[Crash] Recurrent crashes on ACE

[sytaria]

Hello everyone !

Mangos Version: 10374

Custom Patches: None related

We are having an issue with multiple crashes with ACE, here is the log :

[Thread debugging using libthread_db enabled]

[New Thread 0x7f5ec68006f0 (LWP 5916)]

[New Thread 0x41c23950 (LWP 5919)]

[Thread 0x41c23950 (LWP 5919) exited]

[New Thread 0x41c23950 (LWP 5920)]

[New Thread 0x42424950 (LWP 5921)]

[New Thread 0x42c25950 (LWP 5922)]

[New Thread 0x40d01950 (LWP 6179)]

[New Thread 0x43426950 (LWP 6180)]

[New Thread 0x43c27950 (LWP 6181)]

[New Thread 0x44428950 (LWP 6182)]

[New Thread 0x44c29950 (LWP 6183)]

[New Thread 0x4542a950 (LWP 6184)]

[New Thread 0x45c2b950 (LWP 6185)]

Program received signal SIGSEGV, Segmentation fault.

[switching to Thread 0x45c2b950 (LWP 6185)]

0x00007f5ec632be2c in ACE_Message_Block::total_size_and_length (

this=0x7f5e1dd7f100, mb_size=@0x45c2aea0, mb_length=@0x45c2ae98)

at ../../ace/Message_Block.cpp:267

267 mb_size += i->size ();

####### CRASH Serveur #######

Using the running image of child Thread 0x45c2b950 (LWP 6185).

Program stopped at 0x7f5ec632be2c.

It stopped with signal SIGSEGV, Segmentation fault.

Type "info stack" or "info registers" for more information.

####### BACKTRACE #######

#0 0x00007f5ec632be2c in ACE_Message_Block::total_size_and_length (

this=0x7f5e1dd7f100, mb_size=@0x45c2aea0, mb_length=@0x45c2ae98)

at ../../ace/Message_Block.cpp:267

#1 0x000000000051477f in ACE_Message_Queue<ACE_NULL_SYNCH>::Dequeue_head_i (

this=0x7f5dc5fc5210, first_item=@0x45c2af00)

at /usr/local/include/ace/Message_Queue_T.cpp:1461

#2 0x000000000051409c in ACE_Message_Queue<ACE_NULL_SYNCH>::Dequeue_head (

this=0x7f5dc5fc5210, first_item=@0x45c2af00, timeout=<value optimized out>)

at /usr/local/include/ace/Message_Queue_T.cpp:1941

#3 0x000000000088716b in WorldSocket::handle_output_queue (

this=0x7f5deb975980, g=@0x45c2af30)

at ../../../src/game/WorldSocket.cpp:375

#4 0x0000000000887532 in WorldSocket::handle_output (this=0x7f5deb975980)

at ../../../src/game/WorldSocket.cpp:362

#5 0x00007f5ec6310b97 in ACE_Dev_Poll_Reactor::Dispatch_io_event (

this=0x7f5e4f7f74c0, guard=@0x45c2b000)

at ../../ace/Dev_Poll_Reactor.inl:126

#6 0x00007f5ec631114e in ACE_Dev_Poll_Reactor::handle_events (

this=0x7f5e4f7f74c0, max_wait_time=0x45c2b0a0)

at ../../ace/Dev_Poll_Reactor.cpp:1024

#7 0x00007f5ec63677ad in ACE_Reactor::run_reactor_event_loop (

this=0x7f5ec11a78f8, tv=@0x45c2b0a0, eh=0) at ../../ace/Reactor.cpp:271

#8 0x000000000088b410 in ReactorRunnable::svc (this=0x7f5e4f891440)

at ../../../src/game/WorldSocketMgr.cpp:167

#9 0x00007f5ec638c397 in ACE_Task_Base::svc_run (args=<value optimized out>)

at ../../ace/Task.cpp:275

#10 0x00007f5ec638da45 in ACE_Thread_Adapter::invoke (this=0x7f5e4f814520)

at ../../ace/Thread_Adapter.cpp:98

#11 0x00007f5ec4518fc7 in start_thread () from /lib/libpthread.so.0

#12 0x00007f5ec3ae864d in clone () from /lib/libc.so.6

#13 0x0000000000000000 in ?? ()

