Attachment 1299400 Details for Bug 1471524 – File: backtrace

File: backtrace

backtrace (text/plain), 16.35 KB, created by Chris Krum on 2017-07-16 16:15:25 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Chris Krum

Created: 2017-07-16 16:15:25 UTC

Size: 16.35 KB

patch

obsolete

>[New LWP 5256]
>[New LWP 5255]
>[New LWP 5246]
>[New LWP 5253]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/bin/jackd -T -ndefault -t 200 -p 2048 -R -T -d alsa -n 2 -r 44100 -p 1024'.
>Program terminated with signal SIGABRT, Aborted.
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
>51	}
>[Current thread is 1 (Thread 0x7f61e7691700 (LWP 5256))]
>
>Thread 1 (Thread 0x7f61e7691700 (LWP 5256)):
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
>        set = {__val = {23047, 140058496901641, 2, 140058496369149, 140058499835360, 3432, 669, 27161904, 140058499818496, 140058496376689, 4294967295, 140058499835360, 0, 3432, 140058499815616, 16}}
>        pid = <optimized out>
>        tid = <optimized out>
>#1  0x00007f61e8e82470 in __GI_abort () at abort.c:89
>        save_stage = 2
>        act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 140058499835136, 3432, 1, 140058499835267, 140058499818496, 140058496376689, 10, 140058496901629, 140058470979296, 140058496901629, 2, 10, 140058279545648, 10, 140058470979328}}, sa_flags = -375231104, sa_restorer = 0x7f61e9d1fd58 <std::string::_Rep::_S_empty_rep_storage+24>}
>        sigs = {__val = {32, 0 <repeats 15 times>}}
>#2  0x00007f61e9a2a055 in __gnu_cxx::__verbose_terminate_handler () at ../../../../libstdc++-v3/libsupc++/vterminate.cc:95
>        terminating = true
>        t = <optimized out>
>#3  0x00007f61e9a27c46 in __cxxabiv1::__terminate (handler=<optimized out>) at ../../../../libstdc++-v3/libsupc++/eh_terminate.cc:47
>No locals.
>#4  0x00007f61e9a27c91 in std::terminate () at ../../../../libstdc++-v3/libsupc++/eh_terminate.cc:57
>No locals.
>#5  0x00007f61e9a27f29 in __cxxabiv1::__cxa_rethrow () at ../../../../libstdc++-v3/libsupc++/eh_throw.cc:131
>        globals = <optimized out>
>        header = <optimized out>
>#6  0x00007f61ea64bd46 in Jack::JackLockedEngine::ClientKill (this=0x1a36c90, refnum=2) at /usr/src/debug/jack-1.9.10/common/JackLockedEngine.h:168
>No locals.
>#7  0x00007f61ea64b487 in Jack::JackSocketServerChannel::ClientKill (this=0x7f61e217f048, fd=16) at ../posix/JackSocketServerChannel.cpp:177
>        elem = {first = 2, second = 0x7f61dc0009e0}
>        socket = 0x7f61dc0009e0
>        refnum = 2
>        __PRETTY_FUNCTION__ = "void Jack::JackSocketServerChannel::ClientKill(int)"
>#8  0x00007f61ea64b8a8 in Jack::JackSocketServerChannel::Execute (this=0x7f61e217f048) at ../posix/JackSocketServerChannel.cpp:236
>        fd = 16
>        i = 2
>#9  0x00007f61ea619012 in Jack::JackPosixThread::ThreadHandler (arg=0x7f61e217f160) at ../posix/JackPosixThread.cpp:59
>        obj = 0x7f61e217f160
>        runnable = 0x7f61e217f048
>        err = 0
>        res = true
>#10 0x00007f61ea38736d in start_thread (arg=0x7f61e7691700) at pthread_create.c:456
>        __res = <optimized out>
>        pd = 0x7f61e7691700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140058470979328, -8784577943859061333, 0, 140734408618464, 140058470980032, 0, 8706907463693933995, 8706932078071815595}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#11 0x00007f61e8f5ab8f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:97
>No locals.
>
>Thread 2 (Thread 0x7f61e7712700 (LWP 5255)):
>#0  0x00007f61e8f4ea9d in poll () at ../sysdeps/unix/syscall-template.S:84
>No locals.
