[crash] DeleteGuildBankItems (corrupted backtrace)

[A350fly]

Hello,

Here is a strange crash I've got these few last days.

It seems to be related to deleting guild bank items when a guild disband, but I can't identify any corrupted data in the DB.

Mangos : 11478

Custom code : vehicles

Scripts : SD2

2011-05-22 21:14:59 ERROR:Summoned pet (Entry: 29264) not have pet stats data in DB
2011-05-22 21:15:00 ERROR:Spell entry 35190, effect 0 has EffectImplicitTargetA/EffectImplicitTargetB = TARGET_SCRIPT, but creature are not defined in `spell_script_target`
2011-05-22 21:15:00 ERROR:Spell entry 35190, effect 0 has EffectImplicitTargetA/EffectImplicitTargetB = TARGET_SCRIPT, but creature are not defined in `spell_script_target`
2011-05-22 21:15:00 ERROR:Spell entry 35190, effect 0 has EffectImplicitTargetA/EffectImplicitTargetB = TARGET_SCRIPT, but creature are not defined in `spell_script_target`
2011-05-22 21:15:00 ERROR:Spell entry 35190, effect 0 has EffectImplicitTargetA/EffectImplicitTargetB = TARGET_SCRIPT, but creature are not defined in `spell_script_target`
2011-05-22 21:15:00 ERROR:Spell entry 35190, effect 0 has EffectImplicitTargetA/EffectImplicitTargetB = TARGET_SCRIPT, but creature are not defined in `spell_script_target`
2011-05-22 21:15:00 ERROR:Spell entry 35190, effect 0 has EffectImplicitTargetA/EffectImplicitTargetB = TARGET_SCRIPT, but creature are not defined in `spell_script_target`
2011-05-22 21:15:00 ERROR:Spell entry 35190, effect 0 has EffectImplicitTargetA/EffectImplicitTargetB = TARGET_SCRIPT, but creature are not defined in `spell_script_target`
2011-05-22 21:15:00 ERROR:Spell entry 35190, effect 0 has EffectImplicitTargetA/EffectImplicitTargetB = TARGET_SCRIPT, but creature are not defined in `spell_script_target`
2011-05-22 21:15:00 ERROR:Spell entry 35190, effect 0 has EffectImplicitTargetA/EffectImplicitTargetB = TARGET_SCRIPT, but creature are not defined in `spell_script_target`
2011-05-22 21:15:04 ERROR:EffectTriggerSpell of spell 32982: triggering unknown spell id 32186
2011-05-22 21:17:01 ERROR:World Thread hangs, kicking out server!


[Thread debugging using libthread_db enabled]
[New Thread 0x7facdf7a56f0 (LWP 22784)]
[New Thread 0x41a90950 (LWP 22787)]
[New Thread 0x42291950 (LWP 22788)]
[New Thread 0x42a92950 (LWP 22789)]
[New Thread 0x43293950 (LWP 22791)]
[Thread 0x43293950 (LWP 22791) exited]
[New Thread 0x43293950 (LWP 22792)]
[New Thread 0x409a8950 (LWP 22793)]
[New Thread 0x43a94950 (LWP 22794)]
[New Thread 0x44295950 (LWP 22795)]
[New Thread 0x44a96950 (LWP 22796)]
[New Thread 0x45297950 (LWP 22797)]
[Thread 0x409a8950 (LWP 22793) exited]
[Thread 0x44295950 (LWP 22795) exited]
[Thread 0x43a94950 (LWP 22794) exited]
[Thread 0x44a96950 (LWP 22796) exited]
[Thread 0x45297950 (LWP 22797) exited]
[Thread 0x43293950 (LWP 22792) exited]
[Thread 0x42291950 (LWP 22788) exited]
[Thread 0x41a90950 (LWP 22787) exited]
[Thread 0x42a92950 (LWP 22789) exited]

