Attachment 1230895 Details for Bug 1404004 – File: backtrace

File: backtrace

backtrace (text/plain), 17.29 KB, created by dizzy on 2016-12-12 20:15:49 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: dizzy

Created: 2016-12-12 20:15:49 UTC

Size: 17.29 KB

patch

obsolete

>[New LWP 19399]
>[New LWP 19401]
>[New LWP 19403]
>[New LWP 19417]
>[New LWP 19402]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/xdg-desktop-portal'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  0x0000558af7b9bd8a in export_portal_implementation (connection=0x558af81fc060, skeleton=0x0) at src/xdg-desktop-portal.c:314
>314	      g_warning ("Error: %s", error->message);
>[Current thread is 1 (Thread 0x7fcf2a150cc0 (LWP 19399))]
>
>Thread 5 (Thread 0x7fcf1f028700 (LWP 19402)):
>#0  0x00007fcf28f5600d in poll () at ../sysdeps/unix/syscall-template.S:84
>No locals.
>#1  0x00007fcf2969f156 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x7fcf100010c0, timeout=<optimized out>, context=0x558af8207ad0) at gmain.c:4228
>        poll_func = 0x7fcf296af000 <g_poll>
>#2  g_main_context_iterate (context=0x558af8207ad0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3924
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 3
>        allocated_nfds = 3
>        fds = 0x7fcf100010c0
>#3  0x00007fcf2969f4e2 in g_main_loop_run (loop=0x558af8207a60) at gmain.c:4125
>        __func__ = "g_main_loop_run"
>#4  0x00007fcf29c83946 in gdbus_shared_thread_func (user_data=0x558af8207aa0) at gdbusprivate.c:247
>        data = 0x558af8207aa0
>#5  0x00007fcf296c6b03 in g_thread_proxy (data=0x558af82070a0) at gthread.c:784
>        thread = 0x558af82070a0
>        __func__ = "g_thread_proxy"
>#6  0x00007fcf292276ca in start_thread (arg=0x7fcf1f028700) at pthread_create.c:333
>        __res = <optimized out>
>        pd = 0x7fcf1f028700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140527555217152, 3764373601507128546, 0, 140737005706223, 140527555217856, 140527555217152, -3773027080079362846, -3772908607454399262}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#7  0x00007fcf28f61f6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:105
>No locals.
>
>Thread 4 (Thread 0x7fcf1d9dd700 (LWP 19417)):
>#0  0x00007fcf28f5600d in poll () at ../sysdeps/unix/syscall-template.S:84
>No locals.
>#1  0x00007fcf2969f156 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x7fcf080010c0, timeout=<optimized out>, context=0x558af821f650) at gmain.c:4228
>        poll_func = 0x7fcf296af000 <g_poll>
>#2  g_main_context_iterate (context=context@entry=0x558af821f650, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3924
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x7fcf080010c0
>#3  0x00007fcf2969f26c in g_main_context_iteration (context=context@entry=0x558af821f650, may_block=may_block@entry=1) at gmain.c:3990
>        retval = <optimized out>
>#4  0x00007fcf20945fad in dconf_gdbus_worker_thread (user_data=0x558af821f650) at dconf-gdbus-thread.c:82
>        context = 0x558af821f650
>#5  0x00007fcf296c6b03 in g_thread_proxy (data=0x558af8207590) at gthread.c:784
>        thread = 0x558af8207590
>        __func__ = "g_thread_proxy"
>#6  0x00007fcf292276ca in start_thread (arg=0x7fcf1d9dd700) at pthread_create.c:333
>        __res = <optimized out>
>        pd = 0x7fcf1d9dd700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140527531841280, 3764373601507128546, 0, 140737005704079, 140527531841984, 140527531841280, -3773023753090321182, -3772908607454399262}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#7  0x00007fcf28f61f6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:105
>No locals.
>
>Thread 3 (Thread 0x7fcf1e3e3700 (LWP 19403)):
>#0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
>No locals.
