File: gh-4627-session-use-after-free.result

package info (click to toggle)
tarantool 2.6.0-1.4
  • links: PTS, VCS
  • area: main
  • in suites: sid, trixie
  • size: 85,412 kB
  • sloc: ansic: 513,775; cpp: 69,493; sh: 25,650; python: 19,190; perl: 14,973; makefile: 4,178; yacc: 1,329; sql: 1,074; pascal: 620; ruby: 190; awk: 18; lisp: 7
file content (85 lines) | stat: -rw-r--r-- 2,157 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
-- test-run result file version 2
--
-- gh-4627: binary session disconnect trigger yield could lead to
-- use after free of the session object. That happened because
-- iproto thread sent two requests to TX thread at disconnect:
--
--     - Close the session and run its on disconnect triggers;
--
--     - If all requests are handled, destroy the session.
--
-- When a connection is idle, all requests are handled, so both
-- these requests are sent. If the first one yielded in TX thread,
-- the second one arrived and destroyed the session right under
-- the feet of the first one.
--
net_box = require('net.box')
 | ---
 | ...
fiber = require('fiber')
 | ---
 | ...

box.schema.user.grant('guest', 'execute', 'universe')
 | ---
 | ...

-- This is a workaround for flakiness of the test
-- appearing when test-run does reconnects to the
-- instance and therefore creates multiple
-- sessions. By setting a flag for only one
-- session, others won't interfere in
-- session.on_disconnect().
function enable_on_disconnect()                 \
    box.session.storage.is_enabled = true       \
end
 | ---
 | ...

sid_before_yield = nil
 | ---
 | ...
sid_after_yield = nil
 | ---
 | ...
func = box.session.on_disconnect(function()     \
    if not box.session.storage.is_enabled then  \
        return                                  \
    end                                         \
    sid_before_yield = box.session.id()         \
    fiber.yield()                               \
    sid_after_yield = box.session.id()          \
end)
 | ---
 | ...

connection = net_box.connect(box.cfg.listen)
 | ---
 | ...
-- Connections, not related to this one, won't
-- call this function, and therefore won't do
-- anything in session.on_disconnect() trigger.
connection:call('enable_on_disconnect')
 | ---
 | ...
connection:close()
 | ---
 | ...

while not sid_after_yield do fiber.yield() end
 | ---
 | ...

sid_after_yield == sid_before_yield and sid_after_yield ~= 0 or \
    {sid_after_yield, sid_before_yield}
 | ---
 | - true
 | ...

box.session.on_disconnect(nil, func)
 | ---
 | ...

box.schema.user.revoke('guest', 'execute', 'universe')
 | ---
 | ...