Attachment 1393909 Details for Bug 1543978 – File: backtrace

File: backtrace

backtrace (text/plain), 15.13 KB, created by Allan Poulsen on 2018-02-09 17:25:05 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Allan Poulsen

Created: 2018-02-09 17:25:05 UTC

Size: 15.13 KB

patch

obsolete

>[New LWP 6724]
>[New LWP 6725]
>[New LWP 6741]
>[New LWP 6726]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/xdg-desktop-portal'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  0x000055ec9f36133a in export_portal_implementation (connection=0x55eca150b030, skeleton=0x0) at src/xdg-desktop-portal.c:316
>[Current thread is 1 (Thread 0x7ff1ff37df80 (LWP 6724))]
>
>Thread 1 (Thread 0x7ff1ff37df80 (LWP 6724)):
>#0  0x000055ec9f36133a in export_portal_implementation (connection=0x55eca150b030, skeleton=0x0) at src/xdg-desktop-portal.c:316
>        error = 0x0
>#1  0x000055ec9f361427 in on_bus_acquired (connection=0x55eca150b030, name=<optimized out>, user_data=<optimized out>) at src/xdg-desktop-portal.c:340
>        implementation = <optimized out>
>#2  0x00007ff1feeca0c4 in connection_get_cb (source_object=<optimized out>, res=0x55eca152a910, user_data=0x55eca152a6c0) at gdbusnameowning.c:487
>        client = 0x55eca152a6c0
>#3  0x00007ff1fee8e2c4 in g_task_return_now (task=0x55eca152a910) at gtask.c:1145
>No locals.
>#4  0x00007ff1fee8ece6 in g_task_return (task=0x55eca152a910, type=<optimized out>) at gtask.c:1203
>        source = 0x7ff1e4001be0
>#5  0x00007ff1feebcde2 in bus_get_async_initable_cb (source_object=0x55eca150b030, res=<optimized out>, user_data=0x55eca152a910) at gdbusconnection.c:7302
>        task = 0x55eca152a910
>        error = 0x0
>#6  0x00007ff1fee8e2c4 in g_task_return_now (task=0x55eca152a9e0) at gtask.c:1145
>No locals.
>#7  0x00007ff1fee8e2f9 in complete_in_idle_cb (task=task@entry=0x55eca152a9e0) at gtask.c:1159
>No locals.
>#8  0x00007ff1fe8e3577 in g_idle_dispatch (source=0x7ff1e4001be0, callback=0x7ff1fee8e2f0 <complete_in_idle_cb>, user_data=0x55eca152a9e0) at gmain.c:5486
>        again = <optimized out>
>#9  0x00007ff1fe8e6b77 in g_main_dispatch (context=0x55eca1522190) at gmain.c:3142
>        dispatch = 0x7ff1fe8e3560 <g_idle_dispatch>
>        prev_source = 0x0
>        was_in_call = 0
>        user_data = 0x55eca152a9e0
>        callback = 0x7ff1fee8e2f0 <complete_in_idle_cb>
>        cb_funcs = 0x7ff1febae280 <g_source_callback_funcs>
>        cb_data = 0x7ff1e4001c80
>        need_destroy = <optimized out>
>        source = 0x7ff1e4001be0
>        current = 0x55eca150db60
>        i = 0
>#10 g_main_context_dispatch (context=context@entry=0x55eca1522190) at gmain.c:3795
>No locals.
>#11 0x00007ff1fe8e6f20 in g_main_context_iterate (context=0x55eca1522190, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3868
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = 1
>        nfds = <optimized out>
>        allocated_nfds = 1
>        fds = 0x55eca1528cb0
>#12 0x00007ff1fe8e7232 in g_main_loop_run (loop=0x55eca1512800) at gmain.c:4064
>        __func__ = "g_main_loop_run"
>#13 0x000055ec9f360a99 in main (argc=<optimized out>, argv=<optimized out>) at src/xdg-desktop-portal.c:451
>        owner_id = 1
>        error = 0x0
>        session_bus = 0x55eca150b030
>        context = 0x55eca14f9430
>
>Thread 2 (Thread 0x7ff1f553c700 (LWP 6725)):
>#0  0x00007ff1fe18e3db in __GI___poll (fds=0x55eca151b520, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>#1  0x00007ff1fe8e6e99 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x55eca151b520, timeout=<optimized out>, context=0x55eca151cba0) at gmain.c:4169
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7ff1fe8f6450 <g_poll>