>#1  0x00007fcf296e4a7a in g_cond_wait_until (cond=cond@entry=0x558af8204da8, mutex=mutex@entry=0x558af8204da0, end_time=end_time@entry=9819465032) at gthread-posix.c:1442
>        now = {tv_sec = 9818, tv_nsec = 965032368}
>        span = {tv_sec = 0, tv_nsec = 499999632}
>        sampled = 0
>        res = <optimized out>
>#2  0x00007fcf296738c9 in g_async_queue_pop_intern_unlocked (queue=0x558af8204da0, wait=wait@entry=1, end_time=9819465032) at gasyncqueue.c:422
>        retval = <optimized out>
>        __func__ = "g_async_queue_pop_intern_unlocked"
>#3  0x00007fcf29673f28 in g_async_queue_timeout_pop_unlocked (queue=<optimized out>, timeout=timeout@entry=500000) at gasyncqueue.c:570
>        end_time = <optimized out>
>#4  0x00007fcf296c74d6 in g_thread_pool_wait_for_new_task (pool=<optimized out>) at gthreadpool.c:262
>        task = <optimized out>
>#5  g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:296
>        pool = 0x558af81d79f0
>#6  0x00007fcf296c6b03 in g_thread_proxy (data=0x558af8207450) at gthread.c:784
>        thread = 0x558af8207450
>        __func__ = "g_thread_proxy"
>#7  0x00007fcf292276ca in start_thread (arg=0x7fcf1e3e3700) at pthread_create.c:333
>        __res = <optimized out>
>        pd = 0x7fcf1e3e3700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140527542351616, 3764373601507128546, 0, 140737005707247, 140527542352320, 140527542351616, -3773029518010174238, -3772908607454399262}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#8  0x00007fcf28f61f6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:105
>No locals.
>
>Thread 2 (Thread 0x7fcf1f829700 (LWP 19401)):
>#0  0x00007fcf28f5600d in poll () at ../sysdeps/unix/syscall-template.S:84
>No locals.
>#1  0x00007fcf2969f156 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x7fcf180008e0, timeout=<optimized out>, context=0x558af8204ee0) at gmain.c:4228
>        poll_func = 0x7fcf296af000 <g_poll>
>#2  g_main_context_iterate (context=context@entry=0x558af8204ee0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3924
>        max_priority = 2147483647
>        timeout = 5743
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x7fcf180008e0
>#3  0x00007fcf2969f26c in g_main_context_iteration (context=0x558af8204ee0, may_block=may_block@entry=1) at gmain.c:3990
>        retval = <optimized out>
>#4  0x00007fcf2969f2b1 in glib_worker_main (data=<optimized out>) at gmain.c:5783
>No locals.
>#5  0x00007fcf296c6b03 in g_thread_proxy (data=0x558af8207050) at gthread.c:784
>        thread = 0x558af8207050
>        __func__ = "g_thread_proxy"
>#6  0x00007fcf292276ca in start_thread (arg=0x7fcf1f829700) at pthread_create.c:333
>        __res = <optimized out>
>        pd = 0x7fcf1f829700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140527563609856, 3764373601507128546, 0, 140737005705871, 140527563610560, 140527563609856, -3773028174759152414, -3772908607454399262}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#7  0x00007fcf28f61f6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:105
>No locals.
>
>Thread 1 (Thread 0x7fcf2a150cc0 (LWP 19399)):
>#0  0x0000558af7b9bd8a in export_portal_implementation (connection=0x558af81fc060, skeleton=0x0) at src/xdg-desktop-portal.c:314
>        error = 0x0
>#1  0x0000558af7b9be77 in on_bus_acquired (connection=0x558af81fc060, name=<optimized out>, user_data=<optimized out>) at src/xdg-desktop-portal.c:338
>        implementation = <optimized out>
>#2  0x00007fcf29c7e024 in connection_get_cb (source_object=<optimized out>, res=0x558af8208b80, user_data=0x558af81d3080) at gdbusnameowning.c:480
>        client = 0x558af81d3080
>#3  0x00007fcf29c429d4 in g_task_return_now (task=0x558af8208b80) at gtask.c:1121
>No locals.
>#4  0x00007fcf29c43086 in g_task_return (task=0x558af8208b80, type=<optimized out>) at gtask.c:1179
>        source = 0x7fcf14001500
>#5  0x00007fcf29c70c52 in bus_get_async_initable_cb (source_object=0x558af81fc060, res=<optimized out>, user_data=0x558af8208b80) at gdbusconnection.c:7287
>        task = 0x558af8208b80
>        error = 0x0
>#6  0x00007fcf29c429d4 in g_task_return_now (task=0x7fcf100036b0) at gtask.c:1121
>No locals.
