Attachment 1390513 Details for Bug 1541608 – File: backtrace

File: backtrace

backtrace (text/plain), 15.54 KB, created by Juraj Fiala on 2018-02-03 08:07:27 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Juraj Fiala

Created: 2018-02-03 08:07:27 UTC

Size: 15.54 KB

patch

obsolete

>[New LWP 11165]
>[New LWP 11167]
>[New LWP 11166]
>[New LWP 11305]
>[New LWP 11169]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/xdg-desktop-portal'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  g_variant_ref (value=0x7f71848353c1 <g_queue_push_head+17>) at gvariant-core.c:663
>[Current thread is 1 (Thread 0x7f71852cdf80 (LWP 11165))]
>
>Thread 1 (Thread 0x7f71852cdf80 (LWP 11165)):
>#0  g_variant_ref (value=0x7f71848353c1 <g_queue_push_head+17>) at gvariant-core.c:663
>No locals.
>#1  0x000055b428e749a8 in save_file_done (source=0x55b4296a3410, result=<optimized out>, data=0x7f7170008e90) at src/file-chooser.c:497
>        request = 0x7f7170008e90
>        response = 32625
>        options = 0x7f71848353c1 <g_queue_push_head+17>
>        error = 0x55b4296c0830
>        task = 0x0
>#2  0x00007f7184dcc2c4 in g_task_return_now (task=0x7f7164008c30) at gtask.c:1145
>No locals.
>#3  0x00007f7184dccce6 in g_task_return (task=0x7f7164008c30, type=<optimized out>) at gtask.c:1203
>        source = 0x7f716c015170
>#4  0x00007f7184e0b049 in reply_cb (connection=<optimized out>, res=<optimized out>, user_data=0x7f7164008c30) at gdbusproxy.c:2579
>        task = 0x7f7164008c30
>        value = <optimized out>
>        error = 0x55b4296c0830
>        fd_list = 0x0
>#5  0x00007f7184dcc2c4 in g_task_return_now (task=0x7f717000d940) at gtask.c:1145
>No locals.
>#6  0x00007f7184dccce6 in g_task_return (task=0x7f717000d940, type=<optimized out>) at gtask.c:1203
>        source = 0x7f716c015170
>#7  0x00007f7184dffcb9 in g_dbus_connection_call_done (source=<optimized out>, result=0x7f717000d870, user_data=0x7f717000d940) at gdbusconnection.c:5720
>        connection = <optimized out>
>        task = 0x7f717000d940
>        state = 0x7f71640021a0
>        error = 0x55b4296c0830
>        reply = 0x7f716c005c50
>        value = <optimized out>
>#8  0x00007f7184dcc2c4 in g_task_return_now (task=0x7f717000d870) at gtask.c:1145
>No locals.
>#9  0x00007f7184dcc2f9 in complete_in_idle_cb (task=task@entry=0x7f717000d870) at gtask.c:1159
>No locals.
>#10 0x00007f7184821577 in g_idle_dispatch (source=0x7f716c015170, callback=0x7f7184dcc2f0 <complete_in_idle_cb>, user_data=0x7f717000d870) at gmain.c:5486
>        again = <optimized out>
>#11 0x00007f7184824b77 in g_main_dispatch (context=0x55b4296b5110) at gmain.c:3142
>        dispatch = 0x7f7184821560 <g_idle_dispatch>
>        prev_source = 0x0
>        was_in_call = 0
>        user_data = 0x7f717000d870
>        callback = 0x7f7184dcc2f0 <complete_in_idle_cb>
>        cb_funcs = 0x7f7184aec280 <g_source_callback_funcs>
>        cb_data = 0x7f716c00ecf0
>        need_destroy = <optimized out>
>        source = 0x7f716c015170
>        current = 0x55b42969c860
>        i = 14
>#12 g_main_context_dispatch (context=context@entry=0x55b4296b5110) at gmain.c:3795
>No locals.
>#13 0x00007f7184824f20 in g_main_context_iterate (context=0x55b4296b5110, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3868
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = 1
>        nfds = <optimized out>
>        allocated_nfds = 2
>        fds = 0x55b429703840
>#14 0x00007f7184825232 in g_main_loop_run (loop=0x55b4296a3800) at gmain.c:4064
>        __func__ = "g_main_loop_run"
>#15 0x000055b428e73a99 in main (argc=<optimized out>, argv=<optimized out>) at src/xdg-desktop-portal.c:451
>        owner_id = 1
>        error = 0x0
