Segmentation fault in memtx_build_on_replace_rollback #10147
Description
Bug description
- OS: Linux
- OS Version: Ubuntu 22.04
- Architecture: amd64
Tarantool 3.2.0-entrypoint-84-g9d3859b246
Target: Linux-x86_64-RelWithDebInfo
Build options: cmake . -DCMAKE_INSTALL_PREFIX=/usr/local -DENABLE_BACKTRACE=TRUE
Compiler: GNU-11.4.0
C_FLAGS: -fexceptions -funwind-tables -fasynchronous-unwind-tables -fno-common -msse2 -Wformat -Wformat-security -Werror=format-security -fstack-protector-strong -fPIC -fmacro-prefix-map=/home/sergeyb/sources/MRG/tarantool=. -std=c11 -Wall -Wextra -Wno-gnu-alignof-expression -fno-gnu89-inline -Wno-cast-function-type -O2 -g -DNDEBUG -ggdb -O2
CXX_FLAGS: -fexceptions -funwind-tables -fasynchronous-unwind-tables -fno-common -msse2 -Wformat -Wformat-security -Werror=format-security -fstack-protector-strong -fPIC -fmacro-prefix-map=/home/sergeyb/sources/MRG/tarantool=. -std=c++11 -Wall -Wextra -Wno-invalid-offsetof -Wno-gnu-alignof-expression -Wno-cast-function-type -O2 -g -DNDEBUG -ggdb -O2
Steps to reproduce
there are no exact steps
Actual behavior
coredump, tarantool binary and a full test log: core-gh-10147.zip
#0 __pthread_kill_implementation (no_tid=0, signo=6, threadid=140403581463232) at ./nptl/pthread_kill.c:44
#1 __pthread_kill_internal (signo=6, threadid=140403581463232) at ./nptl/pthread_kill.c:78
#2 __GI___pthread_kill (threadid=140403581463232, signo=signo@entry=6) at ./nptl/pthread_kill.c:89
#3 0x00007fb240642476 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#4 0x00007fb2406287f3 in __GI_abort () at ./stdlib/abort.c:79
#5 0x0000561dd1abc0d5 in crash_signal_cb (signo=<optimized out>, siginfo=<optimized out>, context=<optimized out>)
at /home/sergeyb/sources/MRG/tarantool/src/lib/core/crash.c:203
#6 <signal handler called>
#7 0x0000561dd193a57f in index_replace (successor=0x7fb1f2080e00, result=0x7fb1f2080df8, mode=DUP_REPLACE_OR_INSERT, new_tuple=0x0,
old_tuple=0x561dd2f6f03c, index=0x561dd2f3cec0) at /home/sergeyb/sources/MRG/tarantool/src/box/index.h:917
#8 memtx_build_on_replace_rollback (trigger=<optimized out>, event=<optimized out>)
at /home/sergeyb/sources/MRG/tarantool/src/box/memtx_space.c:1145
#9 0x0000561dd1add9dd in trigger_run_list (list=list@entry=0x7fb1f2080e60, event=event@entry=0x7fb1d6a022b8)
at /home/sergeyb/sources/MRG/tarantool/src/lib/core/trigger.cc:100
#10 0x0000561dd1addaca in trigger_run (list=list@entry=0x7fb1d6a02330, event=event@entry=0x7fb1d6a022b8)
at /home/sergeyb/sources/MRG/tarantool/src/lib/core/trigger.cc:133
#11 0x0000561dd19b8ae9 in txn_rollback_one_stmt (txn=0x7fb1d6a02038, stmt=0x7fb1d6a022b8) at /home/sergeyb/sources/MRG/tarantool/src/box/txn.c:362
#12 0x0000561dd19ba573 in txn_complete_fail (txn=txn@entry=0x7fb1d6a02038) at /home/sergeyb/sources/MRG/tarantool/src/box/txn.c:744
#13 0x0000561dd19bb2b2 in txn_rollback (txn=0x7fb1d6a02038) at /home/sergeyb/sources/MRG/tarantool/src/box/txn.c:1214
#14 0x0000561dd19bb33a in txn_on_stop (trigger=<optimized out>, event=<optimized out>) at /home/sergeyb/sources/MRG/tarantool/src/box/txn.c:1575
#15 0x0000561dd1add9dd in trigger_run_list (list=list@entry=0x7fb1f2080f50, event=event@entry=0x7fb23dc50400)
at /home/sergeyb/sources/MRG/tarantool/src/lib/core/trigger.cc:100
#16 0x0000561dd1addaca in trigger_run (list=<optimized out>, event=0x7fb23dc50400)
at /home/sergeyb/sources/MRG/tarantool/src/lib/core/trigger.cc:133
#17 0x0000561dd1ac20ec in fiber_on_stop (f=<optimized out>) at /home/sergeyb/sources/MRG/tarantool/src/lib/core/fiber.c:428
#18 0x0000561dd1ac6860 in fiber_loop (data=<optimized out>) at /home/sergeyb/sources/MRG/tarantool/src/lib/core/fiber.c:1190
#19 0x0000561dd1d3ebcc in coro_init () at /home/sergeyb/sources/MRG/tarantool/third_party/coro/coro.c:108
(gdb) Expected behavior
ne padaet