>#1  0x00007f61e7a2aced in alsa_driver_wait (driver=0x1a3d790, extra_fd=-1, status=0x7f61e7711cb0, delayed_usecs=0x1a38a88) at ../linux/alsa/alsa_driver.c:1326
>        poll_result = 1
>        ci = 0
>        nfds = 1
>        revents = 0
>        avail = 0
>        capture_avail = 0
>        playback_avail = 0
>        xrun_detected = 0
>        need_capture = 1
>        need_playback = 0
>        i = 1
>        poll_enter = 5002685548
>        poll_ret = 5002685540
>#2  0x00007f61e7a1d9c0 in Jack::JackAlsaDriver::Read (this=0x1a38990) at ../linux/alsa/JackAlsaDriver.cpp:421
>        wait_status = -1
>        nframes = 1024
>#3  0x00007f61ea61cd0f in Jack::JackAudioDriver::ProcessAsync (this=0x1a38990) at ../common/JackAudioDriver.cpp:213
>No locals.
>#4  0x00007f61ea61cce9 in Jack::JackAudioDriver::Process (this=0x1a38990) at ../common/JackAudioDriver.cpp:202
>No locals.
>#5  0x00007f61ea62ffc5 in Jack::JackThreadedDriver::Process (this=0x1a40ac0) at ../common/JackThreadedDriver.cpp:71
>No locals.
>#6  0x00007f61ea63066d in Jack::JackThreadedDriver::Execute (this=0x1a40ac0) at ../common/JackThreadedDriver.cpp:244
>No locals.
>#7  0x00007f61ea619012 in Jack::JackPosixThread::ThreadHandler (arg=0x1a40ad8) at ../posix/JackPosixThread.cpp:59
>        obj = 0x1a40ad8
>        runnable = 0x1a40ad0
>        err = 0
>        res = true
>#8  0x00007f61ea38736d in start_thread (arg=0x7f61e7712700) at pthread_create.c:456
>        __res = <optimized out>
>        pd = 0x7f61e7712700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140058471507712, -8784577943859061333, 0, 140734408618448, 140058471508416, 0, 8706907258072374699, 8706932078071815595}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#9  0x00007f61e8f5ab8f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:97
>No locals.
>
>Thread 3 (Thread 0x7f61ea9f68c0 (LWP 5246)):
>#0  do_sigwait (sig=0x7fff486ef2a4, set=<optimized out>) at ../sysdeps/unix/sysv/linux/sigwait.c:64
>        ret = <optimized out>
>        tmpset = {__val = {0, 0, 0, 0, 49, 0, 0, 0, 140734408618560, 140058520817786, 140058523369568, 0, 140734408618660, 140734408618660, 140058523369568, 0}}
>#1  __sigwait (set=0x7f61ea888060 <sigmask>, sig=0x7fff486ef2a4) at ../sysdeps/unix/sysv/linux/sigwait.c:96
>        oldtype = 2
>        sig = 0x7fff486ef2a4
>        set = 0x7f61ea888060 <sigmask>
>#2  0x00007f61ea6394b0 in jackctl_wait_signals (sigmask=0x7f61ea888060 <sigmask>) at ../common/JackControlAPI.cpp:688
>        sig = 0
>        waiting = true
>#3  0x0000000000403e3c in main (argc=21, argv=0x7fff486ef8b8) at ../common/Jackdmp.cpp:619
>        server_ctl = 0x19e8540
>        server_parameters = 0x19e91c0
>        server_name = 0x7fff486f0a51 "default"
>        master_driver_ctl = 0x19f8ca0
>        loopback_driver_ctl = 0x0
>        replace_registry = 0
>        options = 0x406668 "-d:X:I:P:uvshVrRL:STFl:t:mn:p:a:c:"
