Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 1448375 Details for
Bug 1588114
[abrt] PackageKit: _IO_file_doallocate(): packagekitd killed by SIGSEGV
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
File: backtrace
backtrace (text/plain), 80.59 KB, created by
Alex Gluck
on 2018-06-06 16:43:16 UTC
(
hide
)
Description:
File: backtrace
Filename:
MIME Type:
Creator:
Alex Gluck
Created:
2018-06-06 16:43:16 UTC
Size:
80.59 KB
patch
obsolete
>[New LWP 28906] >[New LWP 1276] >[New LWP 28724] >[New LWP 1282] >[New LWP 1284] >[Thread debugging using libthread_db enabled] >Using host libthread_db library "/lib64/libthread_db.so.1". >Core was generated by `/usr/libexec/packagekitd'. >Program terminated with signal SIGSEGV, Segmentation fault. >#0 _int_malloc (av=av@entry=0x7f543c000020, bytes=bytes@entry=4096) at malloc.c:3847 >3847 assert (chunk_main_arena (fwd)); >[Current thread is 1 (Thread 0x7f5439efc700 (LWP 28906))] > >Thread 1 (Thread 0x7f5439efc700 (LWP 28906)): >#0 _int_malloc (av=av@entry=0x7f543c000020, bytes=bytes@entry=4096) at malloc.c:3847 > iters = 40 > nb = 4112 > idx = 99 > bin = <optimized out> > victim = <optimized out> > size = 1793 > victim_index = 76 > remainder = <optimized out> > remainder_size = <optimized out> > block = <optimized out> > bit = <optimized out> > map = <optimized out> > fwd = 0x0 > bck = 0x7f543c000530 > tcache_unsorted_count = 40 > tcache_nb = 0 > tc_idx = 255 > return_cached = 0 > __PRETTY_FUNCTION__ = "_int_malloc" >#1 0x00007f5467e7872a in __GI___libc_malloc (bytes=bytes@entry=4096) at malloc.c:3065 > ar_ptr = 0x7f543c000020 > victim = <optimized out> > hook = <optimized out> > tbytes = <optimized out> > tc_idx = 255 > __PRETTY_FUNCTION__ = "__libc_malloc" >#2 0x00007f5467e63a4c in __GI__IO_file_doallocate (fp=0x7f543c232a50) at filedoalloc.c:101 > size = 4096 > p = <optimized out> > st = {st_dev = 64768, st_ino = 1049069, st_nlink = 1, st_mode = 33188, st_uid = 0, st_gid = 0, __pad0 = 0, st_rdev = 0, st_size = 220, st_blksize = 4096, st_blocks = 8, st_atim = {tv_sec = 1528209809, tv_nsec = 948730547}, st_mtim = {tv_sec = 1528123396, tv_nsec = 367079357}, st_ctim = {tv_sec = 1528123396, tv_nsec = 367079357}, __glibc_reserved = {0, 0, 0}} >#3 0x00007f5467e718c0 in __GI__IO_doallocbuf (fp=fp@entry=0x7f543c232a50) at libioP.h:877 >No locals. >#4 0x00007f5467e70924 in __GI__IO_file_underflow () at fileops.c:495 > count = <optimized out> >#5 0x00007f5467e71972 in __GI__IO_default_uflow (fp=0x7f543c232a50) at libioP.h:877 > ch = <optimized out> >#6 0x00007f5467e6529a in __GI__IO_getline_info (fp=fp@entry=0x7f543c232a50, buf=buf@entry=0x7f5439efb850 "", n=n@entry=991, delim=delim@entry=10, extract_delim=extract_delim@entry=1, eof=eof@entry=0x0) at iogetline.c:60 > c = <optimized out> > len = 0 > ptr = 0x7f5439efb850 "" >#7 0x00007f5467e65388 in __GI__IO_getline (fp=fp@entry=0x7f543c232a50, buf=buf@entry=0x7f5439efb850 "", n=n@entry=991, delim=delim@entry=10, extract_delim=extract_delim@entry=1) at iogetline.c:34 >No locals. >#8 0x00007f5467e6e5f3 in __GI___fgets_unlocked (buf=0x7f5439efb850 "", n=n@entry=992, fp=fp@entry=0x7f543c232a50) at iofgets_u.c:52 > count = <optimized out> > result = <optimized out> > old_error = 0 >#9 0x00007f5452be23cd in get_contents (stream=0x7f543c232a50, len=992, linebuf=0x7f5439efb850 "") at nss_files/files-XXX.c:153 > curlen = 992 > p = <optimized out> > remaining_len = 992 > curbuf = <optimized out> > remaining_len = <optimized out> > curbuf = <optimized out> > curlen = <optimized out> > p = <optimized out> >#10 internal_getent (stream=0x7f543c232a50, result=result@entry=0x7f5439efb450, buffer=buffer@entry=0x7f5439efb830 "", buflen=buflen@entry=1024, errnop=errnop@entry=0x7f5439efc5f0, herrnop=herrnop@entry=0x7f5439efc654, af=0, flags=0) at nss_files/files-XXX.c:196 > r = <optimized out> > p = <optimized out> > data = 0x7f5439efb830 > linebuflen = 992 > parse_result = <optimized out> >#11 0x00007f5452be3752 in _nss_files_gethostbyname4_r (name=name@entry=0x7f542fb18180 "mirrors.rfremix.ru", pat=pat@entry=0x7f5439efb5a8, buffer=0x7f5439efb830 "", buflen=1024, errnop=errnop@entry=0x7f5439efc5f0, herrnop=herrnop@entry=0x7f5439efc654, ttlp=0x0) at nss_files/files-hosts.c:416 > pad = <optimized out> > result = {h_name = 0x7f5439efb478 "", h_aliases = 0x55affad141b8, h_addrtype = 972011552, h_length = 32596, h_addr_list = 0x7f5467f1144f <__GI___nss_lookup_function+127>} > naliases = <optimized out> > bufferend = <optimized out> > any = false > got_canon = false > stream = 0x7f543c232a50 > status = <optimized out> > __PRETTY_FUNCTION__ = "_nss_files_gethostbyname4_r" >#12 0x00007f5467ed7902 in gaih_inet (name=<optimized out>, name@entry=0x7f542fb18180 "mirrors.rfremix.ru", service=<optimized out>, req=req@entry=0x7f542f79f060, pai=pai@entry=0x7f5439efb7b8, naddrs=naddrs@entry=0x7f5439efb7b4, tmpbuf=tmpbuf@entry=0x7f5439efb820) at ../sysdeps/posix/getaddrinfo.c:766 > fct4 = 0x7f5452be3650 <_nss_files_gethostbyname4_r> > pat = 0x7f5439efb5a8 > no_inet6_data = 0 > nip = 0x55affad14190 > status = <optimized out> > no_more = 0 > no_data = 0 > inet6_status = NSS_STATUS_UNAVAIL > res_ctx = <optimized out> > res_enable_inet6 = <optimized out> > tp = <optimized out> > st = 0x7f5439efb500 > at = 0x7f5439efb4d0 > got_ipv6 = false > canon = 0x0 > orig_name = 0x7f542fb18180 "mirrors.rfremix.ru" > alloca_used = <optimized out> > port = <optimized out> > malloc_name = <optimized out> > addrmem = 0x0 > canonbuf = 0x0 > result = 0 > __PRETTY_FUNCTION__ = <optimized out> >#13 0x00007f5467ed89e4 in __GI_getaddrinfo (name=<optimized out>, service=<optimized out>, hints=0x7f542f79f060, pai=0x7f5439efbc90) at ../sysdeps/posix/getaddrinfo.c:2261 > tmpbuf = {data = 0x7f5439efb830, length = 1024, __space = {__align = {__max_align_ll = -2233547873419591680, __max_align_ld = 1.21999725432816362954e-4932}, __c = "\000\000\377\377\n\330\000\341andex.ru\000mirror.", '\000' <repeats 16 times>, "\n\000\000\000*\002\006\270\000\000\000\000\000\000\000\000\000\000\001\203\000\000\000\000insvyaz.ru\000\000loca\000\000\000\000\000\000\000\000ocalhost6.localdomain6\000\000f\270\357\071T\177\000\000|\270\357\071T\177\000\000\207\270\357\071T\177\000\000\000\000\000\000\000\000\000\000|\270\357\071T\177\000\000\207\270\357\071T\177\000\000\237\270\357\071T\177", '\000' <repeats 13 times>, "\003", '\000' <repeats 20 times>...}} > i = 0 > last_i = 0 > nresults = 0 > p = 0x0 > gaih_service = {name = 0x7f5439efbcec "80", num = 80} > pservice = <optimized out> > local_hints = {ai_flags = 2, ai_family = 0, ai_socktype = 1757160603, ai_protocol = 32596, ai_addrlen = 7, ai_addr = 0x7f5439efb8a0, ai_canonname = 0x7f5439efb8d0 "\237\270\357\071T\177", ai_next = 0x7f5439efb950} > in6ai = 0x0 > in6ailen = 0 > seen_ipv4 = false > seen_ipv6 = false > check_pf_called = false > end = 0x7f5439efb7b8 > naddrs = 0 > __PRETTY_FUNCTION__ = "getaddrinfo" >#14 0x00007f54505398cb in ?? () from /lib64/libcurl.so.4 >No symbol table info available. >#15 0xf7033730cba175a7 in ?? () >No symbol table info available. >#16 0x0000000000000000 in ?? () >No symbol table info available. > >Thread 2 (Thread 0x7f5469d11fc0 (LWP 1276)): >#0 0x00007f5467ee3589 in __GI___poll (fds=0x55affb059b60, nfds=3, timeout=5992) at ../sysdeps/unix/sysv/linux/poll.c:29 > resultvar = 18446744073709551100 > sc_cancel_oldtype = 0 > sc_ret = <optimized out> >#1 0x00007f54688d3be6 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x55affb059b60, timeout=<optimized out>, context=0x55affacde6b0) at gmain.c:4204 > ret = <optimized out> > errsv = <optimized out> > poll_func = 0x7f54688e3520 <g_poll> > poll_func = <optimized out> > ret = <optimized out> > errsv = <optimized out> >#2 g_main_context_iterate (context=0x55affacde6b0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898 > max_priority = 2147483647 > timeout = 5992 > some_ready = <optimized out> > nfds = 3 > allocated_nfds = 3 > fds = 0x55affb059b60 >#3 0x00007f54688d3fa2 in g_main_loop_run (loop=0x55affacde7f0) at gmain.c:4099 > self = <optimized out> > __func__ = "g_main_loop_run" >#4 0x000055affa9dfea6 in main () at pk-main.c:256 > loop = 0x55affacde7f0 > context = <optimized out> > ret = <optimized out> > disable_timer = 0 > version = 0 > timed_exit = 0 > immediate_exit = 0 > keep_environment = 0 > exit_idle_time = 0 > timer_id = 0 > error = 0x0 > backend_name = 0x0 > conf_filename = 0x55affacdc1a0 "/etc/PackageKit/PackageKit.conf" > conf = 0x55affacdb000 > engine = 0x55afface01a0 > options = {{long_name = 0x55affaa09576 "backend", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_STRING, arg_data = 0x7ffd190ef928, description = 0x55affaa02810 "Packaging backend to use, e.g. dummy", arg_description = 0x0}, {long_name = 0x55affaa026ab "disable-timer", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffd190ef90c, description = 0x55affaa026b9 "Disable the idle timer", arg_description = 0x0}, {long_name = 0x55affaa026d0 "version", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffd190ef910, description = 0x55affaa026d8 "Show version and exit", arg_description = 0x0}, {long_name = 0x55affaa026ee "timed-exit", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffd190ef914, description = 0x55affaa026f9 "Exit after a small delay", arg_description = 0x0}, {long_name = 0x55affaa02712 "immediate-exit", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffd190ef918, description = 0x55affaa02838 "Exit after the engine has loaded", arg_description = 0x0}, {long_name = 0x55affaa02721 "keep-environment", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffd190ef91c, description = 0x55affaa02860 "Don't clear environment on startup", arg_description = 0x0}, {long_name = 0x0, short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x0, description = 0x0, arg_description = 0x0}} > __func__ = "main" >#5 0x00007f5467e1718b in __libc_start_main (main=0x55affa9dfa40 <main>, argc=1, argv=0x7ffd190efbc8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffd190efbb8) at ../csu/libc-start.c:308 > self = <optimized out> > result = <optimized out> > unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, -6704713845654981209, 94214312296768, 140725023865792, 0, 0, -697542157657475673, -647629093167073881}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x7ffd190efbd8, 0x7f5469d45130}, data = {prev = 0x0, cleanup = 0x0, canceltype = 420412376}}} > not_first_call = <optimized out> >#6 