编译链接
运行
1. 准备工具脚本
从 https://github.com/llvm-mirror/compiler-rt/blob/master/lib/asan/scripts/asan_symbolize.py 下载脚本
#!/usr/bin/env python
#===- lib/asan/scripts/asan_symbolize.py -----------------------------------===#
#
# Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
# See https://llvm.org/LICENSE.txt for license information.
# SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
#
#===------------------------------------------------------------------------===#
"""
Example of use:
asan_symbolize.py -c "$HOME/opt/cross/bin/arm-linux-gnueabi-" -s "$HOME/SymbolFiles" < asan.log
PLUGINS
This script provides a way for external plug-ins to hook into the behaviour of
various parts of this script (see `--plugins`). This is useful for situations
where it is necessary to handle site-specific quirks (e.g. binaries with debug
symbols only accessible via a remote service) without having to modify the
script itself.
"""
import argparse
import bisect
import errno
import getopt
import logging
import os
import re
import subprocess
import sys
from distutils.spawn import find_executable
symbolizers = {}
demangle = False
binutils_prefix = None
fix_filename_patterns = None
logfile = sys.stdin
allow_system_symbolizer = True
force_system_symbolizer = False
# FIXME: merge the code that calls fix_filename().
def fix_filename(file_name):
if fix_filename_patterns:
for path_to_cut in fix_filename_patterns:
file_name = re.sub('.*' + path_to_cut, '', file_name)
file_name = re.sub('.*asan_[a-z_]*.(cc|cpp):[0-9]*', '_asan_rtl_', file_name)
file_name = re.sub('.*crtstuff.c:0', '???:0', file_name)
return file_name
def is_valid_arch(s):
return s in ["i386", "x86_64", "x86_64h", "arm", "armv6", "armv7", "armv7s",
"armv7k", "arm64", "powerpc64", "powerpc64le", "s390x", "s390"]
def guess_arch(addr):
# Guess which arch we're running. 10 = len('0x') + 8 hex digits.
if len(addr) > 10:
return 'x86_64'
else:
return 'i386'
class Symbolizer(object):
def __init__(self):
pass
def symbolize(self, addr, binary, offset):
"""Symbolize the given address (pair of binary and offset).
Overriden in subclasses.
Args:
addr: virtual address of an instruction.
binary: path to executable/shared object containing this instruction.
offset: instruction offset in the @binary.
Returns:
list of strings (one string for each inlined frame) describing
the code locations for this instruction (that is, function name, file
name, line and column numbers).
"""
return None
class LLVMSymbolizer(Symbolizer):
def __init__(self, symbolizer_path, default_arch, system, dsym_hints=[]):
super(LLVMSymbolizer, self).__init__()
self.symbolizer_path = symbolizer_path
self.default_arch = default_arch
self.system = system
self.dsym_hints = dsym_hints
self.pipe = self.open_llvm_symbolizer()
def open_llvm_symbolizer(self):
cmd = [self.symbolizer_path,
'--use-symbol-table=true',
'--demangle=%s' % demangle,
'--functions=linkage',
'--inlining=true',
'--default-arch=%s' % self.default_arch]
if self.system == 'Darwin':
for hint in self.dsym_hints:
cmd.append('--dsym-hint=%s' % hint)
logging.debug(' '.join(cmd))
try:
result = subprocess.Popen(cmd, stdin=subprocess.PIPE,
stdout=subprocess.PIPE,
bufsize=0,
universal_newlines=True)
except OSError:
result = None
return result
def symbolize(self, addr, binary, offset):
"""Overrides Symbolizer.symbolize."""
if not self.pipe:
return None
result = []
try:
symbolizer_input = '"%s" %s' % (binary, offset)
logging.debug(symbolizer_input)
self.pipe.stdin.write("%s\n" % symbolizer_input)
while True:
function_name = self.pipe.stdout.readline().rstrip()
if not function_name:
break
file_name = self.pipe.stdout.readline().rstrip()
file_name = fix_filename(file_name)
if (not function_name.startswith('??') or
not file_name.startswith('??')):
# Append only non-trivial frames.
result.append('%s in %s %s' % (addr, function_name,
file_name))
except Exception:
result = []
if not result:
result = None
return result
def LLVMSymbolizerFactory(system, default_arch, dsym_hints=[]):
symbolizer_path = os.getenv('LLVM_SYMBOLIZER_PATH')
if not symbolizer_path:
symbolizer_path = os.getenv('ASAN_SYMBOLIZER_PATH')
if not symbolizer_path:
# Assume llvm-symbolizer is in PATH.
symbolizer_path = 'llvm-symbolizer'
return LLVMSymbolizer(symbolizer_path, default_arch, system, dsym_hints)
class Addr2LineSymbolizer(Symbolizer):
def __init__(self, binary):
super(Addr2LineSymbolizer, self).__init__()
self.binary = binary
self.pipe = self.open_addr2line()
self.output_terminator = -1
def open_addr2line(self):
addr2line_tool = 'addr2line'
if binutils_prefix:
addr2line_tool = binutils_prefix + addr2line_tool
logging.debug('addr2line binary is %s' % find_executable(addr2line_tool))
cmd = [addr2line_tool, '-fi']
if demangle:
cmd += ['--demangle']
cmd += ['-e', self.binary]
logging.debug(' '.join(cmd))
return subprocess.Popen(cmd,
stdin=subprocess.PIPE, stdout=subprocess.PIPE,
bufsize=0,
universal_newlines=True)
def symbolize(self, addr, binary, offset):
"""Overrides Symbolizer.symbolize."""
if self.binary != binary:
return None
lines = []
try:
self.pipe.stdin.write("%s\n" % offset)
self.pipe.stdin.write("%s\n" % self.output_terminator)
is_first_frame = True
while True:
function_name = self.pipe.stdout.readline().rstrip()
logging.debug("read function_name='%s' from addr2line" % function_name)
# If llvm-symbolizer is installed as addr2line, older versions of
# llvm-symbolizer will print -1 when presented with -1 and not print
# a second line. In that case we will block for ever trying to read the
# file name. This also happens for non-existent files, in which case GNU
# addr2line exits immediate, but llvm-symbolizer does not (see
# https://llvm.org/PR42754).
if function_name == '-1':
logging.debug("got function '-1' -> no more input")
break
file_name = self.pipe.stdout.readline().rstrip()
logging.debug("read file_name='%s' from addr2line" % file_name)
if is_first_frame:
is_first_frame = False
elif function_name == '??':
assert file_name == '??:0', file_name
logging.debug("got function '??' -> no more input")
break
elif not function_name:
assert not file_name, file_name
logging.debug("got empty function name -> no more input")
break
if not function_name and not file_name:
logging.debug("got empty function and file name -> unknown function")
function_name = '??'
