Attachment 1363326 Details for Bug 1521111 – File: backtrace

File: backtrace

backtrace (text/plain), 24.52 KB, created by Juraj Fiala on 2017-12-05 20:15:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Juraj Fiala

Created: 2017-12-05 20:15:42 UTC

Size: 24.52 KB

patch

obsolete

>[New LWP 27835]
>[New LWP 10536]
>[New LWP 10537]
>[New LWP 10540]
>[New LWP 10538]
>[New LWP 27922]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/xdg-desktop-portal'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  __strchr_sse2 () at ../sysdeps/x86_64/multiarch/../strchr.S:32
>32		movdqu	(%rdi), %xmm0
>[Current thread is 1 (Thread 0x7faf87fff700 (LWP 27835))]
>
>Thread 1 (Thread 0x7faf87fff700 (LWP 27835)):
>#0  __strchr_sse2 () at ../sysdeps/x86_64/multiarch/../strchr.S:32
>No locals.
>#1  0x00007faf9761c436 in expand_macro (macro=<optimized out>, exec=exec@entry=0x5602b680a940, info=info@entry=0x7faf74008930, uri_list=uri_list@entry=0x7faf87ffe8b8) at gdesktopappinfo.c:2300
>        uris = 0x7faf87ffebc0
>        expanded = <optimized out>
>        force_file_uri = 1
>        force_file_uri_macro = 102 'f'
>        uri = 0x0
>        __func__ = "expand_macro"
>#2  0x00007faf9761ccb4 in expand_application_parameters (error=0x0, argv=0x7faf87ffe8c8, argc=0x7faf87ffe8c0, uris=0x7faf87ffe8b8, exec_line=0x7faf7c007510 "/usr/bin/flatpak run --branch=master --arch=x86_64 --command=firefox --file-forwarding org.mozilla.FirefoxNightlyCSD @@u %u @@", info=0x7faf74008930) at gdesktopappinfo.c:2421
>        uri_list = <optimized out>
>        p = 0x7faf7c007589 "%u @@"
>        expanded_exec = 0x5602b680a940
>        res = <optimized out>
>#3  g_desktop_app_info_launch_uris_with_spawn (info=info@entry=0x7faf74008930, session_bus=session_bus@entry=0x5602b67bc030, exec_line=0x7faf7c007510 "/usr/bin/flatpak run --branch=master --arch=x86_64 --command=firefox --file-forwarding org.mozilla.FirefoxNightlyCSD @@u %u @@", uris=<optimized out>, uris@entry=0x7faf87ffebc0, launch_context=launch_context@entry=0x7faf80040100, spawn_flags=spawn_flags@entry=G_SPAWN_SEARCH_PATH, user_setup=0x0, user_setup_data=0x0, pid_callback=0x0, pid_callback_data=0x0, error=0x0) at gdesktopappinfo.c:2682
>        pid = 32687
>        launched_uris = <optimized out>
>        iter = <optimized out>
>        sn_id = 0x0
>        completed = 0
>        old_uris = <optimized out>
>        argv = 0x0
>        envp = 0x7faf7c026e00
>        argc = -2013271680
>        data = {user_setup = 0x0, user_setup_data = 0x7faf97019c70 <g_log_writer_default>, pid_envvar = 0x0}
>        __func__ = "g_desktop_app_info_launch_uris_with_spawn"
>#4  0x00007faf9761eab5 in g_desktop_app_info_launch_uris_internal (appinfo=0x7faf74008930, uris=0x7faf87ffebc0, launch_context=0x7faf80040100, spawn_flags=spawn_flags@entry=G_SPAWN_SEARCH_PATH, user_setup=user_setup@entry=0x0, user_setup_data=user_setup_data@entry=0x0, pid_callback=0x0, pid_callback_data=0x0, error=0x0) at gdesktopappinfo.c:2923
>        info = 0x7faf74008930
>        session_bus = 0x5602b67bc030
>        success = 1
>#5  0x00007faf9761eba9 in g_desktop_app_info_launch_uris (appinfo=<optimized out>, uris=<optimized out>, launch_context=<optimized out>, error=<optimized out>) at gdesktopappinfo.c:2946
>No locals.
