corosync crash

gistfile1.txt

 valgrind corosync -f
==2796== Memcheck, a memory error detector
==2796== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al.
==2796== Using Valgrind-3.6.0 and LibVEX; rerun with -h for copyright info
==2796== Command: corosync -f
==2796== 
==2796== Invalid write of size 2
==2796==    at 0x4E35F1A: totemip_parse (in /usr/lib64/libtotem_pg.so.4.0.0)
==2796==    by 0x40B36E: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796==  Address 0x74abbe8 is not stack'd, malloc'd or (recently) free'd
==2796== 
==2796== Invalid write of size 4
==2796==    at 0x4E35F43: totemip_parse (in /usr/lib64/libtotem_pg.so.4.0.0)
==2796==    by 0x40B36E: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796==  Address 0x74abbea is not stack'd, malloc'd or (recently) free'd
==2796== 
==2796== Invalid write of size 2
==2796==    at 0x40B444: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796==  Address 0x74abbfa is 6 bytes before a block of size 8 free'd
==2796==    at 0x4C2695D: free (vg_replace_malloc.c:366)
==2796==    by 0x8069218: ??? (in /usr/libexec/lcrso/objdb.lcrso)
==2796==    by 0x40B098: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796== 
==2796== Invalid read of size 2
==2796==    at 0x40B482: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796==  Address 0x74abbe8 is not stack'd, malloc'd or (recently) free'd
==2796== 
==2796== Invalid write of size 2
==2796==    at 0x4E35F1A: totemip_parse (in /usr/lib64/libtotem_pg.so.4.0.0)
==2796==    by 0x40B48A: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796==  Address 0x74abbbc is 4 bytes after a block of size 17,048 alloc'd
==2796==    at 0x4C26FDE: malloc (vg_replace_malloc.c:236)
==2796==    by 0x40B033: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796== 
==2796== Invalid write of size 4
==2796==    at 0x4E35F43: totemip_parse (in /usr/lib64/libtotem_pg.so.4.0.0)
==2796==    by 0x40B48A: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796==  Address 0x74abbbe is 6 bytes after a block of size 17,048 alloc'd
==2796==    at 0x4C26FDE: malloc (vg_replace_malloc.c:236)
==2796==    by 0x40B033: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796== 
==2796== Invalid write of size 2
==2796==    at 0x40B4AF: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796==  Address 0x74abbfc is 4 bytes before a block of size 8 free'd
==2796==    at 0x4C2695D: free (vg_replace_malloc.c:366)
==2796==    by 0x8069218: ??? (in /usr/libexec/lcrso/objdb.lcrso)
==2796==    by 0x40B098: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796== 
==2796== Invalid write of size 2
==2796==    at 0x40B4DB: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796==  Address 0x74abbfc is 4 bytes before a block of size 8 free'd
==2796==    at 0x4C2695D: free (vg_replace_malloc.c:366)
==2796==    by 0x8069218: ??? (in /usr/libexec/lcrso/objdb.lcrso)
==2796==    by 0x40B098: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796== 
==2796== Invalid write of size 4
==2796==    at 0x40B56B: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796==  Address 0x74abc00 is 0 bytes inside a block of size 8 free'd
==2796==    at 0x4C2695D: free (vg_replace_malloc.c:366)
==2796==    by 0x8069218: ??? (in /usr/libexec/lcrso/objdb.lcrso)
==2796==    by 0x40B098: totem_config_read (in /usr/sbin/corosync)
==2796==    by 0x40674D: main (in /usr/sbin/corosync)
==2796== 
==2796== 
==2796== HEAP SUMMARY:
==2796==     in use at exit: 25,775 bytes in 135 blocks
==2796==   total heap usage: 321 allocs, 186 frees, 314,385 bytes allocated
==2796== 
==2796== LEAK SUMMARY:
==2796==    definitely lost: 80 bytes in 1 blocks
==2796==    indirectly lost: 160 bytes in 3 blocks
==2796==      possibly lost: 2,103 bytes in 81 blocks
==2796==    still reachable: 23,432 bytes in 50 blocks
==2796==         suppressed: 0 bytes in 0 blocks
==2796== Rerun with --leak-check=full to see details of leaked memory
==2796== 
==2796== For counts of detected and suppressed errors, rerun with: -v
==2796== ERROR SUMMARY: 9 errors from 9 contexts (suppressed: 15 from 9)


gdb:


(gdb) run
Starting program: /usr/sbin/corosync 
[Thread debugging using libthread_db enabled]

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff6e581e3 in _int_malloc () from /lib64/libc.so.6
(gdb)