>        long_options = {{name = 0x40668b "clock-source", has_arg = 1, flag = 0x0, val = 99}, {name = 0x406698 "loopback-driver", has_arg = 1, flag = 0x0, val = 76}, {name = 0x4066a8 "audio-driver", has_arg = 1, flag = 0x0, val = 100}, {name = 0x4066b5 "midi-driver", has_arg = 1, flag = 0x0, val = 88}, {name = 0x4066c1 "internal-client", has_arg = 1, flag = 0x0, val = 73}, {name = 0x4066d1 "verbose", has_arg = 0, flag = 0x0, val = 118}, {name = 0x4066d9 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x4066de "port-max", has_arg = 1, flag = 0x0, val = 112}, {name = 0x4066e7 "no-mlock", has_arg = 0, flag = 0x0, val = 109}, {name = 0x4066f0 "name", has_arg = 1, flag = 0x0, val = 110}, {name = 0x4066f5 "unlock", has_arg = 0, flag = 0x0, val = 117}, {name = 0x4066fc "realtime", has_arg = 0, flag = 0x0, val = 82}, {name = 0x406705 "no-realtime", has_arg = 0, flag = 0x0, val = 114}, {name = 0x406711 "replace-registry", has_arg = 0, flag = 0x7fff486ef360, val = 0}, {name = 0x406722 "loopback", has_arg = 0, flag = 0x0, val = 76}, {name = 0x40672b "realtime-priority", has_arg = 1, flag = 0x0, val = 80}, {name = 0x40673d "timeout", has_arg = 1, flag = 0x0, val = 116}, {name = 0x406745 "temporary", has_arg = 0, flag = 0x0, val = 84}, {name = 0x40674f "version", has_arg = 0, flag = 0x0, val = 86}, {name = 0x406757 "silent", has_arg = 0, flag = 0x0, val = 115}, {name = 0x40675e "sync", has_arg = 0, flag = 0x0, val = 83}, {name = 0x406763 "autoconnect", has_arg = 1, flag = 0x0, val = 97}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
>        i = 11
>        opt = 100
>        option_index = 0
>        master_driver_name = 0x7fff486f0a71 "alsa"
>        master_driver_args = 0x1a40b30
>        master_driver_nargs = 11
>        loopback = 0
>        show_version = false
>        sigmask = 0x7f61ea888060 <sigmask>
>        param = 0x19e9d00
>        value = {ui = 2048, i = 2048, c = 0 '\000', str = "\000\b\000\000ult", '\000' <repeats 120 times>, b = false}
>        internals_list = empty std::__cxx11::list
>        slaves_list = empty std::__cxx11::list
>        it = 0x0
>        return_value = 0
>        notify_sent = true
>
>Thread 4 (Thread 0x7f61ea9f5700 (LWP 5253)):
>#0  0x00007f61ea38d81b in futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x1a61ab8) at ../sysdeps/unix/sysv/linux/futex-internal.h:88
>        __ret = -512
>        oldtype = 2
>        err = <optimized out>
>#1  __pthread_cond_wait_common (abstime=0x0, mutex=0x1a61a60, cond=0x1a61a90) at pthread_cond_wait.c:502
>        spin = 0
>        buffer = {__routine = 0x7f61ea38d4b0 <__condvar_cleanup_waiting>, __arg = 0x7f61ea9f4c80, __canceltype = 825570099, __prev = 0x0}
>        cbuffer = {wseq = 0, cond = 0x1a61a90, mutex = 0x1a61a60, private = 0}
>        err = <optimized out>
>        g = 0
>        flags = <optimized out>
>        signals = <optimized out>
>        result = 0
>        seq = 0
>#2  __pthread_cond_wait (cond=0x1a61a90, mutex=0x1a61a60) at pthread_cond_wait.c:655
>No locals.
>#3  0x00007f61ea61a5b4 in Jack::JackPosixProcessSync::Wait (this=0x1a61a58) at ../posix/JackPosixProcessSync.cpp:81
>        res = 0
>#4  0x00007f61ea6130c5 in Jack::JackMessageBuffer::Execute (this=0x1a59820) at ../common/JackMessageBuffer.cpp:104
>No locals.