>        session_bus = 0x55b42969d030
>        context = 0x55b42968a4f0
>
>Thread 2 (Thread 0x7f717a752700 (LWP 11167)):
>#0  0x00007f71840cc3db in __GI___poll (fds=0x55b4296baa20, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>#1  0x00007f7184824e99 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x55b4296baa20, timeout=<optimized out>, context=0x55b4296b8d50) at gmain.c:4169
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f7184834450 <g_poll>
>#2  g_main_context_iterate (context=0x55b4296b8d50, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3863
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 3
>        allocated_nfds = 3
>        fds = 0x55b4296baa20
>#3  0x00007f7184825232 in g_main_loop_run (loop=0x55b4296b8e90) at gmain.c:4064
>        __func__ = "g_main_loop_run"
>#4  0x00007f7184e0db56 in gdbus_shared_thread_func (user_data=0x55b4296b8d20) at gdbusprivate.c:275
>        data = 0x55b4296b8d20
>#5  0x00007f718484c486 in g_thread_proxy (data=0x55b4296ae4a0) at gthread.c:784
>        thread = 0x55b4296ae4a0
>        __func__ = "g_thread_proxy"
>#6  0x00007f71843ab61b in start_thread (arg=0x7f717a752700) at pthread_create.c:465
>        pd = 0x7f717a752700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140125362530048, -5056996196467743023, 140125362527872, 0, 140734327877264, 140125362530752, 5130448981700765393, 5130436385908319953}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f71840d898f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 3 (Thread 0x7f717b36e700 (LWP 11166)):
>#0  0x00007f71840cc3db in __GI___poll (fds=0x55b4296af280, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>#1  0x00007f7184824e99 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x55b4296af280, timeout=<optimized out>, context=0x55b4296adf80) at gmain.c:4169
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f7184834450 <g_poll>
>#2  g_main_context_iterate (context=context@entry=0x55b4296adf80, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3863
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x55b4296af280
>#3  0x00007f7184824fac in g_main_context_iteration (context=0x55b4296adf80, may_block=may_block@entry=1) at gmain.c:3929
>        retval = <optimized out>
>#4  0x00007f7184824ff1 in glib_worker_main (data=<optimized out>) at gmain.c:5724
>No locals.
>#5  0x00007f718484c486 in g_thread_proxy (data=0x55b4296ae400) at gthread.c:784
>        thread = 0x55b4296ae400
>        __func__ = "g_thread_proxy"
>#6  0x00007f71843ab61b in start_thread (arg=0x7f717b36e700) at pthread_create.c:465
>        pd = 0x7f717b36e700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140125375227648, -5056996196467743023, 140125375225472, 0, 140734327876544, 140125375228352, 5130451741217253073, 5130436385908319953}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f71840d898f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 4 (Thread 0x7f7179f51700 (LWP 11305)):
>#0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
>No locals.
>#1  0x00007f718486a62a in g_cond_wait_until (cond=cond@entry=0x55b4296b2338, mutex=mutex@entry=0x55b4296b2330, end_time=end_time@entry=12198596035) at gthread-posix.c:1442
>        now = {tv_sec = 12183, tv_nsec = 596036677}
>        span = {tv_sec = 14, tv_nsec = 999998323}
>        sampled = 9
>        res = <optimized out>
>#2  0x00007f71847f9381 in g_async_queue_pop_intern_unlocked (queue=queue@entry=0x55b4296b2330, wait=wait@entry=1, end_time=end_time@entry=12198596035) at gasyncqueue.c:422
>        retval = <optimized out>
>        __func__ = "g_async_queue_pop_intern_unlocked"
>#3  0x00007f71847f993c in g_async_queue_timeout_pop (queue=0x55b4296b2330, timeout=timeout@entry=15000000) at gasyncqueue.c:543
