[iKonsta]

Hi. I have some crash on the server. Crashdetect debugging refers to the address 0807FEF7. I reversed the file and found out that code is being executed:

Code:

text:0807FEEF
.text:0807FEEF loc_807FEEF: ; CODE XREF: sub_807F840+534↑j
.text:0807FEEF mov [esp], eax ; void *
.text:0807FEF2 call __ZdaPv ; operator delete[](void *)
.text:0807FEF7 mov ebx, [ebp+var_14]
.text:0807FEFA jmp loc_807FD7A

Also, i have find in raknet code. Crash causes by deleting nullptr in packet data

Code:

ReliabilityLayer::GenerateDatagram
if ( internalPacket->nextActionTime == 0 )
{
resendQueue.Pop();
delete [] internalPacket->data; //Here is crash
internalPacketPool.ReleasePointer( internalPacket );
continue;
}

Sorry my bad English.

[iKonsta]

full crash log

[21:47:24] [debug] #0 f739d180 in _Z13GetStackTraceRSt6vectorI10StackFrameSaIS0_EEPv () from plugins/crashdetect.so
[21:47:24] [debug] #1 f7395064 in _ZN11CrashDetect20PrintNativeBacktraceERSoRKN2os7C ontextE () from plugins/crashdetect.so
[21:47:24] [debug] #2 f7395d64 in _ZN11CrashDetect20PrintNativeBacktraceERKN2os7Cont extE () from plugins/crashdetect.so
[21:47:24] [debug] #3 f7397cdb in _ZN11CrashDetect7OnCrashERKN2os7ContextE () from plugins/crashdetect.so
[21:47:24] [debug] #4 f739c4d5 in ?? () from plugins/crashdetect.so
[21:47:24] [debug] #5 f76f7b20 in __kernel_rt_sigreturn () from linux-gate.so.1
[21:47:24] [debug] #6 f76f7af9 in __kernel_vsyscall () from linux-gate.so.1
[21:47:24] [debug] #7 f73f4367 in gsignal () from /lib/i386-linux-gnu/i686/cmov/libc.so.6
[21:47:24] [debug] #8 f73f5a23 in abort () from /lib/i386-linux-gnu/i686/cmov/libc.so.6
[21:47:24] [debug] #9 f7432778 in ?? () from /lib/i386-linux-gnu/i686/cmov/libc.so.6
[21:47:24] [debug] #10 f74387ea in ?? () from /lib/i386-linux-gnu/i686/cmov/libc.so.6
[21:47:24] [debug] #11 f743943d in ?? () from /lib/i386-linux-gnu/i686/cmov/libc.so.6
[21:47:24] [debug] #12 f761ee68 in _ZdlPv () from /usr/lib32/libstdc++.so.6
[21:47:24] [debug] #13 f761eea8 in _ZdaPv () from /usr/lib32/libstdc++.so.6
[21:47:24] [debug] #14 0807fef7 in ?? () from ./samp02svr
[21:47:24] [debug] #15 0808013d in ?? () from ./samp02svr
[21:47:24] [debug] #16 08074c3a in ?? () from ./samp02svr
[21:47:24] [debug] #17 080763fe in ?? () from ./samp02svr
[21:47:24] [debug] #18 f76cfecb in ?? () from /lib/i386-linux-gnu/i686/cmov/libpthread.so.0
[21:47:24] [debug] #19 f74b1d0e in clone () from /lib/i386-linux-gnu/i686/cmov/libc.so.6
[21:47:24] [debug] Registers:
[21:47:24] [debug] EAX: 00000000 EBX: 000026dc ECX: 000026df EDX: 00000006
[21:47:24] [debug] ESI: fffffffb EDI: f756f000 EBP: f67b5d18 ESP: f67b5a54
[21:47:24] [debug] EIP: f76f7af9 EFLAGS: 00000202
[21:47:24] [debug] Stack:
[21:47:24] [debug] ESP+00000000: f67b5d18 00000006 000026df f73f4367
[21:47:24] [debug] ESP+00000020: f67b5a84 00000000 00000000 00000000
[21:47:24] [debug] ESP+00000040: 00000000 00000000 00000000 00000000
[21:47:24] [debug] ESP+00000060: 00000000 00000000 00000000 00000000
[21:47:24] [debug] ESP+00000080: 00000000 00000000 00000000 00000000
[21:47:24] [debug] ESP+000000a0: 00000000 00000000 00000000 00000000
[21:47:24] [debug] ESP+000000c0: f3100040 00000068 00000080 00000007
[21:47:24] [debug] ESP+000000e0: 00000005 f67b5b98 f743bbb1 00000000
