[Posible Freeze ?¿?] NPC Spell 13585

[kero99]

Hi all, i found in some freeze crashdump (for example http://pastebin.com/Cb38Lmg6) that in thread 7 of crash dump a strange case with spell 13585 (http://www.wowhead.com/spell=13585) in RemoveAuraHolderFromStack:

#0  0x000000000088234d in Unit::RemoveAuraHolderFromStack (
   this=0x7fff035e8100, spellId=0, stackAmount=0, 
   casterGUID=17379391082114100824, mode=AURA_REMOVE_BY_DISPEL)
   at ../../../src/game/Unit.cpp:4905
No locales.
#1  0x0000000000889d9e in Unit::RemoveAuraHolderDueToSpellByDispel (
   this=0x7fff035e8100, spellId=13585, stackAmount=2, 
   casterGUID=17379391082114100824, dispeler=0x26b30000)
   at ../../../src/game/Unit.cpp:4822
       spellEntry = 0x7fffe676aa00

Could be related this with some freezes? or is only a casuality?

Best regards

[Feanordev]

I wonder how spellId=0 can be passed to Dispel code (there is like no way unless some on-fly corruption

Edit: and yes... I've had the same crashdumps

[Undergarun]

Confirmed, i have had similar "freeze" crashdumps. A lot of them!!

[VladimirMangos]

I not see how it can freeze at pointed spell code. It can crash or like but not freeze and crash dump content show that this really freeze. So i think freeze in some other part

[Feanordev]

So I found 2 crashdumps with different spell actually.

http://pastebin.com/pL84de67

and

http://pastebin.com/atCEk7R2

Both end up with 0 spellId in RemoveAuraHolderFromStack. Dunno whether _spellAuraHolders.equal_range(spell_id); can freez with 0 spellId or not..?

[VladimirMangos]

Both end up with 0 spellId in RemoveAuraHolderFromStack. Dunno whether _spellAuraHolders.equal_range(spell_id); can freez with 0 spellId or not..?

From code point no diff in 0 value search in structures. Possible 0 just because at this point stack data corrupted or overwrited by something...

[voidx]

0x00007ffff62709c3 in std::_Rb_tree_increment(std::_Rb_tree_node_base*) () from /usr/lib/libstdc++.so.6
#0  0x00007ffff62709c3 in std::_Rb_tree_increment(std::_Rb_tree_node_base*) () from /usr/lib/libstdc++.so.6
#1  0x00000000007d63f1 in operator++ (this=0x7fff1f18b250, spellId=0, stackAmount=0, casterGUID=687167, mode=AURA_REMOVE_BY_DISPEL) at /usr/include/c++/4.4/bits/stl_tree.h:184
#2  Unit::RemoveAuraHolderFromStack (this=0x7fff1f18b250, spellId=0, stackAmount=0, casterGUID=687167, mode=AURA_REMOVE_BY_DISPEL) at ../../../src/game/Unit.cpp:4892
#3  0x00000000007dc276 in Unit::RemoveAuraHolderDueToSpellByDispel (this=0x7fff1f18b250, spellId=54277, stackAmount=2, casterGUID=687167, dispeler=0x7fff5e158d80) at ../../../src/game/Unit.cpp:4811
#4  0x0000000000793f46 in Spell::EffectDispel (this=0x7ffff1c91070, eff_idx=<value optimized out>) at ../../../src/game/SpellEffects.cpp:4846
#5  0x0000000000763430 in Spell::DoSpellHitOnUnit (this=0x7ffff1c91070, unit=0x7fff1f18b250, effectMask=1) at ../../../src/game/Spell.cpp:1343
#6  0x00000000007652bc in Spell::DoAllEffectOnTarget (this=0x7ffff1c91070, target=0x7fffa3b83470) at ../../../src/game/Spell.cpp:1084
#7  0x0000000000775bac in Spell::handle_immediate (this=0x7ffff1c91070) at ../../../src/game/Spell.cpp:3400
#8  0x0000000000774f98 in Spell::cast (this=0x7ffff1c91070, skipCheck=false) at ../../../src/game/Spell.cpp:3376
#9  0x000000000077e5d0 in SpellEvent::Execute (this=0x7fff19e5d2d0, e_time=1404203, p_time=0) at ../../../src/game/Spell.cpp:7005
#10 0x00000000008e6b9e in EventProcessor::Update (this=0x7fff5e158ea8, p_time=255) at ../../../src/framework/Utilities/EventProcessor.cpp:47
#11 0x00000000007e741b in Unit::Update (this=0x7fff5e158d80, update_diff=255, p_time=255) at ../../../src/game/Unit.cpp:325
#12 0x0000000000719d88 in Player::Update (this=0x7fff5e158d80, update_diff=255, p_time=255) at ../../../src/game/Player.cpp:1223
#13 0x000000000064c079 in Update (this=0x7fff95da7500, t_diff=<value optimized out>) at ../../../src/game/Object.h:423

[voidx]

[switching to Thread 0x7fffe6bbf700 (LWP 16388)]
0x00007ffff62709c3 in std::_Rb_tree_increment(std::_Rb_tree_node_base*) () from /usr/lib/libstdc++.so.6
#0  0x00007ffff62709c3 in std::_Rb_tree_increment(std::_Rb_tree_node_base*) () from /usr/lib/libstdc++.so.6
#1  0x00000000007d67b1 in operator++ (this=0x6325ce10, spellId=0, stackAmount=0, casterGUID=740243, mode=AURA_REMOVE_BY_DISPEL) at /usr/include/c++/4.4/bits/stl_tree.h:184
#2  Unit::RemoveAuraHolderFromStack (this=0x6325ce10, spellId=0, stackAmount=0, casterGUID=740243, mode=AURA_REMOVE_BY_DISPEL) at ../../../src/game/Unit.cpp:4892
#3  0x00000000007dc646 in Unit::RemoveAuraHolderDueToSpellByDispel (this=0x6325ce10, spellId=57960, stackAmount=2, casterGUID=740243, dispeler=0x7fff7bd04330) at ../../../src/game/Unit.cpp:4811
#4  0x00000000007941b6 in Spell::EffectDispel (this=0x7fff2a95bf40, eff_idx=<value optimized out>) at ../../../src/game/SpellEffects.cpp:4846
#5  0x0000000000763550 in Spell::DoSpellHitOnUnit (this=0x7fff2a95bf40, unit=0x6325ce10, effectMask=1) at ../../../src/game/Spell.cpp:1343

[Princess]

any news about this?

some hack to temporaly fix?