Program received signal SIGINT, Interrupt.
[switching to Thread 0x7facdf7a56f0 (LWP 22784)]
0x00007facde183a04 in scalable_free () from /home/unix/wow/lib/libtbbmalloc.so.2
Current language:  auto; currently asm
* 1 Thread 0x7facdf7a56f0 (LWP 22784)  0x00007facde183a04 in scalable_free ()
  from /home/unix/wow/lib/libtbbmalloc.so.2
#0  0x00007facde183a04 in scalable_free () from /home/unix34400/wow/lib/libtbbmalloc.so.2
No locals.
#1  0x00000000008d3399 in operator delete (ptr=0x2)
   at ../../../src/framework/Policies/MemoryManagement.cpp:47
No locals.
#2  0x000000000067c631 in ~Object (this=0x7facc797a940) at /usr/include/c++/4.3/ext/new_allocator.h:98
No locals.
#3  0x00000000005fd44d in ~Item (this=0x7facc797a940) at ../../../src/game/Item.h:274
No locals.
#4  0x00000000008625e2 in Guild::DeleteGuildBankItems (this=0x7facc7bc1900, alsoInDB=false)
   at ../../../src/game/Guild.cpp:2376
   pItem = (class Item *) 0x7facc797a940
   i = 1
#5  0x0000000000869e88 in ~Guild (this=0x2) at ../../../src/game/Guild.cpp:102
No locals.
#6  0x00000000006b0827 in ~ObjectMgr (Quit

[VladimirMangos]

I see some cases when guild object not relay deleted at disband and some when disband can call 2 times (but this don't must be do any in way to crash). I plan fix this problems, But not see how it can be sources of crash itself. Most possible case: some items duplication like cheating and result crash when at unload item deelted at character unload deleted second time at guild bank unload.

[A350fly]

I still have exactly the same crash in [11736].

Is there a way to find what possible item duplication occurs, or what guildbank is affected, since I only have these logs ?

#2 0x000000000067c631 in ~Object (this=0x7facc797a940) at /usr/include/c++/4.3/ext/new_allocator.h:98

No locals.

#3 0x00000000005fd44d in ~Item (this=0x7facc797a940) at ../../../src/game/Item.h:274

No locals.

#4 0x00000000008625e2 in Guild::DeleteGuildBankItems (this=0x7facc7bc1900, alsoInDB=false)

at ../../../src/game/Guild.cpp:2376

pItem = (class Item *) 0x7facc797a940

i = 1

#5 0x0000000000869e88 in ~Guild (this=0x2) at ../../../src/game/Guild.cpp:102

No locals.

[VladimirMangos]

#5  0x0000000000869e88 in ~Guild (this=0x2) at ../../../src/game/Guild.cpp:102

Or backtrace itself corrupted, or this inform that crash nit related to items itself, but Guild object pointer values at call already corrupted. You not have more deep lines of backtrace for see where ~Guild called in this specific case?

[A350fly]

Hmm, I didn't pay attention, but all my backtraces end with :

[== backtrace ==]
#6  0x00000000006b0827 in ~ObjectMgr (Quit

Typical backtrace :

[== backtrace ==]

Program received signal SIGINT, Interrupt.

[switching to Thread 0x7facdf7a56f0 (LWP 22784)]

0x00007facde183a04 in scalable_free () from /home/unix34400/wow/lib/libtbbmalloc.so.2

Current language: auto; currently asm

* 1 Thread 0x7facdf7a56f0 (LWP 22784) 0x00007facde183a04 in scalable_free ()

from /home/unix34400/wow/lib/libtbbmalloc.so.2

#0 0x00007facde183a04 in scalable_free () from /home/unix34400/wow/lib/libtbbmalloc.so.2

No locals.

#1 0x00000000008d3399 in operator delete (ptr=0x2)

at ../../../src/framework/Policies/MemoryManagement.cpp:47

No locals.

#2 0x000000000067c631 in ~Object (this=0x7facc797a940) at /usr/include/c++/4.3/ext/new_allocator.h:98

No locals.

#3 0x00000000005fd44d in ~Item (this=0x7facc797a940) at ../../../src/game/Item.h:274

No locals.

#4 0x00000000008625e2 in Guild::DeleteGuildBankItems (this=0x7facc7bc1900, alsoInDB=false)

at ../../../src/game/Guild.cpp:2376

pItem = (class Item *) 0x7facc797a940

i = 1

#5 0x0000000000869e88 in ~Guild (this=0x2) at ../../../src/game/Guild.cpp:102

No locals.

#6 0x00000000006b0827 in ~ObjectMgr (Quit

Maybe, should I manually reconstruct the backtrace to see if it's corrupted... ?

[VladimirMangos]

#6 0x00000000006b0827 in ~ObjectMgr

Hmm, this meaning that in Guilds map stored in shutdown time early deleted guild, but not removed from map.

[added]Wait!!! Already some time guilds stored in own signleton sGuildMgr

So its don't must be affected at ObjectMgr call

[A350fly]

[EDIT] It's seems the backtrace I provided is indeed corrupted. I manually ran mangos with gdb, without any scripts, and I've got another error. I'm not sure why, so I'll post it later if needed.

Thanks for the clues.