>#2  g_main_context_iterate (context=context@entry=0x55eca151cba0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3863
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x55eca151b520
>#3  0x00007ff1fe8e6fac in g_main_context_iteration (context=0x55eca151cba0, may_block=may_block@entry=1) at gmain.c:3929
>        retval = <optimized out>
>#4  0x00007ff1fe8e6ff1 in glib_worker_main (data=<optimized out>) at gmain.c:5724
>No locals.
>#5  0x00007ff1fe90e486 in g_thread_proxy (data=0x55eca151d000) at gthread.c:784
>        thread = 0x55eca151d000
>        __func__ = "g_thread_proxy"
>#6  0x00007ff1fe46d61b in start_thread (arg=0x7ff1f553c700) at pthread_create.c:465
>        pd = 0x7ff1f553c700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140677179754240, 6154294714743136762, 140677179752064, 0, 140730805916208, 140677179754944, -6157660077234576902, -6157670964175822342}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007ff1fe19a98f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 3 (Thread 0x7ff1ee6e6700 (LWP 6741)):
>#0  0x00007ff1fe18e3db in __GI___poll (fds=0x55eca155cd20, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>#1  0x00007ff1fe8e6e99 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x55eca155cd20, timeout=<optimized out>, context=0x55eca155cdb0) at gmain.c:4169
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7ff1fe8f6450 <g_poll>
>#2  g_main_context_iterate (context=context@entry=0x55eca155cdb0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3863
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x55eca155cd20
>#3  0x00007ff1fe8e6fac in g_main_context_iteration (context=context@entry=0x55eca155cdb0, may_block=may_block@entry=1) at gmain.c:3929
>        retval = <optimized out>
>#4  0x00007ff1ee6ee42d in dconf_gdbus_worker_thread (user_data=0x55eca155cdb0) at dconf-gdbus-thread.c:82
>        context = 0x55eca155cdb0
>#5  0x00007ff1fe90e486 in g_thread_proxy (data=0x7ff1e8006540) at gthread.c:784
>        thread = 0x7ff1e8006540
>        __func__ = "g_thread_proxy"
>#6  0x00007ff1fe46d61b in start_thread (arg=0x7ff1ee6e6700) at pthread_create.c:465
>        pd = 0x7ff1ee6e6700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140677064058624, 6154294714743136762, 140677064056448, 0, 140730805913712, 140677064059328, -6157635981394304518, -6157670964175822342}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007ff1fe19a98f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 4 (Thread 0x7ff1f4920700 (LWP 6726)):
>#0  0x00007ff1fe18e3db in __GI___poll (fds=0x7ff1e8003b20, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>#1  0x00007ff1fe8e6e99 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x7ff1e8003b20, timeout=<optimized out>, context=0x55eca15283f0) at gmain.c:4169
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7ff1fe8f6450 <g_poll>
>#2  g_main_context_iterate (context=0x55eca15283f0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3863
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 3
>        allocated_nfds = 3
>        fds = 0x7ff1e8003b20
>#3  0x00007ff1fe8e7232 in g_main_loop_run (loop=0x55eca1528530) at gmain.c:4064
>        __func__ = "g_main_loop_run"
>#4  0x00007ff1feecfb56 in gdbus_shared_thread_func (user_data=0x55eca15283c0) at gdbusprivate.c:275
>        data = 0x55eca15283c0
>#5  0x00007ff1fe90e486 in g_thread_proxy (data=0x55eca151d0a0) at gthread.c:784
>        thread = 0x55eca151d0a0
>        __func__ = "g_thread_proxy"
>#6  0x00007ff1fe46d61b in start_thread (arg=0x7ff1f4920700) at pthread_create.c:465
