retitle 334059 glibc detects double free or corruption (!prev)
thanks
Hi,
Here's the valgrind log of the first error reported at crash time:
lftp ftp.acc.umu.se:/pub/GNOME/sources/pygtk/2.6> mget pygtk-2.6.3*[msz]
914699 octets transférés en 8 secondes (108.8Ko/s)
Total 4 fichiers transférés
==21192==
==21192== Invalid read of size 4
==21192== at 0x8089260: SMTask::Schedule() (in /usr/bin/lftp)
==21192== by 0x806C224: WaitDone(CmdExec*) (in /usr/bin/lftp)
==21192== by 0x806C7CC: main (in /usr/bin/lftp)
==21192== Address 0x1BC60934 is 12 bytes inside a block of size 76 free'd
==21192== at 0x1B9003C3: free (vg_replace_malloc.c:235)
==21192== by 0x80E2030: operator delete(void*) (in /usr/bin/lftp)
==21192== by 0x8091D0C: FileCopy::~FileCopy() (in /usr/bin/lftp)
==21192== by 0x80860B8: CopyJob::~CopyJob() (in /usr/bin/lftp)
==21192== by 0x80892EF: SMTask::Schedule() (in /usr/bin/lftp)
==21192== by 0x806C224: WaitDone(CmdExec*) (in /usr/bin/lftp)
==21192== by 0x806C7CC: main (in /usr/bin/lftp)
==21192==
==21192== Invalid read of size 1
==21192== at 0x808926D: SMTask::Schedule() (in /usr/bin/lftp)
==21192== by 0x806C224: WaitDone(CmdExec*) (in /usr/bin/lftp)
==21192== by 0x806C7CC: main (in /usr/bin/lftp)
==21192== Address 0x1BC60930 is 8 bytes inside a block of size 76 free'd
==21192== at 0x1B9003C3: free (vg_replace_malloc.c:235)
==21192== by 0x80E2030: operator delete(void*) (in /usr/bin/lftp)
==21192== by 0x8091D0C: FileCopy::~FileCopy() (in /usr/bin/lftp)
==21192== by 0x80860B8: CopyJob::~CopyJob() (in /usr/bin/lftp)
==21192== by 0x80892EF: SMTask::Schedule() (in /usr/bin/lftp)
==21192== by 0x806C224: WaitDone(CmdExec*) (in /usr/bin/lftp)
==21192== by 0x806C7CC: main (in /usr/bin/lftp)
==21192==
==21192== Invalid read of size 1
==21192== at 0x8089272: SMTask::Schedule() (in /usr/bin/lftp)
==21192== by 0x806C224: WaitDone(CmdExec*) (in /usr/bin/lftp)
==21192== by 0x806C7CC: main (in /usr/bin/lftp)
==21192== Address 0x1BC60931 is 9 bytes inside a block of size 76 free'd
==21192== at 0x1B9003C3: free (vg_replace_malloc.c:235)
==21192== by 0x80E2030: operator delete(void*) (in /usr/bin/lftp)
==21192== by 0x8091D0C: FileCopy::~FileCopy() (in /usr/bin/lftp)
==21192== by 0x80860B8: CopyJob::~CopyJob() (in /usr/bin/lftp)
==21192== by 0x80892EF: SMTask::Schedule() (in /usr/bin/lftp)
==21192== by 0x806C224: WaitDone(CmdExec*) (in /usr/bin/lftp)
==21192== by 0x806C7CC: main (in /usr/bin/lftp)
Since this happens in a destructor instanciated in SMTask::Schedule, I
can only think that the bug is with:
delete to_delete;
at src/SMTask.cc:214.
HTH,
--
Loïc Minier <[EMAIL PROTECTED]>
