Valgrind：大小为 4 的无效读取，超出范围的段错误

【问题标题】：Valgrind: Invalid read of size 4, out-of-bound segfault errorValgrind：大小为 4 的无效读取，超出范围的段错误
【发布时间】：2014-05-12 12:40:52
【问题描述】：

我的多线程项目中出现段错误。 这个项目是一个必须连续运行的循环程序，它被设计为具有依次由一个或多个操作组成的任务。

运行 Valgrind 我收到内存泄漏和越界（大小为 4 的无效读取）警告。

Valgrind 日志：

==30039== Memcheck, a memory error detector
==30039== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==30039== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==30039== Command: ./sisCAT
==30039== 
DebugLog: ++++++++++++++ Inicio de Execucao ++++++++++++++++++++++ 
DebugLog: iniciando ciclo do controller

DebugLog: 3 
==30039== Invalid read of size 4
==30039==    at 0x8081714: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:52)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039==    by 0x807F78C: SISCAT::Controller::Run() (Controller.h:57)
==30039==    by 0x807F71D: SISCAT::SisCAT::run() (SisCAT.cpp:27)
==30039==    by 0x804C8F8: main (boia.cpp:73)
==30039==  Address 0x7355274 is 20 bytes inside a block of size 24 free'd
==30039==    at 0x48D1CFC: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==30039==    by 0x807D1B2: __gnu_cxx::new_allocator<std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> > >::deallocate(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*, unsigned int) (new_allocator.h:98)
==30039==    by 0x807C3B9: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_put_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:373)
==30039==    by 0x807B08B: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_destroy_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:395)
==30039==    by 0x807A17F: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_erase(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:1076)
==30039==    by 0x8079564: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~_Rb_tree() (in /home/lioc/Siscat/sisCAT/Debug/sisCAT)
==30039==    by 0x8078FD6: std::map<std::string, SISCAT::Task*, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~map() (stl_map.h:88)
==30039==    by 0x80816D0: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:40)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039== 
==30039== Invalid read of size 4
==30039==    at 0x4984BE5: std::_Rb_tree_increment(std::_Rb_tree_node_base*) (in /usr/lib/i386-linux-gnu/libstdc++.so.6.0.16)
==30039==    by 0x80817A9: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:63)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039==    by 0x807F78C: SISCAT::Controller::Run() (Controller.h:57)
==30039==    by 0x807F71D: SISCAT::SisCAT::run() (SisCAT.cpp:27)
==30039==    by 0x804C8F8: main (boia.cpp:73)
==30039==  Address 0x735526c is 12 bytes inside a block of size 24 free'd
==30039==    at 0x48D1CFC: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==30039==    by 0x807D1B2: __gnu_cxx::new_allocator<std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> > >::deallocate(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*, unsigned int) (new_allocator.h:98)
==30039==    by 0x807C3B9: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_put_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:373)
==30039==    by 0x807B08B: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_destroy_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:395)
==30039==    by 0x807A17F: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_erase(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:1076)
==30039==    by 0x8079564: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~_Rb_tree() (in /home/lioc/Siscat/sisCAT/Debug/sisCAT)
==30039==    by 0x8078FD6: std::map<std::string, SISCAT::Task*, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~map() (stl_map.h:88)
==30039==    by 0x80816D0: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:40)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039== 
==30039== Invalid read of size 4
==30039==    at 0x4984BFB: std::_Rb_tree_increment(std::_Rb_tree_node_base*) (in /usr/lib/i386-linux-gnu/libstdc++.so.6.0.16)
==30039==    by 0x80817A9: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:63)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039==    by 0x807F78C: SISCAT::Controller::Run() (Controller.h:57)
==30039==    by 0x807F71D: SISCAT::SisCAT::run() (SisCAT.cpp:27)
==30039==    by 0x804C8F8: main (boia.cpp:73)
==30039==  Address 0x7355264 is 4 bytes inside a block of size 24 free'd
==30039==    at 0x48D1CFC: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==30039==    by 0x807D1B2: __gnu_cxx::new_allocator<std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> > >::deallocate(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*, unsigned int) (new_allocator.h:98)
==30039==    by 0x807C3B9: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_put_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:373)
==30039==    by 0x807B08B: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_destroy_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:395)
==30039==    by 0x807A17F: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_erase(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:1076)
==30039==    by 0x8079564: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~_Rb_tree() (in /home/lioc/Siscat/sisCAT/Debug/sisCAT)
==30039==    by 0x8078FD6: std::map<std::string, SISCAT::Task*, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~map() (stl_map.h:88)
==30039==    by 0x80816D0: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:40)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039== 
==30039== Invalid read of size 4
==30039==    at 0x4984C00: std::_Rb_tree_increment(std::_Rb_tree_node_base*) (in /usr/lib/i386-linux-gnu/libstdc++.so.6.0.16)
==30039==    by 0x80817A9: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:63)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039==    by 0x807F78C: SISCAT::Controller::Run() (Controller.h:57)
==30039==    by 0x807F71D: SISCAT::SisCAT::run() (SisCAT.cpp:27)
==30039==    by 0x804C8F8: main (boia.cpp:73)
==30039==  Address 0x73551dc is 12 bytes inside a block of size 24 free'd
==30039==    at 0x48D1CFC: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==30039==    by 0x807D1B2: __gnu_cxx::new_allocator<std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> > >::deallocate(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*, unsigned int) (new_allocator.h:98)
==30039==    by 0x807C3B9: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_put_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:373)
==30039==    by 0x807B08B: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_destroy_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:395)
==30039==    by 0x807A17F: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_erase(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:1076)
==30039==    by 0x8079564: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~_Rb_tree() (in /home/lioc/Siscat/sisCAT/Debug/sisCAT)
==30039==    by 0x8078FD6: std::map<std::string, SISCAT::Task*, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~map() (stl_map.h:88)
==30039==    by 0x80816D0: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:40)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039== 
==30039== Invalid read of size 4
==30039==    at 0x4984BF2: std::_Rb_tree_increment(std::_Rb_tree_node_base*) (in /usr/lib/i386-linux-gnu/libstdc++.so.6.0.16)
==30039==    by 0x80817A9: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:63)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039==    by 0x807F78C: SISCAT::Controller::Run() (Controller.h:57)
==30039==    by 0x807F71D: SISCAT::SisCAT::run() (SisCAT.cpp:27)
==30039==    by 0x804C8F8: main (boia.cpp:73)
