Please report new issues athttps://github.com/DOCGroup
The race is between the instant when the the transport class resumes the handle and the instant when the Transport is duplicated by the TAO_Server_Request class along the request flow path. Similarly along the reply path, there is race between the instant when the handle is resumed till the reply is processed and the LF_Event is unbound. The exact problem: When the TAO_Transport class resumes the handle, there is a possibility that a thread could be dispatched to the same handler and transport. The secomd thread could receive a ECONNRESET from the peer, in which case the second thread could try closing the connection which would also mean closing the transport. The first thread in the meanwhile wouldnt have even incremented the refcount. Things crash at that point!
Fixed! Here is the relevant ChangeLog entry! Tue Dec 3 18:13:42 2002 Balachandran Natarajan <bala@isis-server.isis.vanderbilt.edu>