file_name = '??:0'
lines.append((function_name, file_name))
except IOError as e:
# EPIPE happens if addr2line exits early (which some implementations do
# if an invalid file is passed).
if e.errno == errno.EPIPE:
logging.debug("addr2line exited early (broken pipe), returncode=%d" % self.pipe.poll())
else:
logging.debug("unexpected I/O exception communicating with addr2line", exc_info=e)
lines.append(('??', '??:0'))
except Exception as e:
logging.debug("got unknown exception communicating with addr2line", exc_info=e)
lines.append(('??', '??:0'))
return ['%s in %s %s' % (addr, function, fix_filename(file)) for (function, file) in lines]
class UnbufferedLineConverter(object):
"""
Wrap a child process that responds to each line of input with one line of
output. Uses pty to trick the child into providing unbuffered output.
"""
def __init__(self, args, close_stderr=False):
# Local imports so that the script can start on Windows.
import pty
import termios
pid, fd = pty.fork()
if pid == 0:
# We're the child. Transfer control to command.
if close_stderr:
dev_null = os.open('/dev/null', 0)
os.dup2(dev_null, 2)
os.execvp(args[0], args)
else:
# Disable echoing.
attr = termios.tcgetattr(fd)
attr[3] = attr[3] & ~termios.ECHO
termios.tcsetattr(fd, termios.TCSANOW, attr)
# Set up a file()-like interface to the child process
self.r = os.fdopen(fd, "r", 1)
self.w = os.fdopen(os.dup(fd), "w", 1)
def convert(self, line):
self.w.write(line + "\n")
return self.readline()
def readline(self):
return self.r.readline().rstrip()
class DarwinSymbolizer(Symbolizer):
def __init__(self, addr, binary, arch):
super(DarwinSymbolizer, self).__init__()
self.binary = binary
self.arch = arch
self.open_atos()
def open_atos(self):
logging.debug('atos -o %s -arch %s', self.binary, self.arch)
cmdline = ['atos', '-o', self.binary, '-arch', self.arch]
self.atos = UnbufferedLineConverter(cmdline, close_stderr=True)
def symbolize(self, addr, binary, offset):
"""Overrides Symbolizer.symbolize."""
if self.binary != binary:
return None
if not os.path.exists(binary):
# If the binary doesn't exist atos will exit which will lead to IOError
# exceptions being raised later on so just don't try to symbolize.
return ['{} ({}:{}+{})'.format(addr, binary, self.arch, offset)]
atos_line = self.atos.convert('0x%x' % int(offset, 16))
while "got symbolicator for" in atos_line:
atos_line = self.atos.readline()
# A well-formed atos response looks like this:
# foo(type1, type2) (in object.name) (filename.cc:80)
match = re.match('^(.*) \(in (.*)\) \((.*:\d*)\)$', atos_line)
logging.debug('atos_line: %s', atos_line)
if match:
function_name = match.group(1)
function_name = re.sub('\(.*?\)', '', function_name)
file_name = fix_filename(match.group(3))
return ['%s in %s %s' % (addr, function_name, file_name)]
else:
return ['%s in %s' % (addr, atos_line)]
# Chain several symbolizers so that if one symbolizer fails, we fall back
# to the next symbolizer in chain.
class ChainSymbolizer(Symbolizer):
def __init__(self, symbolizer_list):
super(ChainSymbolizer, self).__init__()
self.symbolizer_list = symbolizer_list
def symbolize(self, addr, binary, offset):
"""Overrides Symbolizer.symbolize."""
for symbolizer in self.symbolizer_list:
if symbolizer:
result = symbolizer.symbolize(addr, binary, offset)
if result:
return result
return None
def append_symbolizer(self, symbolizer):
self.symbolizer_list.append(symbolizer)
def BreakpadSymbolizerFactory(binary):
suffix = os.getenv('BREAKPAD_SUFFIX')
if suffix:
filename = binary + suffix
if os.access(filename, os.F_OK):
return BreakpadSymbolizer(filename)
return None
def SystemSymbolizerFactory(system, addr, binary, arch):
if system == 'Darwin':
return DarwinSymbolizer(addr, binary, arch)
elif system in ['Linux', 'FreeBSD', 'NetBSD', 'SunOS']:
return Addr2LineSymbolizer(binary)
class BreakpadSymbolizer(Symbolizer):
def __init__(self, filename):
super(BreakpadSymbolizer, self).__init__()
self.filename = filename
lines = file(filename).readlines()
self.files = []
self.symbols = {}
self.address_list = []
self.addresses = {}
# MODULE mac x86_64 A7001116478B33F18FF9BEDE9F615F190 t
fragments = lines[0].rstrip().split()
self.arch = fragments[2]
self.debug_id = fragments[3]
self.binary = ' '.join(fragments[4:])
self.parse_lines(lines[1:])
def parse_lines(self, lines):
cur_function_addr = ''
for line in lines:
fragments = line.split()
if fragments[0] == 'FILE':
assert int(fragments[1]) == len(self.files)
self.files.append(' '.join(fragments[2:]))
elif fragments[0] == 'PUBLIC':
self.symbols[int(fragments[1], 16)] = ' '.join(fragments[3:])
elif fragments[0] in ['CFI', 'STACK']:
pass
elif fragments[0] == 'FUNC':
cur_function_addr = int(fragments[1], 16)
if not cur_function_addr in self.symbols.keys():
self.symbols[cur_function_addr] = ' '.join(fragments[4:])
else:
# Line starting with an address.
addr = int(fragments[0], 16)
self.address_list.append(addr)
# Tuple of symbol address, size, line, file number.
self.addresses[addr] = (cur_function_addr,
int(fragments[1], 16),
int(fragments[2]),
int(fragments[3]))
self.address_list.sort()
def get_sym_file_line(self, addr):
key = None
if addr in self.addresses.keys():
key = addr
else:
index = bisect.bisect_left(self.address_list, addr)
if index == 0:
return None
else:
key = self.address_list[index - 1]
sym_id, size, line_no, file_no = self.addresses[key]
symbol = self.symbols[sym_id]
filename = self.files[file_no]
if addr < key + size:
return symbol, filename, line_no
else:
return None
def symbolize(self, addr, binary, offset):
if self.binary != binary:
return None
res = self.get_sym_file_line(int(offset, 16))
if res:
function_name, file_name, line_no = res
result = ['%s in %s %s:%d' % (
addr, function_name, file_name, line_no)]
print(result)
return result
else:
return None
class SymbolizationLoop(object):
def __init__(self, plugin_proxy=None, dsym_hint_producer=None):
self.plugin_proxy = plugin_proxy
if sys.platform == 'win32':
# ASan on Windows uses dbghelp.dll to symbolize in-process, which works
# even in sandboxed processes. Nothing needs to be done here.
self.process_line = self.process_line_echo
else:
# Used by clients who may want to supply a different binary name.
# E.g. in Chrome several binaries may share a single .dSYM.
self.dsym_hint_producer = dsym_hint_producer
self.system = os.uname()[0]
if self.system not in ['Linux', 'Darwin', 'FreeBSD', 'NetBSD','SunOS']:
raise Exception('Unknown system')
self.llvm_symbolizers = {}
self.last_llvm_symbolizer = None
self.dsym_hints = set([])
self.frame_no = 0
self.process_line = self.process_line_posix
self.using_module_map = plugin_proxy.has_plugin(ModuleMapPlugIn.get_name())
def symbolize_address(self, addr, binary, offset, arch):
# On non-Darwin (i.e. on platforms without .dSYM debug info) always use
# a single symbolizer binary.
# On Darwin, if the dsym hint producer is present:
# 1. check whether we've seen this binary already; if so,
# use |llvm_symbolizers[binary]|, which has already loaded the debug
# info for this binary (might not be the case for
# |last_llvm_symbolizer|);
# 2. otherwise check if we've seen all the hints for this binary already;
# if so, reuse |last_llvm_symbolizer| which has the full set of hints;
# 3. otherwise create a new symbolizer and pass all currently known
# .dSYM hints to it.
result = None
if not force_system_symbolizer:
if not binary in self.llvm_symbolizers:
use_new_symbolizer = True
if self.system == 'Darwin' and self.dsym_hint_producer:
dsym_hints_for_binary = set(self.dsym_hint_producer(binary))
use_new_symbolizer = bool(dsym_hints_for_binary - self.dsym_hints)
self.dsym_hints |= dsym_hints_for_binary
if self.last_llvm_symbolizer and not use_new_symbolizer:
self.llvm_symbolizers[binary] = self.last_llvm_symbolizer
else:
self.last_llvm_symbolizer = LLVMSymbolizerFactory(
self.system, arch, self.dsym_hints)
self.llvm_symbolizers[binary] = self.last_llvm_symbolizer
# Use the chain of symbolizers:
# Breakpad symbolizer -> LLVM symbolizer -> addr2line/atos
# (fall back to next symbolizer if the previous one fails).
if not binary in symbolizers:
symbolizers[binary] = ChainSymbolizer(
[BreakpadSymbolizerFactory(binary), self.llvm_symbolizers[binary]])
result = symbolizers[binary].symbolize(addr, binary, offset)
else:
symbolizers[binary] = ChainSymbolizer([])
if result is None:
if not allow_system_symbolizer:
raise Exception('Failed to launch or use llvm-symbolizer.')
# Initialize system symbolizer only if other symbolizers failed.
symbolizers[binary].append_symbolizer(
SystemSymbolizerFactory(self.system, addr, binary, arch))
result = symbolizers[binary].symbolize(addr, binary, offset)
# The system symbolizer must produce some result.
assert result
return result
def get_symbolized_lines(self, symbolized_lines, inc_frame_counter=True):
if not symbolized_lines:
if inc_frame_counter:
self.frame_no += 1
return [self.current_line]
else:
assert inc_frame_counter
result = []
for symbolized_frame in symbolized_lines:
result.append(' #%s %s' % (str(self.frame_no), symbolized_frame.rstrip()))
self.frame_no += 1
return result
def process_logfile(self):
self.frame_no = 0
for line in logfile:
processed = self.process_line(line)
print('\n'.join(processed))
def process_line_echo(self, line):
return [line.rstrip()]
def process_line_posix(self, line):
self.current_line = line.rstrip()
# Unsymbolicated:
# #0 0x7f6e35cf2e45 (/blah/foo.so+0x11fe45)
# Partially symbolicated:
# #0 0x7f6e35cf2e45 in foo (foo.so+0x11fe45)
# NOTE: We have to very liberal with symbol
# names in the regex because it could be an
# Objective-C or C++ demangled name.
stack_trace_line_format = (
'^( *#([0-9]+) *)(0x[0-9a-f]+) *(?:in *.+)? *\((.*)\+(0x[0-9a-f]+)\)')
match = re.match(stack_trace_line_format, line)
if not match:
logging.debug('Line "{}" does not match regex'.format(line))
# Not a frame line so don't increment the frame counter.
return self.get_symbolized_lines(None, inc_frame_counter=False)
logging.debug(line)
_, frameno_str, addr, binary, offset = match.groups()
if not self.using_module_map and not os.path.isabs(binary):
# Do not try to symbolicate if the binary is just the module file name
# and a module map is unavailable.
# FIXME(dliew): This is currently necessary for reports on Darwin that are
# partially symbolicated by `atos`.
return self.get_symbolized_lines(None)
arch = ""
# Arch can be embedded in the filename, e.g.: "libabc.dylib:x86_64h"
colon_pos = binary.rfind(":")
if colon_pos != -1:
maybe_arch = binary[colon_pos+1:]
if is_valid_arch(maybe_arch):
arch = maybe_arch
binary = binary[0:colon_pos]
if arch == "":
arch = guess_arch(addr)
if frameno_str == '0':
# Assume that frame #0 is the first frame of new stack trace.
self.frame_no = 0
original_binary = binary
binary = self.plugin_proxy.filter_binary_path(binary)
if binary is None:
# The binary filter has told us this binary can't be symbolized.
logging.debug('Skipping symbolication of binary "%s"', original_binary)
return self.get_symbolized_lines(None)
symbolized_line = self.symbolize_address(addr, binary, offset, arch)
if not symbolized_line:
if original_binary != binary:
symbolized_line = self.symbolize_address(addr, original_binary, offset, arch)
return self.get_symbolized_lines(symbolized_line)
class AsanSymbolizerPlugInProxy(object):
"""
Serves several purposes:
- Manages the lifetime of plugins (must be used a `with` statement).
- Provides interface for calling into plugins from within this script.
