Changes:
------------------------------------------ [...truncated 158.43 KB...] @@ -7505,6 +7506,7 @@ TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} downlink acknowledge TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} ack: (BSN=0)"RR"(BSN=1) R=ACK I=NACK TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} DL analysis, range=0:2, lost=0, recv=2, skipped=0, bsn=0, info='RR..............................................................' +MS (IMSI ): Low error rate 0%, increasing DL CS level to MCS-8 TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} V(B): (V(A)=2)""(V(S)-1=1) A=Acked N=Nacked U=Unacked X=Resend-Unacked I=Invalid TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} downlink acknowledge TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} ack: (BSN=2)""(BSN=1) R=ACK I=NACK @@ -7569,28 +7571,29 @@ TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} V(B): (V(A)=2)""(V(S)-1=1) A=Acked N=Nacked U=Unacked X=Resend-Unacked I=Invalid PDCH(bts=0,trx=0,ts=4) FN=65 Scheduling data message at RTS for DL TFI=0 prio=4 mcs_mode_restrict=EGPRS TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} downlink (V(A)==2 .. V(S)==2) mcs_mode_restrict=EGPRS -TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} Sending new dummy block at BSN 2, CS=MCS-7 -TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} Empty chunk, added LLC dummy command of size 55, drained_since=57 +TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} Sending new dummy block at BSN 2, CS=MCS-8 +TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} Empty chunk, added LLC dummy command of size 67, drained_since=57 TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} Keep idle TBF open: 57/43 -> no -TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} Complete DL frame, len=55 +TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FLOW} Complete DL frame, len=67 DL_TBF(DL:TFI-0-0-0:E){FLOW}: Received Event LAST_DL_DATA_SENT DL_TBF(DL:TFI-0-0-0:E){FLOW}: state_chg to FINISHED -TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} data block (BSN 2, MCS-7): 6f 43 c0 01 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b +TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} data block (BSN 2, MCS-8): 87 43 c0 01 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} Restarting at BSN 2, because all blocks have been transmitted. TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} need_padding 0 spb_status 0 spb 0 (BSN1 2 BSN2 -1) -TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} Copying 1 RLC blocks, 1 BSNs +TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} Copying 2 RLC blocks, 1 BSNs TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} Copying data unit 0 (BSN 2) +TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} Copying data unit 1 (BSN 2) TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} Scheduling Ack/Nack polling, because it was requested explicitly (e.g. first final block sent). PDCH(bts=0,trx=0,ts=4) POLL scheduled at FN 65 + 13 = 78 PDCH(bts=0,trx=0,ts=4) Reserving FN 78 for type POLL TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} Scheduled DL Acknowledgement polling on PACCH (FN=78, TS=4) TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} Starting timer T3191 [final block (DL-TBF)] with 5 sec. 0 microsec, cur_fn=2654167 TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} Scheduled Ack/Nack polling on FN=78, TS=4 -TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} msg block (BSN 2, MCS-5): 0f 80 00 e8 db 10 70 c0 ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca 0a +TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} msg block (BSN 2, MCS-8): 0f 80 00 00 60 1e 0e 01 07 ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac 78 38 04 1c b0 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 b2 02 TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} downlink acknowledge TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} stopping timer T3191 [ACK/NACK received] TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} ack: (BSN=2)"R"(BSN=2) R=ACK I=NACK -TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} DL analysis, range=2:3, lost=0, recv=0, skipped=1, bsn=2, info='x...............................................................' +TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} DL analysis, range=2:3, lost=0, recv=1, skipped=0, bsn=2, info='R...............................................................' TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} V(B): (V(A)=3)""(V(S)-1=2) A=Acked N=Nacked U=Unacked X=Resend-Unacked I=Invalid