>#5  0x00007f61ea619012 in Jack::JackPosixThread::ThreadHandler (arg=0x1a61a38) at ../posix/JackPosixThread.cpp:59
>        obj = 0x1a61a38
>        runnable = 0x1a59820
>        err = 0
>        res = true
>#6  0x00007f61ea38736d in start_thread (arg=0x7f61ea9f5700) at pthread_create.c:456
>        __res = <optimized out>
>        pd = 0x7f61ea9f5700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140058524866304, -8784577943859061333, 0, 140734408618320, 140058524867008, 0, 8706933458983493035, 8706932078071815595}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#7  0x00007f61e8f5ab8f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:97
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x00007f61ea5f28e0  0x00007f61ea64f84e  Yes         /lib64/libjackserver.so.0
>0x00007f61ea385860  0x00007f61ea393aa1  Yes         /lib64/libpthread.so.0
>0x00007f61ea12e730  0x00007f61ea170050  Yes         /lib64/libopus.so.0
>0x00007f61e9f25fa0  0x00007f61e9f29446  Yes         /lib64/librt.so.1
>0x00007f61e9d20de0  0x00007f61e9d21b0e  Yes         /lib64/libdl.so.2
>0x00007f61e9a24130  0x00007f61e9ad3e88  Yes         /lib64/libstdc++.so.6
>0x00007f61e9755910  0x00007f61e9780c11  Yes         /lib64/libdbus-1.so.3
>0x00007f61e9437f00  0x00007f61e94b4c5f  Yes         /lib64/libm.so.6
>0x00007f61e921dac0  0x00007f61e922dde5  Yes         /lib64/libgcc_s.so.1
>0x00007f61e8e69b70  0x00007f61e8fc5f73  Yes         /lib64/libc.so.6
>0x00007f61ea889c50  0x00007f61ea8a8590  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f61eaa0d970  0x00007f61eaa66a5f  Yes (*)     /lib64/libsystemd.so.0
>0x00007f61e8c34530  0x00007f61e8c4301f  Yes         /lib64/libresolv.so.2
>0x00007f61e8a0f460  0x00007f61e8a263ff  Yes         /lib64/libselinux.so.1
>0x00007f61e8805480  0x00007f61e8806d87  Yes         /lib64/libcap.so.2
>0x00007f61e85e0df0  0x00007f61e85f77c2  Yes         /lib64/liblzma.so.5
>0x00007f61e83cc330  0x00007f61e83da8d1  Yes         /lib64/liblz4.so.1
>0x00007f61e80c6500  0x00007f61e8186758  Yes         /lib64/libgcrypt.so.20
>0x00007f61e7eaa820  0x00007f61e7eb3c78  Yes         /lib64/libgpg-error.so.0
>0x00007f61e7c36540  0x00007f61e7c8827d  Yes         /lib64/libpcre.so.1
>0x00007f61e65242e0  0x00007f61e65558c5  Yes         /lib64/libgobject-2.0.so.0
>0x00007f61e6221740  0x00007f61e6299038  Yes         /lib64/libglib-2.0.so.0
>0x00007f61e5be6ff0  0x00007f61e5be7f06  Yes         /lib64/libgmodule-2.0.so.0
>0x00007f61e59df680  0x00007f61e59e3e3a  Yes         /lib64/libffi.so.6
>0x00007f61e7740660  0x00007f61e77cb2c7  Yes         /lib64/libasound.so.2
>0x00007f61e7a1c480  0x00007f61e7a2db28  Yes         /usr/lib64/jack/jack_alsa.so
>(*): Shared library is missing debugging information.
>$1 = 0x0
>$2 = 0x0
>rax            0x0	0
>rbx            0x7f61e9d1fd58	140058511408472
>rcx            0x7f61e8e8066b	140058496075371
>rdx            0x0	0
>rsi            0x7f61e76909a0	140058470975904
>rdi            0x2	2
>rbp            0x6092e0	0x6092e0 <stderr>
>rsp            0x7f61e76909a0	0x7f61e76909a0
>r8             0x0	0
>r9             0x7f61e76909a0	140058470975904
>r10            0x8	8
>r11            0x246	582
>r12            0x7f61dc000ab0	140058279545520
>r13            0x7fff486ef1e0	140734408618464