"""
def __init__(self):
self._plugins = [ ]
self._plugin_names = set()
def _load_plugin_from_file_impl_py_gt_2(self, file_path, globals_space):
with open(file_path, 'r') as f:
exec(f.read(), globals_space, None)
def load_plugin_from_file(self, file_path):
logging.info('Loading plugins from "{}"'.format(file_path))
globals_space = dict(globals())
# Provide function to register plugins
def register_plugin(plugin):
logging.info('Registering plugin %s', plugin.get_name())
self.add_plugin(plugin)
globals_space['register_plugin'] = register_plugin
if sys.version_info.major < 3:
execfile(file_path, globals_space, None)
else:
# Indirection here is to avoid a bug in older Python 2 versions:
# `SyntaxError: unqualified exec is not allowed in function ...`
self._load_plugin_from_file_impl_py_gt_2(file_path, globals_space)
def add_plugin(self, plugin):
assert isinstance(plugin, AsanSymbolizerPlugIn)
self._plugins.append(plugin)
self._plugin_names.add(plugin.get_name())
plugin._receive_proxy(self)
def remove_plugin(self, plugin):
assert isinstance(plugin, AsanSymbolizerPlugIn)
self._plugins.remove(plugin)
self._plugin_names.remove(plugin.get_name())
logging.debug('Removing plugin %s', plugin.get_name())
plugin.destroy()
def has_plugin(self, name):
"""
Returns true iff the plugin name is currently
being managed by AsanSymbolizerPlugInProxy.
"""
return name in self._plugin_names
def register_cmdline_args(self, parser):
plugins = list(self._plugins)
for plugin in plugins:
plugin.register_cmdline_args(parser)
def process_cmdline_args(self, pargs):
# Use copy so we can remove items as we iterate.
plugins = list(self._plugins)
for plugin in plugins:
keep = plugin.process_cmdline_args(pargs)
assert isinstance(keep, bool)
if not keep:
self.remove_plugin(plugin)
def __enter__(self):
return self
def __exit__(self, exc_type, exc_val, exc_tb):
for plugin in self._plugins:
plugin.destroy()
# Don't suppress raised exceptions
return False
def _filter_single_value(self, function_name, input_value):
"""
Helper for filter style plugin functions.
"""
new_value = input_value
for plugin in self._plugins:
result = getattr(plugin, function_name)(new_value)
if result is None:
return None
new_value = result
return new_value
def filter_binary_path(self, binary_path):
"""
Consult available plugins to filter the path to a binary
to make it suitable for symbolication.
Returns `None` if symbolication should not be attempted for this
binary.
"""
return self._filter_single_value('filter_binary_path', binary_path)
def filter_module_desc(self, module_desc):
"""
Consult available plugins to determine the module
description suitable for symbolication.
Returns `None` if symbolication should not be attempted for this module.
"""
assert isinstance(module_desc, ModuleDesc)
return self._filter_single_value('filter_module_desc', module_desc)
class AsanSymbolizerPlugIn(object):
"""
This is the interface the `asan_symbolize.py` code uses to talk
to plugins.
"""
@classmethod
def get_name(cls):
"""
Returns the name of the plugin.
"""
return cls.__name__
def _receive_proxy(self, proxy):
assert isinstance(proxy, AsanSymbolizerPlugInProxy)
self.proxy = proxy
def register_cmdline_args(self, parser):
"""
Hook for registering command line arguments to be
consumed in `process_cmdline_args()`.
`parser` - Instance of `argparse.ArgumentParser`.
"""
pass
def process_cmdline_args(self, pargs):
"""
Hook for handling parsed arguments. Implementations
should not modify `pargs`.
`pargs` - Instance of `argparse.Namespace` containing
parsed command line arguments.
Return `True` if plug-in should be used, otherwise
return `False`.
"""
return True
def destroy(self):
"""
Hook called when a plugin is about to be destroyed.
Implementations should free any allocated resources here.
"""
pass
# Symbolization hooks
def filter_binary_path(self, binary_path):
"""
Given a binary path return a binary path suitable for symbolication.
Implementations should return `None` if symbolication of this binary
should be skipped.
"""
return binary_path
def filter_module_desc(self, module_desc):
"""
Given a ModuleDesc object (`module_desc`) return
a ModuleDesc suitable for symbolication.
Implementations should return `None` if symbolication of this binary
should be skipped.
"""
return module_desc
class ModuleDesc(object):
def __init__(self, name, arch, start_addr, end_addr, module_path, uuid):
