AT接收数据时malloc的buffer和接收线程地址冲突??

发布于 2021-09-15 15:54:50 浏览：771 订阅该版

[tocm]

项目中使用多通道连接服务器(需要使用多个socket)，原来方式是透传模式，测试无误。现改用AT+MIPSEND方式发送数据，模块用的是U9330C。

1.发送接收正常
(at_socket_u9300.c)
```c
static void urc_tcp_recv_func(struct at_client *client, const char *data, rt_size_t size)
{
    int device_socket = 0,  idx = 0;
    rt_int32_t timeout;
    rt_size_t bfsz = 0, temp_size = 0;
    char *recv_buf = RT_NULL, temp[8] = {0};
    struct at_socket *socket = RT_NULL;
    struct at_device *device = RT_NULL;
    char *client_name = client->device->parent.name;

RT_ASSERT(data && size);

device = at_device_get_by_name(AT_DEVICE_NAMETYPE_CLIENT, client_name);
    if (device == RT_NULL)
    {
        LOG_E("get device(%s) failed.", client_name);
        return;
    }

/* get the current socket and receive buffer size by receive data */
    sscanf(data, "+MIPRTCP=%d,%d", &device_socket, (int *) &bfsz);
    
    //LOG_I("## recv bfsz = %d\n",bfsz);
    /* set receive timeout by receive buffer length, not less than 10 ms */
    timeout = bfsz > 10 ? bfsz : 10;

if (device_socket < 0 || bfsz == 0)
    {
        return;
    }

_**recv_buf = (char *) rt_calloc(1, bfsz);**_

if (recv_buf == RT_NULL)
    {
        LOG_E("no memory for URC receive buffer(%d).", bfsz);
        /* read and clean the coming data */
        while (temp_size < bfsz)
        {
            if (bfsz - temp_size > sizeof(temp))
            {
                at_client_obj_recv(client, temp, sizeof(temp), timeout);
            }
            else
            {
                at_client_obj_recv(client, temp, bfsz - temp_size, timeout);
            }
            temp_size += sizeof(temp);
        }
        return;
    }
    rt_memset(recv_buf, 0, bfsz);
    sscanf(data, "+MIPRTCP=%d,%d,%s", &device_socket, (int *) &bfsz, recv_buf);
    //LOG_I("#### miprtcp = %d\n",device_socket);

/*数据解析判断*/
    for(idx = 12; idx < bfsz+12; idx++)
    {
        if(data[idx] == 0x2c)
        {
            break;
        }
    }

if(idx >= bfsz + 12)
    {
        LOG_E("at recv data is error.");
        rt_free(recv_buf);
        return;
    }
    rt_memcpy(recv_buf, data+idx+1, bfsz);
    /* get at socket object by device socket descriptor */
    if((device_socket > 0) && (device_socket <= AT_DEVICE_U9300C_SOCKETS_NUM))
    {
        socket = &(device->sockets[device_socket - 1]);

/* notice the receive buffer and buffer size */
        if (at_evt_cb_set[AT_SOCKET_EVT_RECV])
        {

**_at_evt_cb_set[AT_SOCKET_EVT_RECV](socket, AT_SOCKET_EVT_RECV, recv_buf, bfsz);_**
        }
    }

return;
}
```

2.at_socket.c中接收回调的中rt_sem_release唤醒接收任务时出错
```c
static void at_recv_notice_cb(struct at_socket *sock, at_socket_evt_t event, const char *buff, size_t bfsz)
{
    RT_ASSERT(buff);
    RT_ASSERT(event == AT_SOCKET_EVT_RECV);
    
    /* check the socket object status */
    if (sock->magic != AT_SOCKET_MAGIC)
    {
        return;
    }
    //LOG_I("at recv notice cb...");

/* put receive buffer to receiver packet list */
    rt_mutex_take(sock->recv_lock, RT_WAITING_FOREVER);
    at_recvpkt_put(&(sock->recvpkt_list), buff, bfsz);
    rt_mutex_release(sock->recv_lock);

_**rt_sem_release(sock->recv_notice); **_//!!

at_do_event_changes(sock, AT_EVENT_RECV, RT_TRUE);

}
```
3.debug的错误信息
![8874f47ef9463c2a9384d8c140c47616.jpg](https://oss-club.rt-thread.org/uploads/20210915/8874f47ef9463c2a9384d8c140c47616.jpg)
![2be307ff0dfccdbcc38dbd7f396dc814.jpg](https://oss-club.rt-thread.org/uploads/20210915/2be307ff0dfccdbcc38dbd7f396dc814.jpg)

被唤醒的任务的地址好像被覆盖或改写了。
导致断言时出错。路过的大佬能否给个指点提示，谢谢！！(第一次来无积分)