TBF(DL:TFI-0-0-0:E:TLLI-0xffeeddcc){FINISHED} Final ACK received. DL_TBF(DL:TFI-0-0-0:E){FINISHED}: Received Event FINAL_ACK_RECVD @@ -11453,145 +11456,51 @@ UL_TBF(UL:TFI-0-0--1:G:TLLI-0xffeeddcc){ASSIGN}: Deallocated UL_ASS_TBF(UL:TFI-0-0--1:G:TLLI-0xffeeddcc){NONE}: Deallocated DL_ASS_TBF(UL:TFI-0-0--1:G:TLLI-0xffeeddcc){NONE}: Deallocated -=== end test_packet_access_rej_prr_no_other_tbfs === -=== start test_ms_merge_dl_tbf_different_trx === -PDCH(bts=0,trx=0,ts=1) PDCH state: disabled => enabled -PDCH(bts=0,trx=0,ts=1) PDCH state: enabled => disabled -PDCH(bts=0,trx=1,ts=4) PDCH state: disabled => enabled -PDCH(bts=0,trx=1,ts=5) PDCH state: disabled => enabled -PDCH(bts=0,trx=1,ts=6) PDCH state: disabled => enabled -Creating MS object -MS(TA-220:MSCLS-0-0): + dl_tbf_handle: now used by 1 (dl_tbf_handle) -Modifying MS object, TLLI = 0xffffffff, IMSI '' -> '001001000000001' -The MS object cannot fully confirm an unexpected TLLI: 0xa3c2f953, partly confirmed -Modifying MS object, TLLI = 0xa3c2f953, MS class 0 -> 11 -MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0) appending 19 bytes to DL LLC queue -[DL] algo B <single> (suggested TRX: -1): Alloc start -Found first unallocated TRX=1 TFI=0 -Slot Allocation (Algorithm B) for class 11 -- Skipping TS 0, because not enabled -- Skipping TS 1, because not enabled -- Skipping TS 2, because not enabled -- Skipping TS 3, because not enabled -- Skipping TS 7, because not enabled -- Possible DL/UL slots: (TS=0)"....CCC."(TS=7) -Rx=4 Tx=3 Sum Rx+Tx=5, Tta=3 Ttb=1, Tra=2 Trb=1, Type=1 -- Skipping TS 6, because num TBFs 0 >= 0 -Selected DL slots: (TS=0)".ddd.D.."(TS=7), single -[DL] algo B <single> (suggested TRX: -1): using single slot at TS 5 -- Available DL/UL slots: (TS=0)"..D..CU."(TS=7) -MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0) ********** DL-TBF starts here ********** -MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0) Allocating DL TBF -UL_ASS_TBF{NONE}: Allocated -DL_ASS_TBF{NONE}: Allocated -DL_TBF{NEW}: Allocated -TBF(DL:TFI-0-1--1:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} Assigning TS=5 TFI=0 -PDCH(bts=0,trx=1,ts=5) Attaching TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW}, 1 TBFs, USFs = 00, TFIs = 00000001. -TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} Setting Control TS PDCH(bts=0,trx=1,ts=5) -TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} Allocated: trx = 1, ul_slots = 20, dl_slots = 20 -MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0) Attaching DL TBF: TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} -MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL): + tbf: now used by 2 (dl_tbf_handle,tbf) -TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} [DOWNLINK] START (PCH) -TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} Send downlink assignment on PCH, no TBF exist (IMSI=001001000000001) -DL_TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW}: Received Event ASSIGN_ADD_CCCH -TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} set ass. type CCCH [prev CCCH:0, PACCH:0] -DL_TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW}: state_chg to ASSIGN -TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){ASSIGN} Tx CCCH (PCH) Immediate Assignment [PktDlAss=PDCH(bts=0,trx=1,ts=5)] TA=220 -MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL): - dl_tbf_handle: now used by 1 (tbf) -PDCH(bts=0,trx=0,ts=1) PDCH state: disabled => enabled -PDCH(bts=0,trx=0,ts=2) PDCH state: disabled => enabled -PDCH(bts=0,trx=0,ts=3) PDCH state: disabled => enabled -Creating MS object -Modifying MS object, UL TLLI: 0xffffffff -> 0xecc1f953, not yet confirmed -[UL] algo B <multi> (suggested TRX: 0): Alloc start -Found first unallocated TRX=0 TFI=0 -- Skipping TS 0, because not enabled -- Skipping TS 4, because not enabled -- Skipping TS 5, because not enabled -- Skipping TS 6, because not enabled -- Skipping TS 7, because not enabled -- Possible DL/UL slots: (TS=0)".CCC...."(TS=7) -Rx=4 Tx=4 Sum Rx+Tx=5, Tta=2 Ttb=1, Tra=2 Trb=1, Type=1 -Selected UL slots: (TS=0)"..UUuu.."(TS=7), multi -[UL] algo B <multi> (suggested TRX: 0): using 2 slots -- Available DL/UL slots: (TS=0)"..CCDDD."