[srslte-users] Segmentation fault during LTE-UE Prach procedure

Liqun Liu lliu at w2bi.com
Fri Oct 6 19:20:10 UTC 2017


Andre,

I have all layers set to debug. But around line 200, log start to repeat itself.

Thanks,

Liqun
-----Original Message-----
From: Andre Puschmann [mailto:andre.puschmann at softwareradiosystems.com] 
Sent: Friday, October 06, 2017 3:03 PM
To: Liqun Liu <lliu at w2bi.com>; srslte-users at lists.softwareradiosystems.com
Subject: Re: [srslte-users] Segmentation fault during LTE-UE Prach procedure

Hey,

can you attach logs with PHY level set to info please.

Thanks
Andre

On 06/10/17 20:39, Liqun Liu wrote:
> Ismael,
> 
>  
> 
> I tried the 17-09 version of lteue and get different result.
> 
> In the older version, lteue will try to prach and get segmentation fault.
> 
> In the 17-09 version, lteue
> 
>  
> 
> Fount cell: PCI=19, PRB=50, Ports=2, CFO=-1.4 Khz
> 
> Fount PLMN: Id=311480, TAC=1
> 
>  
> 
>  
> 
> Log also shows lteue get mib and sib1. But it just go to the cell 
> search loop again and never try to do the PRACH procedure.
> 
>  
> 
> Liqun
> 
>  
> 
> *From:*Liqun Liu
> *Sent:* Wednesday, October 04, 2017 9:55 AM
> *To:* Ismael Gomez <ismael.gomez at softwareradiosystems.com>;
> srslte-users at lists.softwareradiosystems.com
> *Subject:* Re: [srslte-users] Segmentation fault during LTE-UE Prach 
> procedure
> 
>  
> 
> Ismael,
> 
>  
> 
> Sure. looking forward to test the new release.
> 
> To add some background of test,
> 
>  
> 
> LTE-UE attached to the Amarisoft enb. but crashed on a  commercial eNB.
> 
>  
> 
> Thanks,
> 
>  
> 
> Liqun
> 
> ----------------------------------------------------------------------
> --
> 
> *From:*Ismael Gomez <ismael.gomez at softwareradiosystems.com
> <mailto:ismael.gomez at softwareradiosystems.com>>
> *Sent:* Wednesday, October 4, 2017 6:19:02 AM
> *To:* Liqun Liu; srslte-users at lists.softwareradiosystems.com
> <mailto:srslte-users at lists.softwareradiosystems.com>
> *Subject:* Re: [srslte-users] Segmentation fault during LTE-UE Prach 
> procedure
> 
>  
> 
> Hi Li,
> 
>  
> 
> We are going to release a new version this Friday. Probably the best 
> is to wait and see if the bug is still present with that new version.
> 
>  
> 
> Thanks
> 
>  
> 
> On Tue, 3 Oct 2017 at 23:00 Liqun Liu <lliu at w2bi.com 
> <mailto:lliu at w2bi.com>> wrote:
> 
>     Hi all,
> 
>      
> 
>     I experience this segmentation fault issue when lte-UE try to PRACH.
>     It looks likely the subheaders of pdu_msg was not initialized
>     properly.  I went through archive and do not see anyone else has
>     similar issue. Can someone give some help?
> 
>      
> 
>      
> 
>     I attached the gdb log below
> 
>      
> 
>     Searching for cell...
>     Using Volk machine: avx2_64_mmx_orc
>     Found CELL ID: 19 CP: Normal  , CFO: -0.6 KHz.
>     Trying to decode MIB...
>      - Cell ID:         19
>      - Nof ports:       2
>      - CP:              Normal  
>      - PRB:             50
>      - PHICH Length:    Normal
>      - PHICH Resources: 1/6
>      - SFN:             0
>     MIB received BW=10 MHz
>     [New Thread 0x7fffc37fe700 (LWP 17177)]
>     Initializating cell configuration...
>     -- Asking for clock rate 23.040000 MHz...
>     -- Actually got clock rate 23.040000 MHz.
>     -- Performing timer loopback test... pass
>     Setting Sampling frequency 11.52 MHz
>     Setting TX/RX offset 120 samples, 10.42 us
>     SIB1 received, CellID=19,  PLMN Id: MCC 311 MNC 480
>     SIB2 received
>     [Thread 0x7fffc37fe700 (LWP 17177) exited]
>     Random Access Transmission: seq=1, ra-rnti=0x4
> 
>     ------------------------------
> 
>     Thread 24 "srsue_debug" received signal SIGSEGV, Segmentation fault.
>     [Switching to Thread 0x7fffd97fa700 (LWP 17157)]
>     0x000000000050091e in srslte::sch_subh::get_payload_size (this=0x0)
>     at /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
>     459      return nof_bytes;
>     (gdb) backtrace
>     #0  0x000000000050091e in srslte::sch_subh::get_payload_size
>     (this=0x0) at /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
>     #1  0x00000000004ffe7b in srslte::sch_pdu::write_packet
>     (this=0x7ffff1a5f708, log_h=0x7ffff1abf5e0) at
>     /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:229
>     #2  0x00000000004c9567 in srsue::mux::pdu_get (this=0x7ffff1a5f618,
>     payload=0x7ffff1a5f682 "", pdu_sz=117, tx_tti=0, pid=0) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:253
>     #3  0x00000000004c9db8 in srsue::mux::msg3_get (this=0x7ffff1a5f618,
>     payload=0x4c93800 "", pdu_sz=117) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:348
>     #4  0x00000000004d43ee in
>     srsue::ul_harq_entity::ul_harq_process::run_tti
>     (this=0x7ffff1a60bf8, tti_tx=1945, grant=0x7fffd97f9720,
>     action=0x7fffd97f9c40)
>         at /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:250
>     #5  0x00000000004d3c0e in srsue::ul_harq_entity::run_tti
>     (this=0x7ffff1a60a68, tti=1941, grant=0x7fffd97f9720,
>     action=0x7fffd97f9c40) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:143
>     #6  0x00000000004d39ba in srsue::ul_harq_entity::new_grant_ul
>     (this=0x7ffff1a60a68, grant=..., action=0x7fffd97f9c40) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:119
>     #7  0x00000000004c6bf2 in srsue::mac::new_grant_ul
>     (this=0x7ffff1a5f4a8, grant=..., action=0x7fffd97f9c40) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mac.cc:316
>     #8  0x00000000004d81e9 in srsue::phch_worker::work_imp
>     (this=0x7ffff7f1b010) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/phy/phch_worker.cc:247
>     #9  0x00000000005054bb in srslte::thread_pool::worker::run_thread
>     (this=0x7ffff7f1b010) at
>     /home/w2bi/CLionProjects/srsLTE/lib/src/common/thread_pool.cc:61
>     #10 0x00000000004c7f28 in thread::thread_function_entry
>     (_this=0x7ffff7f1b010) at
>     /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/threads.h:73
>     #11 0x00007ffff7bc16ba in start_thread (arg=0x7fffd97fa700) at
>     pthread_create.c:333
>     #12 0x00007ffff61273dd in clone () at
>     ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
>     (gdb) frame 0
>     #0  0x000000000050091e in srslte::sch_subh::get_payload_size
>     (this=0x0) at /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
>     459      return nof_bytes;
>     (gdb) print this
>     $1 = (srslte::sch_subh * const) 0x0
>     (gdb) frame 1
>     #1  0x00000000004ffe7b in srslte::sch_pdu::write_packet
>     (this=0x7ffff1a5f708, log_h=0x7ffff1abf5e0) at
>     /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:229
>     229          printf("SUBH %d is_sdu=%d, payload=%d\n", i,
>     subheaders[i].is_sdu(), subheaders[i].get_payload_size());
>     (gdb) print i
>     $2 = 0
>     (gdb) print subheaders[0]
>     Cannot access memory at address 0x0
>     (gdb) print subheaders
>     $3 = std::vector of length 0, capacity 0
> 
>      
> 
>     comment out /srsLTE/lib/src/common/pdu.cc:459 \, run again and get
>     similar error
> 
>      
> 
>     Searching for cell...
>     Using Volk machine: avx2_64_mmx_orc
>     Found CELL ID: 19 CP: Normal  , CFO: -0.7 KHz.
>     Trying to decode MIB...
>      - Cell ID:         19
>      - Nof ports:       2
>      - CP:              Normal  
>      - PRB:             50
>      - PHICH Length:    Normal
>      - PHICH Resources: 1/6
>      - SFN:             0
>     MIB received BW=10 MHz
>     [New Thread 0x7fffc37fe700 (LWP 3125)]
>     Initializating cell configuration...
>     -- Asking for clock rate 23.040000 MHz...
>     -- Actually got clock rate 23.040000 MHz.
>     -- Performing timer loopback test... pass
>     Setting Sampling frequency 11.52 MHz
>     Setting TX/RX offset 120 samples, 10.42 us
>     SIB1 received, CellID=19,  PLMN Id: MCC 311 MNC 480
>     SIB2 received
>     [Thread 0x7fffc37fe700 (LWP 3125) exited]
>     Random Access Transmission: seq=1, ra-rnti=0x9
> 
>     ------------------------------
>     Random Access Transmission: seq=2, ra-rnti=0x4
> 
>     Thread 26 "srsue_debug_rad" received signal SIGSEGV, Segmentation fault.
>     [Switching to Thread 0x7fffcbfff700 (LWP 3106)]
>     0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
>     (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
>     pdu_len_bytes=117, is_ulsch=true)
>         at
>     /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
>     173          subheaders[i].parent = this;
>     (gdb) backtrace
>     #0  0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
>     (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
>     pdu_len_bytes=117, is_ulsch=true)
>         at
>     /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
>     #1  0x00000000004ca1e3 in srslte::pdu<srslte::sch_subh>::init_tx
>     (this=0x7ffff1a5f708, payload=0x7ffff1a5f682 "", pdu_len_bytes=117,
>     is_ulsch=true)
>         at
>     /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:78
>     #2  0x00000000004c8d11 in srsue::mux::pdu_get (this=0x7ffff1a5f618,
>     payload=0x7ffff1a5f682 "", pdu_sz=117, tx_tti=0, pid=0) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:167
>     #3  0x00000000004c9db8 in srsue::mux::msg3_get (this=0x7ffff1a5f618,
>     payload=0x4c90500 "", pdu_sz=117) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:348
>     #4  0x00000000004d43ee in
>     srsue::ul_harq_entity::ul_harq_process::run_tti
>     (this=0x7ffff1a60bf8, tti_tx=3905, grant=0x7fffcbffe720,
>     action=0x7fffcbffec40)
>         at /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:250
>     #5  0x00000000004d3c0e in srsue::ul_harq_entity::run_tti
>     (this=0x7ffff1a60a68, tti=3901, grant=0x7fffcbffe720,
>     action=0x7fffcbffec40) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:143
>     #6  0x00000000004d39ba in srsue::ul_harq_entity::new_grant_ul
>     (this=0x7ffff1a60a68, grant=..., action=0x7fffcbffec40) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:119
>     #7  0x00000000004c6bf2 in srsue::mac::new_grant_ul
>     (this=0x7ffff1a5f4a8, grant=..., action=0x7fffcbffec40) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mac.cc:316
>     #8  0x00000000004d81e9 in srsue::phch_worker::work_imp
>     (this=0x7ffff7f3aa98) at
>     /home/w2bi/CLionProjects/srsLTE/srsue/src/phy/phch_worker.cc:247
>     #9  0x0000000000505211 in srslte::thread_pool::worker::run_thread
>     (this=0x7ffff7f3aa98) at
>     /home/w2bi/CLionProjects/srsLTE/lib/src/common/thread_pool.cc:61
>     #10 0x00000000004c7f28 in thread::thread_function_entry
>     (_this=0x7ffff7f3aa98) at
>     /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/threads.h:73
>     #11 0x00007ffff7bc16ba in start_thread (arg=0x7fffcbfff700) at
>     pthread_create.c:333
>     #12 0x00007ffff61273dd in clone () at
>     ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
>     (gdb) frame 0
>     #0  0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
>     (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
>     pdu_len_bytes=117, is_ulsch=true)
>         at
>     /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
>     173          subheaders[i].parent = this;
>     (gdb) print i
>     $1 = 0
>     (gdb) print subheaders
>     $2 = std::vector of length 0, capacity 0
>     (gdb) frame 1
>     #1  0x00000000004ca1e3 in srslte::pdu<srslte::sch_subh>::init_tx
>     (this=0x7ffff1a5f708, payload=0x7ffff1a5f682 "", pdu_len_bytes=117,
>     is_ulsch=true)
>         at
>     /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:78
>     78        init_(payload, pdu_len_bytes, is_ulsch);
> 
>     thanks,
> 
>      
> 
>     Liqun
> 
>      
> 
>     _______________________________________________
>     srslte-users mailing list
>     srslte-users at lists.softwareradiosystems.com
>     <mailto:srslte-users at lists.softwareradiosystems.com>
>     http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
> 
> 
> 
> _______________________________________________
> srslte-users mailing list
> srslte-users at lists.softwareradiosystems.com
> http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: search_loop.log
Type: application/octet-stream
Size: 143977 bytes
Desc: search_loop.log
URL: <https://lists.srsran.com/pipermail/srsran-users/attachments/20171006/82edf9ac/attachment.obj>


More information about the srsran-users mailing list