Segmentation error with __tcf_0 at program exit

Question

when the program exits, information is provided:

*** glibc detected *** double free or corruption (!prev): 0x09a8fcb8 *** 

One object seems to have double freedom. Then I used gdb to debug the coredump file. Below is the result of bt (no more tracks sent):

 #0 0x005197a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2 #1 0x0055a825 in raise () from /lib/tls/libc.so.6 #2 0x0055c289 in abort () from /lib/tls/libc.so.6 #3 0x0058ecda in __libc_message () from /lib/tls/libc.so.6 #4 0x0059556f in _int_free () from /lib/tls/libc.so.6 #5 0x0059594a in free () from /lib/tls/libc.so.6 #6 0x00c0f001 in operator delete (ptr=0x0) at ../../../../gcc-4.2.2/libstdc++-v3/libsupc++/del_op.cc:49 #7 0x00bea48d in std::string::_Rep::_M_destroy (this=0x9a8fcb8, __a=@0xbfe134af ) at /home/robert_bu/src/build_gcc-4.2.2/i686-pc-linux-gnu/libstdc++-v3/include/ext/new_allocator.h:97 #8 0x070807e8 in __tcf_0 () from ./../bin/../lib/librlxvm_kmmpv_ocp_tl2.so #9 0x0055d5a7 in exit () from /lib/tls/libc.so.6 ... 

---

Then the result of valgrind shows that the line is deleted by two different .so files (libkmm.so.2.0.0 and libpv.so.2.0.0). Detailed information (some lines are masked):

 ==28125== Invalid free() / delete / delete[] ==28125== at 0x400588F: operator delete(void*) (vg_replace_malloc.c:387) ==28125== by 0x446548C: std::string::_Rep::_M_destroy(std::allocator<char> const&) (new_allocator.h:97) ==28125== by 0x55FA7E7: __tcf_0 (in /home/alan_tao/vm/test/lib/libkmm.so.2.0.0) ==28125== by 0x55D5A6: exit (in /lib/tls/libc-2.3.4.so) ==28125== by 0x42B10D9: stop_sim() (in /home/alan_tao/vm/test/lib/libcomm.so.2.0.0) ==28125== by 0x807C83A: func_on_exit(int) (in /home/alan_tao/vm/test/bin/engine) ==28125== by 0x55A917: ??? (in /lib/tls/libc-2.3.4.so) ... ==28125== Address 0x4a484d0 is 0 bytes inside a block of size 525 free'd ==28125== at 0x400588F: operator delete(void*) (vg_replace_malloc.c:387) ==28125== by 0x446548C: std::string::_Rep::_M_destroy(std::allocator<char> const&) new_allocator.h:97) ==28125== by 0x650C0B7: __tcf_0 (in /home/alan_tao/vm/test/lib/libpv.so.2.0.0) ==28125== by 0x55D5A6: exit (in /lib/tls/libc-2.3.4.so) ==28125== by 0x42B10D9: stop_sim() (in /home/alan_tao/vm/test/lib/libcomm.so.2.0.0) ==28125== by 0x807C83A: func_on_exit(int) (in /home/alan_tao/vm/test/bin/engine) ==28125== by 0x55A917: ??? (in /lib/tls/libc-2.3.4.so) 

...

---

The result of valgrind shows that one row is deleted twice. But I can not know the correct static. Who has the idea of ​​knowing which line is causing the error and how to fix it? Thanks

PS: the program works under Linux 2.6.9. Gcc version is 4.2.2. dll.

New update: Using gdb to display the error lib file, the command "l __tcf_0" shows me the following code:

 inline std::vector<const char*>& get_phase_name_vec(){ static std::vector<const char*> phase_name_vec(END_RESP+1, (const char*)NULL); return phase_name_vec; } 

This is from the OSCI TLM header file. And the above libraries should include them. It is located in the split "tlm" namespace. Any idea to fix this error?

Answer 1

The problem is resolved. There is a clash of global variable names in the libkmm.so.2.0.0 and tlm header files.

It seems that "l __tcf_0" does not display the right variable. Thanks to Alex, maverik, Julian Şerbănoiu and others reading this question.