(TS=7) -MS(TLLI-0xecc1f953:TA-220:MSCLS-0-0) ********** UL-TBF starts here ********** -MS(TLLI-0xecc1f953:TA-220:MSCLS-0-0) Allocating UL TBF -UL_ASS_TBF{NONE}: Allocated -DL_ASS_TBF{NONE}: Allocated -UL_TBF{NEW}: Allocated -UL_ACK_TBF{NONE}: Allocated -TBF(UL:TFI-0-0--1:G:TLLI-0xecc1f953){NEW} Assigning TS=2 TFI=0 USF=0 -PDCH(bts=0,trx=0,ts=2) Attaching TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW}, 1 TBFs, USFs = 01, TFIs = 00000001. -TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW} Assigning TS=3 TFI=0 USF=0 -PDCH(bts=0,trx=0,ts=3) Attaching TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW}, 1 TBFs, USFs = 01, TFIs = 00000001. -TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW} Setting Control TS PDCH(bts=0,trx=0,ts=2) -TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW} Allocated: trx = 0, ul_slots = 0c, dl_slots = 00 -MS(TLLI-0xecc1f953:TA-220:MSCLS-0-0) Attaching UL TBF: TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW} -MS(TLLI-0xecc1f953:TA-220:MSCLS-0-0:UL): + tbf: now used by 1 (tbf) -UL_TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW}: Received Event ASSIGN_ADD_PACCH -TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW} set ass. type PACCH [prev CCCH:0, PACCH:0] -UL_TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW}: state_chg to ASSIGN -TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){ASSIGN} Starting timer T3168 [UL TBF Ass (PACCH)] with 16 sec. 0 microsec -There is a new MS object for the same MS: (0xa3c2f953, '001001000000001') -> (0xecc1f953, '') -MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL): + ms_merge_and_clear_ms: now used by 2 (tbf,ms_merge_and_clear_ms) -MS(TLLI-0xecc1f953:TA-220:MSCLS-0-0:UL) Merge MS: MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL) -Modifying MS object, TLLI = 0xecc1f953, MS class 0 -> 11 -MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL) Clearing MS object -TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){ASSIGN} free -PDCH(bts=0,trx=1,ts=5) Detaching TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){ASSIGN}, 1 TBFs, USFs = 00, TFIs = 00000001. -MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL) Detaching TBF: TBF(DL:G:IMSI-001001000000001:TLLI-0xa3c2f953){ASSIGN} -MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0): - tbf: now used by 1 (ms_merge_and_clear_ms) -********** DL-TBF ends here ********** -DL_TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){ASSIGN}: Deallocated -UL_ASS_TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NONE}: Deallocated -DL_ASS_TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NONE}: Deallocated -MS(TA-220:MSCLS-11-0): - ms_merge_and_clear_ms: now used by 0 (-) -MS(TA-220:MSCLS-11-0) Destroying MS object -Modifying MS object, TLLI: 0xecc1f953 confirmed -MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL) appending 19 bytes to DL LLC queue -[DL] algo B <multi> (suggested TRX: 0): Alloc start -Found first unallocated TRX=0 TFI=0 -Selected DL slots: (TS=0)".DDDddd."(TS=7), multi -[DL] algo B <multi> (suggested TRX: 0): using 3 slots -- Available DL/UL slots: (TS=0)"..CCDDD."(TS=7) -MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL) ********** DL-TBF starts here ********** -MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL) Allocating DL TBF -UL_ASS_TBF{NONE}: Allocated -DL_ASS_TBF{NONE}: Allocated -DL_TBF{NEW}: Allocated -TBF(DL:TFI-0-0--1:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Assigning TS=1 TFI=0 -PDCH(bts=0,trx=0,ts=1) Attaching TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}, 1 TBFs, USFs = 00, TFIs = 00000001. -TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Assigning TS=2 TFI=0 -PDCH(bts=0,trx=0,ts=2) Attaching TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}, 1 TBFs, USFs = 01, TFIs = 00000001. -TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Assigning TS=3 TFI=0 -PDCH(bts=0,trx=0,ts=3) Attaching TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}, 1 TBFs, USFs = 01, TFIs = 00000001. -TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Setting Control TS PDCH(bts=0,trx=0,ts=2) -TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Allocated: trx = 0, ul_slots = 04, dl_slots = 0e -MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL) Attaching DL TBF: TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} -MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL:DL): + tbf: now used by 2 (2*tbf) -TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} [DOWNLINK] START (PACCH) -TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Send downlink assignment on PACCH, because TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} exists -DL_ASS_TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NONE}: Received Event SCHED_ASS -DL_ASS_TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NONE}: state_chg to SEND_ASS -DL_TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}: Received Event ASSIGN_ADD_PACCH -TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} set ass. type PACCH [prev