>#6  0x00005602b4f78dde in launch_application_with_uri (choice_id=0x7faf7c027ff0 "org.mozilla.FirefoxNightlyCSD", uri=uri@entry=0x7faf7c007000 "https://bugzilla.gnome.org/attachment.cgi?id=364876&action=diff", parent_window=parent_window@entry=0x7faf80042530 "x11:2e00007", writable=writable@entry=0) at src/open-uri.c:206
>        desktop_id = 0x7faf80040a70 "org.mozilla.FirefoxNightlyCSD.desktop"
>        info = 0x7faf74008930
>        context = 0x7faf80040100
>        ruri = 0x0
>        uris = {data = 0x0, next = 0x0, prev = 0x7faf74008930}
>#7  0x00005602b4f7a123 in handle_open_in_thread_func (task=<optimized out>, source_object=<optimized out>, task_data=0x7faf7c0099e0, cancellable=<optimized out>) at src/open-uri.c:524
>        request = 0x7faf7c0099e0
>        parent_window = 0x7faf80042530 "x11:2e00007"
>        app_id = 0x7faf7c0013e0 "org.gnome.Geary"
>        uri = 0x7faf7c007000 "https://bugzilla.gnome.org/attachment.cgi?id=364876&action=diff"
>        error = 0x0
>        impl_request = 0x0
>        choices = 0x7faf7c0011e0
>        scheme = 0x7faf7c0093f0 "https"
>        content_type = 0x7faf7c001240 "x-scheme-handler/https"
>        latest_id = 0x0
>        basename = 0x0
>        latest_count = 0
>        latest_threshold = 2147483647
>        always_ask = 1
>        opts_builder = {u = {s = {partial_magic = 140391877700848, type = 0x7ffda39d9c20 <clock_gettime+512>, y = {140391877700912, 7356446224, 140391877700816, 1, 140391877700880, 39, 24, 140392129557764, 140391877700912, 140392121848182, 140391676407888, 94569651618688, 94569651583448, 94569651618688}}, x = {140391877700848, 140727348468768, 140391877700912, 7356446224, 140391877700816, 1, 140391877700880, 39, 24, 140392129557764, 140391877700912, 140392121848182, 140391676407888, 94569651618688, 94569651583448, 94569651618688}}}
>        skip_app_chooser = 1
>        fd = <optimized out>
>        writable = 0
>        request_auto_unlock477 = 0x7faf7c009a28
>#8  0x00007faf975b9df6 in g_task_thread_pool_thread (thread_data=0x5602b67dc380, pool_data=<optimized out>) at gtask.c:1328
>        task = 0x5602b67dc380
>#9  0x00007faf97039e90 in g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:307
>        pool = 0x5602b67c4b90
>#10 0x00007faf970394c6 in g_thread_proxy (data=0x7faf800138f0) at gthread.c:784
>        thread = 0x7faf800138f0
>        __func__ = "g_thread_proxy"
>#11 0x00007faf96b98609 in start_thread (arg=0x7faf87fff700) at pthread_create.c:465
>        pd = 0x7faf87fff700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140391877703424, -8652523519643999735, 140391877701248, 140727347435504, 0, 19, 8697295633599963657, 8697333516553691657}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#12 0x00007faf968c5e6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 2 (Thread 0x7faf97abd580 (LWP 10536)):
>#0  0x00007faf968b98bb in __GI___poll (fds=0x5602b682af10, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>#1  0x00007faf97011ed9 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x5602b682af10, timeout=<optimized out>, context=0x5602b67d3fb0) at gmain.c:4187
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7faf97021490 <g_poll>
>#2  g_main_context_iterate (context=0x5602b67d3fb0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3881
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 2
>        allocated_nfds = 2
>        fds = 0x5602b682af10
>#3  0x00007faf97012272 in g_main_loop_run (loop=0x5602b67c3800) at gmain.c:4082
>        __func__ = "g_main_loop_run"
>#4  0x00005602b4f76a99 in main (argc=<optimized out>, argv=<optimized out>) at src/xdg-desktop-portal.c:451
>        owner_id = 1
>        error = 0x0
>        session_bus = 0x5602b67bc030
>        context = 0x5602b67aa4f0
>
>Thread 3 (Thread 0x7faf8db5b700 (LWP 10537)):
>#0  0x00007faf968b98bb in __GI___poll (fds=0x5602b67ced60, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>#1  0x00007faf97011ed9 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x5602b67ced60, timeout=<optimized out>, context=0x5602b67cdf20) at gmain.c:4187
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7faf97021490 <g_poll>
>#2  g_main_context_iterate (context=context@entry=0x5602b67cdf20, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3881
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 2
>        allocated_nfds = 2
>        fds = 0x5602b67ced60
>#3  0x00007faf97011fec in g_main_context_iteration (context=0x5602b67cdf20, may_block=may_block@entry=1) at gmain.c:3947
>        retval = <optimized out>
>#4  0x00007faf97012031 in glib_worker_main (data=<optimized out>) at gmain.c:5742
>No locals.