>r14            0x7f61e76919c0	140058470980032
>r15            0x0	0
>rip            0x7f61e8e8066b	0x7f61e8e8066b <__GI_raise+203>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI_raise:
>   0x00007f61e8e805a0 <+0>:	sub    $0x118,%rsp
>   0x00007f61e8e805a7 <+7>:	mov    %edi,%r8d
>   0x00007f61e8e805aa <+10>:	mov    $0x8,%r10d
>   0x00007f61e8e805b0 <+16>:	movdqa 0x1662e8(%rip),%xmm0        # 0x7f61e8fe68a0
>   0x00007f61e8e805b8 <+24>:	mov    %rsp,%r9
>   0x00007f61e8e805bb <+27>:	mov    %fs:0x28,%rax
>   0x00007f61e8e805c4 <+36>:	mov    %rax,0x108(%rsp)
>   0x00007f61e8e805cc <+44>:	xor    %eax,%eax
>   0x00007f61e8e805ce <+46>:	movaps %xmm0,0x80(%rsp)
>   0x00007f61e8e805d6 <+54>:	pcmpeqd %xmm0,%xmm0
>   0x00007f61e8e805da <+58>:	lea    0x80(%rsp),%rsi
>   0x00007f61e8e805e2 <+66>:	mov    %r9,%rdx
>   0x00007f61e8e805e5 <+69>:	xor    %edi,%edi
>   0x00007f61e8e805e7 <+71>:	mov    $0xe,%eax
>   0x00007f61e8e805ec <+76>:	movaps %xmm0,0x90(%rsp)
>   0x00007f61e8e805f4 <+84>:	movaps %xmm0,0xa0(%rsp)
>   0x00007f61e8e805fc <+92>:	movaps %xmm0,0xb0(%rsp)
>   0x00007f61e8e80604 <+100>:	movaps %xmm0,0xc0(%rsp)
>   0x00007f61e8e8060c <+108>:	movaps %xmm0,0xd0(%rsp)
>   0x00007f61e8e80614 <+116>:	movaps %xmm0,0xe0(%rsp)
>   0x00007f61e8e8061c <+124>:	movaps %xmm0,0xf0(%rsp)
>   0x00007f61e8e80624 <+132>:	syscall 
>   0x00007f61e8e80626 <+134>:	mov    $0x27,%edi
>   0x00007f61e8e8062b <+139>:	mov    %edi,%eax
>   0x00007f61e8e8062d <+141>:	syscall 
>   0x00007f61e8e8062f <+143>:	mov    %rax,%rdi
>   0x00007f61e8e80632 <+146>:	mov    $0xba,%eax
>   0x00007f61e8e80637 <+151>:	syscall 
>   0x00007f61e8e80639 <+153>:	movslq %eax,%rsi
>   0x00007f61e8e8063c <+156>:	movslq %edi,%rdi
>   0x00007f61e8e8063f <+159>:	movslq %r8d,%rdx
>   0x00007f61e8e80642 <+162>:	mov    $0xea,%eax
>   0x00007f61e8e80647 <+167>:	syscall 
>   0x00007f61e8e80649 <+169>:	cmp    $0xfffffffffffff000,%rax
>   0x00007f61e8e8064f <+175>:	ja     0x7f61e8e80690 <__GI_raise+240>
>   0x00007f61e8e80651 <+177>:	mov    %eax,%r8d
>   0x00007f61e8e80654 <+180>:	mov    $0x8,%r10d
>   0x00007f61e8e8065a <+186>:	xor    %edx,%edx
>   0x00007f61e8e8065c <+188>:	mov    %r9,%rsi
>   0x00007f61e8e8065f <+191>:	mov    $0x2,%edi
>   0x00007f61e8e80664 <+196>:	mov    $0xe,%eax
>   0x00007f61e8e80669 <+201>:	syscall 
>=> 0x00007f61e8e8066b <+203>:	mov    0x108(%rsp),%rcx
>   0x00007f61e8e80673 <+211>:	xor    %fs:0x28,%rcx
>   0x00007f61e8e8067c <+220>:	mov    %r8d,%eax
>   0x00007f61e8e8067f <+223>:	jne    0x7f61e8e806a4 <__GI_raise+260>
>   0x00007f61e8e80681 <+225>:	add    $0x118,%rsp
>   0x00007f61e8e80688 <+232>:	retq   
>   0x00007f61e8e80689 <+233>:	nopl   0x0(%rax)
>   0x00007f61e8e80690 <+240>:	mov    0x3947c9(%rip),%rdx        # 0x7f61e9214e60
>   0x00007f61e8e80697 <+247>:	neg    %eax
>   0x00007f61e8e80699 <+249>:	mov    $0xffffffff,%r8d
>   0x00007f61e8e8069f <+255>:	mov    %eax,%fs:(%rdx)
>   0x00007f61e8e806a2 <+258>:	jmp    0x7f61e8e80654 <__GI_raise+180>
>   0x00007f61e8e806a4 <+260>:	callq  0x7f61e8f6da30 <__stack_chk_fail>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1471524: 1299400 | 1299401 | 1299402 | 1299403 | 1299404 | 1299405 | 1299406 | 1299407 | 1299408 | 1299409 | 1299410