Attachment 1445395 Details for Bug 1583715 – File: backtrace

File: backtrace

backtrace (text/plain), 8.45 KB, created by Parthiban on 2018-05-29 14:16:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Parthiban

Created: 2018-05-29 14:16:38 UTC

Size: 8.45 KB

patch

obsolete

>[New LWP 10722]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `dbus-send --system --print-reply --type=method_call --dest=org.freedesktop.Avah'.
>Program terminated with signal SIGABRT, Aborted.
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
>51	}
>
>Thread 1 (Thread 0x7fb8b87b18c0 (LWP 10722)):
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
>        set = {__val = {0, 140431341357185, 140721945012304, 140431341374538, 2, 140721945012480, 140721945012464, 140431341320017, 140721945013152, 140721945012360, 140721945012296, 93911317356160, 5, 140428250710131, 68719476737, 93911317356160}}
>        pid = <optimized out>
>        tid = <optimized out>
>#1  0x00007fb8b7b33c41 in __GI_abort () at abort.c:79
>        save_stage = 1
>        act = {__sigaction_handler = {sa_handler = 0x40, sa_sigaction = 0x40}, sa_mask = {__val = {140431336322080, 140431341505672, 64, 64, 140431332963406, 0, 64, 64, 140431336339040, 1, 140431341505672, 140431336322080, 140431332690330, 140721945012720, 140431341502056, 0}}, sa_flags = 1636532781, sa_restorer = 0x0}
>        sigs = {__val = {32, 0 <repeats 15 times>}}
>#2  0x00007fb8b83958c4 in _dbus_abort () at ../../dbus/dbus-sysdeps.c:93
>        s = <optimized out>
>#3  0x00007fb8b838c150 in _dbus_warn_check_failed (format=format@entry=0x7fb8b839be68 "arguments to %s() were incorrect, assertion \"%s\" failed in file %s line %d.\nThis is normally a bug in some application using the D-Bus library.\n") at ../../dbus/dbus-internals.c:281
>        severity = <optimized out>
>        args = {{gp_offset = 8, fp_offset = 48, overflow_arg_area = 0x7ffc618b6b10, reg_save_area = 0x7ffc618b6a50}}
>#4  0x00007fb8b838c86a in _dbus_warn_return_if_fail (function=function@entry=0x7fb8b839ac00 <__func__.5065> "dbus_message_new_method_call", assertion=assertion@entry=0x7fb8b8399748 "_dbus_check_is_valid_path (path)", file=file@entry=0x7fb8b839a0dd "../../dbus/dbus-message.c", line=line@entry=1366) at ../../dbus/dbus-internals.c:936
>No locals.
>#5  0x00007fb8b837c049 in dbus_message_new_method_call (destination=0x0, path=0x7ffc618b81f3 "org/freedesktop/Avahi", iface=0x7ffc618b8209 "org.freedesktop.DBus.Introspectable", method=0x7ffc618b822d "Introspect") at ../../dbus/dbus-message.c:1366
>        message = <optimized out>
>        __func__ = "dbus_message_new_method_call"
>#6  0x000055696e081715 in main (argc=7, argv=0x7ffc618b6dd8) at ../../tools/dbus-send.c:434
>        last_dot = <optimized out>
>        connection = 0x55696eb61810
>        error = {name = 0x0, message = 0x0, dummy1 = 1, dummy2 = 0, dummy3 = 0, dummy4 = 0, dummy5 = 0, padding1 = 0x0}
>        message = <optimized out>
>        print_reply = 1