>#5  0x00007faf970394c6 in g_thread_proxy (data=0x5602b67ce400) at gthread.c:784
>        thread = 0x5602b67ce400
>        __func__ = "g_thread_proxy"
>#6  0x00007faf96b98609 in start_thread (arg=0x7faf8db5b700) at pthread_create.c:465
>        pd = 0x7faf8db5b700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140391973500672, -8652523519643999735, 140391973498496, 140727347435120, 0, 0, 8697318227275424265, 8697333516553691657}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#7  0x00007faf968c5e6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 4 (Thread 0x7faf86d11700 (LWP 10540)):
>#0  0x00007faf968b98bb in __GI___poll (fds=0x5602b680c9c0, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>#1  0x00007faf97011ed9 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x5602b680c9c0, timeout=<optimized out>, context=0x5602b680ca70) at gmain.c:4187
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7faf97021490 <g_poll>
>#2  g_main_context_iterate (context=context@entry=0x5602b680ca70, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3881
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x5602b680c9c0
>#3  0x00007faf97011fec in g_main_context_iteration (context=context@entry=0x5602b680ca70, may_block=may_block@entry=1) at gmain.c:3947
>        retval = <optimized out>
>#4  0x00007faf86d1942d in dconf_gdbus_worker_thread (user_data=0x5602b680ca70) at dconf-gdbus-thread.c:82
>        context = 0x5602b680ca70
>#5  0x00007faf970394c6 in g_thread_proxy (data=0x7faf80006540) at gthread.c:784
>        thread = 0x7faf80006540
>        __func__ = "g_thread_proxy"
>#6  0x00007faf96b98609 in start_thread (arg=0x7faf86d11700) at pthread_create.c:465
>        pd = 0x7faf86d11700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140391857854208, -8652523519643999735, 140391857852032, 140727347432624, 0, 0, 8697297580293890569, 8697333516553691657}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#7  0x00007faf968c5e6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 5 (Thread 0x7faf8cf3f700 (LWP 10538)):
>#0  0x00007faf968b98bb in __GI___poll (fds=0x7faf80003d50, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>#1  0x00007faf97011ed9 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x7faf80003d50, timeout=<optimized out>, context=0x5602b67d9ce0) at gmain.c:4187
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7faf97021490 <g_poll>
>#2  g_main_context_iterate (context=0x5602b67d9ce0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3881
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 3
>        allocated_nfds = 3
>        fds = 0x7faf80003d50
>#3  0x00007faf97012272 in g_main_loop_run (loop=0x5602b67d9e20) at gmain.c:4082
>        __func__ = "g_main_loop_run"
>#4  0x00007faf975fab36 in gdbus_shared_thread_func (user_data=0x5602b67d9cb0) at gdbusprivate.c:275
>        data = 0x5602b67d9cb0
>#5  0x00007faf970394c6 in g_thread_proxy (data=0x5602b67ce4a0) at gthread.c:784
>        thread = 0x5602b67ce4a0
>        __func__ = "g_thread_proxy"
>#6  0x00007faf96b98609 in start_thread (arg=0x7faf8cf3f700) at pthread_create.c:465
>        pd = 0x7faf8cf3f700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140391960803072, -8652523519643999735, 140391960800896, 140727347435840, 0, 0, 8697319857215513097, 8697333516553691657}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#7  0x00007faf968c5e6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 6 (Thread 0x7faf86510700 (LWP 27922)):
>#0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
>No locals.