>#7  0x00007fcf29c42a09 in complete_in_idle_cb (task=task@entry=0x7fcf100036b0) at gtask.c:1135
>No locals.
>#8  0x00007fcf2969b8e7 in g_idle_dispatch (source=0x7fcf14001500, callback=0x7fcf29c42a00 <complete_in_idle_cb>, user_data=0x7fcf100036b0) at gmain.c:5545
>        again = <optimized out>
>#9  0x00007fcf2969ee42 in g_main_dispatch (context=0x558af81fb880) at gmain.c:3203
>        dispatch = 0x7fcf2969b8d0 <g_idle_dispatch>
>        prev_source = 0x0
>        was_in_call = 0
>        user_data = 0x7fcf100036b0
>        callback = 0x7fcf29c42a00 <complete_in_idle_cb>
>        cb_funcs = 0x7fcf29966280 <g_source_callback_funcs>
>        cb_data = 0x7fcf14001570
>        need_destroy = <optimized out>
>        source = 0x7fcf14001500
>        current = 0x558af8205300
>        i = 0
>#10 g_main_context_dispatch (context=context@entry=0x558af81fb880) at gmain.c:3856
>No locals.
>#11 0x00007fcf2969f1c0 in g_main_context_iterate (context=0x558af81fb880, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3929
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = 1
>        nfds = 1
>        allocated_nfds = 1
>        fds = <optimized out>
>#12 0x00007fcf2969f4e2 in g_main_loop_run (loop=0x558af81cede0) at gmain.c:4125
>        __func__ = "g_main_loop_run"
>#13 0x0000558af7b9b621 in main (argc=<optimized out>, argv=<optimized out>) at src/xdg-desktop-portal.c:439
>        owner_id = 1
>        error = 0x0
>        session_bus = 0x558af81fc060
>        context = 0x558af81cbf40
>From                To                  Syms Read   Shared Object Library
>0x00007fcf29bef650  0x00007fcf29cca27e  Yes         /lib64/libgio-2.0.so.0
>0x00007fcf29972340  0x00007fcf299a2dad  Yes         /lib64/libgobject-2.0.so.0
>0x00007fcf2966f710  0x00007fcf296e7519  Yes         /lib64/libglib-2.0.so.0
>0x00007fcf29440aa0  0x00007fcf294508f5  Yes         /lib64/libgcc_s.so.1
>0x00007fcf29225a20  0x00007fcf29232d21  Yes         /lib64/libpthread.so.0
>0x00007fcf28e799d0  0x00007fcf28fc9a83  Yes         /lib64/libc.so.6
>0x00007fcf28c536f0  0x00007fcf28c57eb4  Yes         /lib64/libffi.so.6
>0x00007fcf28a4f050  0x00007fcf28a4ff55  Yes         /lib64/libgmodule-2.0.so.0
>0x00007fcf2884ada0  0x00007fcf2884b9ae  Yes         /lib64/libdl.so.2
>0x00007fcf285d85c0  0x00007fcf2862a731  Yes         /lib64/libpcre.so.1
>0x00007fcf283c3060  0x00007fcf283cf547  Yes         /lib64/libz.so.1
>0x00007fcf281a0320  0x00007fcf281b63cf  Yes         /lib64/libselinux.so.1
>0x00007fcf27f82990  0x00007fcf27f92080  Yes         /lib64/libresolv.so.2
>0x00007fcf27d3fc00  0x00007fcf27d6ce09  Yes         /lib64/libmount.so.1
>0x00007fcf29f4dad0  0x00007fcf29f6b2c0  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007fcf27afa660  0x00007fcf27b21da9  Yes         /lib64/libblkid.so.1
>0x00007fcf278ee450  0x00007fcf278efb01  Yes         /lib64/libuuid.so.1
>0x00007fcf276e70e0  0x00007fcf276ea1ff  Yes         /lib64/librt.so.1
>0x00007fcf209426f0  0x00007fcf2094778e  Yes         /usr/lib64/gio/modules/libdconfsettings.so
>0x00007fcf20524550  0x00007fcf205359e4  Yes         /lib64/libproxy.so.1
>0x00007fcf20316fa0  0x00007fcf2031ad3c  Yes         /lib64/libmodman.so.1
>0x00007fcf20018870  0x00007fcf200c7d99  Yes         /lib64/libstdc++.so.6
>0x00007fcf1fc89720  0x00007fcf1fcfac0a  Yes         /lib64/libm.so.6
>0x00007fcf1fa6de20  0x00007fcf1fa79946  Yes         /usr/lib64/gio/modules/libgioremote-volume-monitor.so
>0x00007fcf1f83ca80  0x00007fcf1f853856  Yes         /usr/lib64/gvfs/libgvfscommon.so
>0x00007fcf2073ce60  0x00007fcf2073d8b5  Yes         /lib64/libutil.so.1
>0x00007fcf1e600a80  0x00007fcf1e61aab6  Yes         /usr/lib64/gio/modules/libgvfsdbus.so
>0x00007fcf1e3e61a0  0x00007fcf1e3ec081  Yes         /lib64/libnss_files.so.2
>0x00007fcf1d9df790  0x00007fcf1d9e083a  Yes         /usr/lib64/gio/modules/libgiognomeproxy.so
>0x00007fcf1cfda150  0x00007fcf1cfda94a  Yes         /usr/lib64/gio/modules/libgiolibproxy.so
>0x00007fcf1cdd4b20  0x00007fcf1cdd5677  Yes         /usr/lib64/libproxy/0.4.12/modules/pacrunner_mozjs.so
>0x00007fcf1c8ff840  0x00007fcf1cb21edb  Yes         /lib64/libmozjs185.so.1.0
>0x00007fcf1c6bced0  0x00007fcf1c6bdc18  Yes         /lib64/libplds4.so
>0x00007fcf1c4b84c0  0x00007fcf1c4b9b16  Yes         /lib64/libplc4.so
>0x00007fcf1c284c50  0x00007fcf1c2a56ef  Yes         /lib64/libnspr4.so
>$1 = 0x0
>$2 = 0x0
>rax            0x0	0
>rbx            0x0	0
>rcx            0x7fcf2a150c00	140527740980224
>rdx            0x558af7bbfdea	94055350140394
>rsi            0x10	16
>rdi            0x0	0
>rbp            0x558af81fc060	0x558af81fc060
>rsp            0x7fffe33b6040	0x7fffe33b6040
>r8             0x558af8225450	94055356847184
>r9             0x0	0
>r10            0x73	115
>r11            0x0	0
>r12            0x7fcf100036b0	140527303407280
>r13            0x7fcf29966280	140527732679296
>r14            0x7fcf2969b8d0	140527729752272
>r15            0x7fcf14001500	140527370507520
>rip            0x558af7b9bd8a	0x558af7b9bd8a <export_portal_implementation+122>
>eflags         0x10246	[ PF ZF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function export_portal_implementation:
>   0x0000558af7b9bd10 <+0>:	push   %rbp
>   0x0000558af7b9bd11 <+1>:	push   %rbx
>   0x0000558af7b9bd12 <+2>:	mov    %rsi,%rbx
>   0x0000558af7b9bd15 <+5>:	mov    %rdi,%rbp
>   0x0000558af7b9bd18 <+8>:	mov    $0x1,%esi
>   0x0000558af7b9bd1d <+13>:	mov    %rbx,%rdi
>   0x0000558af7b9bd20 <+16>:	sub    $0x18,%rsp
>   0x0000558af7b9bd24 <+20>:	mov    %fs:0x28,%rax
>   0x0000558af7b9bd2d <+29>:	mov    %rax,0x8(%rsp)
>   0x0000558af7b9bd32 <+34>:	xor    %eax,%eax
>   0x0000558af7b9bd34 <+36>:	movq   $0x0,(%rsp)
>   0x0000558af7b9bd3c <+44>:	callq  0x558af7b9b040
>   0x0000558af7b9bd41 <+49>:	lea    0x228(%rip),%rdx        # 0x558af7b9bf70 <authorize_callback>
