[vbox-dev] VBoxSvc crash when deleting snapshots

[Huihong Luo]

MediaData::AttachmentList &snapAtts = snapshot->getSnapshotMachine()->mMediaData->mAttachments;
AssertBreak(pAttach = findAttachment(snapAtts, replaceHd));
}
attachLock.unlock();  <=== CRASH
AutoWriteLock attLock(pAttach);
pAttach->updateMedium(pHD, false /* aImplicit */);
toDiscard.push_back(MediumDiscardRec(pHD,
chain,
replaceHd,
pAttach,
snapshotId));
 
 
> VBoxSVC.exe!SessionMachine::deleteSnapshotHandler(SessionMachine::DeleteSnapshotTask & aTask={...})  Line 2201 + 0x14 bytes C++
  VBoxSVC.exe!SessionMachine::DeleteSnapshotTask::handler()  Line 1122 C++
  VBoxSVC.exe!Sess5:45 PM 11/5/2009ionMachine::taskHandler(RTTHREADINT * __formal=0x028bb868, void * pvUser=0x028c8148)  Line 1145 C++
  VBoxRT.dll!rtThreadMain(RTTHREADINT * pThread=0x028bb868, unsigned int NativeThread=5712, const char * pszThreadName=0x028bb8d0)  Line 637 + 0xa bytes C++
  VBoxRT.dll!rtThreadNativeMain(void * pvArgs=0x028bb868)  Line 106 + 0xb bytes C++
  msvcr80.dll!_callthreadstartex()  Line 348 + 0x6 bytes C
  msvcr80.dll!_threadstartex(void * ptd=0x01eab6b0)  Line 326 + 0x5 bytes C
  kernel32.dll!@BaseThreadInitThunk at 12()  + 0x12 bytes 
  ntdll.dll!___RtlUserThreadStart at 8()  + 0x27 bytes 
  ntdll.dll!__RtlUserThreadStart at 8()  + 0x1b bytes 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.virtualbox.org/pipermail/vbox-dev/attachments/20091105/3fdec64e/attachment.html>