Skip to content

Phy-test: double-free since week 2025.w18

I found out an issue while using phy-test with W18 tag. With other weeks it is working fine.

273prb.fhi72.4x4-viavi.conf --thread-pool 11,12,13,14,15,16,17,18 --phy-test
CMDLINE: "./nr-softmodem" "-O" "../../../targets/PROJECTS/GENERIC-NR-5GC/CONF/gnb.sa.band78.273prb.fhi72.4x4-viavi.conf" "--thread-pool" "11,12,13,14,15,16,17,18" "--phy-test" 
[CONFIG] function config_libconfig_init returned 0
[UTIL]   running in phy-test mode (--phy-test)
[OPT]   OPT disabled
[HW]   Version: Branch: HEAD Abrev. Hash: 9b878d920d Date: Tue May 6 13:01:19 2025 +0000
Reading 'GNBSParams' section from the config file
[GNB_APP]   Initialized RAN Context: RC.nb_nr_inst = 1, RC.nb_nr_macrlc_inst = 1, RC.nb_nr_L1_inst = 1, RC.nb_RU = 1, RC.nb_nr_CC[0] = 1
[NR_PHY]   Initializing gNB RAN context: RC.nb_nr_L1_inst = 1 
[NR_PHY]   Registered with MAC interface module (0x56487d25a9f0)
[NR_PHY]   Initializing NR L1: RC.nb_nr_L1_inst = 1
Reading 'GNBSParams' section from the config file
[NR_PHY]   L1_RX_THREAD_CORE 8 (15)
[NR_PHY]   TX_AMP = 8230 (-12 dBFS)
[PHY]   No prs_config configuration found..!!
Reading 'GNBSParams' section from the config file
Reading 'GNBSParams' section from the config file
[GNB_APP]   pdsch_AntennaPorts N1 2 N2 1 XP 2 pusch_AntennaPorts 4
[GNB_APP]   minTXRXTIME 2
[GNB_APP]   SIB1 TDA 15
[GNB_APP]   CSI-RS 1, SRS 0, SINR:0, 256 QAM may be on, delta_MCS off, maxMIMO_Layers 4, HARQ feedback enabled, num DLHARQ:16, num ULHARQ:16
[NR_MAC]   No RedCap configuration found
Reading 'Timers_Params' section from the config file
[GNB_APP]   sr_ProhibitTimer 0, sr_TransMax 64, sr_ProhibitTimer_v1700 0, t300 400, t301 400, t310 2000, n310 10, t311 3000, n311 1, t319 400
[NR_MAC]   Candidates per PDCCH aggregation level on UESS: L1: 0, L2: 2, L4: 0, L8: 0, L16: 0
Reading 'SCCsParams' section from the config file
Reading 'MsgASCCsParams' section from the config file
[RRC]   Read in ServingCellConfigCommon (PhysCellId 0, ABSFREQSSB 630048, DLBand 78, ABSFREQPOINTA 626772, DLBW 273,RACH_TargetReceivedPower -100
[RRC]   absoluteFrequencySSB 630048 corresponds to 3450720000 Hz
[NR_MAC]   TDD period index = 5, based on the sum of dl_UL_TransmissionPeriodicity from Pattern1 (2.500000 ms) and Pattern2 (0.000000 ms): Total = 2.500000 ms
[UTIL]   threadCreate() for MAC_STATS: creating thread with affinity ffffffff, priority 2
[NR_MAC]   PUSCH Target 230, PUCCH Target 230, PUCCH Failure 10, PUSCH Failure 1000
[NR_PHY]   Copying 0 blacklisted PRB to L1 context
[NR_MAC]   Set TX antenna number to 4, Set RX antenna number to 4 (num ssb 1: 80000000,0)
[NR_MAC]   TDD period index = 5, based on the sum of dl_UL_TransmissionPeriodicity from Pattern1 (2.500000 ms) and Pattern2 (0.000000 ms): Total = 2.500000 ms
[NR_MAC]   Set TDD configuration period to: 4 DL slots, 2 UL slots, 5 slots per period (NR_TDD_UL_DL_Pattern is 3 DL slots, 1 UL slots, 6 DL symbols, 4 UL symbols)