>   0x0000558af7b9bd48 <+56>:	lea    0x24088(%rip),%rsi        # 0x558af7bbfdd7
>   0x0000558af7b9bd4f <+63>:	xor    %r9d,%r9d
>   0x0000558af7b9bd52 <+66>:	xor    %r8d,%r8d
>   0x0000558af7b9bd55 <+69>:	xor    %ecx,%ecx
>   0x0000558af7b9bd57 <+71>:	mov    %rbx,%rdi
>   0x0000558af7b9bd5a <+74>:	callq  0x558af7b9ae98
>   0x0000558af7b9bd5f <+79>:	lea    0x241e2(%rip),%rdx        # 0x558af7bbff48
>   0x0000558af7b9bd66 <+86>:	mov    %rsp,%rcx
>   0x0000558af7b9bd69 <+89>:	mov    %rbp,%rsi
>   0x0000558af7b9bd6c <+92>:	mov    %rbx,%rdi
>   0x0000558af7b9bd6f <+95>:	callq  0x558af7b9af90
>   0x0000558af7b9bd74 <+100>:	test   %eax,%eax
>   0x0000558af7b9bd76 <+102>:	jne    0x558af7b9bdc0 <export_portal_implementation+176>
>   0x0000558af7b9bd78 <+104>:	mov    (%rsp),%rax
>   0x0000558af7b9bd7c <+108>:	lea    0x24067(%rip),%rdx        # 0x558af7bbfdea
>   0x0000558af7b9bd83 <+115>:	mov    $0x10,%esi
>   0x0000558af7b9bd88 <+120>:	xor    %edi,%edi
>=> 0x0000558af7b9bd8a <+122>:	mov    0x8(%rax),%rcx
>   0x0000558af7b9bd8e <+126>:	xor    %eax,%eax
>   0x0000558af7b9bd90 <+128>:	callq  0x558af7b9b198
>   0x0000558af7b9bd95 <+133>:	mov    (%rsp),%rdi
>   0x0000558af7b9bd99 <+137>:	test   %rdi,%rdi
>   0x0000558af7b9bd9c <+140>:	je     0x558af7b9bda3 <export_portal_implementation+147>
>   0x0000558af7b9bd9e <+142>:	callq  0x558af7b9b0a8
>   0x0000558af7b9bda3 <+147>:	mov    0x8(%rsp),%rax
>   0x0000558af7b9bda8 <+152>:	xor    %fs:0x28,%rax
>   0x0000558af7b9bdb1 <+161>:	jne    0x558af7b9bde3 <export_portal_implementation+211>
>   0x0000558af7b9bdb3 <+163>:	add    $0x18,%rsp
>   0x0000558af7b9bdb7 <+167>:	pop    %rbx
>   0x0000558af7b9bdb8 <+168>:	pop    %rbp
>   0x0000558af7b9bdb9 <+169>:	retq   
>   0x0000558af7b9bdba <+170>:	nopw   0x0(%rax,%rax,1)
>   0x0000558af7b9bdc0 <+176>:	mov    %rbx,%rdi
>   0x0000558af7b9bdc3 <+179>:	callq  0x558af7b9adf8
>   0x0000558af7b9bdc8 <+184>:	mov    0x8(%rax),%rcx
>   0x0000558af7b9bdcc <+188>:	lea    0x24021(%rip),%rdx        # 0x558af7bbfdf4
>   0x0000558af7b9bdd3 <+195>:	mov    $0x80,%esi
>   0x0000558af7b9bdd8 <+200>:	xor    %edi,%edi
>   0x0000558af7b9bdda <+202>:	xor    %eax,%eax
>   0x0000558af7b9bddc <+204>:	callq  0x558af7b9b198
>   0x0000558af7b9bde1 <+209>:	jmp    0x558af7b9bd95 <export_portal_implementation+133>
>   0x0000558af7b9bde3 <+211>:	callq  0x558af7b9af00
>   0x0000558af7b9bde8 <+216>:	mov    (%rsp),%rdi
>   0x0000558af7b9bdec <+220>:	mov    %rax,%rbx
>   0x0000558af7b9bdef <+223>:	test   %rdi,%rdi
>   0x0000558af7b9bdf2 <+226>:	je     0x558af7b9bdf9 <export_portal_implementation+233>
>   0x0000558af7b9bdf4 <+228>:	callq  0x558af7b9b0a8
>   0x0000558af7b9bdf9 <+233>:	mov    %rbx,%rdi
>   0x0000558af7b9bdfc <+236>:	callq  0x558af7b9b178
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1404004: 1230895 | 1230896 | 1230897 | 1230898 | 1230899 | 1230900 | 1230901 | 1230902 | 1230903 | 1230904 | 1230905 | 1230906 | 1230907