Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-24875

QNAM pipelined HTTP requests receive data from another request that has been aborted



    • Type: Bug
    • Status: Closed
    • Priority: P2: Important
    • Resolution: Done
    • Affects Version/s: 4.8.0, 4.8.1, 5.0.0
    • Fix Version/s: 4.8.2
    • Component/s: Network
    • Labels:
    • Environment:
      Ubuntu 10.04, also others, with qtbase c2e8db58413207315474232697f12ddceb8310e7 (current master at time of submission)
    • Commits:
      967e9d6e285fbdffe52d026f1c81da071f50d68c, 4317fcda50bb91ef86d51114b07047c634ebc7a5


      This was observed in QtLocation – our tile fetcher uses QNAM to download map tiles from servers. Sometimes (under particularly high load), a request that has been aborted (sometimes even one that hasn't been aborted at all, too) will have its data end up in another request. The transposition of data only occurs when pipelining is enabled. When no requests are aborted during the timeframe of interest, the transposition does not occur.

      Attached is a simple application that reads from a "tracefile" containing a list of tile fetch/abort events generated by our actual mapping code and passes these requests with the necessary timing into QNAM. The bug is very timing sensitive. The app carries out the stimulus once without pipelining, and once with pipelining, and compares the results using the MD5 sums of the tile data received. Two "tracefile"s are included – one that is a full dump of a session with our mapping example app which has a number of instances of this bug in it ("tracefile.full") – and one that is a more minimal test case which exhibits the bug with approx 90-95% reliability on my machine ("tracefile").

      The output that indicates the bug:

      $ qmake && make
      $ ./pipelinebug 
      loaded 200 events
      loaded 200 events
      start trace with pipeline false 
      start trace with pipeline true 
      tile mismatch: 8 240 148
      tile mismatch: 8 232 145
      tile mismatch: 8 240 150
      compared 138 tiles

      Output where the bug has not occurred shows no "tile mismatch:" lines after "check...". Note that the 200-event subset in "tracefile" does not produce the bug with 100% reliability (about 90-95% has been observed over a few hundred trials).


        1. pipelinebug.cpp
          6 kB
        2. pipelinebug.tar.bz2
          5 kB
        3. pipelinefix.diff
          0.8 kB

          Issue Links

          For Gerrit Dashboard: QTBUG-24875
          # Subject Branch Project Status CR V



              xcm Martin Petersson (Inactive)
              alewilso Alex Wilson (closed Nokia identity) (Inactive)
              1 Vote for this issue
              2 Start watching this issue



                  Gerrit Reviews

                  There are no open Gerrit changes