>        pd = 0x7ff1f4920700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140677167056640, 6154294714743136762, 140677167054464, 0, 140730805916928, 140677167057344, -6157657313423121926, -6157670964175822342}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007ff1fe19a98f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x00007ff1fee3a810  0x00007ff1fef1a6e2  Yes         /lib64/libgio-2.0.so.0
>0x00007ff1febba710  0x00007ff1febec3d5  Yes         /lib64/libgobject-2.0.so.0
>0x00007ff1fe8b6ed0  0x00007ff1fe92ef78  Yes         /lib64/libglib-2.0.so.0
>0x00007ff1fe687ac0  0x00007ff1fe697de5  No          /lib64/libgcc_s.so.1
>0x00007ff1fe46bb10  0x00007ff1fe47a2d1  Yes         /lib64/libpthread.so.0
>0x00007ff1fe0a3770  0x00007ff1fe21016c  Yes         /lib64/libc.so.6
>0x00007ff1fde7c7c0  0x00007ff1fde80f7a  Yes         /lib64/libffi.so.6
>0x00007ff1fdc780f0  0x00007ff1fdc78fe6  Yes         /lib64/libgmodule-2.0.so.0
>0x00007ff1fda73e50  0x00007ff1fda74b7e  Yes         /lib64/libdl.so.2
>0x00007ff1fd801610  0x00007ff1fd85340d  Yes         /lib64/libpcre.so.1
>0x00007ff1fd5eb3d0  0x00007ff1fd5f823f  Yes         /lib64/libz.so.1
>0x00007ff1fd3c6ca0  0x00007ff1fd3ddfcf  Yes         /lib64/libselinux.so.1
>0x00007ff1fd1a9830  0x00007ff1fd1b8d92  Yes         /lib64/libresolv.so.2
>0x00007ff1fcf5ea30  0x00007ff1fcf91868  No          /lib64/libmount.so.1
>0x00007ff1ff19dd50  0x00007ff1ff1bcc50  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007ff1fccd0120  0x00007ff1fcd2ef51  Yes         /lib64/libpcre2-8.so.0
>0x00007ff1fca8ce70  0x00007ff1fcab8fb8  No          /lib64/libblkid.so.1
>0x00007ff1fc87f550  0x00007ff1fc880c43  No          /lib64/libuuid.so.1
>0x00007ff1fc6781a0  0x00007ff1fc67b6b6  Yes         /lib64/librt.so.1
>0x00007ff1f5989fd0  0x00007ff1f59a4946  No          /usr/lib64/gio/modules/libgvfsdbus.so
>0x00007ff1f57538e0  0x00007ff1f576a8e6  No          /usr/lib64/gvfs/libgvfscommon.so
>0x00007ff1f553de70  0x00007ff1f553e82a  Yes         /lib64/libutil.so.1
>0x00007ff1f4b34530  0x00007ff1f4b39259  No          /lib64/libnss_sss.so.2
>0x00007ff1f49232e0  0x00007ff1f4929cb1  Yes         /lib64/libnss_files.so.2
>0x00007ff1ef3e4ae0  0x00007ff1ef3f55cd  Yes         /lib64/libproxy.so.1
>0x00007ff1ef1d71a0  0x00007ff1ef1dadcf  Yes         /lib64/libmodman.so.1
>0x00007ff1eeeda100  0x00007ff1eef8a868  No          /lib64/libstdc++.so.6
>0x00007ff1eeb00880  0x00007ff1eeba9985  Yes         /lib64/libm.so.6
>0x00007ff1ee8f5900  0x00007ff1ee8f697a  Yes         /usr/lib64/gio/modules/libgiognomeproxy.so
>0x00007ff1ee6eac30  0x00007ff1ee6efc2e  Yes         /usr/lib64/gio/modules/libdconfsettings.so
>0x00007ff1ef5fc210  0x00007ff1ef5fc9ea  Yes         /usr/lib64/gio/modules/libgiolibproxy.so
>$1 = 0x0
>$2 = 0x0
>rax            0x0	0
>rbx            0x0	0
>rcx            0x5	5
>rdx            0x55ec9f394acc	94474771974860
>rsi            0x10	16
>rdi            0x0	0
>rbp            0x55eca150b030	0x55eca150b030
>rsp            0x7ffe71b21480	0x7ffe71b21480
>r8             0x2	2
>r9             0x7ff1fe938755	140677334927189
>r10            0xffffffd7	4294967255
>r11            0x0	0
>r12            0x55eca152a9e0	94474807192032
>r13            0x7ff1febae280	140677337506432
>r14            0x7ff1fe8e3560	140677334578528
>r15            0x7ff1e4001be0	140676889058272
>rip            0x55ec9f36133a	0x55ec9f36133a <export_portal_implementation+122>
>eflags         0x10246	[ PF ZF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function export_portal_implementation:
>   0x000055ec9f3612c0 <+0>:	push   %rbp
>   0x000055ec9f3612c1 <+1>:	push   %rbx
>   0x000055ec9f3612c2 <+2>:	mov    %rsi,%rbx
>   0x000055ec9f3612c5 <+5>:	mov    %rdi,%rbp
