STL std::string class causes crashes and memory corruption on multi-processor machines

When you build applications in Microsoft Visual C++ 6.0 that use the supplied Standard Template Library (STL), memory corruption may occur, or your computer may stop responding. These symptoms occur more frequently on multi-processor computers. Previously, the same code may have worked without such issues on a single-processor computer. When you examine the faulting thread in a debugger, you typically see the failure in a memory management function. Frequently you see thebasic_string<char...></char...>class methods in the stack trace. Because memory corruption is also a symptom, failures may appear in areas that are unrelated to string processing.

The following are examples of stack traces where this problem was the cause of a crash:

The Standard Template Library (STL) that is included with Microsoft Visual C++ 6.0 is not safe for multi-threaded applications. In particular, the implementations of thestd::stringclass depend on thebasic_string<...></...>template class. ¡Ãкǹ¡ÒÃbasic_string<...></...>template class reference counts copies of a hidden character buffer. ¡Ãкǹ¡ÒÃbasic_string<...></...>template class stores the count in an 8-bit unsigned char. The following general issues occur after this implementation:

• ¡Ãкǹ¡ÒÃbasic_string<...></...>template class does not protect the counting mechanism with the synchronization that is required for threads on multi-processor computers to run at the same time. Multi-threaded STL code that is running on single-processor computers avoids this issue because only one thread runs at a time, and memory reads or writes on integers are completed before another thread can interrupt.
• Writing to anstd::stringclass in one thread can corrupt the reading of a copy of thestd::stringclass, such as one created by assignment, in another thread. The supposed copy shares the same hidden character buffer.
• String corruption may occur where a pointer or reference to anstd::stringclass is shared between threads. Typically, it is the responsibility of the programmer to avoid this situation.

You must rebuild the application after you make the STL thread-safe. The preferred method to obtain a thread-safe STL is to upgrade the STL to a newer version that is based on the current Visual C++ standard. However, the STL that is based on the current Visual C++ standard is not identical to the STL that was available at the time that Microsoft Visual C++ 6.0 was released as a new product. However, upgrading to a new version may be trivial depending on the STL functions that your application uses. To obtain new versions of the thread-safe STL, use one of the following methods:

Method 1: Use Microsoft Visual C++ .NET (versions 7.0 and later)

Open each Visual C++ project in your application, allowthe project to automatically convert to the new project format, and then rebuild it. ¡Ãкǹ¡ÒÃstd::stringclass implementation in this version is thread-safe for the described problem. If you use the DLL run-time library feature in your any one of the projects in your application, you must distribute the new Visual C++ run-time components (such as Msvci7x.dll, Msvcp7x.dll, and Msvcr7x.dll) with your rebuilt application.

ËÁÒÂà˵Ø:You do not have to distribute the Microsoft .NET Framework to client computers to use Microsoft Visual C++ .NET.

Method 2: Use Microsoft Visual C++ 6.0 with a replacement STL from a third party

The details of integration vary by product, and the individual vendors provide support. One source for a successor STL version is Dinkumware, Ltd., the company where Microsoft licenses the Visual C++ 6.0 STL. It is claimed that it can integrate with existing build processes. For more information, and for a list of known bugs and workarounds, visit the following Dinkumware Web site:Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

Work around the std::string class issue in Microsoft Visual C++ 6.0 STL

If you do not upgrade to a new version of the STL, you can try to correct thestd::stringclass thread-safety issue in the standard Microsoft Visual C++ 6.0 installation. Although there are multi-threading issues with several of the classes in the Microsoft Visual C++ 6.0 STL, by far the most common and problematic class is thestd::string¤ÅÒÊ·Õè The following steps and workarounds are stopgap measures to make sure that an application is working correctly, and the measures provide time to investigate other alternatives. Consider that these instructions will create new code paths and behavior perhaps throughout your whole application. Thoroughly test the rebuilt application in accordance with a company's or an individual's software policies before widespread deployment.

