crash during thread exit when using thread local storage

[Mike Gulick]

An application we develop crashes on exit with:
*** Error in `foo': free(): invalid pointer: 0x0000000009309bc0 ***

This issue occurs when there are a large number of threads running which use thread local storage. We have identified the issue as an existing upstream glibc bug, #13862. This bug was fixed in glibc-2.21. See https://sourceware.org/bugzilla/show_bug.cgi?id=13862. The upstream bug report has a reproducer which reliably reproduces the problem.

I have reported this bug to Debian (#854007), and provided a backported patch for the glibc-2.19 package included in Debian-8 (0001-Resize-DTV-if-the-current-DTV-isn-t-big-enough.patch). I have not tested whether this patch resolves this issue in eglibc-2.19 in Ubuntu 14.04, however the reproducer in the original glibc bug report does reliably reproduce the problem on Ubuntu 14.04.5 with the latest glibc6 package installed.

The Debian bug report can be found at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854007

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: libc6 2.19-0ubuntu6.11
ProcVersionSignature: Ubuntu 3.13.0-119.166-generic 3.13.11-ckt39
Uname: Linux 3.13.0-119-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.14.1-0ubuntu3.24
Architecture: amd64
Date: Thu Jun 1 15:43:48 2017
Dependencies:
 gcc-5-base 5.3.0-3ubuntu1~14.04 [origin: unknown]
 libc6 2.19-0ubuntu6.11
 libgcc1 1:5.3.0-3ubuntu1~14.04 [origin: unknown]
 multiarch-support 2.19-0ubuntu6.11
InstallationDate: Installed on 2015-04-09 (784 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Release amd64 (20140417)
SourcePackage: eglibc
UpgradeStatus: No upgrade log present (probably fresh install)

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "glibc BZ#13862 backport to eglib-2.19-0ubuntu6.13" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]