self.name = name
self.arch = arch
self.start_addr = start_addr
self.end_addr = end_addr
# Module path from an ASan report.
self.module_path = module_path
# Module for performing symbolization, by default same as above.
self.module_path_for_symbolization = module_path
self.uuid = uuid
assert self.is_valid()
def __str__(self):
assert self.is_valid()
return "{name} {arch} {start_addr:#016x}-{end_addr:#016x} {module_path} {uuid}".format(
name=self.name,
arch=self.arch,
start_addr=self.start_addr,
end_addr=self.end_addr,
module_path=self.module_path if self.module_path == self.module_path_for_symbolization else '{} ({})'.format(self.module_path_for_symbolization, self.module_path),
uuid=self.uuid
)
def is_valid(self):
if not isinstance(self.name, str):
return False
if not isinstance(self.arch, str):
return False
if not isinstance(self.start_addr, int):
return False
if self.start_addr < 0:
return False
if not isinstance(self.end_addr, int):
return False
if self.end_addr <= self.start_addr:
return False
if not isinstance(self.module_path, str):
return False
if not os.path.isabs(self.module_path):
return False
if not isinstance(self.module_path_for_symbolization, str):
return False
if not os.path.isabs(self.module_path_for_symbolization):
return False
if not isinstance(self.uuid, str):
return False
return True
class GetUUIDFromBinaryException(Exception):
def __init__(self, msg):
super(GetUUIDFromBinaryException, self).__init__(msg)
_get_uuid_from_binary_cache = dict()
def get_uuid_from_binary(path_to_binary, arch=None):
cache_key = (path_to_binary, arch)
cached_value = _get_uuid_from_binary_cache.get(cache_key)
if cached_value:
return cached_value
if not os.path.exists(path_to_binary):
raise GetUUIDFromBinaryException('Binary "{}" does not exist'.format(path_to_binary))
cmd = [ '/usr/bin/otool', '-l']
if arch:
cmd.extend(['-arch', arch])
cmd.append(path_to_binary)
output = subprocess.check_output(cmd, stderr=subprocess.STDOUT)
# Look for this output:
# cmd LC_UUID
# cmdsize 24
# uuid 4CA778FE-5BF9-3C45-AE59-7DF01B2BE83F
if isinstance(output, str):
output_str = output
else:
assert isinstance(output, bytes)
output_str = output.decode()
assert isinstance(output_str, str)
lines = output_str.split('\n')
uuid = None
for index, line in enumerate(lines):
stripped_line = line.strip()
if not stripped_line.startswith('cmd LC_UUID'):
continue
uuid_line = lines[index+2].strip()
if not uuid_line.startswith('uuid'):
raise GetUUIDFromBinaryException('Malformed output: "{}"'.format(uuid_line))
split_uuid_line = uuid_line.split()
uuid = split_uuid_line[1]
break
if uuid is None:
logging.error('Failed to retrieve UUID from binary {}'.format(path_to_binary))
logging.error('otool output was:\n{}'.format(output_str))
raise GetUUIDFromBinaryException('Failed to retrieve UUID from binary "{}"'.format(path_to_binary))
else:
# Update cache
_get_uuid_from_binary_cache[cache_key] = uuid
return uuid
class ModuleMap(object):
def __init__(self):
self._module_name_to_description_map = dict()
def add_module(self, desc):
assert isinstance(desc, ModuleDesc)
assert desc.name not in self._module_name_to_description_map
self._module_name_to_description_map[desc.name] = desc
def find_module_by_name(self, name):
return self._module_name_to_description_map.get(name, None)
def __str__(self):
s = '{} modules:\n'.format(self.num_modules)
for module_desc in sorted(self._module_name_to_description_map.values(), key=lambda v: v.start_addr):
s += str(module_desc) + '\n'
return s
@property
def num_modules(self):
return len(self._module_name_to_description_map)
@property
def modules(self):
return set(self._module_name_to_description_map.values())
def get_module_path_for_symbolication(self, module_name, proxy, validate_uuid):
module_desc = self.find_module_by_name(module_name)
if module_desc is None:
return None
# Allow a plug-in to change the module description to make it
# suitable for symbolication or avoid symbolication altogether.
module_desc = proxy.filter_module_desc(module_desc)
if module_desc is None:
return None
if validate_uuid:
logging.debug('Validating UUID of {}'.format(module_desc.module_path_for_symbolization))
try:
uuid = get_uuid_from_binary(module_desc.module_path_for_symbolization, arch = module_desc.arch)
if uuid != module_desc.uuid:
logging.warning("Detected UUID mismatch {} != {}".format(uuid, module_desc.uuid))
# UUIDs don't match. Tell client to not symbolize this.
return None
except GetUUIDFromBinaryException as e:
logging.error('Failed to get binary from UUID: %s', str(e))
return None
else:
logging.warning('Skipping validation of UUID of {}'.format(module_desc.module_path_for_symbolization))
return module_desc.module_path_for_symbolization
@staticmethod
def parse_from_file(module_map_path):
if not os.path.exists(module_map_path):
raise Exception('module map "{}" does not exist'.format(module_map_path))
with open(module_map_path, 'r') as f:
mm = None
# E.g.
# 0x2db4000-0x102ddc000 /path/to (arm64) <0D6BBDE0-FF90-3680-899D-8E6F9528E04C>
hex_regex = lambda name: r'0x(?P< ' + name + r'>[0-9a-f]+)'
module_path_regex = r'(?P<path>.+)'
arch_regex = r'\((?P<arch>.+)\)'
uuid_regex = r'< (?P<uuid>[0-9A-Z-]+)>'
line_regex = r'^{}-{}\s+{}\s+{}\s+{}'.format(
hex_regex('start_addr'),
hex_regex('end_addr'),
module_path_regex,
arch_regex,
uuid_regex
)
matcher = re.compile(line_regex)
line_num = 0
line = 'dummy'
while line != '':
line = f.readline()
line_num += 1
if mm is None:
if line.startswith('Process module map:'):
mm = ModuleMap()
continue
if line.startswith('End of module map'):
break
m_obj = matcher.match(line)
if not m_obj:
raise Exception('Failed to parse line {} "{}"'.format(line_num, line))
arch = m_obj.group('arch')
start_addr = int(m_obj.group('start_addr'), base=16)
end_addr = int(m_obj.group('end_addr'), base=16)
module_path = m_obj.group('path')
uuid = m_obj.group('uuid')
module_desc = ModuleDesc(
name=os.path.basename(module_path),
arch=arch,
start_addr=start_addr,
end_addr=end_addr,
module_path=module_path,
uuid=uuid
)
mm.add_module(module_desc)
if mm is not None:
logging.debug('Loaded Module map from "{}":\n{}'.format(
f.name,
str(mm))
)
return mm
class SysRootFilterPlugIn(AsanSymbolizerPlugIn):
"""
Simple plug-in to add sys root prefix to all binary paths
used for symbolication.
"""
def __init__(self):
self.sysroot_path = ""
def register_cmdline_args(self, parser):
parser.add_argument('-s', dest='sys_root', metavar='SYSROOT',
help='set path to sysroot for sanitized binaries')
def process_cmdline_args(self, pargs):
if pargs.sys_root is None:
# Not being used so remove ourselves.
return False
self.sysroot_path = pargs.sys_root
return True
def filter_binary_path(self, path):
return self.sysroot_path + path
class ModuleMapPlugIn(AsanSymbolizerPlugIn):
def __init__(self):
self._module_map = None
self._uuid_validation = True
def register_cmdline_args(self, parser):
parser.add_argument('--module-map',
help='Path to text file containing module map'
'output. See print_module_map ASan option.')
parser.add_argument('--skip-uuid-validation',
default=False,
action='store_true',
help='Skips validating UUID of modules using otool.')
def process_cmdline_args(self, pargs):
if not pargs.module_map:
return False
self._module_map = ModuleMap.parse_from_file(args.module_map)
if self._module_map is None:
msg = 'Failed to find module map'
logging.error(msg)
raise Exception(msg)
self._uuid_validation = not pargs.skip_uuid_validation
return True
def filter_binary_path(self, binary_path):
if os.path.isabs(binary_path):
# This is a binary path so transform into
# a module name
module_name = os.path.basename(binary_path)
else:
module_name = binary_path
return self._module_map.get_module_path_for_symbolication(
module_name,
self.proxy,
self._uuid_validation
)
def add_logging_args(parser):
parser.add_argument('--log-dest',
default=None,
help='Destination path for script logging (default stderr).',
)
parser.add_argument('--log-level',
choices=['debug', 'info', 'warning', 'error', 'critical'],
default='info',
help='Log level for script (default: %(default)s).'