>#1  0x00007faf9705766a in g_cond_wait_until (cond=cond@entry=0x5602b67d39c8, mutex=mutex@entry=0x5602b67d39c0, end_time=end_time@entry=11029978934) at gthread-posix.c:1442
>        now = {tv_sec = 11029, tv_nsec = 478935614}
>        span = {tv_sec = 0, tv_nsec = 499998386}
>        sampled = 349
>        res = <optimized out>
>#2  0x00007faf96fe6381 in g_async_queue_pop_intern_unlocked (queue=0x5602b67d39c0, wait=wait@entry=1, end_time=11029978934) at gasyncqueue.c:422
>        retval = <optimized out>
>        __func__ = "g_async_queue_pop_intern_unlocked"
>#3  0x00007faf96fe6978 in g_async_queue_timeout_pop_unlocked (queue=<optimized out>, timeout=timeout@entry=500000) at gasyncqueue.c:570
>        end_time = <optimized out>
>#4  0x00007faf97039e64 in g_thread_pool_wait_for_new_task (pool=<optimized out>) at gthreadpool.c:262
>        task = <optimized out>
>#5  g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:296
>        pool = 0x5602b67c4b90
>#6  0x00007faf970394c6 in g_thread_proxy (data=0x7faf80013940) at gthread.c:784
>        thread = 0x7faf80013940
>        __func__ = "g_thread_proxy"
>#7  0x00007faf96b98609 in start_thread (arg=0x7faf86510700) at pthread_create.c:465
>        pd = 0x7faf86510700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140391849461504, -8652523519643999735, 140391849459328, 140391877698928, 0, 0, 8697298682489872905, 8697333516553691657}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>        __PRETTY_FUNCTION__ = "start_thread"
>#8  0x00007faf968c5e6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x00007faf975657c0  0x00007faf976454f2  Yes         /lib64/libgio-2.0.so.0
>0x00007faf972e5710  0x00007faf973173d5  Yes         /lib64/libgobject-2.0.so.0
>0x00007faf96fe1ed0  0x00007faf97059fb8  Yes         /lib64/libglib-2.0.so.0
>0x00007faf96db2ac0  0x00007faf96dc2de5  Yes         /lib64/libgcc_s.so.1
>0x00007faf96b96b00  0x00007faf96ba5251  Yes         /lib64/libpthread.so.0
>0x00007faf967cc790  0x00007faf9693b60c  Yes         /lib64/libc.so.6
>0x00007faf965a57c0  0x00007faf965a9f7a  Yes         /lib64/libffi.so.6
>0x00007faf963a10f0  0x00007faf963a1fe6  Yes         /lib64/libgmodule-2.0.so.0
>0x00007faf9619ce50  0x00007faf9619db7e  Yes         /lib64/libdl.so.2
>0x00007faf95f2a610  0x00007faf95f7c34d  Yes         /lib64/libpcre.so.1
>0x00007faf95d143d0  0x00007faf95d2123f  Yes         /lib64/libz.so.1
>0x00007faf95aefca0  0x00007faf95b06fcf  Yes         /lib64/libselinux.so.1
>0x00007faf958d2830  0x00007faf958e1d92  Yes         /lib64/libresolv.so.2
>0x00007faf95687a30  0x00007faf956ba868  No          /lib64/libmount.so.1
>0x00007faf978c8d50  0x00007faf978e8310  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007faf953f9120  0x00007faf954581e1  Yes         /lib64/libpcre2-8.so.0
>0x00007faf951b5e70  0x00007faf951e1fb8  No          /lib64/libblkid.so.1
>0x00007faf94fa8550  0x00007faf94fa9c43  No          /lib64/libuuid.so.1