Disable string reference counting

Each of the workarounds that is documented in this section require that you first disable the reference-count mechanism. To disable reference counting, you must modify the<xstring></xstring>header file and set the_FROZENenumeration constant to0. In default installations, the <xstring> header file is in the following location:</xstring>¡ÒÃà»ÅÕè¹á»Å§¹Ñé¹_FROZENenumeration constant to0㹡ÒÃ<xstring></xstring>header file at line 62 so that it looks similar to the following:If you follow this recommendation, and you rebuild all software that uses these header files, yourstd::stringclass code will be more thread-safe. There are some caveats to that statement. Therefore, read the following workaround instructions carefully. After you disable reference counting by setting the_FROZENenumeration constant to0in the<xstring></xstring>header file, use one of the following methods to work around this problem.

Method 1: Use static CRT linkage only

Modify the project settings in all your projects that use thestd::stringclass to link to the static version of the Microsoft run-time library (CRT). You cannot use this approach if your project also has theUse MFC in a Shared DLLsetting enabled. For each project, follow these steps:

1. Open the project.
2. 㹡ÒÃProjectàÁ¹Ù ¤ÅÔ¡¡ÒõÑ駤èÒ.
3. 㹡ÒõÑ駤èҤ͹¿Ô¡ÃÒ¡Òà ¤ÅÔ¡ÃØè¹.
4. ¤ÅÔ¡¡ÒÃC/C++á·çº áÅéǤÅÔ¡Code Generationin the»ÃÐàÀ·:ÃÒ¡ÒÃ
5. 㹡ÒÃRuntime libraryÃÒ¡Òà ¤ÅÔ¡Multi-thread (/MT).
6. 㹡ÒõÑ駤èҤ͹¿Ô¡ÃÒ¡Òà ¤ÅÔ¡µÃǨá¡é¨Ø´º¡¾Ãèͧ.
7. 㹡ÒÃäźÃÒÃÕÃѹä·ÁìÃÒ¡Òà ¤ÅÔ¡Multi-thread debug (/MTd).
8. If there are other configurations in theµÑ駤èҤ͹¿Ô¡list, set the appropriateRuntime libraryoption for them also.
9. ¤ÅÔ¡µ¡Å§, and then rebuild the project.

This workaround makes sure that all your code uses the modified version of the<xstring></xstring>file by static linking to the whole multi-threaded run-time library, including MFC. One possible problem is that your final code size will be larger than a dynamically linked version, perhaps enormously so.

Method 2: Use dynamic CRT linkage

If your project code must link to the runtime library (CRT) as a DLL, you must take a different approach. Dynamic CRT linkage is the default setting for DLL projects. Dependencies on other components such as MFC or third-party libraries that are licensed for use with your application, typically require dynamic linkage to the CRT. If your only dependency is MFC, you can use theUse MFC in a Static Libraryoption, and apply Method 1. By default, when you create a new project in Microsoft Visual C++ 6.0, the project uses the CRT from a DLL.

The dynamic CRT linkage project setting links your application to implementations for somestd::stringclass methods in the pre-built Microsoft CRT DLL that is named Msvcp60.dll. Because Microsoft built that DLL by using the unmodified<xstring></xstring>header file, the change to the_FROZENconstant that you made to the local copy of<xstring></xstring>is not honored for functions that are called out of that library. These include functions such as_Tidy()áÅÐassign()that are supplied in the Msvcp60.dll file for the<char></char>áÅÐ<short></short>instantiations of thebasic_string¤ÅÒÊ·Õè ¡Ãкǹ¡ÒÃbasic_stringclass is the base for thestd::string¤ÅÒÊ·Õè

To use static implementations of thestd::stringclass in your modules instead of the Microsoft-supplied implementations in the Msvcp60.dll file, follow these steps:

1. In the <xstring> file, comment out the following code that is found near the end of the file. To do this, you can enclose the code in a </xstring>#if 0/#endifblock:

   #ifdef _DLL
   #pragma warning(disable:4231) /* the extern before template is a non-standard extension */
   extern template class _CRTIMP basic_string<char, char_traits<char>, allocator<char> >;
   extern template class _CRTIMP basic_string<wchar_t, char_traits<wchar_t>, allocator<wchar_t> >;
   #pragma warning(default:4231) /* restore previous warning */
   #endif  // _DLL