>   0x000055ec9f3612c8 <+8>:	mov    $0x1,%esi
>   0x000055ec9f3612cd <+13>:	mov    %rbx,%rdi
>   0x000055ec9f3612d0 <+16>:	sub    $0x18,%rsp
>   0x000055ec9f3612d4 <+20>:	mov    %fs:0x28,%rax
>   0x000055ec9f3612dd <+29>:	mov    %rax,0x8(%rsp)
>   0x000055ec9f3612e2 <+34>:	xor    %eax,%eax
>   0x000055ec9f3612e4 <+36>:	movq   $0x0,(%rsp)
>   0x000055ec9f3612ec <+44>:	callq  0x55ec9f360390 <g_dbus_interface_skeleton_set_flags@plt>
>   0x000055ec9f3612f1 <+49>:	lea    0x278(%rip),%rdx        # 0x55ec9f361570 <authorize_callback>
>   0x000055ec9f3612f8 <+56>:	lea    0x337ba(%rip),%rsi        # 0x55ec9f394ab9
>   0x000055ec9f3612ff <+63>:	xor    %r9d,%r9d
>   0x000055ec9f361302 <+66>:	xor    %r8d,%r8d
>   0x000055ec9f361305 <+69>:	xor    %ecx,%ecx
>   0x000055ec9f361307 <+71>:	mov    %rbx,%rdi
>   0x000055ec9f36130a <+74>:	callq  0x55ec9f360050 <g_signal_connect_data@plt>
>   0x000055ec9f36130f <+79>:	lea    0x33912(%rip),%rdx        # 0x55ec9f394c28
>   0x000055ec9f361316 <+86>:	mov    %rsp,%rcx
>   0x000055ec9f361319 <+89>:	mov    %rbp,%rsi
>   0x000055ec9f36131c <+92>:	mov    %rbx,%rdi
>   0x000055ec9f36131f <+95>:	callq  0x55ec9f360250 <g_dbus_interface_skeleton_export@plt>
>   0x000055ec9f361324 <+100>:	test   %eax,%eax
>   0x000055ec9f361326 <+102>:	jne    0x55ec9f361370 <export_portal_implementation+176>
>   0x000055ec9f361328 <+104>:	mov    (%rsp),%rax
>   0x000055ec9f36132c <+108>:	lea    0x33799(%rip),%rdx        # 0x55ec9f394acc
>   0x000055ec9f361333 <+115>:	mov    $0x10,%esi
>   0x000055ec9f361338 <+120>:	xor    %edi,%edi
>=> 0x000055ec9f36133a <+122>:	mov    0x8(%rax),%rcx
>   0x000055ec9f36133e <+126>:	xor    %eax,%eax
>   0x000055ec9f361340 <+128>:	callq  0x55ec9f360670 <g_log@plt>
>   0x000055ec9f361345 <+133>:	mov    (%rsp),%rdi
>   0x000055ec9f361349 <+137>:	test   %rdi,%rdi
>   0x000055ec9f36134c <+140>:	je     0x55ec9f361353 <export_portal_implementation+147>
>   0x000055ec9f36134e <+142>:	callq  0x55ec9f360480 <g_error_free@plt>
>   0x000055ec9f361353 <+147>:	mov    0x8(%rsp),%rax
>   0x000055ec9f361358 <+152>:	xor    %fs:0x28,%rax
>   0x000055ec9f361361 <+161>:	jne    0x55ec9f361393 <export_portal_implementation+211>
>   0x000055ec9f361363 <+163>:	add    $0x18,%rsp
>   0x000055ec9f361367 <+167>:	pop    %rbx
>   0x000055ec9f361368 <+168>:	pop    %rbp
>   0x000055ec9f361369 <+169>:	retq   
>   0x000055ec9f36136a <+170>:	nopw   0x0(%rax,%rax,1)
>   0x000055ec9f361370 <+176>:	mov    %rbx,%rdi
>   0x000055ec9f361373 <+179>:	callq  0x55ec9f35ff00 <g_dbus_interface_skeleton_get_info@plt>
>   0x000055ec9f361378 <+184>:	mov    0x8(%rax),%rcx
>   0x000055ec9f36137c <+188>:	lea    0x33753(%rip),%rdx        # 0x55ec9f394ad6
>   0x000055ec9f361383 <+195>:	mov    $0x80,%esi
>   0x000055ec9f361388 <+200>:	xor    %edi,%edi
>   0x000055ec9f36138a <+202>:	xor    %eax,%eax
>   0x000055ec9f36138c <+204>:	callq  0x55ec9f360670 <g_log@plt>
>   0x000055ec9f361391 <+209>:	jmp    0x55ec9f361345 <export_portal_implementation+133>
>   0x000055ec9f361393 <+211>:	callq  0x55ec9f360120 <__stack_chk_fail@plt>
>   0x000055ec9f361398 <+216>:	mov    (%rsp),%rdi
>   0x000055ec9f36139c <+220>:	mov    %rax,%rbx
>   0x000055ec9f36139f <+223>:	test   %rdi,%rdi
>   0x000055ec9f3613a2 <+226>:	je     0x55ec9f3613a9 <export_portal_implementation+233>
>   0x000055ec9f3613a4 <+228>:	callq  0x55ec9f360480 <g_error_free@plt>
>   0x000055ec9f3613a9 <+233>:	mov    %rbx,%rdi
>   0x000055ec9f3613ac <+236>:	callq  0x55ec9f360630 <_Unwind_Resume@plt>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1543978: 1393909 | 1393910 | 1393911 | 1393912 | 1393913 | 1393915 | 1393916 | 1393917 | 1393918 | 1393919 | 1393920 | 1393921