)
def setup_logging():
# Set up a parser just for parsing the logging arguments.
# This is necessary because logging should be configured before we
# perform the main argument parsing.
parser = argparse.ArgumentParser(add_help=False)
add_logging_args(parser)
pargs, unparsed_args = parser.parse_known_args()
log_level = getattr(logging, pargs.log_level.upper())
if log_level == logging.DEBUG:
log_format = '%(levelname)s: [%(funcName)s() %(filename)s:%(lineno)d] %(message)s'
else:
log_format = '%(levelname)s: %(message)s'
basic_config = {
'level': log_level,
'format': log_format
}
log_dest = pargs.log_dest
if log_dest:
basic_config['filename'] = log_dest
logging.basicConfig(**basic_config)
logging.debug('Logging level set to "{}" and directing output to "{}"'.format(
pargs.log_level,
'stderr' if log_dest is None else log_dest)
)
return unparsed_args
def add_load_plugin_args(parser):
parser.add_argument('-p', '--plugins',
help='Load plug-in', nargs='+', default=[])
def setup_plugins(plugin_proxy, args):
parser = argparse.ArgumentParser(add_help=False)
add_load_plugin_args(parser)
pargs , unparsed_args = parser.parse_known_args()
for plugin_path in pargs.plugins:
plugin_proxy.load_plugin_from_file(plugin_path)
# Add built-in plugins.
plugin_proxy.add_plugin(ModuleMapPlugIn())
plugin_proxy.add_plugin(SysRootFilterPlugIn())
return unparsed_args
if __name__ == '__main__':
remaining_args = setup_logging()
with AsanSymbolizerPlugInProxy() as plugin_proxy:
remaining_args = setup_plugins(plugin_proxy, remaining_args)
parser = argparse.ArgumentParser(
formatter_class=argparse.RawDescriptionHelpFormatter,
description='ASan symbolization script',
epilog=__doc__)
parser.add_argument('path_to_cut', nargs='*',
help='pattern to be cut from the result file path ')
parser.add_argument('-d','--demangle', action='store_true',
help='demangle function names')
parser.add_argument('-c', metavar='CROSS_COMPILE',
help='set prefix for binutils')
parser.add_argument('-l','--logfile', default=sys.stdin,
type=argparse.FileType('r'),
help='set log file name to parse, default is stdin')
parser.add_argument('--force-system-symbolizer', action='store_true',
help='don\'t use llvm-symbolizer')
# Add logging arguments so that `--help` shows them.
add_logging_args(parser)
# Add load plugin arguments so that `--help` shows them.
add_load_plugin_args(parser)
plugin_proxy.register_cmdline_args(parser)
args = parser.parse_args(remaining_args)
plugin_proxy.process_cmdline_args(args)
if args.path_to_cut:
fix_filename_patterns = args.path_to_cut
if args.demangle:
demangle = True
if args.c:
binutils_prefix = args.c
if args.logfile:
logfile = args.logfile
else:
logfile = sys.stdin
if args.force_system_symbolizer:
force_system_symbolizer = True
if force_system_symbolizer:
assert(allow_system_symbolizer)
loop = SymbolizationLoop(plugin_proxy)
loop.process_logfile()
2. 把错误日志复制保存到err文件
比如把出错的日志复制到std.err文件
示例如下:
[root@qyyc01-test-ebs240006036.qyyc01.ksyun.com /home/essd/second-essd/block-server]$ cat std.err
========start thread on core 5 for name:UcxServerMsgHandlerPolling succ
[qyyc01-test-ebs240006036:29766:1:29773] Caught signal 11 (Segmentation fault: address not mapped to object at address 0x30)
/usr/include/c++/4.8.2/bits/stl_tree.h: [ std::_Rb_tree<kunlun::block_server::ioplanecontext *, std::pair<kunlun::block_server::IOPlaneContext* const, bool>, std::_Select1st<std::pair <kunlun::block_server::IOPlaneContext* const, bool> >, std::less<kunlun::block_server::ioplanecontext *>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::_M_begin() ]
...
499
500 _Link_type
501 _M_begin()
==> 502 { return static_cast<_link_type>(this->_M_impl._M_header._M_parent); }
503
504 _Const_Link_type
505 _M_begin() const
==== backtrace (tid: 29773) ====
0 0x00000000006d7135 std::_Rb_tree<kunlun::block_server::ioplanecontext *, std::pair<kunlun::block_server::IOPlaneContext* const, bool>, std::_Select1st<std::pair <kunlun::block_server::IOPlaneContext* const, bool> >, std::less<kunlun::block_server::ioplanecontext *>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::_M_begin() /usr/include/c++/4.8.2/bits/stl_tree.h:502
1 0x00000000006d8b88 std::_Rb_tree<kunlun::block_server::ioplanecontext *, std::pair<kunlun::block_server::IOPlaneContext* const, bool>, std::_Select1st<std::pair <kunlun::block_server::IOPlaneContext* const, bool> >, std::less<kunlun::block_server::ioplanecontext *>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::lower_bound() /usr/include/c++/4.8.2/bits/stl_tree.h:879
2 0x00000000006d7a75 std::map<kunlun::block_server::ioplanecontext *, bool, std::less<kunlun::block_server::IOPlaneContext*>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::lower_bound() /usr/include/c++/4.8.2/bits/stl_map.h:864
3 0x00000000006d6b27 std::map<kunlun::block_server::ioplanecontext *, bool, std::less<kunlun::block_server::IOPlaneContext*>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::operator[]() /usr/include/c++/4.8.2/bits/stl_map.h:461
4 0x00000000006d46f7 kunlun::block_server::BatchedIOCallBack() /mnt/logdir/xiaqichao/essd/ebs/block-server/batched_io.cc:127
5 0x00000000008222ed kunlun::dataclient::MultiCallback() /mnt/logdir/xiaqichao/essd/dbs/data-client/data_client.cc:448
6 0x0000000000820fda kunlun::dataclient::MajorCallback() /mnt/logdir/xiaqichao/essd/dbs/data-client/data_client.cc:222
7 0x000000000082f9fb kunlun::dataclient::SeqWriteCb() /mnt/logdir/xiaqichao/essd/dbs/data-client/data_client.cc:1762
8 0x0000000000931042 kunlun::ucx::UcxClient::CallDoneCallback() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.cc:1790
9 0x00000000008f5650 kunlun::ucx::UcxContext::ProgressIoMessage() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx.cc:437
10 0x00000000008f3c2a kunlun::ucx::UcxContext::Progress() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx.cc:254
11 0x000000000083d078 kunlun::ucx::UcxClient::CheckUnCompletedResponse() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.h:1255
12 0x000000000093cef1 kunlun::ucx::UcxClient::CheckValidMsg() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.h:1279
13 0x0000000000934927 kunlun::ucx::UcxClientTimeoutManager::CheckTimeout() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.cc:2185
14 0x0000000000935558 kunlun::ucx::UcxClientTimeoutPoller() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.cc:2250
15 0x00000000012673e9 spdk_thread_poll() /mnt/logdir/xiaqichao/essd/third-party/spdk/lib/thread/thread.c:574
16 0x000000000121cdf8 _spdk_reactor_run() /mnt/logdir/xiaqichao/essd/third-party/spdk/lib/event/reactor.c:341
17 0x00000000009f830f eal_thread_loop() ???:0
18 0x0000000000019a88 __asan_describe_address() ???:0
19 0x0000000000007ea5 start_thread() pthread_create.c:0
20 0x00000000000feb0d __clone() ???:0
=================================
ASAN:SIGSEGV
=================================================================
==29766== ERROR: AddressSanitizer: SEGV on unknown address 0x000000007446 (pc 0x0000006d7135 sp 0x7f405ed18cb0 bp 0x7f405ed18cc0 T8)
AddressSanitizer can not provide additional info.
