uninstall_element call cause Segmentation fault

[jasonlittledragon]

Program received signal SIGSEGV, Segmentation fault.
graph_delete_node (graph=graph@entry=0x65ba80, node=0x68c860) at lib/graph.c:88
88			graph_remove_edge(adj, node);
Missing separate debuginfos, use: debuginfo-install c-ares-1.10.0-3.el7.x86_64 json-c-0.11-4.el7_0.x86_64 keyutils-libs-1.5.8-3.el7.x86_64 libcares-1.13.0-alt1.S1.x86_64 libgcc-4.8.5-36.el7.x86_64 libselinux-2.5-14.1.el7.x86_64 libstdc++-4.8.5-36.el7.x86_64 pcre-8.32-17.el7.x86_64
(gdb) bt
#0  graph_delete_node (graph=graph@entry=0x65ba80, node=0x68c860) at lib/graph.c:88
#1  0x00007ffff7951982 in cmd_free_recur (graph=graph@entry=0x65ba80, 
    node=<optimized out>, stop=stop@entry=0x68ca40) at lib/command_graph.c:258
#2  0x00007ffff7951964 in cmd_free_recur (graph=graph@entry=0x65ba80, node=0x68bd30, 
    stop=stop@entry=0x68ca40) at lib/command_graph.c:256
#3  0x00007ffff7951964 in cmd_free_recur (graph=graph@entry=0x65ba80, node=0x68c960, 
    stop=stop@entry=0x68ca40) at lib/command_graph.c:256
#4  0x00007ffff7952092 in cmd_free_node (node=0x68ca40, graph=0x65ba80)
    at lib/command_graph.c:265
#5  cmd_merge_nodes (oldgraph=oldgraph@entry=0x65ba80, newgraph=newgraph@entry=0x696990, 
    old=0x68ca40, new=new@entry=0x6a7cb0, direction=direction@entry=-1)
    at lib/command_graph.c:348
#6  0x00007ffff7952023 in cmd_merge_nodes (oldgraph=oldgraph@entry=0x65ba80, 
    newgraph=newgraph@entry=0x696990, old=0x68bad0, new=new@entry=0x6a6d40, 
    direction=direction@entry=-1) at lib/command_graph.c:332
#7  0x00007ffff7952023 in cmd_merge_nodes (oldgraph=oldgraph@entry=0x65ba80, 
    newgraph=newgraph@entry=0x696990, old=0x689dc0, new=new@entry=0x6a44f0, 
    direction=direction@entry=-1) at lib/command_graph.c:332
#8  0x00007ffff7952023 in cmd_merge_nodes (oldgraph=oldgraph@entry=0x65ba80, 
    newgraph=newgraph@entry=0x696990, old=0x683070, new=new@entry=0x6a2bb0, 
    direction=direction@entry=-1) at lib/command_graph.c:332
#9  0x00007ffff7952023 in cmd_merge_nodes (oldgraph=oldgraph@entry=0x65ba80, 
    newgraph=newgraph@entry=0x696990, old=0x67d7f0, new=new@entry=0x6a3710, 
    direction=direction@entry=-1) at lib/command_graph.c:332
#10 0x00007ffff7952023 in cmd_merge_nodes (oldgraph=0x65ba80, newgraph=0x696990, 
    old=0x666ab0, new=0x6a2b80, direction=direction@entry=-1) at lib/command_graph.c:332
#11 0x00007ffff79524f5 in cmd_graph_merge (old=<optimized out>, new=new@entry=0x696990, 
    direction=direction@entry=-1) at lib/command_graph.c:356
#12 0x00007ffff7950217 in uninstall_element (ntype=<optimized out>, 
    cmd=0x7ffff7bb3850 <no_config_log_syslog_cmd>) at lib/command.c:489

[qlyoung]

Please provide the following information:

Versions

OS: [name] [version]
Kernel: [Linux/BSD] [version]
FRR: [version]

Steps to Reproduce

[First Step]
[Second Step]
[and so on...]

We cannot do anything with this stack trace unless you give version information at the very least.

[jasonlittledragon]

@qlyoung Sorry about that, here is the os and frr version:
OS:
Linux version 3.10.0-957.el7.x86_64 (mockbuild@kbuilder.bsys.centos.org) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-36) (GCC) ) #1 SMP Thu Nov 8 23:39:32 UTC 2018
FRR:
5.0.1
Steps to Reproduce:
This bug will absolutely reproduce when i use uninstall_element to uninstall the command like config_log_syslog_cmd which defined in the command.c. But when uninstall_element some other command like config_log_facility_cmd, it won't reproduce.
Hope this can be solved as soon as possible. Thanks.