####### BACKTRACE FULL #######

#0 0x00007f5ec632be2c in ACE_Message_Block::total_size_and_length (

this=0x7f5e1dd7f100, mb_size=@0x45c2aea0, mb_length=@0x45c2ae98)

at ../../ace/Message_Block.cpp:267

i = (const ACE_Message_Block *) 0x7f5e1dd7f100

#1 0x000000000051477f in ACE_Message_Queue<ACE_NULL_SYNCH>::Dequeue_head_i (

this=0x7f5dc5fc5210, first_item=@0x45c2af00)

at /usr/local/include/ace/Message_Queue_T.cpp:1461

mb_bytes = 0

mb_length = 0

#2 0x000000000051409c in ACE_Message_Queue<ACE_NULL_SYNCH>::Dequeue_head (

this=0x7f5dc5fc5210, first_item=@0x45c2af00, timeout=<value optimized out>)

at /usr/local/include/ace/Message_Queue_T.cpp:1941

ace_mon = {<No data fields>}

#3 0x000000000088716b in WorldSocket::handle_output_queue (

this=0x7f5deb975980, g=@0x45c2af30)

at ../../../src/game/WorldSocket.cpp:375

mblk = <value optimized out>

send_len = <value optimized out>

n = <value optimized out>

#4 0x0000000000887532 in WorldSocket::handle_output (this=0x7f5deb975980)

at ../../../src/game/WorldSocket.cpp:362

Guard = {lock_ = 0x7f5deb975ca0, owner_ = 0}

send_len = 0

n = 140037909379840

#5 0x00007f5ec6310b97 in ACE_Dev_Poll_Reactor::Dispatch_io_event (

this=0x7f5e4f7f74c0, guard=@0x45c2b000)

at ../../ace/Dev_Poll_Reactor.inl:126

eh_guard = {eh_ = 0x7f5deb975980, refcounted_ = true}

info = <value optimized out>

disp_mask = 2

eh = (class ACE_Event_Handler *) 0x7f5deb975980

status = 2

handle = 640

revents = 4

#6 0x00007f5ec631114e in ACE_Dev_Poll_Reactor::handle_events (

this=0x7f5e4f7f74c0, max_wait_time=0x45c2b0a0)

at ../../ace/Dev_Poll_Reactor.cpp:1024

countdown = {<ACE_Copy_Disabled> = {<No data fields>},

max_wait_time_ = 0x45c2b0a0, start_time_ = {static zero = {

static zero = <same as static member of an already seen type>,

static max_time = {

static zero = <same as static member of an already seen type>,

static max_time = <same as static member of an already seen type>,

tv_ = {tv_sec = 9223372036854775807, tv_usec = 999999}}, tv_ = {

tv_sec = 0, tv_usec = 0}},

static max_time = <same as static member of an already seen type>, tv_ = {

tv_sec = 1282247537, tv_usec = 503319}}, stopped_ = false}

guard = {token_ = @0x7f5e4f7f74e8, owner_ = 0}

result = -1

#7 0x00007f5ec63677ad in ACE_Reactor::run_reactor_event_loop (

this=0x7f5ec11a78f8, tv=@0x45c2b0a0, eh=0) at ../../ace/Reactor.cpp:271

result = 1

#8 0x000000000088b410 in ReactorRunnable::svc (this=0x7f5e4f891440)

at ../../../src/game/WorldSocketMgr.cpp:167

interval = {static zero = {

static zero = <same as static member of an already seen type>,

static max_time = {

static zero = <same as static member of an already seen type>,

static max_time = <same as static member of an already seen type>,

tv_ = {tv_sec = 9223372036854775807, tv_usec = 999999}}, tv_ = {

tv_sec = 0, tv_usec = 0}},

static max_time = <same as static member of an already seen type>, tv_ = {

tv_sec = 0, tv_usec = 7999}}

#9 0x00007f5ec638c397 in ACE_Task_Base::svc_run (args=<value optimized out>)

at ../../ace/Task.cpp:275

t = (ACE_Task_Base *) 0x7f5e4f891440

svc_status = <value optimized out>

#10 0x00007f5ec638da45 in ACE_Thread_Adapter::invoke (this=0x7f5e4f814520)

at ../../ace/Thread_Adapter.cpp:98

exit_hook_instance = <value optimized out>

exit_hook_maybe = {instance_ = 0x0}

exit_hook_ptr = <value optimized out>

#11 0x00007f5ec4518fc7 in start_thread () from /lib/libpthread.so.0

No symbol table info available.

#12 0x00007f5ec3ae864d in clone () from /lib/libc.so.6

No symbol table info available.

#13 0x0000000000000000 in ?? ()

No symbol table info available.

Has anyone already seen this ? Do you have any clue, or possible fix ? Thanks.