2. Other string operators are defined in the <string> header file, and they are also included in the CRT through the Msvcp60.dll file. You notice at the end of the <string> file that there are a series of "extern template _CRTIMP..." definitions that are protected by the </string></string>#ifdef _DLLclause just like in the <xstring> file. Comment all these definitions out also:</xstring>

   #ifdef _DLL
    #pragma warning(disable:4231) /* the extern before template is a non-standard extension */
    
   extern template class _CRTIMP
       basic_string<char, char_traits<char>, allocator<char> > __cdecl operator+(
           const basic_string<char, char_traits<char>, allocator<char> >&,
           const basic_string<char, char_traits<char>, allocator<char> >&);
   extern template class _CRTIMP
       basic_string<char, char_traits<char>, allocator<char> > __cdecl operator+(
   ...
   extern template class _CRTIMP
       basic_ostream<wchar_t, char_traits<wchar_t> >& __cdecl operator<<(
           basic_ostream<wchar_t, char_traits<wchar_t> >&,
           const basic_string<wchar_t, char_traits<wchar_t>, allocator<wchar_t> >&);
   
   #pragma warning(default:4231) /* restore previous warning */
   #endif      // _DLL

3. Save the modifications to these files, and then rebuild all the projects in the application that use the STL. If your project declares a classclass __declspec(dllexport), and that class has members of thestd::stringtype, you see C4251 warnings. Because all your code is built with thestd::stringclass now statically linked, you can ignore these warnings. To explicitly disable those warnings, use the following notation:

   #pragma warning(disable: 4251)

This approach balances the use of MFC and CRT functions other than thestd::stringclass from DLLs. There is a small increase in code size in each of your modules that use thestd::string¤ÅÒÊ·Õè

Method 3: Using a clever hack to avoid linkage issues

Create a typedef forunsigned char, and use that instead of the existingstd::stringclass typedef. The typedef may take a form that is included in a header file in the source files of the application that use thestd::string¤ÅÒÊ·Õè The typedef may appear similar to the following:Any string literals that are used with this class must be cast or processed as unsigned char. There may be an increase in code size versus ease of implementation, and there are less linkage side effects.

Method 4: Using a custom std::string DLL

This option gains you the benefit of smallest code size by putting thestd::stringclass implementations in a single DLL. Create a DLL project that exports thestd::string¤ÅÒÊ·Õè Link to that DLL instead of to the standard Msvcp60.dll file. You must redistribute this new DLL together with your application. This is an advanced option.

The following C++ code examples demonstrate one scenario that may occur when there is a lack of synchronization:In this example, Thread1 makes a copy of the input argument, and raises the reference count on the shared character buffer to 1. While it is working, Thread2 also makes a copy of its input argument, and raises the reference count to 2. Meanwhile, the main thread assigns a new value to A, creates a new character buffer, and drops the reference count on the original shared buffer to 1.

Thread1 starts to create a new character buffer for the new assignment to A1, recognizes a positive reference count on its previous shared character buffer, and then decrements that count by 1 to 0. At the same time, Thread2 is also in the process of assignment to B. B shares the character buffer of A2, and raises the reference count on the character buffer of A2, trying to increment it to 2 just before Thread1 writes a 0 to the reference count. The reference count is now 0 instead of 1. The reference count would have been 0 if access to the reference counter had been synchronized.

When Thread2 assigns a new value to A2, Thread2 sees the reference count of 0 and discards the original shared character buffer that B still references. The memory that held the character buffer is now available for other uses in the application. However, std::string B still holds a pointer to the character buffer. The following scenarios cause corruption and crashes:

• B tries to free the character buffer.
• B tries to read the contents of the character buffer that have been overwritten with live data by other application code.
• There are attempts to extend or to modify the string.

For more information about Visual C++ language and compiler issues, see theIs the STL included with VC++ thread-safe?topic at the following Microsoft Most Valuable Professional (MVP) Web site: