Attachment 1152388 Details for Bug 1331848 – File: backtrace

File: backtrace

backtrace (text/plain), 16.54 KB, created by anper1979 on 2016-04-29 19:23:13 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: anper1979

Created: 2016-04-29 19:23:13 UTC

Size: 16.54 KB

patch

obsolete

>[New LWP 18252]
>[New LWP 18244]
>To enable execution of this file add
>	add-auto-load-safe-path /usr/lib64/libthread_db-1.0.so
>line to your configuration file "/builddir/.gdbinit".
>To completely disable this security protection add
>	set auto-load safe-path /
>line to your configuration file "/builddir/.gdbinit".
>For more information about this security protection see the
>"Auto-loading safe path" section in the GDB manual.  E.g., run from the shell:
>	info "(gdb)Auto-loading safe path"
>Core was generated by `SCX-4200 44 andrey 200_pressa_uluchshim.pdf 1 TonerDensity=3 number-up=1 PageSi'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  0x0000000000407f65 in _cacheControllerThread (_exitVar=0x60f678 <_stopCacheControllerThread>) at src/cache.cpp:302
>302	            if (_pageRequested == entry->page()->pageNr()) {
>
>Thread 2 (LWP 18244):
>#0  0x00007fd4be6dec54 in _IO_vfscanf_internal (s=<optimized out>, format=<optimized out>, argptr=<optimized out>, errp=<optimized out>) at vfscanf.c:904
>        buf = ""
>        cstate = {__count = -802034512, __value = {__wch = 32765, __wchb = "\375\177\000"}}
>        map = <optimized out>
>        argpos = 0
>        _buffer = {__routine = 0x7fd4bf9393e0 <__funlockfile+32>, __arg = 0x7ffdd031ed60, __canceltype = 0, __prev = 0x0}
>        _avail = <optimized out>
>        arg = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7ffdd031ef60, reg_save_area = 0x7ffdd031eea0}}
>        f = <optimized out>
>        fc = <optimized out>
>        done = 1
>        read_in = <optimized out>
>        c = -1098853414
>        width = <optimized out>
>        flags = 0
>        errval = 0
>        loc = <optimized out>
>        curctype = <optimized out>
>        inchar_errno = <optimized out>
>        got_digit = <optimized out>
>        got_dot = <optimized out>
>        got_e = <optimized out>
>        negative = <optimized out>
>        not_in = <optimized out>
>        base = <optimized out>
>        decimal = <optimized out>
>        thousands = <optimized out>
>        ptrs_to_free = 0x0
>        state = {__count = 0, __value = {__wch = 0, __wchb = "\000\000\000"}}
>        num = <optimized out>
>        str = 0x0
>        wstr = 0x0
>        strptr = 0x0
>        strsize = <optimized out>
>        skip_space = 0
>        tw = 0x7ffdd031e981 ""
>        wp = <optimized out>
>        wpmax = 256
>        wpsize = 0
>        use_malloc = false
>#1  0x00007fd4be6f5657 in putwchar (wc=-1098882308 L'\xbe8062fc') at putwchar.c:26
>        __self = 0x7ffdd031e981
>        _IO_acquire_lock_file = 0x19f1df4
>        result = <optimized out>
>#2  0x00000000019f1df5 in ?? ()
>No symbol table info available.
>#3  0x00000000019f1df5 in ?? ()
>No symbol table info available.
>#4  0x00000000019f1df4 in ?? ()
>No symbol table info available.
>#5  0x00000000019f1df4 in ?? ()
>No symbol table info available.
>#6  0x00000000019f1df4 in ?? ()
>No symbol table info available.
>#7  0x00000000019f1df4 in ?? ()
>No symbol table info available.
>#8  0x00000000019f1df4 in ?? ()
>No symbol table info available.
>#9  0x00000000019f1df5 in ?? ()
>No symbol table info available.
>#10 0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 1 (LWP 18252):
>#0  0x0000000000407f65 in _cacheControllerThread (_exitVar=0x60f678 <_stopCacheControllerThread>) at src/cache.cpp:302
>        entry = 0x7fd4b4000960
>        preloadPage = false
>        needToExit = 0x60f678 <_stopCacheControllerThread>
>#1  0x00007fd4bf930555 in __nptl_deallocate_tsd () at pthread_create.c:130
>No locals.
>#2  start_thread (arg=0x7fd4bb7a3700) at pthread_create.c:346
>        pd = 0x7fd4bb7a3700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140551655143168, 8914376449211847940, 140728096387423, 140551655143168, 8388608, 0, -8926331470841031420, -8926340068053134076}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>#3  0x00007fd4be787b9d in getpeername () at ../sysdeps/unix/syscall-template.S:83
>No locals.
>#4  0x0000000000000000 in ?? ()
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>                                        No          linux-vdso.so.1
>0x00007fd4c06e0980  0x00007fd4c0727067  Yes         /lib64/libcups.so.2
>0x00007fd4c04835a0  0x00007fd4c04b5aca  Yes         /lib64/libgssapi_krb5.so.2
>0x00007fd4c01b6af0  0x00007fd4c021c7e4  Yes         /lib64/libkrb5.so.3
>0x00007fd4bff63770  0x00007fd4bff8113e  Yes         /lib64/libk5crypto.so.3
>0x00007fd4bfd5c570  0x00007fd4bfd5d133  Yes         /lib64/libcom_err.so.2
>0x00007fd4bfb47200  0x00007fd4bfb53729  Yes         /lib64/libz.so.1
>0x00007fd4bf92e9e0  0x00007fd4bf93b181  Yes         /lib64/libpthread.so.0
>0x00007fd4bf6f3e50  0x00007fd4bf6f8128  Yes         /lib64/libcrypt.so.1
>0x00007fd4bf4ec320  0x00007fd4bf4f0bb3  Yes         /lib64/libcupsimage.so.2
>0x00007fd4bf2e6ad0  0x00007fd4bf2e9091  Yes         /lib64/libjbig85.so.2.1
>0x00007fd4befedfa0  0x00007fd4bf099dd9  Yes         /lib64/libstdc++.so.6
>0x00007fd4bec61550  0x00007fd4becd325a  Yes         /lib64/libm.so.6
>0x00007fd4bea47af0  0x00007fd4bea57845  Yes         /lib64/libgcc_s.so.1
>0x00007fd4be6a34d0  0x00007fd4be7f16f4  Yes         /lib64/libc.so.6
>0x00007fd4be38c240  0x00007fd4be4490a6  Yes         /lib64/libgnutls.so.28
>0x00007fd4be15c530  0x00007fd4be161659  Yes         /lib64/libavahi-common.so.3
>0x00007fd4bdf4b9d0  0x00007fd4bdf539f7  Yes         /lib64/libavahi-client.so.3
>0x00007fd4bdd3c6e0  0x00007fd4bdd4385d  Yes         /lib64/libkrb5support.so.0
>0x00007fd4bdb35e60  0x00007fd4bdb36a4e  Yes         /lib64/libdl.so.2
>0x00007fd4bd932570  0x00007fd4bd933194  Yes         /lib64/libkeyutils.so.1
>0x00007fd4bd719980  0x00007fd4bd728ea1  Yes         /lib64/libresolv.so.2
>0x00007fd4c0948ad0  0x00007fd4c0962fe0  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007fd4bd49c900  0x00007fd4bd4f0a6d  Yes         /lib64/libfreebl3.so
>0x00007fd4bd245840  0x00007fd4bd2740b7  Yes         /lib64/libp11-kit.so.0
>0x00007fd4bcfdce60  0x00007fd4bd01c172  Yes         /lib64/libtspi.so.1
>0x00007fd4bcdb3d10  0x00007fd4bcdbee8b  Yes         /lib64/libtasn1.so.6
>0x00007fd4bcb85360  0x00007fd4bcba0eba  Yes         /lib64/libnettle.so.4
>0x00007fd4bc95e850  0x00007fd4bc96951f  Yes         /lib64/libhogweed.so.2
>0x00007fd4bc6ec480  0x00007fd4bc73f1c8  Yes         /lib64/libgmp.so.10
>0x00007fd4bc49e920  0x00007fd4bc4c92f4  Yes         /lib64/libdbus-1.so.3
>0x00007fd4bc279300  0x00007fd4bc28beeb  Yes         /lib64/libselinux.so.1
>0x00007fd4bc06c870  0x00007fd4bc07100c  Yes         /lib64/libffi.so.6
>0x00007fd4bbceb2c0  0x00007fd4bbddc53f  Yes         /lib64/libcrypto.so.10
>0x00007fd4bba2c5d0  0x00007fd4bba686ae  Yes         /lib64/libssl.so.10
>0x00007fd4bb7a56f0  0x00007fd4bb7f4456  Yes         /lib64/libpcre.so.1
>$1 = 0x0
>rax            0x0	0
>rbx            0x1e	30
>rcx            0x1	1
>rdx            0x60f410	6353936
>rsi            0x0	0
>rdi            0x60f410	6353936
>rbp            0x0	0x0
>rsp            0x7fd4bb7a2dd0	0x7fd4bb7a2dd0
>r8             0x0	0
>r9             0x1	1
>r10            0x569	1385
>r11            0x206	518
>r12            0xfe0000000000000	1143914305352105984
>r13            0x7fd4bb7a3700	140551655143168
>r14            0x800000	8388608
>r15            0x7fd4b4000960	140551529695584
>rip            0x407f65	0x407f65 <_cacheControllerThread(void*)+469>
>eflags         0x10202	[ IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function _cacheControllerThread(void*):
>   0x0000000000407d90 <+0>:	push   %r15
>   0x0000000000407d92 <+2>:	push   %r14
>   0x0000000000407d94 <+4>:	mov    $0x45,%edx
>   0x0000000000407d99 <+9>:	push   %r13
>   0x0000000000407d9b <+11>:	push   %r12
>   0x0000000000407d9d <+13>:	mov    $0x1,%esi
>   0x0000000000407da2 <+18>:	push   %rbp
>   0x0000000000407da3 <+19>:	push   %rbx
>   0x0000000000407da4 <+20>:	mov    %rdi,%rbx
>   0x0000000000407da7 <+23>:	movabs $0xfe0000000000000,%r12
>   0x0000000000407db1 <+33>:	sub    $0x18,%rsp
>   0x0000000000407db5 <+37>:	mov    0x2075e4(%rip),%rcx        # 0x60f3a0 <stderr>
>   0x0000000000407dbc <+44>:	mov    %rdi,0x8(%rsp)
>   0x0000000000407dc1 <+49>:	mov    $0x40b798,%edi
>   0x0000000000407dc6 <+54>:	callq  0x401bd0 <fwrite@plt>
>   0x0000000000407dcb <+59>:	movzbl (%rbx),%eax
>   0x0000000000407dce <+62>:	xchg   %ax,%ax
>   0x0000000000407dd0 <+64>:	test   %al,%al
>   0x0000000000407dd2 <+66>:	jne    0x407e21 <_cacheControllerThread(void*)+145>
>   0x0000000000407dd4 <+68>:	xor    %esi,%esi
>   0x0000000000407dd6 <+70>:	mov    $0x60f600,%edi
>   0x0000000000407ddb <+75>:	callq  0x408460 <Semaphore::operator--(int)>
>   0x0000000000407de0 <+80>:	mov    0x8(%rsp),%rax
>   0x0000000000407de5 <+85>:	cmpb   $0x0,(%rax)
>   0x0000000000407de8 <+88>:	jne    0x407e21 <_cacheControllerThread(void*)+145>
>   0x0000000000407dea <+90>:	cmpq   $0x0,0x207746(%rip)        # 0x60f538 <_ZL12_waitingList>
>   0x0000000000407df2 <+98>:	mov    0x2075c7(%rip),%rax        # 0x60f3c0 <_ZL14_pagesInMemory>
>   0x0000000000407df9 <+105>:	je     0x407fc0 <_cacheControllerThread(void*)+560>
>   0x0000000000407dff <+111>:	cmp    $0x1e,%rax
>   0x0000000000407e03 <+115>:	je     0x407e50 <_cacheControllerThread(void*)+192>
>   0x0000000000407e05 <+117>:	cmp    0x20766c(%rip),%rax        # 0x60f478 <_ZL13_pagesInTable>
>   0x0000000000407e0c <+124>:	je     0x407e50 <_cacheControllerThread(void*)+192>
>   0x0000000000407e0e <+126>:	xor    %edi,%edi
>   0x0000000000407e10 <+128>:	callq  0x4079e0 <__manageMemoryCache(CacheEntry*)>
>   0x0000000000407e15 <+133>:	mov    0x8(%rsp),%rax
>   0x0000000000407e1a <+138>:	movzbl (%rax),%eax
>   0x0000000000407e1d <+141>:	test   %al,%al
>   0x0000000000407e1f <+143>:	je     0x407dd4 <_cacheControllerThread(void*)+68>
>   0x0000000000407e21 <+145>:	mov    0x207578(%rip),%rcx        # 0x60f3a0 <stderr>
>   0x0000000000407e28 <+152>:	mov    $0x2f,%edx
>   0x0000000000407e2d <+157>:	mov    $0x1,%esi
>   0x0000000000407e32 <+162>:	mov    $0x40b7e0,%edi
>   0x0000000000407e37 <+167>:	callq  0x401bd0 <fwrite@plt>
>   0x0000000000407e3c <+172>:	add    $0x18,%rsp
>   0x0000000000407e40 <+176>:	xor    %eax,%eax
>   0x0000000000407e42 <+178>:	pop    %rbx
>   0x0000000000407e43 <+179>:	pop    %rbp
>   0x0000000000407e44 <+180>:	pop    %r12
>   0x0000000000407e46 <+182>:	pop    %r13
>   0x0000000000407e48 <+184>:	pop    %r14
>   0x0000000000407e4a <+186>:	pop    %r15
>   0x0000000000407e4c <+188>:	retq   
>   0x0000000000407e4d <+189>:	nopl   (%rax)
>   0x0000000000407e50 <+192>:	mov    $0x60f4c0,%edi
>   0x0000000000407e55 <+197>:	callq  0x408440 <Semaphore::lock()>
>   0x0000000000407e5a <+202>:	mov    0x2076d7(%rip),%r15        # 0x60f538 <_ZL12_waitingList>
>   0x0000000000407e61 <+209>:	cmp    %r15,0x2076c8(%rip)        # 0x60f530 <_ZL16_lastWaitingList>
>   0x0000000000407e68 <+216>:	mov    0x18(%r15),%rax
>   0x0000000000407e6c <+220>:	mov    %rax,0x2076c5(%rip)        # 0x60f538 <_ZL12_waitingList>
>   0x0000000000407e73 <+227>:	je     0x408020 <_cacheControllerThread(void*)+656>
>   0x0000000000407e79 <+233>:	mov    $0x60f4c0,%edi
>   0x0000000000407e7e <+238>:	callq  0x408450 <Semaphore::unlock()>
>   0x0000000000407e83 <+243>:	mov    $0x60f400,%edi
>   0x0000000000407e88 <+248>:	callq  0x408440 <Semaphore::lock()>
>   0x0000000000407e8d <+253>:	mov    0x2075ec(%rip),%rbx        # 0x60f480 <_ZL16_maxPagesInTable>
>   0x0000000000407e94 <+260>:	mov    0x8(%r15),%rax
>   0x0000000000407e98 <+264>:	mov    0x30(%rax),%rax
>   0x0000000000407e9c <+268>:	cmp    %rbx,%rax
>   0x0000000000407e9f <+271>:	jbe    0x407f3c <_cacheControllerThread(void*)+428>
>   0x0000000000407ea5 <+277>:	test   %rbx,%rbx
>   0x0000000000407ea8 <+280>:	je     0x407f80 <_cacheControllerThread(void*)+496>
>   0x0000000000407eae <+286>:	lea    (%rbx,%rbx,4),%rdi
>   0x0000000000407eb2 <+290>:	lea    (%rdi,%rdi,1),%rax
>   0x0000000000407eb6 <+294>:	shl    $0x4,%rdi
>   0x0000000000407eba <+298>:	cmp    %r12,%rax
>   0x0000000000407ebd <+301>:	mov    $0xffffffffffffffff,%rax
>   0x0000000000407ec4 <+308>:	cmova  %rax,%rdi
>   0x0000000000407ec8 <+312>:	callq  0x401810 <_Znam@plt>
>   0x0000000000407ecd <+317>:	mov    0x2075ac(%rip),%rbx        # 0x60f480 <_ZL16_maxPagesInTable>
>   0x0000000000407ed4 <+324>:	mov    0x207595(%rip),%r13        # 0x60f470 <_ZL6_pages>
>   0x0000000000407edb <+331>:	mov    %rax,%r14
>   0x0000000000407ede <+334>:	mov    %rax,%rdi
>   0x0000000000407ee1 <+337>:	lea    0x0(,%rbx,8),%rbp
>   0x0000000000407ee9 <+345>:	mov    %r13,%rsi
>   0x0000000000407eec <+348>:	shl    $0x6,%rbx
>   0x0000000000407ef0 <+352>:	mov    %rbp,%rdx
>   0x0000000000407ef3 <+355>:	callq  0x401980 <memcpy@plt>
>   0x0000000000407ef8 <+360>:	lea    (%rbx,%rbp,1),%rdx
>   0x0000000000407efc <+364>:	lea    (%r14,%rbp,1),%rdi
>   0x0000000000407f00 <+368>:	xor    %esi,%esi
>   0x0000000000407f02 <+370>:	callq  0x401900 <memset@plt>
>   0x0000000000407f07 <+375>:	mov    %r13,%rdi
>   0x0000000000407f0a <+378>:	callq  0x401a80 <_ZdaPv@plt>
>   0x0000000000407f0f <+383>:	mov    0x20756a(%rip),%rax        # 0x60f480 <_ZL16_maxPagesInTable>
>   0x0000000000407f16 <+390>:	mov    %r14,0x207553(%rip)        # 0x60f470 <_ZL6_pages>
>   0x0000000000407f1d <+397>:	lea    (%rax,%rax,4),%rbx
>   0x0000000000407f21 <+401>:	mov    0x8(%r15),%rax
>   0x0000000000407f25 <+405>:	add    %rbx,%rbx
>   0x0000000000407f28 <+408>:	mov    0x30(%rax),%rax
>   0x0000000000407f2c <+412>:	mov    %rbx,0x20754d(%rip)        # 0x60f480 <_ZL16_maxPagesInTable>
>   0x0000000000407f33 <+419>:	cmp    %rbx,%rax
>   0x0000000000407f36 <+422>:	ja     0x407ea5 <_cacheControllerThread(void*)+277>
>   0x0000000000407f3c <+428>:	mov    0x20752d(%rip),%rdx        # 0x60f470 <_ZL6_pages>
>   0x0000000000407f43 <+435>:	mov    $0x60f400,%edi
>   0x0000000000407f48 <+440>:	mov    %r15,-0x8(%rdx,%rax,8)
>   0x0000000000407f4d <+445>:	callq  0x408450 <Semaphore::unlock()>
>   0x0000000000407f52 <+450>:	mov    0x8(%r15),%rax
>   0x0000000000407f56 <+454>:	addq   $0x1,0x20751a(%rip)        # 0x60f478 <_ZL13_pagesInTable>
>   0x0000000000407f5e <+462>:	mov    0x20768b(%rip),%rcx        # 0x60f5f0 <_ZL14_pageRequested>
>=> 0x0000000000407f65 <+469>:	cmp    %rcx,0x30(%rax)
>   0x0000000000407f69 <+473>:	je     0x407fe0 <_cacheControllerThread(void*)+592>
>   0x0000000000407f6b <+475>:	mov    %r15,%rdi
>   0x0000000000407f6e <+478>:	callq  0x4079e0 <__manageMemoryCache(CacheEntry*)>
>   0x0000000000407f73 <+483>:	mov    0x8(%rsp),%rax
>   0x0000000000407f78 <+488>:	movzbl (%rax),%eax
>   0x0000000000407f7b <+491>:	jmpq   0x407dd0 <_cacheControllerThread(void*)+64>
>   0x0000000000407f80 <+496>:	mov    $0xf0,%edi
>   0x0000000000407f85 <+501>:	movq   $0x1e,0x2074f0(%rip)        # 0x60f480 <_ZL16_maxPagesInTable>
>   0x0000000000407f90 <+512>:	callq  0x401810 <_Znam@plt>
>   0x0000000000407f95 <+517>:	mov    0x2074e4(%rip),%rbx        # 0x60f480 <_ZL16_maxPagesInTable>
>   0x0000000000407f9c <+524>:	mov    $0xf0,%ecx
>   0x0000000000407fa1 <+529>:	xor    %esi,%esi
>   0x0000000000407fa3 <+531>:	mov    %rax,%rdi
>   0x0000000000407fa6 <+534>:	mov    %rax,0x2074c3(%rip)        # 0x60f470 <_ZL6_pages>
>   0x0000000000407fad <+541>:	lea    0x0(,%rbx,8),%rdx
>   0x0000000000407fb5 <+549>:	callq  0x401ab0 <__memset_chk@plt>
>   0x0000000000407fba <+554>:	jmpq   0x407e94 <_cacheControllerThread(void*)+260>
>   0x0000000000407fbf <+559>:	nop
>   0x0000000000407fc0 <+560>:	cmp    $0x1e,%rax
>   0x0000000000407fc4 <+564>:	je     0x407dd4 <_cacheControllerThread(void*)+68>
>   0x0000000000407fca <+570>:	cmp    0x2074a7(%rip),%rax        # 0x60f478 <_ZL13_pagesInTable>
>   0x0000000000407fd1 <+577>:	jne    0x407e0e <_cacheControllerThread(void*)+126>
>   0x0000000000407fd7 <+583>:	jmpq   0x407dd4 <_cacheControllerThread(void*)+68>
>   0x0000000000407fdc <+588>:	nopl   0x0(%rax)
>   0x0000000000407fe0 <+592>:	mov    $0x60f400,%edi
>   0x0000000000407fe5 <+597>:	callq  0x408440 <Semaphore::lock()>
>   0x0000000000407fea <+602>:	xor    %esi,%esi
>   0x0000000000407fec <+604>:	mov    $0x60f580,%edi
>   0x0000000000407ff1 <+609>:	movq   $0x0,0x18(%r15)
>   0x0000000000407ff9 <+617>:	movq   $0x0,0x10(%r15)
>   0x0000000000408001 <+625>:	callq  0x4084b0 <Semaphore::operator++(int)>
>   0x0000000000408006 <+630>:	mov    $0x60f400,%edi
>   0x000000000040800b <+635>:	callq  0x408450 <Semaphore::unlock()>
>   0x0000000000408010 <+640>:	mov    0x8(%rsp),%rax
>   0x0000000000408015 <+645>:	movzbl (%rax),%eax
>   0x0000000000408018 <+648>:	jmpq   0x407dd0 <_cacheControllerThread(void*)+64>
>   0x000000000040801d <+653>:	nopl   (%rax)
>   0x0000000000408020 <+656>:	movq   $0x0,0x207505(%rip)        # 0x60f530 <_ZL16_lastWaitingList>
>   0x000000000040802b <+667>:	jmpq   0x407e79 <_cacheControllerThread(void*)+233>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1331848: 1152388 | 1152389 | 1152390 | 1152391 | 1152392 | 1152393 | 1152394 | 1152395 | 1152396 | 1152397 | 1152398 | 1152399