[Bug gdb/29762] FAIL: gdb.threads/access-mem-running-thread-exit.exp: non-stop: access mem (print global_var after writing again, inf=2, iter=1)

["simark at simark dot ca" <sourceware-bugzilla@sourceware.org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=29762

--- Comment #1 from Simon Marchi <simark at simark dot ca> ---
> I don't really know what kind of racy problem it could be in GDB.  It sounds
> like a "write memory on one core, get migrated to another CPU, then read the
> old value on another core" kind of problem.

Of course it's absolutely not that.

It turns out that with this change in the test, it reproduces pretty much every
time:

diff --git a/gdb/testsuite/gdb.threads/access-mem-running-thread-exit.exp
b/gdb/testsuite/gdb.threads/access-mem-running-thread-exit.exp
index 7932c0a82e6..54080e5e5bc 100644
--- a/gdb/testsuite/gdb.threads/access-mem-running-thread-exit.exp
+++ b/gdb/testsuite/gdb.threads/access-mem-running-thread-exit.exp
@@ -172,10 +172,13 @@ proc test { non_stop } {

        my_gdb_test "print global_var = 555" " = 555" \
            "write to global_var"
+       sleep 1
        my_gdb_test "print global_var" " = 555" \
            "print global_var after writing"
+       sleep 1
        my_gdb_test "print global_var = 333" " = 333" \
            "write to global_var again"
+       sleep 1
        my_gdb_test "print global_var" " = 333" \
            "print global_var after writing again"
     }

By putting some printfs in gdbserver (and hacking the testsuite so it would
connect to the gdbserver I started manually, so I could see its stdout), I
found that we would end up writing or reading from the wrong inferior. 
Sometimes, it happens that prior to a memory access operation (use to implement
those prints), GDB tries to set the remote general thread, but it fails because
that thread has just exited (and GDB doesn't know about it).  The Hg packet
fails, but we don't check the response:

https://gitlab.com/gnutools/binutils-gdb/-/blob/cde010e1a866e67b7e895cbcb95dedd3de0a1e56/gdb/remote.c#L2914

So GDB proceeds with the memory operation with the previous remote general
thread still set, which belongs to the other inferior.

-- 
You are receiving this mail because:
You are on the CC list for the bug.