>        print_reply_literal = 0
>        reply_timeout = -1
>        iter = {dummy1 = 0x770000007c, dummy2 = 0x2099d66384c93b00, dummy3 = 1857421968, dummy4 = 21865, dummy5 = -1209355232, dummy6 = 32696, dummy7 = 1636527272, dummy8 = 32764, dummy9 = -2067186944, dummy10 = 546952803, dummy11 = 1857421968, pad1 = 21865, pad2 = 0x55696eb60290, pad3 = 0x0}
>        i = <optimized out>
>        type = DBUS_BUS_SYSTEM
>        dest = 0x7ffc618b81dd "org.freedesktop.Avahi"
>        name = 0x7ffc618b8209 "org.freedesktop.DBus.Introspectable"
>        path = 0x7ffc618b81f3 "org/freedesktop/Avahi"
>        message_type = 1
>        type_str = <optimized out>
>        address = <optimized out>
>        is_bus = <optimized out>
>        session_or_system = <optimized out>
>From                To                  Syms Read   Shared Object Library
>0x00007fb8b836a900  0x00007fb8b8396161  Yes         /lib64/libdbus-1.so.3
>0x00007fb8b8143b10  0x00007fb8b8151941  Yes         /lib64/libpthread.so.0
>0x00007fb8b7ec2520  0x00007fb8b7f1c50b  No          /lib64/libsystemd.so.0
>0x00007fb8b7b1e770  0x00007fb8b7c5f3ac  Yes         /lib64/libc.so.6
>0x00007fb8b85add50  0x00007fb8b85ca4d0  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007fb8b77ef580  0x00007fb8b78bbe18  Yes         /lib64/libgcrypt.so.20
>0x00007fb8b75de1a0  0x00007fb8b75e1326  Yes         /lib64/librt.so.1
>0x00007fb8b73b9060  0x00007fb8b73cfb02  Yes         /lib64/liblzma.so.5
>0x00007fb8b71a2f80  0x00007fb8b71b2060  No          /lib64/liblz4.so.1
>0x00007fb8b6f7eca0  0x00007fb8b6f95fcf  Yes         /lib64/libselinux.so.1
>0x00007fb8b6d63ac0  0x00007fb8b6d73de5  No          /lib64/libgcc_s.so.1
>0x00007fb8b6b4ec50  0x00007fb8b6b58d58  Yes         /lib64/libgpg-error.so.0
>0x00007fb8b6948e50  0x00007fb8b6949ace  Yes         /lib64/libdl.so.2
>0x00007fb8b66c8120  0x00007fb8b6724d71  Yes         /lib64/libpcre2-8.so.0
>$1 = 0x0
>rax            0x0	0
>rbx            0x6	6
>rcx            0x7fb8b7b32660	140431332681312
>rdx            0x0	0
>rsi            0x7ffc618b67d0	140721945012176
>rdi            0x2	2
>rbp            0x0	0x0
>rsp            0x7ffc618b67d0	0x7ffc618b67d0
>r8             0x0	0
>r9             0x7ffc618b67d0	140721945012176
>r10            0x8	8
>r11            0x246	582
>r12            0x7ffc618b822d	140721945018925
>r13            0x0	0
>r14            0x7ffc618b8209	140721945018889
>r15            0x1	1
>rip            0x7fb8b7b32660	0x7fb8b7b32660 <__GI_raise+272>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI_raise:
>   0x00007fb8b7b32550 <+0>:	push   %rbx
>   0x00007fb8b7b32551 <+1>:	mov    $0xffffffffffffffff,%r8
>   0x00007fb8b7b32558 <+8>:	mov    %edi,%ebx
>   0x00007fb8b7b3255a <+10>:	mov    $0x8,%r10d
>   0x00007fb8b7b32560 <+16>:	xor    %edi,%edi
>   0x00007fb8b7b32562 <+18>:	sub    $0x110,%rsp
>   0x00007fb8b7b32569 <+25>:	mov    %fs:0x28,%rax
>   0x00007fb8b7b32572 <+34>:	mov    %rax,0x108(%rsp)
>   0x00007fb8b7b3257a <+42>:	xor    %eax,%eax