#0 0x6d7134 (/home/essd/second-essd/block-server/bin/block-server+0x6d7134)
#1 0x6d8b87 (/home/essd/second-essd/block-server/bin/block-server+0x6d8b87)
#2 0x6d7a74 (/home/essd/second-essd/block-server/bin/block-server+0x6d7a74)
#3 0x6d6b26 (/home/essd/second-essd/block-server/bin/block-server+0x6d6b26)
#4 0x6d46f6 (/home/essd/second-essd/block-server/bin/block-server+0x6d46f6)
#5 0x8222ec (/home/essd/second-essd/block-server/bin/block-server+0x8222ec)
#6 0x820fd9 (/home/essd/second-essd/block-server/bin/block-server+0x820fd9)
#7 0x82f9fa (/home/essd/second-essd/block-server/bin/block-server+0x82f9fa)
#8 0x931041 (/home/essd/second-essd/block-server/bin/block-server+0x931041)
#9 0x8f564f (/home/essd/second-essd/block-server/bin/block-server+0x8f564f)
#10 0x8f3c29 (/home/essd/second-essd/block-server/bin/block-server+0x8f3c29)
#11 0x83d077 (/home/essd/second-essd/block-server/bin/block-server+0x83d077)
#12 0x93cef0 (/home/essd/second-essd/block-server/bin/block-server+0x93cef0)
#13 0x934926 (/home/essd/second-essd/block-server/bin/block-server+0x934926)
#14 0x935557 (/home/essd/second-essd/block-server/bin/block-server+0x935557)
#15 0x12673e8 (/home/essd/second-essd/block-server/bin/block-server+0x12673e8)
#16 0x121cdf7 (/home/essd/second-essd/block-server/bin/block-server+0x121cdf7)
#17 0x9f830e (/home/essd/second-essd/block-server/bin/block-server+0x9f830e)
#18 0x7f4080d1ea87 (/usr/lib64/libasan.so.0.0.0+0x19a87)
#19 0x7f407fcb2ea4 (/usr/lib64/libpthread-2.17.so+0x7ea4)
#20 0x7f407e6c8b0c (/usr/lib64/libc-2.17.so+0xfeb0c)
Thread T8 (reactor_3) created by T0 here:
#0 0x7f4080d0fc2a (/usr/lib64/libasan.so.0.0.0+0xac2a)
#1 0x9f32ca (/home/essd/second-essd/block-server/bin/block-server+0x9f32ca)
#2 0x99ae2f (/home/essd/second-essd/block-server/bin/block-server+0x99ae2f)
用工具分析出错位置
[root@q]$ cat get_clang_result.sh
#!/bin/sh
cat log/std.err |python asan_symbolize.py | c++filt
输出如下:
========start thread on core 5 for name:UcxServerMsgHandlerPolling succ
[qyyc01-test-ebs240006036:29766:1:29773] Caught signal 11 (Segmentation fault: address not mapped to object at address 0x30)
/usr/include/c++/4.8.2/bits/stl_tree.h: [ std::_Rb_tree<kunlun::block_server::ioplanecontext *, std::pair<kunlun::block_server::IOPlaneContext* const, bool>, std::_Select1st<std::pair <kunlun::block_server::IOPlaneContext* const, bool> >, std::less<kunlun::block_server::ioplanecontext *>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::_M_begin() ]
...
