dataroaring opened a new issue, #14224: URL: https://github.com/apache/doris/issues/14224
### Search before asking - [X] I had searched in the [issues](https://github.com/apache/doris/issues?q=is%3Aissue) and found no similar issues. ### Version master ### What's Wrong? start time: Sat 12 Nov 2022 09:12:13 PM CST ================================================================= ==3048279==ERROR: AddressSanitizer: heap-use-after-free on address 0x61a000003db0 at pc 0x556a38a85ee4 bp 0x7ffd44f38b80 sp 0x7ffd44f38b70 READ of size 8 at 0x61a000003db0 thread T0 #0 0x556a38a85ee3 in std::__uniq_ptr_impl<doris::MemTracker, std::default_delete<doris::MemTracker> >::_M_ptr() const /var/local/ldb-toolchain/include/c++/11/bits/unique_ptr.h:173 #1 0x556a38a85ee3 in std::unique_ptr<doris::MemTracker, std::default_delete<doris::MemTracker> >::get() const /var/local/ldb-toolchain/include/c++/11/bits/unique_ptr.h:422 #2 0x556a38a85ee3 in doris::StorageEngine::segment_meta_mem_tracker() /root/doris/be/src/olap/storage_engine.h:182 #3 0x556a38a85ee3 in doris::segment_v2::Segment::~Segment() /root/doris/be/src/olap/rowset/segment_v2/segment.cpp:82 #4 0x556a38a93d2e in std::_Sp_counted_ptr<doris::segment_v2::Segment*, (__gnu_cxx::_Lock_policy)2>::_M_dispose() /var/local/ldb-toolchain/include/c++/11/bits/shared_ptr_base.h:348 #5 0x556a39711245 in std::_Sp_counted_base<(__gnu_cxx::_Lock_policy)2>::_M_release() /var/local/ldb-toolchain/include/c++/11/bits/shared_ptr_base.h:168 #6 0x556a39711245 in std::_Sp_counted_base<(__gnu_cxx::_Lock_policy)2>::_M_release() /var/local/ldb-toolchain/include/c++/11/bits/shared_ptr_base.h:161 #7 0x556a39711245 in std::__shared_count<(__gnu_cxx::_Lock_policy)2>::~__shared_count() /var/local/ldb-toolchain/include/c++/11/bits/shared_ptr_base.h:702 #8 0x556a39711245 in std::__shared_ptr<doris::segment_v2::Segment, (__gnu_cxx::_Lock_policy)2>::~__shared_ptr() /var/local/ldb-toolchain/include/c++/11/bits/shared_ptr_base.h:1149 #9 0x556a39711245 in std::shared_ptr<doris::segment_v2::Segment>::~shared_ptr() /var/local/ldb-toolchain/include/c++/11/bits/shared_ptr.h:122 #10 0x556a39711245 in void std::_Destroy<std::shared_ptr<doris::segment_v2::Segment> >(std::shared_ptr<doris::segment_v2::Segment>*) /var/local/ldb-toolchain/include/c++/11/bits/stl_construct.h:140 #11 0x556a39711245 in void std::_Destroy_aux<false>::__destroy<std::shared_ptr<doris::segment_v2::Segment>*>(std::shared_ptr<doris::segment_v2::Segment>*, std::shared_ptr<doris::segment_v2::Segment>*) /var/local/ldb-toolchain/include/c++/11/bits/stl_construct.h:152 #12 0x556a39711245 in void std::_Destroy<std::shared_ptr<doris::segment_v2::Segment>*>(std::shared_ptr<doris::segment_v2::Segment>*, std::shared_ptr<doris::segment_v2::Segment>*) /var/local/ldb-toolchain/include/c++/11/bits/stl_construct.h:185 #13 0x556a39711245 in void std::_Destroy<std::shared_ptr<doris::segment_v2::Segment>*, std::shared_ptr<doris::segment_v2::Segment> >(std::shared_ptr<doris::segment_v2::Segment>*, std::shared_ptr<doris::segment_v2::Segment>*, std::allocator<std::shared_ptr<doris::segment_v2::Segment> >&) /var/local/ldb-toolchain/include/c++/11/bits/alloc_traits.h:746 #14 0x556a39711245 in