>0x00007faf94da11a0  0x00007faf94da46b6  Yes         /lib64/librt.so.1
>0x00007faf8dfa8fd0  0x00007faf8dfc3946  No          /usr/lib64/gio/modules/libgvfsdbus.so
>0x00007faf8dd728e0  0x00007faf8dd898e6  No          /usr/lib64/gvfs/libgvfscommon.so
>0x00007faf8db5ce70  0x00007faf8db5d82a  Yes         /lib64/libutil.so.1
>0x00007faf8d153530  0x00007faf8d158228  No          /lib64/libnss_sss.so.2
>0x00007faf8cf422e0  0x00007faf8cf48cb1  Yes         /lib64/libnss_files.so.2
>0x00007faf8c324ae0  0x00007faf8c3355cd  Yes         /lib64/libproxy.so.1
>0x00007faf8c1171a0  0x00007faf8c11adcf  Yes         /lib64/libmodman.so.1
>0x00007faf87505100  0x00007faf875b57f8  Yes         /lib64/libstdc++.so.6
>0x00007faf8712b880  0x00007faf871d4985  Yes         /lib64/libm.so.6
>0x00007faf86f20900  0x00007faf86f2197a  Yes         /usr/lib64/gio/modules/libgiognomeproxy.so
>0x00007faf86d15c30  0x00007faf86d1ac2e  Yes         /usr/lib64/gio/modules/libdconfsettings.so
>$1 = 0x0
>$2 = 0x0
>rax            0x0	0
>rbx            0x5602b680a940	94569651808576
>rcx            0x7faf87ffe8b8	140391877699768
>rdx            0x7faf74008930	140391542196528
>rsi            0x23	35
>rdi            0x0	0
>rbp            0x7faf87ffe8b8	0x7faf87ffe8b8
>rsp            0x7faf87ffe7e8	0x7faf87ffe7e8
>r8             0x80	128
>r9             0x7faf7c026800	140391676536832
>r10            0x0	0
>r11            0x81	129
>r12            0x5602b680a940	94569651808576
>r13            0x7faf87ffebc0	140391877700544
>r14            0x0	0
>r15            0x0	0
>rip            0x7faf96858103	0x7faf96858103 <__strchr_sse2+35>
>eflags         0x10283	[ CF SF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __strchr_sse2:
>   0x00007faf968580e0 <+0>:	movd   %esi,%xmm1
>   0x00007faf968580e4 <+4>:	mov    %edi,%eax
>   0x00007faf968580e6 <+6>:	and    $0xfff,%eax
>   0x00007faf968580eb <+11>:	punpcklbw %xmm1,%xmm1
>   0x00007faf968580ef <+15>:	cmp    $0xfc0,%eax
>   0x00007faf968580f4 <+20>:	punpcklwd %xmm1,%xmm1
>   0x00007faf968580f8 <+24>:	pshufd $0x0,%xmm1,%xmm1
>   0x00007faf968580fd <+29>:	jg     0x7faf96858260 <__strchr_sse2+384>
>=> 0x00007faf96858103 <+35>:	movdqu (%rdi),%xmm0
>   0x00007faf96858107 <+39>:	pxor   %xmm3,%xmm3
>   0x00007faf9685810b <+43>:	movdqa %xmm0,%xmm4
>   0x00007faf9685810f <+47>:	pcmpeqb %xmm1,%xmm0
>   0x00007faf96858113 <+51>:	pcmpeqb %xmm3,%xmm4
>   0x00007faf96858117 <+55>:	por    %xmm4,%xmm0
>   0x00007faf9685811b <+59>:	pmovmskb %xmm0,%eax
>   0x00007faf9685811f <+63>:	test   %eax,%eax
>   0x00007faf96858121 <+65>:	je     0x7faf96858138 <__strchr_sse2+88>
>   0x00007faf96858123 <+67>:	bsf    %eax,%eax
>   0x00007faf96858126 <+70>:	mov    $0x0,%edx
>   0x00007faf9685812b <+75>:	lea    (%rdi,%rax,1),%rax
>   0x00007faf9685812f <+79>:	cmp    %sil,(%rax)
>   0x00007faf96858132 <+82>:	cmovne %rdx,%rax
>   0x00007faf96858136 <+86>:	retq   
>   0x00007faf96858137 <+87>:	nop
>   0x00007faf96858138 <+88>:	movdqu 0x10(%rdi),%xmm0
>   0x00007faf9685813d <+93>:	movdqa %xmm0,%xmm4
>   0x00007faf96858141 <+97>:	pcmpeqb %xmm1,%xmm0
>   0x00007faf96858145 <+101>:	pcmpeqb %xmm3,%xmm4
>   0x00007faf96858149 <+105>:	por    %xmm4,%xmm0
>   0x00007faf9685814d <+109>:	pmovmskb %xmm0,%ecx
>   0x00007faf96858151 <+113>:	movdqu 0x20(%rdi),%xmm0
>   0x00007faf96858156 <+118>:	movdqa %xmm0,%xmm4
>   0x00007faf9685815a <+122>:	pcmpeqb %xmm1,%xmm0
>   0x00007faf9685815e <+126>:	shl    $0x10,%rcx
>   0x00007faf96858162 <+130>:	pcmpeqb %xmm3,%xmm4
>   0x00007faf96858166 <+134>:	por    %xmm4,%xmm0
>   0x00007faf9685816a <+138>:	pmovmskb %xmm0,%eax
>   0x00007faf9685816e <+142>:	movdqu 0x30(%rdi),%xmm0
>   0x00007faf96858173 <+147>:	pcmpeqb %xmm0,%xmm3
>   0x00007faf96858177 <+151>:	shl    $0x20,%rax
>   0x00007faf9685817b <+155>:	pcmpeqb %xmm1,%xmm0
>   0x00007faf9685817f <+159>:	or     %rcx,%rax
>   0x00007faf96858182 <+162>:	por    %xmm3,%xmm0
>   0x00007faf96858186 <+166>:	pmovmskb %xmm0,%ecx
>   0x00007faf9685818a <+170>:	shl    $0x30,%rcx
>   0x00007faf9685818e <+174>:	or     %rcx,%rax
>   0x00007faf96858191 <+177>:	test   %rax,%rax
>   0x00007faf96858194 <+180>:	jne    0x7faf96858240 <__strchr_sse2+352>
>   0x00007faf9685819a <+186>:	nopw   0x0(%rax,%rax,1)
>   0x00007faf968581a0 <+192>:	pxor   %xmm6,%xmm6
>   0x00007faf968581a4 <+196>:	and    $0xffffffffffffffc0,%rdi
>   0x00007faf968581a8 <+200>:	add    $0x40,%rdi
>   0x00007faf968581ac <+204>:	movdqa (%rdi),%xmm5
>   0x00007faf968581b0 <+208>:	movdqa 0x10(%rdi),%xmm2
>   0x00007faf968581b5 <+213>:	movdqa 0x20(%rdi),%xmm3
>   0x00007faf968581ba <+218>:	pxor   %xmm1,%xmm5
>   0x00007faf968581be <+222>:	movdqa 0x30(%rdi),%xmm4
>   0x00007faf968581c3 <+227>:	pxor   %xmm1,%xmm2
>   0x00007faf968581c7 <+231>:	pxor   %xmm1,%xmm3
>   0x00007faf968581cb <+235>:	pminub (%rdi),%xmm5
>   0x00007faf968581cf <+239>:	pxor   %xmm1,%xmm4
>   0x00007faf968581d3 <+243>:	pminub 0x10(%rdi),%xmm2
>   0x00007faf968581d8 <+248>:	pminub 0x20(%rdi),%xmm3
>   0x00007faf968581dd <+253>:	pminub %xmm2,%xmm5
>   0x00007faf968581e1 <+257>:	pminub 0x30(%rdi),%xmm4
>   0x00007faf968581e6 <+262>:	pminub %xmm3,%xmm5
>   0x00007faf968581ea <+266>:	pminub %xmm4,%xmm5
>   0x00007faf968581ee <+270>:	pcmpeqb %xmm6,%xmm5
>   0x00007faf968581f2 <+274>:	pmovmskb %xmm5,%eax
>   0x00007faf968581f6 <+278>:	test   %eax,%eax
>   0x00007faf968581f8 <+280>:	je     0x7faf968581a8 <__strchr_sse2+200>
>   0x00007faf968581fa <+282>:	movdqa (%rdi),%xmm5
>   0x00007faf968581fe <+286>:	movdqa %xmm5,%xmm0
>   0x00007faf96858202 <+290>:	pcmpeqb %xmm1,%xmm5
>   0x00007faf96858206 <+294>:	pcmpeqb %xmm6,%xmm0
>   0x00007faf9685820a <+298>:	por    %xmm0,%xmm5
>   0x00007faf9685820e <+302>:	pcmpeqb %xmm6,%xmm2
>   0x00007faf96858212 <+306>:	pcmpeqb %xmm6,%xmm3
>   0x00007faf96858216 <+310>:	pcmpeqb %xmm6,%xmm4
>   0x00007faf9685821a <+314>:	pmovmskb %xmm5,%ecx
>   0x00007faf9685821e <+318>:	pmovmskb %xmm2,%eax