>        end_time = 12198596035
>        retval = <optimized out>
>#4  0x00007f718484cf2e in g_thread_pool_wait_for_new_pool () at gthreadpool.c:167
>        pool = <optimized out>
>        local_wakeup_thread_serial = <optimized out>
>        last_wakeup_thread_serial = <optimized out>
>        have_relayed_thread_marker = <optimized out>
>#5  g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:364
>        free_pool = <optimized out>
>        pool = <optimized out>
>#6  0x00007f718484c486 in g_thread_proxy (data=0x55b4296aee80) at gthread.c:784
>        thread = 0x55b4296aee80
>        __func__ = "g_thread_proxy"
>#7  0x00007f71843ab61b in start_thread (arg=0x7f7179f51700) at pthread_create.c:465
>        pd = 0x7f7179f51700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140125354137344, -5056996196467743023, 140125354135168, 0, 140734327876848, 94232277391456, 5130447881652266705, 5130436385908319953}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#8  0x00007f71840d898f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 5 (Thread 0x7f716bfff700 (LWP 11169)):
>#0  0x00007f71840cc3db in __GI___poll (fds=0x55b4296d1410, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>#1  0x00007f7184824e99 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x55b4296d1410, timeout=<optimized out>, context=0x55b4296ece30) at gmain.c:4169
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f7184834450 <g_poll>
>#2  g_main_context_iterate (context=context@entry=0x55b4296ece30, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3863
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x55b4296d1410
>#3  0x00007f7184824fac in g_main_context_iteration (context=context@entry=0x55b4296ece30, may_block=may_block@entry=1) at gmain.c:3929
>        retval = <optimized out>
>#4  0x00007f717864142d in dconf_gdbus_worker_thread (user_data=0x55b4296ece30) at dconf-gdbus-thread.c:82
>        context = 0x55b4296ece30
>#5  0x00007f718484c486 in g_thread_proxy (data=0x7f716c006540) at gthread.c:784
>        thread = 0x7f716c006540
>        __func__ = "g_thread_proxy"
>#6  0x00007f71843ab61b in start_thread (arg=0x7f716bfff700) at pthread_create.c:465
>        pd = 0x7f716bfff700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140125119969024, -5056996196467743023, 140125119966848, 0, 140734327874048, 140125119969728, 5130487553191438033, 5130436385908319953}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f71840d898f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x00007f7184d78810  0x00007f7184e586e2  Yes         /lib64/libgio-2.0.so.0
>0x00007f7184af8710  0x00007f7184b2a3d5  Yes         /lib64/libgobject-2.0.so.0
>0x00007f71847f4ed0  0x00007f718486cf78  Yes         /lib64/libglib-2.0.so.0
>0x00007f71845c5ac0  0x00007f71845d5de5  Yes         /lib64/libgcc_s.so.1
>0x00007f71843a9b10  0x00007f71843b82d1  Yes         /lib64/libpthread.so.0
>0x00007f7183fe1770  0x00007f718414e16c  Yes         /lib64/libc.so.6
>0x00007f7183dba7c0  0x00007f7183dbef7a  Yes         /lib64/libffi.so.6
>0x00007f7183bb60f0  0x00007f7183bb6fe6  Yes         /lib64/libgmodule-2.0.so.0
>0x00007f71839b1e50  0x00007f71839b2b7e  Yes         /lib64/libdl.so.2
>0x00007f718373f610  0x00007f718379133d  Yes         /lib64/libpcre.so.1
>0x00007f71835293d0  0x00007f718353623f  Yes         /lib64/libz.so.1
>0x00007f7183304ca0  0x00007f718331bfcf  Yes         /lib64/libselinux.so.1
>0x00007f71830e7830  0x00007f71830f6d92  Yes         /lib64/libresolv.so.2
>0x00007f7182e9ca30  0x00007f7182ecf868  No          /lib64/libmount.so.1
>0x00007f71850dbd50  0x00007f71850fac50  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f7182c0e120  0x00007f7182c6cf01  Yes         /lib64/libpcre2-8.so.0