==30039==  Address 0x7355220 is 8 bytes inside a block of size 24 free'd
==30039==    at 0x48D1CFC: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==30039==    by 0x807D1B2: __gnu_cxx::new_allocator<std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> > >::deallocate(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*, unsigned int) (new_allocator.h:98)
==30039==    by 0x807C3B9: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_put_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:373)
==30039==    by 0x807B08B: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_destroy_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:395)
==30039==    by 0x807A17F: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_erase(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:1076)
==30039==    by 0x807A15F: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_erase(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:1074)
==30039==    by 0x8079564: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~_Rb_tree() (in /home/lioc/Siscat/sisCAT/Debug/sisCAT)
==30039==    by 0x8078FD6: std::map<std::string, SISCAT::Task*, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~map() (stl_map.h:88)
==30039==    by 0x80816D0: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:40)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039== 
==30039== Invalid read of size 4
==30039==    at 0x4984C12: std::_Rb_tree_increment(std::_Rb_tree_node_base*) (in /usr/lib/i386-linux-gnu/libstdc++.so.6.0.16)
==30039==    by 0x80817A9: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:63)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039==    by 0x807F78C: SISCAT::Controller::Run() (Controller.h:57)
==30039==    by 0x807F71D: SISCAT::SisCAT::run() (SisCAT.cpp:27)
==30039==    by 0x804C8F8: main (boia.cpp:73)
==30039==  Address 0x73551d4 is 4 bytes inside a block of size 24 free'd
==30039==    at 0x48D1CFC: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==30039==    by 0x807D1B2: __gnu_cxx::new_allocator<std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> > >::deallocate(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*, unsigned int) (new_allocator.h:98)
==30039==    by 0x807C3B9: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_put_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:373)
==30039==    by 0x807B08B: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_destroy_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:395)
==30039==    by 0x807A17F: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_erase(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:1076)
==30039==    by 0x8079564: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~_Rb_tree() (in /home/lioc/Siscat/sisCAT/Debug/sisCAT)
==30039==    by 0x8078FD6: std::map<std::string, SISCAT::Task*, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~map() (stl_map.h:88)
==30039==    by 0x80816D0: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:40)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039== 
==30039== Invalid read of size 4
==30039==    at 0x4984C1A: std::_Rb_tree_increment(std::_Rb_tree_node_base*) (in /usr/lib/i386-linux-gnu/libstdc++.so.6.0.16)
==30039==    by 0x80817A9: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:63)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039==    by 0x807F78C: SISCAT::Controller::Run() (Controller.h:57)
==30039==    by 0x807F71D: SISCAT::SisCAT::run() (SisCAT.cpp:27)
==30039==    by 0x804C8F8: main (boia.cpp:73)
==30039==  Address 0x73551dc is 12 bytes inside a block of size 24 free'd
==30039==    at 0x48D1CFC: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==30039==    by 0x807D1B2: __gnu_cxx::new_allocator<std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> > >::deallocate(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*, unsigned int) (new_allocator.h:98)
==30039==    by 0x807C3B9: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_put_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:373)
==30039==    by 0x807B08B: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_destroy_node(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:395)
==30039==    by 0x807A17F: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::_M_erase(std::_Rb_tree_node<std::pair<std::string const, SISCAT::Task*> >*) (stl_tree.h:1076)
==30039==    by 0x8079564: std::_Rb_tree<std::string, std::pair<std::string const, SISCAT::Task*>, std::_Select1st<std::pair<std::string const, SISCAT::Task*> >, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~_Rb_tree() (in /home/lioc/Siscat/sisCAT/Debug/sisCAT)
==30039==    by 0x8078FD6: std::map<std::string, SISCAT::Task*, std::less<std::string>, std::allocator<std::pair<std::string const, SISCAT::Task*> > >::~map() (stl_map.h:88)
==30039==    by 0x80816D0: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:40)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039== 
==30039== Use of uninitialised value of size 4
==30039==    at 0x8081E99: SISCAT::Task::GetTickExecution() (Task.h:121)
==30039==    by 0x808171E: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:52)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039==    by 0x807F78C: SISCAT::Controller::Run() (Controller.h:57)
==30039==    by 0x807F71D: SISCAT::SisCAT::run() (SisCAT.cpp:27)
==30039==    by 0x804C8F8: main (boia.cpp:73)
==30039== 
==30039== Invalid read of size 4
==30039==    at 0x8081E99: SISCAT::Task::GetTickExecution() (Task.h:121)
==30039==    by 0x808171E: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:52)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039==    by 0x807F78C: SISCAT::Controller::Run() (Controller.h:57)
==30039==    by 0x807F71D: SISCAT::SisCAT::run() (SisCAT.cpp:27)
==30039==    by 0x804C8F8: main (boia.cpp:73)
==30039==  Address 0x13 is not stack'd, malloc'd or (recently) free'd
==30039== 
==30039== Process terminating with default action of signal 11 (SIGSEGV)
==30039==  Access not within mapped region at address 0x13
==30039==    at 0x8081E99: SISCAT::Task::GetTickExecution() (Task.h:121)
==30039==    by 0x808171E: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:52)
==30039==    by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183)
==30039==    by 0x8078244: SISCAT::Controller::ClockCycle() (Controller.cpp:156)
==30039==    by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146)
==30039==    by 0x8077B54: SISCAT::Controller::Initialize() (Controller.cpp:129)
==30039==    by 0x807F78C: SISCAT::Controller::Run() (Controller.h:57)
==30039==    by 0x807F71D: SISCAT::SisCAT::run() (SisCAT.cpp:27)
==30039==    by 0x804C8F8: main (boia.cpp:73)
==30039==  If you believe this happened as a result of a stack
==30039==  overflow in your program's main thread (unlikely but
==30039==  possible), you can try to increase the size of the
==30039==  main thread stack using the --main-stacksize= flag.
==30039==  The main thread stack size used in this run was 8388608.
==30039== 
==30039== HEAP SUMMARY:
==30039==     in use at exit: 10,856 bytes in 183 blocks
==30039==   total heap usage: 237 allocs, 54 frees, 14,287 bytes allocated
==30039== 
==30039== LEAK SUMMARY:
==30039==    definitely lost: 4,164 bytes in 2 blocks
==30039==    indirectly lost: 53 bytes in 2 blocks
==30039==      possibly lost: 2,427 bytes in 93 blocks
==30039==    still reachable: 4,212 bytes in 86 blocks
==30039==         suppressed: 0 bytes in 0 blocks
==30039== Rerun with --leak-check=full to see details of leaked memory
==30039== 
==30039== For counts of detected and suppressed errors, rerun with: -v
==30039== Use --track-origins=yes to see where uninitialised values come from
==30039== ERROR SUMMARY: 15 errors from 9 contexts (suppressed: 0 from 0)
Segmentation fault

