000 03:07 3695042    /usr/lib/libpopt.so.0.0.0
00a26000-00a27000 rwxp 00006000 03:07 3695042    /usr/lib/libpopt.so.0.0.0
00b0f000-00b17000 r-xp 00000000 03:07 5129561    /lib/libnss_nis-2.3.6.so
00b17000-00b18000 r-xp 00007000 03:07 5129561    /lib/libnss_nis-2.3.6.so
00b18000-00b19000 rwxp 00008000 03:07 5129561    /lib/libnss_nis-2.3.6.so
00b59000-00b62000 r-xp 00000000 03:07 5129556    /lib/libnss_files-2.3.6.so
00b62000-00b63000 r-xp 00008000 03:07 5129556    /lib/libnss_files-2.3.6.so
00b63000-00b64000 rwxp 00009000 03:07 5129556    /lib/libnss_files-2.3.6.so
00dbd000-00dce000 r-xp 00000000 03:07 5129518    /lib/libnsl-2.3.6.so
00dce000-00dcf000 r-xp 00010000 03:07 5129518    /lib/libnsl-2.3.6.so
00dcf000-00dd0000 rwxp 00011000 03:07 5129518    /lib/libnsl-2.3.6.so
00dd0000-00dd2000 rwxp 00dd0000 00:00 0 
00dd4000-00dd7000 r-xp 00000000 03:07 5129562    /lib/libattr.so.1.1.0
00dd7000-00dd8000 rwxp 00002000 03:07 5129562    /lib/libattr.so.1.1.0
00dda000-00de0000 r-xp 00000000 03:07 5129565    /lib/libacl.so.1.1.0
00de0000-00de1000 rwxp 00005000 03:07 5129565    /lib/libacl.so.1.1.0
08047000-08092000 r-xp 00000000 03:07 3702674    /usr/bin/rsync
08092000-08095000 rw-p 0004a000 03:07 3702674    /usr/bin/rsync
08095000-080a4000 rw-p 08095000 00:00 0 
081de000-081ff000 rw-p 081de000 00:00 0          [heap]
b7c00000-b7c21000 rw-p b7c00000 00:00 0 
b7c21000-b7d00000 ---p b7c21000 00:00 0 
b7d3e000-b7da0000 rw-p b7d3e000 00:00 0 
b7da0000-b7fa0000 r--p 00000000 03:07 3694951    /usr/lib/locale/locale-archive
b7fa0000-b7fa2000 rw-p b7fa0000 00:00 0 
b7fc6000-b7fc7000 rw-p b7fc6000 00:00 0 
bff5b000-bff71000 rw-p bff5b000 00:00 0          [stack]
rsync: writefd_unbuffered failed to write 4092 bytes [sender]: Broken pipe (32)
unexpected tag 107 [sender]
rsync error: unexplained error (code 134) at io.c(1166) [sender=3.0.4]


-- 
Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.