>0x00007f71829cae70  0x00007f71829f6fb8  No          /lib64/libblkid.so.1
>0x00007f71827bd550  0x00007f71827bec43  No          /lib64/libuuid.so.1
>0x00007f71825b61a0  0x00007f71825b96b6  Yes         /lib64/librt.so.1
>0x00007f717b7bbfd0  0x00007f717b7d6946  No          /usr/lib64/gio/modules/libgvfsdbus.so
>0x00007f717b5858e0  0x00007f717b59c8e6  No          /usr/lib64/gvfs/libgvfscommon.so
>0x00007f717b36fe70  0x00007f717b37082a  Yes         /lib64/libutil.so.1
>0x00007f717a966530  0x00007f717a96b259  No          /lib64/libnss_sss.so.2
>0x00007f717a7552e0  0x00007f717a75bcb1  Yes         /lib64/libnss_files.so.2
>0x00007f7179336ae0  0x00007f71793475cd  Yes         /lib64/libproxy.so.1
>0x00007f71791291a0  0x00007f717912cdcf  Yes         /lib64/libmodman.so.1
>0x00007f7178e2d100  0x00007f7178edd7f8  Yes         /lib64/libstdc++.so.6
>0x00007f7178a53880  0x00007f7178afc985  Yes         /lib64/libm.so.6
>0x00007f7178848900  0x00007f717884997a  Yes         /usr/lib64/gio/modules/libgiognomeproxy.so
>0x00007f717863dc30  0x00007f7178642c2e  Yes         /usr/lib64/gio/modules/libdconfsettings.so
>$1 = 0x0
>$2 = 0x0
>rax            0x7f71848353c1	140125531231169
>rbx            0x7f7170008e90	140125187116688
>rcx            0x2	2
>rdx            0x3d8d4800	1032669184
>rsi            0x2	2
>rdi            0x7f71848353c1	140125531231169
>rbp            0x7f71	0x7f71
>rsp            0x7fff439eed90	0x7fff439eed90
>r8             0x7f716c000020	140125119971360
>r9             0x2	2
>r10            0xffffffffffffffb0	-80
>r11            0x50	80
>r12            0x55b4296a3410	94232277300240
>r13            0x7fff439eee90	140734327877264
>r14            0x7f717000d870	140125187135600
>r15            0x7f716c015170	140125120057712
>rip            0x7f7184860a73	0x7f7184860a73 <g_variant_ref+19>
>eflags         0x10206	[ PF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function g_variant_ref:
>   0x00007f7184860a60 <+0>:	sub    $0x18,%rsp
>   0x00007f7184860a64 <+4>:	test   %rdi,%rdi
>   0x00007f7184860a67 <+7>:	mov    %rdi,%rax
>   0x00007f7184860a6a <+10>:	je     0x7f7184860aa8 <g_variant_ref+72>
>   0x00007f7184860a6c <+12>:	mov    0x24(%rdi),%edx
>   0x00007f7184860a6f <+15>:	test   %edx,%edx
>   0x00007f7184860a71 <+17>:	jle    0x7f7184860a80 <g_variant_ref+32>
>=> 0x00007f7184860a73 <+19>:	lock addl $0x1,0x24(%rdi)
>   0x00007f7184860a78 <+24>:	add    $0x18,%rsp
>   0x00007f7184860a7c <+28>:	retq   
>   0x00007f7184860a7d <+29>:	nopl   (%rax)
>   0x00007f7184860a80 <+32>:	lea    0x6ad6b(%rip),%rdx        # 0x7f71848cb7f2
>   0x00007f7184860a87 <+39>:	lea    0x6af6a(%rip),%rsi        # 0x7f71848cb9f8 <__func__.4763>
>   0x00007f7184860a8e <+46>:	lea    0xc519(%rip),%rdi        # 0x7f718486cfae
>   0x00007f7184860a95 <+53>:	callq  0x7f718482c0e0 <g_return_if_fail_warning>
>   0x00007f7184860a9a <+58>:	xor    %eax,%eax
>   0x00007f7184860a9c <+60>:	add    $0x18,%rsp
>   0x00007f7184860aa0 <+64>:	retq   
>   0x00007f7184860aa1 <+65>:	nopl   0x0(%rax)
>   0x00007f7184860aa8 <+72>:	mov    %rdi,0x8(%rsp)
>   0x00007f7184860aad <+77>:	lea    0x683b8(%rip),%rdx        # 0x7f71848c8e6c
>   0x00007f7184860ab4 <+84>:	lea    0x6af3d(%rip),%rsi        # 0x7f71848cb9f8 <__func__.4763>
>   0x00007f7184860abb <+91>:	lea    0xc4ec(%rip),%rdi        # 0x7f718486cfae
>   0x00007f7184860ac2 <+98>:	callq  0x7f718482c0e0 <g_return_if_fail_warning>
>   0x00007f7184860ac7 <+103>:	mov    0x8(%rsp),%rax
>   0x00007f7184860acc <+108>:	add    $0x18,%rsp
>   0x00007f7184860ad0 <+112>:	retq   
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1541608: 1390513 | 1390514 | 1390515 | 1390516 | 1390517 | 1390518 | 1390519 | 1390520 | 1390521 | 1390522 | 1390523 | 1390524