499
500 _Link_type
501 _M_begin()
==> 502 { return static_cast<_link_type>(this->_M_impl._M_header._M_parent); }
503
504 _Const_Link_type
505 _M_begin() const
==== backtrace (tid: 29773) ====
0 0x00000000006d7135 std::_Rb_tree<kunlun::block_server::ioplanecontext *, std::pair<kunlun::block_server::IOPlaneContext* const, bool>, std::_Select1st<std::pair <kunlun::block_server::IOPlaneContext* const, bool> >, std::less<kunlun::block_server::ioplanecontext *>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::_M_begin() /usr/include/c++/4.8.2/bits/stl_tree.h:502
1 0x00000000006d8b88 std::_Rb_tree<kunlun::block_server::ioplanecontext *, std::pair<kunlun::block_server::IOPlaneContext* const, bool>, std::_Select1st<std::pair <kunlun::block_server::IOPlaneContext* const, bool> >, std::less<kunlun::block_server::ioplanecontext *>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::lower_bound() /usr/include/c++/4.8.2/bits/stl_tree.h:879
2 0x00000000006d7a75 std::map<kunlun::block_server::ioplanecontext *, bool, std::less<kunlun::block_server::IOPlaneContext*>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::lower_bound() /usr/include/c++/4.8.2/bits/stl_map.h:864
3 0x00000000006d6b27 std::map<kunlun::block_server::ioplanecontext *, bool, std::less<kunlun::block_server::IOPlaneContext*>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::operator[]() /usr/include/c++/4.8.2/bits/stl_map.h:461
4 0x00000000006d46f7 kunlun::block_server::BatchedIOCallBack() /mnt/logdir/xiaqichao/essd/ebs/block-server/batched_io.cc:127
5 0x00000000008222ed kunlun::dataclient::MultiCallback() /mnt/logdir/xiaqichao/essd/dbs/data-client/data_client.cc:448
6 0x0000000000820fda kunlun::dataclient::MajorCallback() /mnt/logdir/xiaqichao/essd/dbs/data-client/data_client.cc:222
7 0x000000000082f9fb kunlun::dataclient::SeqWriteCb() /mnt/logdir/xiaqichao/essd/dbs/data-client/data_client.cc:1762
8 0x0000000000931042 kunlun::ucx::UcxClient::CallDoneCallback() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.cc:1790
9 0x00000000008f5650 kunlun::ucx::UcxContext::ProgressIoMessage() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx.cc:437
10 0x00000000008f3c2a kunlun::ucx::UcxContext::Progress() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx.cc:254
11 0x000000000083d078 kunlun::ucx::UcxClient::CheckUnCompletedResponse() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.h:1255
12 0x000000000093cef1 kunlun::ucx::UcxClient::CheckValidMsg() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.h:1279
13 0x0000000000934927 kunlun::ucx::UcxClientTimeoutManager::CheckTimeout() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.cc:2185
14 0x0000000000935558 kunlun::ucx::UcxClientTimeoutPoller() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.cc:2250
15 0x00000000012673e9 spdk_thread_poll() /mnt/logdir/xiaqichao/essd/third-party/spdk/lib/thread/thread.c:574
16 0x000000000121cdf8 _spdk_reactor_run() /mnt/logdir/xiaqichao/essd/third-party/spdk/lib/event/reactor.c:341
17 0x00000000009f830f eal_thread_loop() ???:0
18 0x0000000000019a88 __asan_describe_address() ???:0
19 0x0000000000007ea5 start_thread() pthread_create.c:0
20 0x00000000000feb0d __clone() ???:0
=================================
ASAN:SIGSEGV
=================================================================
==29766== ERROR: AddressSanitizer: SEGV on unknown address 0x000000007446 (pc 0x0000006d7135 sp 0x7f405ed18cb0 bp 0x7f405ed18cc0 T8)
AddressSanitizer can not provide additional info.
#0 0x6d7134 in std::_Rb_tree<kunlun::block_server::ioplanecontext *, std::pair<kunlun::block_server::IOPlaneContext* const, bool>, std::_Select1st<std::pair <kunlun::block_server::IOPlaneContext* const, bool> >, std::less<kunlun::block_server::ioplanecontext *>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::_M_begin() /usr/include/c++/4.8.2/bits/stl_tree.h:502
#1 0x6d8b87 in std::_Rb_tree<kunlun::block_server::ioplanecontext *, std::pair<kunlun::block_server::IOPlaneContext* const, bool>, std::_Select1st<std::pair <kunlun::block_server::IOPlaneContext* const, bool> >, std::less<kunlun::block_server::ioplanecontext *>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::lower_bound(kunlun::block_server::IOPlaneContext* const&) /usr/include/c++/4.8.2/bits/stl_tree.h:879
#2 0x6d7a74 in std::map<kunlun::block_server::ioplanecontext *, bool, std::less<kunlun::block_server::IOPlaneContext*>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::lower_bound(kunlun::block_server::IOPlaneContext* const&) /usr/include/c++/4.8.2/bits/stl_map.h:864
#3 0x6d6b26 in std::map<kunlun::block_server::ioplanecontext *, bool, std::less<kunlun::block_server::IOPlaneContext*>, std::allocator<std::pair <kunlun::block_server::IOPlaneContext* const, bool> > >::operator[](kunlun::block_server::IOPlaneContext* const&) /usr/include/c++/4.8.2/bits/stl_map.h:461
#4 0x6d46f6 in kunlun::block_server::BatchedIOCallBack(void*, int) /mnt/logdir/xiaqichao/essd/ebs/block-server/batched_io.cc:127
#5 0x8222ec in kunlun::dataclient::MultiCallback(kunlun::dataclient::DistributeIOContext*, int, bool) /mnt/logdir/xiaqichao/essd/dbs/data-client/data_client.cc:448
#6 0x820fd9 in kunlun::dataclient::MajorCallback(kunlun::dataclient::DistributeIOContext*, int, int, kunlun::dataclient::Block*) /mnt/logdir/xiaqichao/essd/dbs/data-client/data_client.cc:222
#7 0x82f9fa in kunlun::dataclient::SeqWriteCb(void*, void*, unsigned int, void*) /mnt/logdir/xiaqichao/essd/dbs/data-client/data_client.cc:1762
#8 0x931041 in kunlun::ucx::UcxClient::CallDoneCallback(void*) /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.cc:1790 (discriminator 1)
#9 0x8f564f in kunlun::ucx::UcxContext::ProgressIoMessage() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx.cc:437
#10 0x8f3c29 in kunlun::ucx::UcxContext::Progress() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx.cc:254
#11 0x83d077 in kunlun::ucx::UcxClient::CheckUnCompletedResponse() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.h:1255 (discriminator 2)
#12 0x93cef0 in kunlun::ucx::UcxClient::CheckValidMsg() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.h:1279
#13 0x934926 in kunlun::ucx::UcxClientTimeoutManager::CheckTimeout() /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.cc:2185
#14 0x935557 in kunlun::ucx::UcxClientTimeoutPoller(void*) /mnt/logdir/xiaqichao/essd/libs/data-stream/ucx_server_client.cc:2250
#15 0x12673e8 in spdk_thread_poll /mnt/logdir/xiaqichao/essd/third-party/spdk/lib/thread/thread.c:574
#16 0x121cdf7 in _spdk_reactor_run /mnt/logdir/xiaqichao/essd/third-party/spdk/lib/event/reactor.c:341 (discriminator 2)
#17 0x9f830e in eal_thread_loop ??:?
#18 0x7f4080d1ea87 in __asan_describe_address ??:?
#19 0x7f407fcb2ea4 in start_thread pthread_create.c:?
#20 0x7f407e6c8b0c in __clone ??:?
Thread T8 (reactor_3) created by T0 here:
#0 0x7f4080d0fc2a in __interceptor_pthread_create ??:?
#1 0x9f32ca in rte_eal_init ??:?
#2 0x99ae2f in spdk_env_init /mnt/logdir/xiaqichao/essd/third-party/spdk/lib/env_dpdk/init.c:549
参考
https://zhuanlan.zhihu.com/p/338158556