本报告涉及的部分函数和类如下所示：

RETURN::Return_t TaskCycle::GetTasksByTick(uint32_t tick,
        std::vector<Task*>& Tasks)
{
    Tasks.clear();
    if (GetTasks().empty())
        return RETURN::ERROR_UPDATING_TASK;
    Task* task;
    std::map<TaskID, Task*>::iterator iter = GetTasks().begin();
    while (iter != GetTasks().end())
    {
        if ( iter->second->GetTickExecution()== tick) **// Line: 52**
        {
            task = iter->second;
            if(task->CanExecute())
            {
            Tasks.push_back(task);
            }
        }
        iter++;                                       **// Line: 63**
    }
    return RETURN::OK;
}

uint32_t Task::GetTickExecution()
    {
        return m_tickExecution;
    }

这是Task Class的构造函数，其中TaskID是字符串类型：

Task(TaskID name, uint32_t m_tickOffSet, uint32_t m_tickInterval,
            uint32_t m_executionsPerCycle, TaskPriority::TaskPriority_t m_prio,
            std::map<OperationID, Operation*> m_registeredOperations) :
        m_name(name), m_tickOffSet(m_tickOffSet),
                m_tickInterval(m_tickInterval),
                m_executionsPerCycle(m_executionsPerCycle), m_prio(m_prio),
                m_registeredOperations(m_registeredOperations)