[NR_MAC]   Configured 1 TDD patterns (total slots: pattern1 = 5, pattern2 = 0)
[NR_PHY]   Set TDD Period Configuration: 4 periods per frame, 20 slots to be configured (4 DL, 2 UL)
[NR_PHY]   TDD period configuration: slot 0 is DOWNLINK
[NR_PHY]   TDD period configuration: slot 1 is DOWNLINK
[NR_PHY]   TDD period configuration: slot 2 is DOWNLINK
[NR_PHY]   TDD period configuration: slot 3 is FLEXIBLE: DDDDDDFFFFUUUU
[NR_PHY]   TDD period configuration: slot 4 is UPLINK
DL frequency 3450720000: band 78, UL frequency 3450720000
[PHY]   DL frequency 3450720000 Hz, UL frequency 3450720000 Hz: band 78, uldl offset 0 Hz
[PHY]   Initializing frame parms for mu 1, N_RB 273, Ncp 0
[PHY]   Init: N_RB_DL 273, first_carrier_offset 2458, nb_prefix_samples 288,nb_prefix_samples0 352, ofdm_symbol_size 4096
Reading 'GNBSParams' section from the config file
[GNB_APP]   F1AP: gNB idx 0 gNB_DU_id 3584, gNB_DU_name gNB-OAI, TAC 1 MCC/MNC/length 1/1/2 cellID 1
[GNB_APP]   ngran_DU: Configuring Cell 0 for TDD
Reading 'GNBSParams' section from the config file
Reading 'Periodical_EventParams' section from the config file
Reading 'A2_EventParams' section from the config file
[GNB_APP]   SDAP layer is disabled
[GNB_APP]   Data Radio Bearer count 1
[UTIL]   threadCreate() for TASK_SCTP: creating thread with affinity ffffffff, priority 50
[X2AP]   X2AP is disabled.
[UTIL]   threadCreate() for TASK_RRC_GNB: creating thread with affinity ffffffff, priority 50
Reading 'GNBSParams' section from the config file
Reading 'GNBSParams' section from the config file
[GTPU]   Configuring GTPu
Reading 'NETParams' section from the config file
[GTPU]   SA mode 
[GTPU]   Configuring GTPu address : 172.21.16.51, port : 2152
[GTPU]   Initializing UDP for local address 172.21.16.51 with port 2152
[GTPU]   Created gtpu instance id: 94
[UTIL]   threadCreate() for TASK_GNB_APP: creating thread with affinity ffffffff, priority 50
[NR_RRC]   Entering main loop of NR_RRC message task
[NR_RRC]   Accepting new CU-UP ID 3584 name gNB-OAI (assoc_id -1)
[NR_RRC]   Received F1 Setup Request from gNB_DU 3584 (gNB-OAI) on assoc_id -1
[NR_RRC]   Accepting DU 3584 (gNB-OAI), sending F1 Setup Response
[NR_RRC]   DU uses RRC version 17.3.0
[MAC]   received F1 Setup Response from CU (null)
[MAC]   CU uses RRC version 17.3.0
[NR_RRC]   [--] (cellID 0, UE ID 1 RNTI 0000) Create UE context: CU UE ID 1 DU UE ID 0 (rnti: 0000, random ue id 0)
[PDCP]   added drb 1 to UE ID 1
[RRC]   No UE Capabilities available when programming default CellGroup in NSA
[NR_MAC]   Adding new UE context with RNTI 0x1234
[RLC]   RLC UM Bi-directional Bearer configuration selected 
[RLC]   Added DRB to UE 4660
[NR_MAC]   Switching to DL-BWP 1
[NR_MAC]   Switching to UL-BWP 1
[NR_RRC]   cell PLMN 001.01 Cell ID 1 is in service
[MAC]   received gNB-DU configuration update acknowledge
malloc(): unaligned fastbin chunk detected
Aborted

To reproduce, just run phy-test with week 18 tag.

Edited by Sagar Arora