[21:47:24] [debug] ESP+00000100: f76c0000 00000005 f7621044 00000005
[21:47:24] [debug] ESP+00000120: f76c0000 00000000 00000000 00000003
[21:47:24] [debug] ESP+00000140: f756f000 00000007 f7432778 00000002
[21:47:24] [debug] ESP+00000160: 00000000 f1bd1850 00000000 f752a9bc
[21:47:24] [debug] ESP+00000180: 00000003 f752ab80 00000023 f752a9d1
[21:47:24] [debug] ESP+000001a0: 00000005 00000013 09d7db00 00000139
[21:47:24] [debug] ESP+000001c0: 00000005 f67b5c30 0808caf5 3ca66353
[21:47:24] [debug] ESP+000001e0: 00000008 f67b5c50 f67b5ca0 f67b5ef8
[21:47:24] [debug] ESP+00000200: 00000004 f67b5c70 00000000 f67b5c90
[21:47:24] [debug] ESP+00000220: 00000023 f67b5c90 00000010 3ca66353
[21:47:24] [debug] ESP+00000240: 00000003 f67b5cb0 00000000 688408a2
[21:47:24] [debug] ESP+00000260: 0000000b f67b5cd0 f67b5d48 00000902
[21:47:24] [debug] ESP+00000280: 0000000e 00000000 f743bbb1 00000045
[21:47:24] [debug] ESP+000002a0: fffffffb 00000050 00000007 00000037
[21:47:24] [debug] ESP+000002c0: ff821e84 f67b5e98 f74387ea 00000001
[21:47:24] [debug] ESP+000002e0: 00000000 000003e8 f752ab80 f5a2200c
[21:47:24] [debug] ESP+00000300: 1bcf7c98 00000002 f743943d 1bcf7c98
[21:47:24] [debug] ESP+00000320: f5a53b13 f67b5dc8 0804d493 00000000
[21:47:24] [debug] ESP+00000340: f74f82ef 00000008 0804d6de 0839c699
[21:47:24] [debug] ESP+00000360: 00000001 01000001 f76c0000 f5a53a59
[21:47:24] [debug] ESP+00000380: 1bcf7c98 00000001 00000001 00000000
[21:47:24] [debug] ESP+000003a0: f5a50008 06035e08 f5a53b13 f5a53a59
[21:47:24] [debug] ESP+000003c0: f5a53b13 efd38690 00000000 f67b5e30
[21:47:24] [debug] ESP+000003e0: c8831a5e 00000020 f76c0000 f5ad280a
[21:47:24] [debug] Loaded modules:
[21:47:24] [debug] 00000000 - 00187f43 samp02svr
[21:47:24] [debug] f76f7000 - f76f7c5a linux-gate.so.1
[21:47:24] [debug] f76e5000 - f76e781b /lib/i386-linux-gnu/i686/cmov/libdl.so.2
[21:47:24] [debug] f76c9000 - f76e3d2b /lib/i386-linux-gnu/i686/cmov/libpthread.so.0
[21:47:24] [debug] f75d6000 - f76cfce6 /usr/lib32/libstdc++.so.6
[21:47:24] [debug] f7590000 - f75d4b43 /lib/i386-linux-gnu/i686/cmov/libm.so.6
[21:47:24] [debug] f7573000 - f758f3c4 /lib/i386-linux-gnu/libgcc_s.so.1
[21:47:24] [debug] f73c6000 - f757b22f /lib/i386-linux-gnu/i686/cmov/libc.so.6
[21:47:24] [debug] f76f8000 - f7718d6c /lib/ld-linux.so.2
[21:47:24] [debug] f737f000 - f73c1ac4 plugins/crashdetect.so
[21:47:24] [debug] f6fee000 - f7383eb2 plugins/mysql.so
[21:47:24] [debug] f6fca000 - f6fedd32 /root/samp02/plugins/../log-core.so
[21:47:24] [debug] f6fb8000 - f6fbf09f /lib/i386-linux-gnu/i686/cmov/librt.so.1
[21:47:24] [debug] f5fa9000 - f5fb43ef /lib/i386-linux-gnu/i686/cmov/libnss_files.so.2
[21:47:24] [debug] f5d2a000 - f5e007f0 plugins/streamer.so
[21:47:24] [debug] f5f99000 - f5fa81d4 plugins/sscanf.so
[21:47:24] [debug] f76ed000 - f76f0654 plugins/TOTP.so
[21:47:24] [debug] f6fc4000 - f6fc8fd2 plugins/ERP_AC.so
[21:47:24] [debug] f5f58000 - f5f5c97b /lib/i386-linux-gnu/i686/cmov/libnss_dns.so.2
[21:47:24] [debug] f5f40000 - f5f582fb /lib/i386-linux-gnu/i686/cmov/libresolv.so.2

[Belengher]

And me...
i have this problem.

[iKonsta]

Found out the problem. It occurs in case the library i386 is broken.

[Romz]

good