报错的方法只是一个Get方法，它返回一个unsigned int变量。

【问题讨论】：

  • 如果您怀疑可能是多线程造成的，请通过valgrind --tool=helgrind运行程序。您的程序有大量内存错误，每一个都构成未定义的行为，并且可能对所有其他行为负责。您必须消除它们中的每一个，最好按时间顺序。
  • @mic_e 运行 helgrind 工具：[code]进程以信号 11（SIGSEGV）的默认操作终止 ==30119== 访问不在地址 0x547C20AA 的映射区域内 ==30119== 在 0x8078F65：SISCAT ::Task::CanExecute() (Task.h:104) ==30119== by 0x8081774: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<:task std::allocator siscat::task> >&) (TaskCycle.cpp:58)...[代码]
  • 根据我的经验，valgrind 对于调试段错误不是很有用。应该定期使用它来检查程序是否仍然正常工作，但是一旦出现段错误，就应该改用 gdb。 @lfelipem：所以 helgrind 没有发现任何错误？嗯，这是一种解脱。

标签： c++ multithreading valgrind indexoutofboundsexception


【解决方案1】：

那么你的问题到底是什么？

如果您将文件名和行号与您的代码一起发布，这样人们可以将您的代码与 valgrind 输出中的行号相匹配，这将非常有帮助。

这个

==30039== Invalid read of size 4
==30039==    at 0x8081714: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:52)

可能意味着您正在访问第 52 行中的空指针或未初始化的指针，而这个

==30039== Invalid read of size 4
==30039==    at 0x4984BE5: std::_Rb_tree_increment(std::_Rb_tree_node_base*) (in /usr/lib/i386-linux-gnu/libstdc++.so.6.0.16)
==30039==    by 0x80817A9: SISCAT::TaskCycle::GetTasksByTick(unsigned int, std::vector<SISCAT::Task*, std::allocator<SISCAT::Task*> >&) (TaskCycle.cpp:63)

非常提示您将空指针传递给std::_Rb_tree_increment。但由于我们无法在 TaskCycle.cpp 中看到您的第 52 行和第 63 行，我们对此无能为力。

如果我是你，我会使用调试器，或者在 valgrind 报告的所有行号中添加类似 printf("xxx=%p\n", xxx) 的内容（将 xxx 替换为这些行上使用的所有指针），这样你就可以看到哪个那些似乎是错误的。

【讨论】：

  • 我用你提到的行编辑了代码，我无法对所有行进行编号。
  • 当我尝试打印指针时：==30250== 条件跳转或移动取决于未初始化的值 ==30250== 在 0x6FEBC70：vfprintf (vfprintf.c:1629) == 30250== by 0x6FF2EFE: printf (printf.c:35) ==30250== by 0x80783B3: SISCAT::Controller::ExecuteCycle() (Controller.cpp:183) ==30250== by 0x8078244: SISCAT::Controller ::ClockCycle() (Controller.cpp:156) ==30250== by 0x80781D5: SISCAT::Controller::StartClock() (Controller.cpp:146) ==30250== by 0x8077B54: SISCAT::Controller:: Initialize() (Controller.cpp:129)...
  • 那么您的iter 很可能有问题。运行 gdb，在第 52 行下一个断点，当你到达断点时，print iter、print *iter、print iter-&gt;second 直到你注意到一些东西。您不检查 GetTasks().begin() 是否返回 NULL，是否有可能它不返回有效的迭代器？
  • task.begin() 返回在程序启动时已初始化的任务映射，并且不会更改它的值 never。段错误发生在随机数的程序循环之后。
猜你喜欢
  • 1970-01-01
  • 1970-01-01
  • 2021-12-03
  • 1970-01-01
  • 1970-01-01
  • 1970-01-01
  • 2015-07-06
  • 1970-01-01
  • 1970-01-01
相关资源
最近更新 更多
热门标签
Java Python linux javascript Mysql C# Docker 算法 前端 SpringBoot Redis Vue spring 设计模式 .net core .net kubernetes c++ 数据库 数据结构 大数据 js 机器学习 微服务 Android Go 程序员 面试 JVM ASP.net core 云原生 人工智能 后端 PHP git CSS golang k8s Nginx Django mybatis 深度学习 多线程 React 架构 devops 爬虫 云计算 Spring Boot LeetCode