See
<https://jenkins.osmocom.org/jenkins/job/master-osmo-pcu/FIRMWARE_VERSION=master,WITH_MANUALS=0,label=rpi4-raspbian11,with_dsp=none,with_vty=False/6327/display/redirect>
Changes:
------------------------------------------
[...truncated 156.95 KB...]
6: edge ok
7: types ok
8: ms ok
9: llc ok
10: llist ok
11: codel ok
12: fn ok
13: app_info ok
14: ulc ok
## ------------- ##
## Test results. ##
## ------------- ##
ERROR: All 14 tests were run,
1 failed unexpectedly.
## -------------------------- ##
## testsuite.log was created. ##
## -------------------------- ##
Please send `tests/testsuite.log' and all information you think might help:
To: <osmocom-net-gprs(a)lists.osmocom.org>
Subject: [osmo-pcu 1.4.0.1-b04e1] testsuite: 4 failed
You may investigate any problem if you feel able to do so, in which
case the test suite provides a good starting point. Its output may
be found below `tests/testsuite.dir'.
make[2]: *** [Makefile:1496: installcheck-local] Error 1
make[2]: Leaving directory '/build/osmo-pcu-1.4.0.1-b04e1/_build/sub/tests'
make[1]: *** [Makefile:429: installcheck-recursive] Error 1
make[1]: Leaving directory '/build/osmo-pcu-1.4.0.1-b04e1/_build/sub'
make: *** [Makefile:648: distcheck] Error 1
+ cat-testlogs.sh
========================
./osmo-pcu-1.4.0.1-b04e1/_build/sub/tests/testsuite.dir/04/testsuite.log
# -*- compilation -*-
4. testsuite.at:25: testing tbf ...
../../../tests/testsuite.at:28: $OSMO_QEMU $abs_top_builddir/tests/tbf/TbfTest
--- experr 2023-12-18 04:26:55.099514963 +0000
+++
/build/osmo-pcu-1.4.0.1-b04e1/_build/sub/tests/testsuite.dir/at-groups/4/stderr 2023-12-18
04:26:59.239403461 +0000
@@ -11453,145 +11453,51 @@
UL_TBF(UL:TFI-0-0--1:G:TLLI-0xffeeddcc){ASSIGN}: Deallocated
UL_ASS_TBF(UL:TFI-0-0--1:G:TLLI-0xffeeddcc){NONE}: Deallocated
DL_ASS_TBF(UL:TFI-0-0--1:G:TLLI-0xffeeddcc){NONE}: Deallocated
-=== end test_packet_access_rej_prr_no_other_tbfs ===
-=== start test_ms_merge_dl_tbf_different_trx ===
-PDCH(bts=0,trx=0,ts=1) PDCH state: disabled => enabled
-PDCH(bts=0,trx=0,ts=1) PDCH state: enabled => disabled
-PDCH(bts=0,trx=1,ts=4) PDCH state: disabled => enabled
-PDCH(bts=0,trx=1,ts=5) PDCH state: disabled => enabled
-PDCH(bts=0,trx=1,ts=6) PDCH state: disabled => enabled
-Creating MS object
-MS(TA-220:MSCLS-0-0): + dl_tbf_handle: now used by 1 (dl_tbf_handle)
-Modifying MS object, TLLI = 0xffffffff, IMSI '' -> '001001000000001'
-The MS object cannot fully confirm an unexpected TLLI: 0xa3c2f953, partly confirmed
-Modifying MS object, TLLI = 0xa3c2f953, MS class 0 -> 11
-MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0) appending 19 bytes to DL LLC
queue
-[DL] algo B <single> (suggested TRX: -1): Alloc start
-Found first unallocated TRX=1 TFI=0
-Slot Allocation (Algorithm B) for class 11
-- Skipping TS 0, because not enabled
-- Skipping TS 1, because not enabled
-- Skipping TS 2, because not enabled
-- Skipping TS 3, because not enabled
-- Skipping TS 7, because not enabled
-- Possible DL/UL slots: (TS=0)"....CCC."(TS=7)
-Rx=4 Tx=3 Sum Rx+Tx=5, Tta=3 Ttb=1, Tra=2 Trb=1, Type=1
-- Skipping TS 6, because num TBFs 0 >= 0
-Selected DL slots: (TS=0)".ddd.D.."(TS=7), single
-[DL] algo B <single> (suggested TRX: -1): using single slot at TS 5
-- Available DL/UL slots: (TS=0)"..D..CU."(TS=7)
-MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0) ********** DL-TBF starts here
**********
-MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0) Allocating DL TBF
-UL_ASS_TBF{NONE}: Allocated
-DL_ASS_TBF{NONE}: Allocated
-DL_TBF{NEW}: Allocated
-TBF(DL:TFI-0-1--1:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} Assigning TS=5 TFI=0
-PDCH(bts=0,trx=1,ts=5) Attaching
TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW}, 1 TBFs, USFs = 00, TFIs =
00000001.
-TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} Setting Control TS
PDCH(bts=0,trx=1,ts=5)
-TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} Allocated: trx = 1,
ul_slots = 20, dl_slots = 20
-MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0) Attaching DL TBF:
TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW}
-MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL): + tbf: now used by 2
(dl_tbf_handle,tbf)
-TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} [DOWNLINK] START (PCH)
-TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} Send downlink assignment on
PCH, no TBF exist (IMSI=001001000000001)
-DL_TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW}: Received Event
ASSIGN_ADD_CCCH
-TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW} set ass. type CCCH [prev
CCCH:0, PACCH:0]
-DL_TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NEW}: state_chg to ASSIGN
-TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){ASSIGN} Tx CCCH (PCH) Immediate
Assignment [PktDlAss=PDCH(bts=0,trx=1,ts=5)] TA=220
-MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL): - dl_tbf_handle: now used
by 1 (tbf)
-PDCH(bts=0,trx=0,ts=1) PDCH state: disabled => enabled
-PDCH(bts=0,trx=0,ts=2) PDCH state: disabled => enabled
-PDCH(bts=0,trx=0,ts=3) PDCH state: disabled => enabled
-Creating MS object
-Modifying MS object, UL TLLI: 0xffffffff -> 0xecc1f953, not yet confirmed
-[UL] algo B <multi> (suggested TRX: 0): Alloc start
-Found first unallocated TRX=0 TFI=0
-- Skipping TS 0, because not enabled
-- Skipping TS 4, because not enabled
-- Skipping TS 5, because not enabled
-- Skipping TS 6, because not enabled
-- Skipping TS 7, because not enabled
-- Possible DL/UL slots: (TS=0)".CCC...."(TS=7)
-Rx=4 Tx=4 Sum Rx+Tx=5, Tta=2 Ttb=1, Tra=2 Trb=1, Type=1
-Selected UL slots: (TS=0)"..UUuu.."(TS=7), multi
-[UL] algo B <multi> (suggested TRX: 0): using 2 slots
-- Available DL/UL slots: (TS=0)"..CCDDD."(TS=7)
-MS(TLLI-0xecc1f953:TA-220:MSCLS-0-0) ********** UL-TBF starts here **********
-MS(TLLI-0xecc1f953:TA-220:MSCLS-0-0) Allocating UL TBF
-UL_ASS_TBF{NONE}: Allocated
-DL_ASS_TBF{NONE}: Allocated
-UL_TBF{NEW}: Allocated
-UL_ACK_TBF{NONE}: Allocated
-TBF(UL:TFI-0-0--1:G:TLLI-0xecc1f953){NEW} Assigning TS=2 TFI=0 USF=0
-PDCH(bts=0,trx=0,ts=2) Attaching TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW}, 1 TBFs, USFs =
01, TFIs = 00000001.
-TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW} Assigning TS=3 TFI=0 USF=0
-PDCH(bts=0,trx=0,ts=3) Attaching TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW}, 1 TBFs, USFs =
01, TFIs = 00000001.
-TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW} Setting Control TS PDCH(bts=0,trx=0,ts=2)
-TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW} Allocated: trx = 0, ul_slots = 0c, dl_slots =
00
-MS(TLLI-0xecc1f953:TA-220:MSCLS-0-0) Attaching UL TBF:
TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW}
-MS(TLLI-0xecc1f953:TA-220:MSCLS-0-0:UL): + tbf: now used by 1 (tbf)
-UL_TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW}: Received Event ASSIGN_ADD_PACCH
-TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW} set ass. type PACCH [prev CCCH:0, PACCH:0]
-UL_TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){NEW}: state_chg to ASSIGN
-TBF(UL:TFI-0-0-0:G:TLLI-0xecc1f953){ASSIGN} Starting timer T3168 [UL TBF Ass (PACCH)]
with 16 sec. 0 microsec
-There is a new MS object for the same MS: (0xa3c2f953, '001001000000001') ->
(0xecc1f953, '')
-MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL): + ms_merge_and_clear_ms:
now used by 2 (tbf,ms_merge_and_clear_ms)
-MS(TLLI-0xecc1f953:TA-220:MSCLS-0-0:UL) Merge MS:
MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL)
-Modifying MS object, TLLI = 0xecc1f953, MS class 0 -> 11
-MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL) Clearing MS object
-TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){ASSIGN} free
-PDCH(bts=0,trx=1,ts=5) Detaching
TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){ASSIGN}, 1 TBFs, USFs = 00, TFIs
= 00000001.
-MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0:DL) Detaching TBF:
TBF(DL:G:IMSI-001001000000001:TLLI-0xa3c2f953){ASSIGN}
-MS(IMSI-001001000000001:TLLI-0xa3c2f953:TA-220:MSCLS-11-0): - tbf: now used by 1
(ms_merge_and_clear_ms)
-********** DL-TBF ends here **********
-DL_TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){ASSIGN}: Deallocated
-UL_ASS_TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NONE}: Deallocated
-DL_ASS_TBF(DL:TFI-0-1-0:G:IMSI-001001000000001:TLLI-0xa3c2f953){NONE}: Deallocated
-MS(TA-220:MSCLS-11-0): - ms_merge_and_clear_ms: now used by 0 (-)
-MS(TA-220:MSCLS-11-0) Destroying MS object
-Modifying MS object, TLLI: 0xecc1f953 confirmed
-MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL) appending 19 bytes to DL
LLC queue
-[DL] algo B <multi> (suggested TRX: 0): Alloc start
-Found first unallocated TRX=0 TFI=0
-Selected DL slots: (TS=0)".DDDddd."(TS=7), multi
-[DL] algo B <multi> (suggested TRX: 0): using 3 slots
-- Available DL/UL slots: (TS=0)"..CCDDD."(TS=7)
-MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL) ********** DL-TBF starts
here **********
-MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL) Allocating DL TBF
-UL_ASS_TBF{NONE}: Allocated
-DL_ASS_TBF{NONE}: Allocated
-DL_TBF{NEW}: Allocated
-TBF(DL:TFI-0-0--1:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Assigning TS=1 TFI=0
-PDCH(bts=0,trx=0,ts=1) Attaching
TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}, 1 TBFs, USFs = 00, TFIs =
00000001.
-TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Assigning TS=2 TFI=0
-PDCH(bts=0,trx=0,ts=2) Attaching
TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}, 1 TBFs, USFs = 01, TFIs =
00000001.
-TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Assigning TS=3 TFI=0
-PDCH(bts=0,trx=0,ts=3) Attaching
TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}, 1 TBFs, USFs = 01, TFIs =
00000001.
-TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Setting Control TS
PDCH(bts=0,trx=0,ts=2)
-TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Allocated: trx = 0,
ul_slots = 04, dl_slots = 0e
-MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL) Attaching DL TBF:
TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}
-MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL:DL): + tbf: now used by 2
(2*tbf)
-TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} [DOWNLINK] START (PACCH)
-TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} Send downlink assignment on
PACCH, because TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} exists
-DL_ASS_TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NONE}: Received Event
SCHED_ASS
-DL_ASS_TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NONE}: state_chg to
SEND_ASS
-DL_TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}: Received Event
ASSIGN_ADD_PACCH
-TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW} set ass. type PACCH [prev
CCCH:0, PACCH:0]
-DL_TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){NEW}: state_chg to ASSIGN
-TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} Starting timer X2001
[assignment (PACCH)] with 2 sec. 0 microsec
-DL_TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN}: Received Event
ASSIGN_PCUIF_CNF
-TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} Ignoring event
ASSIGN_PCUIF_CNF from BTS (CCCH was not requested on current assignment)
-DL_ASS_TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){SEND_ASS}: Received Event
CREATE_RLCMAC_MSG
-PDCH(bts=0,trx=0,ts=2) POLL scheduled at FN 0 + 13 = 13
-TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} start Packet Downlink
Assignment (PACCH) for TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN}
-+++++++++++++++++++++++++ TX : Packet Downlink Assignment +++++++++++++++++++++++++
-------------------------- TX : Packet Downlink Assignment -------------------------
-PDCH(bts=0,trx=0,ts=2) Reserving FN 13 for type POLL
-TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN} Scheduled DL Assignment
polling on PACCH (FN=13, TS=2)
-DL_ASS_TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){SEND_ASS}: state_chg to
WAIT_ACK
-PDCH(bts=0,trx=0,ts=2) FN=0 Scheduling control message at RTS for
TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN}
-=== end test_ms_merge_dl_tbf_different_trx ===
-MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL:DL) Destroying MS object
-MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:UL:DL) Detaching TBF:
TBF(UL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN}
-MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:DL): - tbf: now used by 1
(tbf)
-MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0:DL) Detaching TBF:
TBF(DL:TFI-0-0-0:G:IMSI-001001000000001:TLLI-0xecc1f953){ASSIGN}
-MS(IMSI-001001000000001:TLLI-0xecc1f953:TA-220:MSCLS-11-0): - tbf: now used by 0 (-)
+DL_TBF(DL:TFI-0-0-0:E:IMSI-0011223344:TLLI-0xf1223344){ASSIGN}: Timeout of X2001
+=================================================================
+==2053==ERROR: AddressSanitizer: heap-use-after-free on address 0xb306cd24 at pc
0x0063c48d bp 0xbed61148 sp 0xbed6114c
+READ of size 4 at 0xb306cd24 thread T0
+ #0 0x63c48a in gprs_rlcmac_tbf::name(bool) const
(/build/osmo-pcu-1.4.0.1-b04e1/_build/sub/tests/tbf/TbfTest+0x1fa48a)
+ #1 0x63b504 in tbf_name
(/build/osmo-pcu-1.4.0.1-b04e1/_build/sub/tests/tbf/TbfTest+0x1f9504)
+ #2 0x69d7f2 in tbf_dl_fsm_timer_cb
(/build/osmo-pcu-1.4.0.1-b04e1/_build/sub/tests/tbf/TbfTest+0x25b7f2)
+
+0xb306cd24 is located 2852 bytes inside of 23736-byte region [0xb306c200,0xb3071eb8)
+freed by thread T0 here:
+ #0 0xb6a381e4 in __interceptor_free
../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:52
+
+previously allocated by thread T0 here:
+ #0 0xb6a38cae in __interceptor_malloc
../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
+
+SUMMARY: AddressSanitizer: heap-use-after-free
(/build/osmo-pcu-1.4.0.1-b04e1/_build/sub/tests/tbf/TbfTest+0x1fa48a) in
gprs_rlcmac_tbf::name(bool) const
+Shadow bytes around the buggy address:
+ 0x3660d950: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+ 0x3660d960: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+ 0x3660d970: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+ 0x3660d980: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+ 0x3660d990: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+=>0x3660d9a0: fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd
+ 0x3660d9b0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+ 0x3660d9c0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+ 0x3660d9d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+ 0x3660d9e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+ 0x3660d9f0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
+Shadow byte legend (one shadow byte represents 8 application bytes):
+ Addressable: 00
+ Partially addressable: 01 02 03 04 05 06 07
+ Heap left redzone: fa
+ Freed heap region: fd
+ Stack left redzone: f1
+ Stack mid redzone: f2
+ Stack right redzone: f3
+ Stack after return: f5
+ Stack use after scope: f8
+ Global redzone: f9
+ Global init order: f6
+ Poisoned by user: f7
+ Container overflow: fc
+ Array cookie: ac
+ Intra object redzone: bb
+ ASan internal: fe
+ Left alloca redzone: ca
+ Right alloca redzone: cb
+==2053==ABORTING
stdout:
../../../tests/testsuite.at:28: exit code was 1, expected 0
4. testsuite.at:25: 4. tbf (testsuite.at:25): FAILED (testsuite.at:28)
Build step 'Execute shell' marked build as failure
$ ssh-agent -k
unset SSH_AUTH_SOCK;
unset SSH_AGENT_PID;
echo Agent pid 25087 killed;
[ssh-agent] Stopped.
Archiving artifacts