CCCH:0, PACCH:0] -DL_TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}: state_chg to ASSIGN -TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} Starting timer X2001 [assignment (PACCH)] with 2 sec. 0 microsec -DL_TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN}: Received Event ASSIGN_PCUIF_CNF -TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} Ignoring event ASSIGN_PCUIF_CNF from BTS (CCCH was not requested on current assignment) -DL_ASS_TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){SEND_ASS}: Received Event CREATE_RLCMAC_MSG -PDCH(bts=0,trx=0,ts=2) POLL scheduled at FN 0 + 13 = 13 -TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} start Packet Downlink Assignment (PACCH) for TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} -+++++++++++++++++++++++++ TX : Packet Downlink Assignment +++++++++++++++++++++++++ -------------------------- TX : Packet Downlink Assignment ------------------------- -PDCH(bts=0,trx=0,ts=2) Reserving FN 13 for type POLL -TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} Scheduled DL Assignment polling on PACCH (FN=13, TS=2) -DL_ASS_TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){SEND_ASS}: state_chg to WAIT_ACK -PDCH(bts=0,trx=0,ts=2) FN=0 Scheduling control message at RTS for TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} -=== end test_ms_merge_dl_tbf_different_trx === -MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL:DL) Destroying MS object -MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL:DL) Detaching TBF: TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} -MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:DL): - tbf: now used by 1 (tbf) -MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:DL) Detaching TBF: TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} -MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0): - tbf: now used by 0 (-) +DL_TBF(DL:TFI-0-0-0:G:IMSI-0011223344:TLLI-0xf1223344){ASSIGN}: Timeout of X2001 +================================================================= +==2740==ERROR: AddressSanitizer: heap-use-after-free on address 0xb3148d24 at pc 0x0069263d bp 0xbeb23148 sp 0xbeb2314c +READ of size 4 at 0xb3148d24 thread T0 + #0 0x69263a in gprs_rlcmac_tbf::name(bool) const (/build/osmo-pcu-1.2.0.141-e98b/_build/sub/tests/tbf/TbfTest+0x1fa63a) + #1 0x6916b4 in tbf_name (/build/osmo-pcu-1.2.0.141-e98b/_build/sub/tests/tbf/TbfTest+0x1f96b4) + #2 0x6f37a2 in tbf_dl_fsm_timer_cb (/build/osmo-pcu-1.2.0.141-e98b/_build/sub/tests/tbf/TbfTest+0x25b7a2) + +0xb3148d24 is located 2852 bytes inside of 23728-byte region [0xb3148200,0xb314deb0) +freed by thread T0 here: + #0 0xb6a481e4 in __interceptor_free ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:52 + +previously allocated by thread T0 here: + #0 0xb6a48cae in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69 + +SUMMARY: AddressSanitizer: heap-use-after-free (/build/osmo-pcu-1.2.0.141-e98b/_build/sub/tests/tbf/TbfTest+0x1fa63a) in gprs_rlcmac_tbf::name(bool) const +Shadow bytes around the buggy address: + 0x36629150: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd + 0x36629160: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd + 0x36629170: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd + 0x36629180: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd + 0x36629190: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd +=>0x366291a0: fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd + 0x366291b0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd + 0x366291c0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd + 0x366291d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd + 0x366291e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd + 0x366291f0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd +Shadow byte legend (one shadow byte represents 8 application bytes): + Addressable: 00 + Partially addressable: 01 02 03 04 05 06 07 + Heap left redzone: fa + Freed heap region: fd + Stack left redzone: f1 + Stack mid redzone: f2 + Stack right redzone: f3 + Stack after return: f5 + Stack use after scope: f8 + Global redzone: f9 + Global init order: f6 + Poisoned by user: f7 + Container overflow: fc + Array cookie: ac + Intra object redzone: bb + ASan internal: fe + Left alloca redzone: ca + Right alloca redzone: cb +==2740==ABORTING stdout: ../../../tests/testsuite.at:28: exit code was 1, expected 0 4. testsuite.at:25: 4. tbf (testsuite.at:25): FAILED (testsuite.at:28) Build step 'Execute shell' marked build as failure $ ssh-agent -k unset SSH_AUTH_SOCK; unset SSH_AGENT_PID; echo Agent pid 15292 killed; [ssh-agent] Stopped. Archiving artifacts