std::vector<std::shared_ptr<doris::segment_v2::Segment>, std::allocator<std::shared_ptr<doris::segment_v2::Segment> > >::_M_erase_at_end(std::shared_ptr<doris::segment_v2::Segment>*) /var/local/ldb-toolchain/include/c++/11/bits/stl_vector.h:1796 #15 0x556a39711245 in std::vector<std::shared_ptr<doris::segment_v2::Segment>, std::allocator<std::shared_ptr<doris::segment_v2::Segment> > >::clear() /var/local/ldb-toolchain/include/c++/11/bits/stl_vector.h:1499 #16 0x556a39711245 in operator() /root/doris/be/src/olap/segment_loader.cpp:51 #17 0x556a39711245 in _FUN /root/doris/be/src/olap/segment_loader.cpp:53 #18 0x556a386ffe95 in doris::LRUHandle::free() /root/doris/be/src/olap/lru_cache.h:253 #19 0x556a386ffe95 in doris::LRUCache::prune() /root/doris/be/src/olap/lru_cache.cpp:386 #20 0x556a387006e7 in doris::LRUCache::~LRUCache() /root/doris/be/src/olap/lru_cache.cpp:176 #21 0x556a387006e7 in doris::ShardedLRUCache::~ShardedLRUCache() /root/doris/be/src/olap/lru_cache.cpp:468 #22 0x556a387008f1 in doris::ShardedLRUCache::~ShardedLRUCache() /root/doris/be/src/olap/lru_cache.cpp:472 #23 0x7f2efa0c38d6 (/lib/x86_64-linux-gnu/libc.so.6+0x468d6) #24 0x7f2efa0c3a8f in exit (/lib/x86_64-linux-gnu/libc.so.6+0x46a8f) #25 0x7f2efa0a10b9 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x240b9) #26 0x556a36ff9029 in _start (/mnt/ssd01/pipline/OpenSourceDoris/clusterEnv/P1/Cluster0/be/lib/doris_be+0x5993029) 0x61a000003db0 is located 304 bytes inside of 1272-byte region [0x61a000003c80,0x61a000004178) freed by thread T0 here: #0 0x556a3708a767 in operator delete(void*, unsigned long) (/mnt/ssd01/pipline/OpenSourceDoris/clusterEnv/P1/Cluster0/be/lib/doris_be+0x5a24767) #1 0x556a370ff405 in main /root/doris/be/src/service/doris_main.cpp:536 #2 0x7f2efa0a10b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x240b2) previously allocated by thread T0 here: #0 0x556a37089707 in operator new(unsigned long) (/mnt/ssd01/pipline/OpenSourceDoris/clusterEnv/P1/Cluster0/be/lib/doris_be+0x5a23707) #1 0x556a382e21d4 in doris::StorageEngine::open(doris::EngineOptions const&, doris::StorageEngine**) /root/doris/be/src/olap/storage_engine.cpp:97 #2 0x556a370fd963 in main /root/doris/be/src/service/doris_main.cpp:406 #3 0x7f2efa0a10b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x240b2) SUMMARY: AddressSanitizer: heap-use-after-free /var/local/ldb-toolchain/include/c++/11/bits/unique_ptr.h:173 in std::__uniq_ptr_impl<doris::MemTracker, std::default_delete<doris::MemTracker> >::_M_ptr() const Shadow bytes around the buggy address: 0x0c347fff8760: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa 0x0c347fff8770: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c347fff8780: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c347fff8790: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c347fff87a0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd ### What You Expected? quit clean ### How to Reproduce? _No response_ ### Anything Else? _No response_ ### Are you willing to submit PR? - [ ] Yes I am willing to submit a PR! ### Code of Conduct - [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org For additional commands, e-mail: commits-h...@doris.apache.org