>   0x00007faf96858222 <+322>:	shl    $0x10,%rax
>   0x00007faf96858226 <+326>:	pmovmskb %xmm3,%r8d
>   0x00007faf9685822b <+331>:	pmovmskb %xmm4,%edx
>   0x00007faf9685822f <+335>:	shl    $0x20,%r8
>   0x00007faf96858233 <+339>:	or     %r8,%rax
>   0x00007faf96858236 <+342>:	or     %rcx,%rax
>   0x00007faf96858239 <+345>:	shl    $0x30,%rdx
>   0x00007faf9685823d <+349>:	or     %rdx,%rax
>   0x00007faf96858240 <+352>:	bsf    %rax,%rax
>   0x00007faf96858244 <+356>:	mov    $0x0,%edx
>   0x00007faf96858249 <+361>:	lea    (%rdi,%rax,1),%rax
>   0x00007faf9685824d <+365>:	cmp    %sil,(%rax)
>   0x00007faf96858250 <+368>:	cmovne %rdx,%rax
>   0x00007faf96858254 <+372>:	retq   
>   0x00007faf96858255 <+373>:	nop
>   0x00007faf96858256 <+374>:	nopw   %cs:0x0(%rax,%rax,1)
>   0x00007faf96858260 <+384>:	mov    %rdi,%rdx
>   0x00007faf96858263 <+387>:	pxor   %xmm2,%xmm2
>   0x00007faf96858267 <+391>:	and    $0xffffffffffffffc0,%rdx
>   0x00007faf9685826b <+395>:	movdqa %xmm1,%xmm0
>   0x00007faf9685826f <+399>:	movdqa (%rdx),%xmm3
>   0x00007faf96858273 <+403>:	movdqa %xmm3,%xmm4
>   0x00007faf96858277 <+407>:	pcmpeqb %xmm1,%xmm3
>   0x00007faf9685827b <+411>:	pcmpeqb %xmm2,%xmm4
>   0x00007faf9685827f <+415>:	por    %xmm4,%xmm3
>   0x00007faf96858283 <+419>:	pmovmskb %xmm3,%r8d
>   0x00007faf96858288 <+424>:	movdqa 0x10(%rdx),%xmm3
>   0x00007faf9685828d <+429>:	movdqa %xmm3,%xmm4
>   0x00007faf96858291 <+433>:	pcmpeqb %xmm1,%xmm3
>   0x00007faf96858295 <+437>:	pcmpeqb %xmm2,%xmm4
>   0x00007faf96858299 <+441>:	por    %xmm4,%xmm3
>   0x00007faf9685829d <+445>:	pmovmskb %xmm3,%eax
>   0x00007faf968582a1 <+449>:	movdqa 0x20(%rdx),%xmm3
>   0x00007faf968582a6 <+454>:	movdqa %xmm3,%xmm4
>   0x00007faf968582aa <+458>:	pcmpeqb %xmm1,%xmm3
>   0x00007faf968582ae <+462>:	shl    $0x10,%rax
>   0x00007faf968582b2 <+466>:	pcmpeqb %xmm2,%xmm4
>   0x00007faf968582b6 <+470>:	por    %xmm4,%xmm3
>   0x00007faf968582ba <+474>:	pmovmskb %xmm3,%r9d
>   0x00007faf968582bf <+479>:	movdqa 0x30(%rdx),%xmm3
>   0x00007faf968582c4 <+484>:	pcmpeqb %xmm3,%xmm2
>   0x00007faf968582c8 <+488>:	shl    $0x20,%r9
>   0x00007faf968582cc <+492>:	pcmpeqb %xmm3,%xmm0
>   0x00007faf968582d0 <+496>:	or     %r9,%rax
>   0x00007faf968582d3 <+499>:	or     %r8,%rax
>   0x00007faf968582d6 <+502>:	por    %xmm2,%xmm0
>   0x00007faf968582da <+506>:	pmovmskb %xmm0,%ecx
>   0x00007faf968582de <+510>:	shl    $0x30,%rcx
>   0x00007faf968582e2 <+514>:	or     %rcx,%rax
>   0x00007faf968582e5 <+517>:	mov    %edi,%ecx
>   0x00007faf968582e7 <+519>:	sub    %dl,%cl
>   0x00007faf968582e9 <+521>:	shr    %cl,%rax
>   0x00007faf968582ec <+524>:	test   %rax,%rax
>   0x00007faf968582ef <+527>:	jne    0x7faf96858240 <__strchr_sse2+352>
>   0x00007faf968582f5 <+533>:	jmpq   0x7faf9685819a <__strchr_sse2+186>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1521111: 1363326 | 1363327 | 1363328 | 1363329 | 1363330 | 1363331 | 1363332 | 1363333 | 1363334 | 1363335 | 1363336 | 1363337