[chrony-users] Chrony-1.24 Crash

[Walther Maldonado <walther.md@xxxxxxxxx>]

Greetings,

Apparently there's an error in sched.c, SCH_AddTimeoutInClass. The end of the linked list is not when timer_queue.next == timer_queue, but when timer_queue.next == null.

gdb output:

Program received signal SIGSEGV, Segmentation fault.
SCH_AddTimeoutInClass (min_delay=128, separation=2, class=1, 
    handler=0x804d372 <transmit_timeout>, arg=0x806c2b0) at sched.c:355
355	sched.c: Aucun fichier ou dossier de ce type.
	in sched.c
(gdb) p ptr
$1 = (TimerQueueEntry *) 0x0
(gdb) p timer_queue
$2 = {next = 0x806aa68, prev = 0x806aa28, tv = {tv_sec = 0, tv_usec = 0}, 
  id = 0, class = 0, handler = 0, arg = 0x0}
(gdb) p timer_queue.next
$3 = (struct _TimerQueueEntry *) 0x806aa68
(gdb) p timer_queue
$4 = {next = 0x806aa68, prev = 0x806aa28, tv = {tv_sec = 0, tv_usec = 0}, 
  id = 0, class = 0, handler = 0, arg = 0x0}
(gdb) p timer_queue.next
$5 = (struct _TimerQueueEntry *) 0x806aa68
(gdb) p timer_queue.next.next
$6 = (struct _TimerQueueEntry *) 0x806aa08
(gdb) p timer_queue.next.next.next
.....
(gdb) p timer_queue
$27 = {next = 0x806aa68, prev = 0x806aa28, tv = {tv_sec = 0, tv_usec = 0}, 
  id = 0, class = 0, handler = 0, arg = 0x0}
(gdb) p &timer_queue
$28 = (TimerQueueEntry *) 0x80646f8
(gdb) p timer_queue.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next
$29 = (struct _TimerQueueEntry *) 0x806a768
.....
(gdb) p timer_queue.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next.next
$35 = (struct _TimerQueueEntry *) 0x0

Cheers,
~Walther

---
To unsubscribe email chrony-users-request@xxxxxxxxxxxxxxxxxxxx 
with "unsubscribe" in the subject.
For help email chrony-users-request@xxxxxxxxxxxxxxxxxxxx 
with "help" in the subject.
Trouble?  Email listmaster@xxxxxxxxxxxxxxxxxxxx.