>   0x00007fb8b7b3257c <+44>:	mov    %rsp,%r9
>   0x00007fb8b7b3257f <+47>:	movabs $0xfffffffe7fffffff,%rax
>   0x00007fb8b7b32589 <+57>:	mov    %r8,0x88(%rsp)
>   0x00007fb8b7b32591 <+65>:	mov    %rax,0x80(%rsp)
>   0x00007fb8b7b32599 <+73>:	mov    %r8,0x90(%rsp)
>   0x00007fb8b7b325a1 <+81>:	lea    0x80(%rsp),%rsi
>   0x00007fb8b7b325a9 <+89>:	mov    %r8,0x98(%rsp)
>   0x00007fb8b7b325b1 <+97>:	mov    %r8,0xa0(%rsp)
>   0x00007fb8b7b325b9 <+105>:	mov    %r9,%rdx
>   0x00007fb8b7b325bc <+108>:	mov    %r8,0xa8(%rsp)
>   0x00007fb8b7b325c4 <+116>:	mov    %r8,0xb0(%rsp)
>   0x00007fb8b7b325cc <+124>:	mov    $0xe,%eax
>   0x00007fb8b7b325d1 <+129>:	mov    %r8,0xb8(%rsp)
>   0x00007fb8b7b325d9 <+137>:	mov    %r8,0xc0(%rsp)
>   0x00007fb8b7b325e1 <+145>:	mov    %r8,0xc8(%rsp)
>   0x00007fb8b7b325e9 <+153>:	mov    %r8,0xd0(%rsp)
>   0x00007fb8b7b325f1 <+161>:	mov    %r8,0xd8(%rsp)
>   0x00007fb8b7b325f9 <+169>:	mov    %r8,0xe0(%rsp)
>   0x00007fb8b7b32601 <+177>:	mov    %r8,0xe8(%rsp)
>   0x00007fb8b7b32609 <+185>:	mov    %r8,0xf0(%rsp)
>   0x00007fb8b7b32611 <+193>:	mov    %r8,0xf8(%rsp)
>   0x00007fb8b7b32619 <+201>:	syscall 
>   0x00007fb8b7b3261b <+203>:	mov    $0x27,%edi
>   0x00007fb8b7b32620 <+208>:	mov    %edi,%eax
>   0x00007fb8b7b32622 <+210>:	syscall 
>   0x00007fb8b7b32624 <+212>:	mov    %rax,%rdi
>   0x00007fb8b7b32627 <+215>:	mov    $0xba,%eax
>   0x00007fb8b7b3262c <+220>:	syscall 
>   0x00007fb8b7b3262e <+222>:	movslq %eax,%rsi
>   0x00007fb8b7b32631 <+225>:	movslq %edi,%rdi
>   0x00007fb8b7b32634 <+228>:	movslq %ebx,%rdx
>   0x00007fb8b7b32637 <+231>:	mov    $0xea,%eax
>   0x00007fb8b7b3263c <+236>:	syscall 
>   0x00007fb8b7b3263e <+238>:	cmp    $0xfffffffffffff000,%rax
>   0x00007fb8b7b32644 <+244>:	ja     0x7fb8b7b32680 <__GI_raise+304>
>   0x00007fb8b7b32646 <+246>:	mov    %eax,%r8d
>   0x00007fb8b7b32649 <+249>:	mov    $0x8,%r10d
>   0x00007fb8b7b3264f <+255>:	xor    %edx,%edx
>   0x00007fb8b7b32651 <+257>:	mov    %r9,%rsi
>   0x00007fb8b7b32654 <+260>:	mov    $0x2,%edi
>   0x00007fb8b7b32659 <+265>:	mov    $0xe,%eax
>   0x00007fb8b7b3265e <+270>:	syscall 
>=> 0x00007fb8b7b32660 <+272>:	mov    0x108(%rsp),%rcx
>   0x00007fb8b7b32668 <+280>:	xor    %fs:0x28,%rcx
>   0x00007fb8b7b32671 <+289>:	mov    %r8d,%eax
>   0x00007fb8b7b32674 <+292>:	jne    0x7fb8b7b3268e <__GI_raise+318>
>   0x00007fb8b7b32676 <+294>:	add    $0x110,%rsp
>   0x00007fb8b7b3267d <+301>:	pop    %rbx
>   0x00007fb8b7b3267e <+302>:	retq   
>   0x00007fb8b7b3267f <+303>:	nop
>   0x00007fb8b7b32680 <+304>:	mov    0x37b7f9(%rip),%rdx        # 0x7fb8b7eade80
>   0x00007fb8b7b32687 <+311>:	neg    %eax
>   0x00007fb8b7b32689 <+313>:	mov    %eax,%fs:(%rdx)
>   0x00007fb8b7b3268c <+316>:	jmp    0x7fb8b7b32649 <__GI_raise+249>
>   0x00007fb8b7b3268e <+318>:	callq  0x7fb8b7c04510 <__stack_chk_fail>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1583715: 1445395 | 1445396 | 1445397 | 1445398 | 1445399 | 1445400 | 1445401 | 1445402 | 1445403 | 1445404 | 1445405