0x000055affa9e016a in _start () at pk-main.c:260 >No symbol table info available. > >Thread 3 (Thread 0x7f544224b700 (LWP 28724)): >#0 0x00007f5467ee5967 in __GI___select (nfds=0, readfds=readfds@entry=0x7f544224a6a0, writefds=writefds@entry=0x7f544224a720, exceptfds=exceptfds@entry=0x7f544224a7a0, timeout=timeout@entry=0x7f544224a650) at ../sysdeps/unix/sysv/linux/select.c:41 > resultvar = 18446744073709551102 > sc_cancel_oldtype = 0 > sc_ret = <optimized out> >#1 0x00007f5451f7ad1a in lr_perform (err=0x7f544224a640, dd=0x7f544224a660) at /usr/src/debug/librepo-1.8.1-7.fc28.x86_64/librepo/downloader.c:1932 > curl_timeout = 1 > timeout = {tv_sec = 0, tv_usec = 904} > fdread = {fds_bits = {0 <repeats 16 times>}} > fdwrite = {fds_bits = {0 <repeats 16 times>}} > fdexcep = {fds_bits = {0 <repeats 16 times>}} > rc = <optimized out> > maxfd = -1 > cm_rc = <optimized out> > still_running = 1 > cm_rc = <optimized out> > still_running = <optimized out> > __PRETTY_FUNCTION__ = "lr_perform" > __func__ = "lr_perform" > rc = <optimized out> > maxfd = <optimized out> > curl_timeout = <optimized out> > timeout = <optimized out> > fdread = <optimized out> > fdwrite = <optimized out> > fdexcep = <optimized out> > __d0 = <optimized out> > __d1 = <optimized out> > __d0 = <optimized out> > __d1 = <optimized out> > __d0 = <optimized out> > __d1 = <optimized out> >#2 lr_download (targets=targets@entry=0x7f54360d9e10, failfast=failfast@entry=1, err=err@entry=0x7f544224a890) at /usr/src/debug/librepo-1.8.1-7.fc28.x86_64/librepo/downloader.c:2082 > ret = 0 > dd = {failfast = 1, max_parallel_connections = 3, max_connection_per_host = 3, max_mirrors_to_try = 0, allowed_mirror_failures = 4, adaptivemirrorsorting = 1, multi_handle = 0x7f542cc18680, handle_mirrors = 0x7f543c184080, targets = 0x7f543c177530, running_transfers = 0x7f54360d9e40} > tmp_err = 0x0 > __PRETTY_FUNCTION__ = "lr_download" > __func__ = "lr_download" > lr_handle = <optimized out> >#3 0x00007f5451f7b23d in lr_download_target (target=target@entry=0x7f542c011a30, err=err@entry=0x7f544224a890) at /usr/src/debug/librepo-1.8.1-7.fc28.x86_64/librepo/downloader.c:2186 > ret = <optimized out> > list = 0x7f54360d9e10 > __PRETTY_FUNCTION__ = "lr_download_target" >#4 0x00007f5451f7db76 in download_non_cached_url (lr_handle=lr_handle@entry=0x55affaf56750, url=url@entry=0x7f542cc44170 "http://mirrors.rfremix.ru/mirrorlist?repo=nonfree-fedora-updates-released-$releasever&arch=$basearch", fd=fd@entry=23, err=err@entry=0x7f544224a928) at /usr/src/debug/librepo-1.8.1-7.fc28.x86_64/librepo/handle.c:773 > ret = <optimized out> > target = 0x7f542c011a30 > tmp_err = 0x0 > __PRETTY_FUNCTION__ = "download_non_cached_url" >#5 0x00007f5451f7f81d in lr_handle_prepare_mirrorlist (err=0x7f544224a928, localpath=0x0, handle=0x55affaf56750) at /usr/src/debug/librepo-1.8.1-7.fc28.x86_64/librepo/handle.c:874 > url = 0x7f542cc44170 "http://mirrors.rfremix.ru/mirrorlist?repo=nonfree-fedora-updates-released-$releasever&arch=$basearch" > fd = 23 > ml = <optimized out> > ret = <optimized out> > __PRETTY_FUNCTION__ = "lr_handle_prepare_mirrorlist" > fd = <optimized out> > __func__ = "lr_handle_prepare_mirrorlist" > ml = <optimized out> > ret = <optimized out> > path = <optimized out> > url = <optimized out> > elem = <optimized out> >#6 lr_handle_prepare_internal_mirrorlist () at /usr/src/debug/librepo-1.8.1-7.fc28.x86_64/librepo/handle.c:1101 > local_path = <optimized out> > ret = <optimized out> > err = 0x7f544224a928 > usefastestmirror = 0 > handle = 0x55affaf56750 > __PRETTY_FUNCTION__ = "lr_handle_prepare_internal_mirrorlist" > __func__ = "lr_handle_prepare_internal_mirrorlist" > ret = <optimized out> > url = <optimized out> > ret = <optimized out> > local_path = <optimized out> > local_path = <optimized out> > ret = <optimized out> > __PRETTY_FUNCTION__ = "lr_handle_prepare_internal_mirrorlist" > __func__ = "lr_handle_prepare_internal_mirrorlist" > url = <optimized out> > ret = <optimized out> >#7 0x00007f5451f80538 in lr_handle_perform (handle=0x55affaf56750, result=0x55affaf56b90, err=err@entry=0x7f544224aae0) at /usr/src/debug/librepo-1.8.1-7.fc28.x86_64/librepo/handle.c:1236 > ret = 1 > tmp_err = 0x0 > __PRETTY_FUNCTION__ = "lr_handle_perform" > __func__ = "lr_handle_perform" > old_sigact = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 0, 6165582876191678464, 2595, 139999763050528, 0, 139999763050720, 1, 139999763050720, 20, 140000511178339, 206158430248, 139999863679600, 139999863679408, 6165582876191678464, 0}}, sa_flags = 1754208813, sa_restorer = 0x8} >#8 0x00007f54521c6a4e in dnf_repo_update (repo=repo@entry=0x55affaf24100, flags=flags@entry=DNF_REPO_UPDATE_FLAG_FORCE, state=state@entry=0x7f543c253540, error=error@entry=0x7f544224ab60) at /usr/src/debug/libdnf-0.11.1-3.fc28.x86_64/libdnf/dnf-repo.c:1744 > priv = 0x55affaf24040 > state_local = <optimized out> > ret = <optimized out> > rc = <optimized out> > timestamp_new = 0 > error_local = 0x0 > updatedata = {state = 0x7f543c2530e0, last_mirror_url = 0x0, last_mirror_failure_message = 0x0} >#9 0x00007f54521ba879 in dnf_sack_add_repo (sack=sack@entry=0x55affb1c5950, repo=repo@entry=0x55affaf24100, permissible_cache_age=permissible_cache_age@entry=84600, flags=flags@entry=5, state=0x7f543c253700, error=error@entry=0x7f544224acc8) at /usr/src/debug/libdnf-0.11.1-3.fc28.x86_64/libdnf/dnf-sack.c:1953 > ret = <optimized out> > error_local = 0x0 > state_local = 0x7f543c253540 > flags_hy = 1 >#10 0x00007f54521bab29 in dnf_sack_add_repos (sack=sack@entry=0x55affb1c5950, repos=repos@entry=0x55affacf0260, permissible_cache_age=84600, flags=flags@entry=5, state=state@entry=0x7f543c2532a0, error=error@entry=0x7f544224acc8) at /usr/src/debug/libdnf-0.11.1-3.fc28.x86_64/libdnf/dnf-sack.c:2047 > ret = <optimized out> > cnt = <optimized out> > i = 39 > repo = 0x55affaf24100 > state_local = <optimized out> > enabled_repos = <optimized out> >#11 0x00007f54584f26a4 in dnf_utils_add_remote (error=0x7f544224acc8, state=0x55affb04c240, flags=5, sack=0x55affb1c5950, job=0x55affb595aa0) at pk-backend-dnf.c:589 > job_data = <optimized out> > ret = <optimized out> > state_local = <optimized out> > repos = 0x55affacf0260 > job_data = <optimized out> > ret = <optimized out> > state_local = <optimized out> > repos = <optimized out> > i = <optimized out> > repo = <optimized out> >#12 dnf_utils_create_sack_for_filters () at pk-backend-dnf.c:791 > ret = <optimized out> > flags = 5 > cache_item = <optimized out> > state_local = 0x55affb04c240 > backend = <optimized out> > job_data = <optimized out> > priv = 0x55affad3e5b0 > cache_key = 0x7f542c0e9000 "DnfSack::release_ver[28]::filelists|remote" > install_root = 0x7f542c1b8c70 "/" > solv_dir = 0x7f542c015340 "/var/cache/PackageKit/28/hawkey" > sack = 0x55affb1c5950 >#13 0x00007f54584f80b4 in pk_backend_search_thread () at pk-backend-dnf.c:1000 > ret = <optimized out> > db = <optimized out> > state_local = <optimized out> > installs = 0x0 > pkglist = 0x0 > query = 0x0 > job_data = 0x55affb819e40 > filters = 2 > search_tmp = 0x0 > error = 0x0 > sack = 0x0 > search = 0x0 > __func__ = "pk_backend_search_thread" >#14 0x000055affa9f541e in pk_backend_job_thread_setup (thread_data=0x55affb24aeb0) at pk-backend-job.c:813 > helper = 0x55affb24aeb0 >#15 0x00007f54688fbf2a in g_thread_proxy (data=0x55affacfae80) at gthread.c:784 > thread = 0x55affacfae80 > __func__ = "g_thread_proxy" >#16 0x00007f54681ba594 in start_thread (arg=<optimized out>) at pthread_create.c:463 > pd = <optimized out> > now = <optimized out> > unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139999863682816, 696904586775459239, 140725023864158, 140725023864159, 140725023864288, 140725023864288, -647564731068484185, -647613238696905305}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} > not_first_call = <optimized out> >#17 0x00007f5467eee00f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 >No locals. > >Thread 4 (Thread 0x7f5458f00700 (LWP 1282)): >#0 0x00007f5467ee3589 in __GI___poll (fds=0x55affacfa360, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29 > resultvar = 18446744073709551100 > sc_cancel_oldtype = 0 > sc_ret = <optimized out> >#1 0x00007f54688d3be6 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x55affacfa360, timeout=<optimized out>, context=0x55affacfa0b0) at gmain.c:4204 > ret = <optimized out> > errsv = <optimized out> > poll_func = 0x7f54688e3520 <g_poll> > poll_func = <optimized out> > ret = <optimized out> > errsv = <optimized out> >#2 g_main_context_iterate (context=context@entry=0x55affacfa0b0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898 > max_priority = 2147483647 > timeout = -1 > some_ready = <optimized out> > nfds = 2 > allocated_nfds = 2 > fds = 0x55affacfa360 >#3 0x00007f54688d3d10 in g_main_context_iteration (context=0x55affacfa0b0, may_block=may_block@entry=1) at gmain.c:3964 > retval = <optimized out> >#4 0x00007f54688d3d61 in glib_worker_main (data=<optimized out>) at gmain.c:5773 >No locals. >#5 0x00007f54688fbf2a in g_thread_proxy (data=0x55affacfa400) at gthread.c:784 > thread = 0x55affacfa400 > __func__ = "g_thread_proxy" >#6 0x00007f54681ba594 in start_thread (arg=<optimized out>) at pthread_create.c:463 > pd = <optimized out> > now = <optimized out> > unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140000246105856, 696904586775459239, 140725023862702, 140725023862703, 140725023862832, 140725023862832, -647578433624771161, -647613238696905305}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} > not_first_call = <optimized out> >#7 0x00007f5467eee00f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 >No locals. > >Thread 5 (Thread 0x7f5453fff700 (LWP 1284)): >#0 0x00007f5467ee3589 in __GI___poll (fds=0x55affacf2f60, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29 > resultvar = 18446744073709551100 > sc_cancel_oldtype = 0 > sc_ret = <optimized out> >#1 0x00007f54688d3be6 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x55affacf2f60, timeout=<optimized out>, context=0x55affacf3480) at gmain.c:4204 > ret = <optimized out> > errsv = <optimized out> > poll_func = 0x7f54688e3520 <g_poll> > poll_func = <optimized out> > ret = <optimized out> > errsv = <optimized out> >#2 g_main_context_iterate (context=0x55affacf3480, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898 > max_priority = 2147483647 > timeout = -1 > some_ready = <optimized out> > nfds = 2 > allocated_nfds = 2 > fds = 0x55affacf2f60 >#3 0x00007f54688d3fa2 in g_main_loop_run (loop=0x55affacf35c0) at gmain.c:4099 > self = <optimized out> > __func__ = "g_main_loop_run" >#4 0x00007f5468ec46ba in gdbus_shared_thread_func (user_data=0x55affacf3450) at gdbusprivate.c:275 > data = 0x55affacf3450 >#5 0x00007f54688fbf2a in g_thread_proxy (data=0x55affacfa4a0) at gthread.c:784 > thread = 0x55affacfa4a0 > __func__ = "g_thread_proxy" >#6 0x00007f54681ba594 in start_thread (arg=<optimized out>) at pthread_create.c:463 > pd = <optimized out> > now = <optimized out> > unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140000163264256, 696904586775459239, 140725023862654, 140725023862655, 140725023862784, 140725023862784, -647602485978499673, -647613238696905305}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} > not_first_call = <optimized out> >#7 0x00007f5467eee00f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 >No locals. >From To Syms Read Shared Object Library >0x00007f546991b140 0x00007f546991c066 Yes /lib64/libgmodule-2.0.so.0 >0x00007f54696ca930 0x00007f54696fb2bb Yes /lib64/libpackagekit-glib2.so.18 >0x00007f54693c05d0 0x00007f54694843d0 No /lib64/libsqlite3.so.0 >0x00007f546919caf0 0x00007f54691a8ad6 No /lib64/libpolkit-gobject-1.so.0 >0x00007f5468e294b0 0x00007f5468f110d2 Yes /lib64/libgio-2.0.so.0 >0x00007f5468ba97a0 0x00007f5468bda660 Yes /lib64/libgobject-2.0.so.0 >0x00007f54688a20d0 0x00007f546891d34e Yes /lib64/libglib-2.0.so.0 >0x00007f54685f9150 0x00007f546865d9d9 No /lib64/libsystemd.so.0 >0x00007f54683d4ad0 0x00007f54683e5705 No /lib64/libgcc_s.so.1 >0x00007f54681b8be0 0x00007f54681c6801 Yes /lib64/libpthread.so.0 >0x00007f5467e15340 0x00007f5467f5c25f Yes /lib64/libc.so.6 >0x00007f5467bf0ee0 0x00007f5467bf1bbe Yes /lib64/libdl.so.2 >0x00007f5467980660 0x00007f54679d0b86 Yes /lib64/libpcre.so.1 >0x00007f54675f69f0 0x00007f54676a8e6a Yes /lib64/libm.so.6 >0x00007f54673d6420 0x00007f54673e35f7 Yes /lib64/libz.so.1 >0x00007f54671cc810 0x00007f54671d129a Yes /lib64/libffi.so.6 >0x00007f5466fa8df0 0x00007f5466fc07ff Yes /lib64/libselinux.so.1 >0x00007f5466d8e840 0x00007f5466d9a60e Yes /lib64/libresolv.so.2 >0x00007f5466b3dee0 0x00007f5466b7525e No /lib64/libmount.so.1 >0x00007f546692b210 0x00007f546692e47c Yes /lib64/librt.so.1 >0x00007f54667050b0 0x00007f546671bf66 Yes /lib64/liblzma.so.5 >0x00007f54664ecfd0 0x00007f54664fe3db No /lib64/liblz4.so.1 >0x00007f54662e75b0 0x00007f54662e8e8f Yes /lib64/libcap.so.2 >0x00007f5465fd65c0 0x00007f54660a3bfc Yes /lib64/libgcrypt.so.20 >0x00007f5469b1ef60 0x00007f5469b3b910 Yes /lib64/ld-linux-x86-64.so.2 >0x00007f5465d4d160 0x00007f5465da7cb3 Yes /lib64/libpcre2-8.so.0 >0x00007f5465b046f0 0x00007f5465b3527e No /lib64/libblkid.so.1 >0x00007f54658f4740 0x00007f54658f8171 No /lib64/libuuid.so.1 >0x00007f54656d71e0 0x00007f54656e878e Yes /lib64/libgpg-error.so.0 >0x00007f54535f7530 0x00007f54535fc3f9 No /lib64/libnss_sss.so.2 >0x00007f5452be1340 0x00007f5452be75c8 Yes /lib64/libnss_files.so.2 >0x00007f54584f0180 0x00007f54584f9fa1 Yes /usr/lib64/packagekit-backend/libpk_backend_dnf.so >0x00007f545829ae40 0x00007f54582cc4d7 Yes /lib64/libappstream-glib.so.8 >0x00007f54580625f0 0x00007f5458078b4d Yes /lib64/libgdk_pixbuf-2.0.so.0 >0x00007f54521ab950 0x00007f54521cbd60 Yes /lib64/libdnf.so.1 >0x00007f5451f772e0 0x00007f5451f8befd Yes /lib64/librepo.so.0 >0x00007f5451d0bbf0 0x00007f5451d4efde No /lib64/librpm.so.8 >0x00007f5451ad2300 0x00007f5451ae9c10 No /lib64/librpmio.so.8 >0x00007f5451824530 0x00007f545189ba1f Yes /lib64/libarchive.so.13 >0x00007f5451601790 0x00007f545160ab09 No /lib64/libgcab-1.0.so.0 >0x00007f5451353430 0x00007f545139cb59 Yes /lib64/libsoup-2.4.so.1 >0x00007f54510cacb0 0x00007f54510df25c Yes /lib64/libstemmer.so.0 >0x00007f5450e825a0 0x00007f5450ea4a05 Yes /lib64/libpng16.so.16 >0x00007f5450bfcd60 0x00007f5450c6b2b5 Yes /lib64/libsolv.so.0 >0x00007f54509c2fd0 0x00007f54509e7846 Yes /lib64/libsolvext.so.0 >0x00007f5450782b50 0x00007f54507a2e87 Yes /lib64/libexpat.so.1 >0x00007f545050a2c0 0x00007f5450561fcb Yes (*) /lib64/libcurl.so.4 >0x00007f54500d6000 0x00007f54502506be Yes /lib64/libcrypto.so.1.1 >0x00007f544bdbf290 0x00007f544bdec872 Yes /lib64/libgpgme.so.11 >0x00007f544bba8700 0x00007f544bbb53e6 No /lib64/libbz2.so.1 >0x00007f544b991f00 0x00007f544b9a1311 No /lib64/libelf.so.1 >0x00007f544b70d620 0x00007f544b77d83a No /lib64/libzstd.so.1 >0x00007f544b4fe4e0 0x00007f544b505576 Yes /lib64/libpopt.so.0 >0x00007f544b2f4ee0 0x00007f544b2f9191 No /lib64/libacl.so.1 >0x00007f544b0c0dd0 0x00007f544b0e3f91 No /lib64/liblua-5.3.so >0x00007f544ad266b0 0x00007f544ae69360 Yes /lib64/libdb-5.3.so >0x00007f544a9bd7b0 0x00007f544aaa249e Yes /lib64/libxml2.so.2 >0x00007f544a74c860 0x00007f544a77facf Yes (*) /lib64/libgssapi_krb5.so.2 >0x00007f544a51ed20 0x00007f544a531295 No /lib64/libnghttp2.so.14 >0x00007f544a2fe750 0x00007f544a3022b7 Yes /lib64/libidn2.so.0 >0x00007f544a0983a0 0x00007f544a0caaf0 Yes /lib64/libssh.so.4 >0x00007f5449e7c360 0x00007f5449e7ddc6 Yes /lib64/libpsl.so.5 >0x00007f5449c26450 0x00007f5449c5efca No /lib64/libssl.so.1.1 >0x00007f54499473c0 0x00007f54499b2e41 Yes (*) /lib64/libkrb5.so.3 >0x00007f544970a590 0x00007f5449718eb4 Yes (*) /lib64/libk5crypto.so.3 >0x00007f5449502500 0x00007f54495030d9 No /lib64/libcom_err.so.2 >0x00007f54492bcd60 0x00007f54492ed780 Yes /lib64/libldap-2.4.so.2 >0x00007f54490a1680 0x00007f54490a89ca Yes /lib64/liblber-2.4.so.2 >0x00007f5448e8e6e0 0x00007f5448e98347 Yes /lib64/libassuan.so.0 >0x00007f5448c87370 0x00007f5448c8948e No /lib64/libattr.so.1 >0x00007f5448a7aae0 0x00007f5448a81f5b Yes (*) /lib64/libkrb5support.so.0 >0x00007f54488745f0 0x00007f5448875378 No /lib64/libkeyutils.so.1 >0x00007f54485046d0 0x00007f544853823e Yes /lib64/libunistring.so.2 >0x00007f54482daaf0 0x00007f54482ebd17 No /lib64/libsasl2.so.3 >0x00007f54480901c0 0x00007f54480bf973 Yes /lib64/libssl3.so >0x00007f5443de1330 0x00007f5443df6177 Yes /lib64/libsmime3.so >0x00007f5443ac6dc0 0x00007f5443b9b10b Yes /lib64/libnss3.so >0x00007f54438898f0 0x00007f5443899bbc Yes /lib64/libnssutil3.so >0x00007f5443679ec0 0x00007f544367ac0c Yes /lib64/libplds4.so >0x00007f54434754b0 0x00007f5443476c01 Yes /lib64/libplc4.so >0x00007f5443240c20 0x00007f54432625bf Yes /lib64/libnspr4.so >0x00007f544300c580 0x00007f5443016380 Yes /lib64/libcrypt.so.1 >0x00007f54427d7760 0x00007f54427e38aa No /usr/lib64/gio/modules/libgioremote-volume-monitor.so >0x00007f54425a4a70 0x00007f54425bc22a No /usr/lib64/gvfs/libgvfscommon.so >0x00007f544238ee80 0x00007f544238f7a8 Yes /lib64/libutil.so.1 >0x00007f5441553fe0 0x00007f54415573cb Yes /lib64/libnss_dns.so.2 >(*): Shared library is missing debugging information. >$1 = 0x0 >$2 = 0x0 >rax 0x7f543c2820f0 139999763243248 >rbx 0x7f543c000080 139999760613504 >rcx 0x701 1793 >rdx 0x4c 76 >rsi 0x0 0 >rdi 0x711 1809 >rbp 0xff 0xff >rsp 0x7f5439efb0d0 0x7f5439efb0d0 >r8 0x7f543c0d2dd0 139999761477072 >r9 0x28 40 >r10 0x7f543c04bd00 139999760923904 >r11 0x28 40 >r12 0x7f543c000020 139999760613408 >r13 0x701 1793 >r14 0x1010 4112 >r15 0x0 0 >rip 0x7f5467e77019 0x7f5467e77019 <_int_malloc+2505> >eflags 0x10287 [ CF PF SF IF RF ] >cs 0x33 51 >ss 0x2b 43 >ds 0x0 0 >es 0x0 0 >fs 0x0 0 >gs 0x0 0 >Dump of assembler code for function _int_malloc: > 0x00007f5467e76650 <+0>: push %r15 > 0x00007f5467e76652 <+2>: lea 0x17(%rsi),%rax > 0x00007f5467e76656 <+6>: push %r14 > 0x00007f5467e76658 <+8>: push %r13 > 0x00007f5467e7665a <+10>: push %r12 > 0x00007f5467e7665c <+12>: push %rbp > 0x00007f5467e7665d <+13>: push %rbx > 0x00007f5467e7665e <+14>: sub $0x88,%rsp > 0x00007f5467e76665 <+21>: cmp $0x1f,%rax > 0x00007f5467e76669 <+25>: jbe 0x7f5467e767a8 <_int_malloc+344> > 0x00007f5467e7666f <+31>: and $0xfffffffffffffff0,%rax > 0x00007f5467e76673 <+35>: cmp $0xffffffffffffffbf,%rax > 0x00007f5467e76677 <+39>: mov %rax,%r14 > 0x00007f5467e7667a <+42>: seta %al > 0x00007f5467e7667d <+45>: cmp %rsi,%r14 > 0x00007f5467e76680 <+48>: jb 0x7f5467e76d60 <_int_malloc+1808> > 0x00007f5467e76686 <+54>: test %al,%al > 0x00007f5467e76688 <+56>: jne 0x7f5467e76d60 <_int_malloc+1808> > 0x00007f5467e7668e <+62>: mov %rsi,(%rsp) > 0x00007f5467e76692 <+66>: mov %rdi,%r12 > 0x00007f5467e76695 <+69>: test %rdi,%rdi > 0x00007f5467e76698 <+72>: je 0x7f5467e76e28 <_int_malloc+2008> > 0x00007f5467e7669e <+78>: mov %r14d,%r13d > 0x00007f5467e766a1 <+81>: shr $0x4,%r13d > 0x00007f5467e766a5 <+85>: cmp 0x339294(%rip),%r14 # 0x7f54681af940 <global_max_fast> > 0x00007f5467e766ac <+92>: ja 0x7f5467e767b8 <_int_malloc+360> > 0x00007f5467e766b2 <+98>: lea -0x2(%r13),%eax > 0x00007f5467e766b6 <+102>: lea (%rdi,%rax,8),%rdi > 0x00007f5467e766ba <+106>: mov 0x10(%rdi),%rcx > 0x00007f5467e766be <+110>: test %rcx,%rcx > 0x00007f5467e766c1 <+113>: je 0x7f5467e76a00 <_int_malloc+944> > 0x00007f5467e766c7 <+119>: lea 0x33c30a(%rip),%r8 # 0x7f54681b29d8 <__libc_multiple_threads> > 0x00007f5467e766ce <+126>: lea 0x10(%r12,%rax,8),%rsi > 0x00007f5467e766d3 <+131>: mov 0x10(%rcx),%rdx > 0x00007f5467e766d7 <+135>: mov (%r8),%r9d > 0x00007f5467e766da <+138>: test %r9d,%r9d > 0x00007f5467e766dd <+141>: jne 0x7f5467e769d7 <_int_malloc+903> > 0x00007f5467e766e3 <+147>: mov %rdx,0x10(%rdi) > 0x00007f5467e766e7 <+151>: mov 0x8(%rcx),%eax > 0x00007f5467e766ea <+154>: shr $0x4,%eax > 0x00007f5467e766ed <+157>: cmp %r13d,%eax > 0x00007f5467e766f0 <+160>: jne 0x7f5467e770e0 <_int_malloc+2704> > 0x00007f5467e766f6 <+166>: mov 0x3366ab(%rip),%r15 # 0x7f54681acda8 > 0x00007f5467e766fd <+173>: mov %fs:(%r15),%rax > 0x00007f5467e76701 <+177>: test %rax,%rax > 0x00007f5467e76704 <+180>: je 0x7f5467e76aa0 <_int_malloc+1104> > 0x00007f5467e7670a <+186>: lea -0x11(%r14),%r10 > 0x00007f5467e7670e <+190>: shr $0x4,%r10 > 0x00007f5467e76712 <+194>: cmp %r10,0x336bb7(%rip) # 0x7f54681ad2d0 <mp_+80> > 0x00007f5467e76719 <+201>: jbe 0x7f5467e76aa0 <_int_malloc+1104> > 0x00007f5467e7671f <+207>: movsbq (%rax,%r10,1),%rax > 0x00007f5467e76724 <+212>: cmp 0x336bb5(%rip),%rax # 0x7f54681ad2e0 <mp_+96> > 0x00007f5467e7672b <+219>: jae 0x7f5467e76aa0 <_int_malloc+1104> > 0x00007f5467e76731 <+225>: mov 0x10(%rdi),%rdx > 0x00007f5467e76735 <+229>: test %rdx,%rdx > 0x00007f5467e76738 <+232>: je 0x7f5467e76aa0 <_int_malloc+1104> > 0x00007f5467e7673e <+238>: lea 0x0(,%r10,8),%r11 > 0x00007f5467e76746 <+246>: jmp 0x7f5467e76795 <_int_malloc+325> > 0x00007f5467e76748 <+248>: nopl 0x0(%rax,%rax,1) > 0x00007f5467e76750 <+256>: mov %r9,0x10(%rdi) > 0x00007f5467e76754 <+260>: mov %fs:(%r15),%r9 > 0x00007f5467e76758 <+264>: add $0x10,%rdx > 0x00007f5467e7675c <+268>: lea (%r9,%r11,1),%rax > 0x00007f5467e76760 <+272>: mov 0x40(%rax),%rbx > 0x00007f5467e76764 <+276>: mov %rbx,(%rdx) > 0x00007f5467e76767 <+279>: mov %rdx,0x40(%rax) > 0x00007f5467e7676b <+283>: movzbl (%r9,%r10,1),%eax > 0x00007f5467e76770 <+288>: add $0x1,%eax > 0x00007f5467e76773 <+291>: mov %al,(%r9,%r10,1) > 0x00007f5467e76777 <+295>: movsbq %al,%rax > 0x00007f5467e7677b <+299>: cmp 0x336b5e(%rip),%rax # 0x7f54681ad2e0 <mp_+96> > 0x00007f5467e76782 <+306>: jae 0x7f5467e76aa0 <_int_malloc+1104> > 0x00007f5467e76788 <+312>: mov 0x10(%rdi),%rdx > 0x00007f5467e7678c <+316>: test %rdx,%rdx > 0x00007f5467e7678f <+319>: je 0x7f5467e76aa0 <_int_malloc+1104> > 0x00007f5467e76795 <+325>: mov (%r8),%eax > 0x00007f5467e76798 <+328>: mov 0x10(%rdx),%r9 > 0x00007f5467e7679c <+332>: test %eax,%eax > 0x00007f5467e7679e <+334>: je 0x7f5467e76750 <_int_malloc+256> > 0x00007f5467e767a0 <+336>: jmpq 0x7f5467e76c47 <_int_malloc+1527> > 0x00007f5467e767a5 <+341>: nopl (%rax) > 0x00007f5467e767a8 <+344>: xor %eax,%eax > 0x00007f5467e767aa <+346>: mov $0x20,%r14d > 0x00007f5467e767b0 <+352>: jmpq 0x7f5467e7667d <_int_malloc+45> > 0x00007f5467e767b5 <+357>: nopl (%rax) > 0x00007f5467e767b8 <+360>: cmp $0x3ff,%r14 > 0x00007f5467e767bf <+367>: jbe 0x7f5467e76a00 <_int_malloc+944> > 0x00007f5467e767c5 <+373>: mov %r14,%rax > 0x00007f5467e767c8 <+376>: mov %r14,%rbx > 0x00007f5467e767cb <+379>: mov %r14,%rdi > 0x00007f5467e767ce <+382>: mov %r14,%rcx > 0x00007f5467e767d1 <+385>: shr $0x12,%rax > 0x00007f5467e767d5 <+389>: mov %r14,%rsi > 0x00007f5467e767d8 <+392>: shr $0x6,%rbx > 0x00007f5467e767dc <+396>: mov $0x2,%edx > 0x00007f5467e767e1 <+401>: shr $0x9,%rdi > 0x00007f5467e767e5 <+405>: shr $0xc,%rcx > 0x00007f5467e767e9 <+409>: lea 0x30(%rbx),%r15d > 0x00007f5467e767ed <+413>: mov %rbx,0x48(%rsp) > 0x00007f5467e767f2 <+418>: shr $0xf,%rsi > 0x00007f5467e767f6 <+422>: cmp $0x2,%rax > 0x00007f5467e767fa <+426>: lea 0x5b(%rdi),%r11d > 0x00007f5467e767fe <+430>: mov %rdi,0x58(%rsp) > 0x00007f5467e76803 <+435>: cmova %rdx,%rax > 0x00007f5467e76807 <+439>: lea 0x6e(%rcx),%r10d > 0x00007f5467e7680b <+443>: lea 0x77(%rsi),%r8d > 0x00007f5467e7680f <+447>: mov %r15d,0x54(%rsp) > 0x00007f5467e76814 <+452>: mov %rcx,0x60(%rsp) > 0x00007f5467e76819 <+457>: add $0x7c,%eax > 0x00007f5467e7681c <+460>: mov %rsi,0x70(%rsp) > 0x00007f5467e76821 <+465>: mov %r11d,0x68(%rsp) > 0x00007f5467e76826 <+470>: mov %r10d,0x6c(%rsp) > 0x00007f5467e7682b <+475>: mov %r8d,0x7c(%rsp) > 0x00007f5467e76830 <+480>: mov %eax,0x78(%rsp) > 0x00007f5467e76834 <+484>: mov %r15d,0x20(%rsp) > 0x00007f5467e76839 <+489>: cmp $0x30,%rbx > 0x00007f5467e7683d <+493>: jbe 0x7f5467e76860 <_int_malloc+528> > 0x00007f5467e7683f <+495>: mov %r11d,0x20(%rsp) > 0x00007f5467e76844 <+500>: cmp $0x14,%rdi > 0x00007f5467e76848 <+504>: jbe 0x7f5467e76860 <_int_malloc+528> > 0x00007f5467e7684a <+506>: mov %r10d,0x20(%rsp) > 0x00007f5467e7684f <+511>: cmp $0xa,%rcx > 0x00007f5467e76853 <+515>: ja 0x7f5467e76ec0 <_int_malloc+2160> > 0x00007f5467e76859 <+521>: nopl 0x0(%rax) > 0x00007f5467e76860 <+528>: mov 0x8(%r12),%eax > 0x00007f5467e76865 <+533>: test %eax,%eax > 0x00007f5467e76867 <+535>: jne 0x7f5467e76cc8 <_int_malloc+1656> > 0x00007f5467e7686d <+541>: mov 0x336534(%rip),%r15 # 0x7f54681acda8 > 0x00007f5467e76874 <+548>: lea -0x11(%r14),%rax > 0x00007f5467e76878 <+552>: mov %rax,0x30(%rsp) > 0x00007f5467e7687d <+557>: mov %rax,%rbp > 0x00007f5467e76880 <+560>: xor %eax,%eax > 0x00007f5467e76882 <+562>: mov %fs:(%r15),%r10 > 0x00007f5467e76886 <+566>: shr $0x4,%rbp > 0x00007f5467e7688a <+570>: mov %rax,0x8(%rsp) > 0x00007f5467e7688f <+575>: test %r10,%r10 > 0x00007f5467e76892 <+578>: je 0x7f5467e768a4 <_int_malloc+596> > 0x00007f5467e76894 <+580>: cmp %rbp,0x336a35(%rip) # 0x7f54681ad2d0 <mp_+80> > 0x00007f5467e7689b <+587>: cmova %r14,%rax > 0x00007f5467e7689f <+591>: mov %rax,0x8(%rsp) > 0x00007f5467e768a4 <+596>: mov %r13d,0x50(%rsp) > 0x00007f5467e768a9 <+601>: lea 0x60(%r12),%rbx > 0x00007f5467e768ae <+606>: xor %r11d,%r11d > 0x00007f5467e768b1 <+609>: mov %r15,0x40(%rsp) > 0x00007f5467e768b6 <+614>: mov 0x336a2b(%rip),%rax # 0x7f54681ad2e8 <mp_+104> > 0x00007f5467e768bd <+621>: lea 0x20(%r14),%rdi > 0x00007f5467e768c1 <+625>: mov %rdi,0x38(%rsp) > 0x00007f5467e768c6 <+630>: lea (%r10,%rbp,8),%rdi > 0x00007f5467e768ca <+634>: test %rax,%rax > 0x00007f5467e768cd <+637>: mov %rax,0x18(%rsp) > 0x00007f5467e768d2 <+642>: mov 0x336a07(%rip),%rax # 0x7f54681ad2e0 <mp_+96> > 0x00007f5467e768d9 <+649>: mov %rdi,0x28(%rsp) > 0x00007f5467e768de <+654>: mov %rax,0x10(%rsp) > 0x00007f5467e768e3 <+659>: mov 0x78(%r12),%rax > 0x00007f5467e768e8 <+664>: setne 0x27(%rsp) > 0x00007f5467e768ed <+669>: xor %r9d,%r9d > 0x00007f5467e768f0 <+672>: xor %r15d,%r15d > 0x00007f5467e768f3 <+675>: cmp %rbx,%rax > 0x00007f5467e768f6 <+678>: je 0x7f5467e76f90 <_int_malloc+2368> > 0x00007f5467e768fc <+684>: mov 0x8(%rax),%rcx > 0x00007f5467e76900 <+688>: cmp $0x10,%rcx > 0x00007f5467e76904 <+692>: jbe 0x7f5467e76d50 <_int_malloc+1792> > 0x00007f5467e7690a <+698>: cmp 0x888(%r12),%rcx > 0x00007f5467e76912 <+706>: ja 0x7f5467e76d50 <_int_malloc+1792> > 0x00007f5467e76918 <+712>: mov 0x18(%rax),%rdx > 0x00007f5467e7691c <+716>: and $0xfffffffffffffff8,%rcx > 0x00007f5467e76920 <+720>: cmp $0x3ff,%r14 > 0x00007f5467e76927 <+727>: ja 0x7f5467e76932 <_int_malloc+738> > 0x00007f5467e76929 <+729>: cmp %rbx,%rdx > 0x00007f5467e7692c <+732>: je 0x7f5467e76d78 <_int_malloc+1832> > 0x00007f5467e76932 <+738>: mov %rdx,0x78(%r12) > 0x00007f5467e76937 <+743>: mov %rbx,0x10(%rdx) > 0x00007f5467e7693b <+747>: cmp %rcx,%r14 > 0x00007f5467e7693e <+750>: je 0x7f5467e76ac8 <_int_malloc+1144> > 0x00007f5467e76944 <+756>: cmp $0x3ff,%rcx > 0x00007f5467e7694b <+763>: ja 0x7f5467e76bd0 <_int_malloc+1408> > 0x00007f5467e76951 <+769>: shr $0x4,%ecx > 0x00007f5467e76954 <+772>: lea -0x2(%rcx,%rcx,1),%esi > 0x00007f5467e76958 <+776>: mov %ecx,%edx > 0x00007f5467e7695a <+778>: movslq %esi,%rsi > 0x00007f5467e7695d <+781>: lea 0x70(%r12,%rsi,8),%rsi > 0x00007f5467e76962 <+786>: mov (%rsi),%rdi > 0x00007f5467e76965 <+789>: lea -0x10(%rsi),%r8 > 0x00007f5467e76969 <+793>: sar $0x5,%edx > 0x00007f5467e7696c <+796>: mov $0x1,%esi > 0x00007f5467e76971 <+801>: add $0x1,%r11 > 0x00007f5467e76975 <+805>: movslq %edx,%rdx > 0x00007f5467e76978 <+808>: shl %cl,%esi > 0x00007f5467e7697a <+810>: or %esi,0x860(%r12,%rdx,4) > 0x00007f5467e76982 <+818>: mov %r8,0x18(%rax) > 0x00007f5467e76986 <+822>: mov %rdi,0x10(%rax) > 0x00007f5467e7698a <+826>: mov %rax,0x18(%rdi) > 0x00007f5467e7698e <+830>: mov %rax,0x10(%r8) > 0x00007f5467e76992 <+834>: test %r15d,%r15d > 0x00007f5467e76995 <+837>: je 0x7f5467e76b20 <_int_malloc+1232> > 0x00007f5467e7699b <+843>: cmp %r11,0x18(%rsp) > 0x00007f5467e769a0 <+848>: jae 0x7f5467e769ad <_int_malloc+861> > 0x00007f5467e769a2 <+850>: cmpb $0x0,0x27(%rsp) > 0x00007f5467e769a7 <+855>: jne 0x7f5467e76f99 <_int_malloc+2377> > 0x00007f5467e769ad <+861>: add $0x1,%r9d > 0x00007f5467e769b1 <+865>: cmp $0x270f,%r9d > 0x00007f5467e769b8 <+872>: jg 0x7f5467e76f99 <_int_malloc+2377> > 0x00007f5467e769be <+878>: mov 0x78(%r12),%rax > 0x00007f5467e769c3 <+883>: jmpq 0x7f5467e768f3 <_int_malloc+675> > 0x00007f5467e769c8 <+888>: nopl 0x0(%rax,%rax,1) > 0x00007f5467e769d0 <+896>: mov 0x10(%rax),%rdx > 0x00007f5467e769d4 <+900>: mov %rax,%rcx > 0x00007f5467e769d7 <+903>: mov %rcx,%rax > 0x00007f5467e769da <+906>: cmpl $0x0,%fs:0x18 > 0x00007f5467e769e3 <+915>: je 0x7f5467e769e6 <_int_malloc+918> > 0x00007f5467e769e5 <+917>: lock cmpxchg %rdx,(%rsi) > 0x00007f5467e769ea <+922>: cmp %rcx,%rax > 0x00007f5467e769ed <+925>: je 0x7f5467e766e7 <_int_malloc+151> > 0x00007f5467e769f3 <+931>: test %rax,%rax > 0x00007f5467e769f6 <+934>: jne 0x7f5467e769d0 <_int_malloc+896> > 0x00007f5467e769f8 <+936>: nopl 0x0(%rax,%rax,1) > 0x00007f5467e76a00 <+944>: lea 0x7fffffff(%r13),%eax > 0x00007f5467e76a07 <+951>: add %eax,%eax > 0x00007f5467e76a09 <+953>: lea 0x70(%r12,%rax,8),%rdx > 0x00007f5467e76a0e <+958>: mov 0x8(%rdx),%rcx > 0x00007f5467e76a12 <+962>: lea -0x10(%rdx),%rsi > 0x00007f5467e76a16 <+966>: cmp %rcx,%rsi > 0x00007f5467e76a19 <+969>: je 0x7f5467e76cd8 <_int_malloc+1672> > 0x00007f5467e76a1f <+975>: mov 0x18(%rcx),%rax > 0x00007f5467e76a23 <+979>: cmp %rcx,0x10(%rax) > 0x00007f5467e76a27 <+983>: jne 0x7f5467e77110 <_int_malloc+2752> > 0x00007f5467e76a2d <+989>: lea 0x33720c(%rip),%r11 # 0x7f54681adc40 <main_arena> > 0x00007f5467e76a34 <+996>: orq $0x1,0x8(%rcx,%r14,1) > 0x00007f5467e76a3a <+1002>: mov %rax,0x8(%rdx) > 0x00007f5467e76a3e <+1006>: mov %rsi,0x10(%rax) > 0x00007f5467e76a42 <+1010>: cmp %r11,%r12 > 0x00007f5467e76a45 <+1013>: je 0x7f5467e76a4c <_int_malloc+1020> > 0x00007f5467e76a47 <+1015>: orq $0x4,0x8(%rcx) > 0x00007f5467e76a4c <+1020>: mov 0x336355(%rip),%rax # 0x7f54681acda8 > 0x00007f5467e76a53 <+1027>: mov %fs:(%rax),%r10 > 0x00007f5467e76a57 <+1031>: test %r10,%r10 > 0x00007f5467e76a5a <+1034>: je 0x7f5467e76aa0 <_int_malloc+1104> > 0x00007f5467e76a5c <+1036>: lea -0x11(%r14),%r9 > 0x00007f5467e76a60 <+1040>: shr $0x4,%r9 > 0x00007f5467e76a64 <+1044>: cmp %r9,0x336865(%rip) # 0x7f54681ad2d0 <mp_+80> > 0x00007f5467e76a6b <+1051>: jbe 0x7f5467e76aa0 <_int_malloc+1104> > 0x00007f5467e76a6d <+1053>: mov 0x33686c(%rip),%r8 # 0x7f54681ad2e0 <mp_+96> > 0x00007f5467e76a74 <+1060>: movzbl (%r10,%r9,1),%ebx > 0x00007f5467e76a79 <+1065>: lea (%r10,%r9,8),%rbp > 0x00007f5467e76a7d <+1069>: movsbq %bl,%rdi > 0x00007f5467e76a81 <+1073>: jmp 0x7f5467e76a9a <_int_malloc+1098> > 0x00007f5467e76a83 <+1075>: nopl 0x0(%rax,%rax,1) > 0x00007f5467e76a88 <+1080>: mov 0x8(%rdx),%rax > 0x00007f5467e76a8c <+1084>: cmp %rax,%rsi > 0x00007f5467e76a8f <+1087>: je 0x7f5467e76aa0 <_int_malloc+1104> > 0x00007f5467e76a91 <+1089>: test %rax,%rax > 0x00007f5467e76a94 <+1092>: jne 0x7f5467e770a0 <_int_malloc+2640> > 0x00007f5467e76a9a <+1098>: cmp %r8,%rdi > 0x00007f5467e76a9d <+1101>: jb 0x7f5467e76a88 <_int_malloc+1080> > 0x00007f5467e76a9f <+1103>: nop > 0x00007f5467e76aa0 <+1104>: mov 0x338e86(%rip),%esi # 0x7f54681af92c <perturb_byte> > 0x00007f5467e76aa6 <+1110>: add $0x10,%rcx > 0x00007f5467e76aaa <+1114>: test %esi,%esi > 0x00007f5467e76aac <+1116>: jne 0x7f5467e76b08 <_int_malloc+1208> > 0x00007f5467e76aae <+1118>: add $0x88,%rsp > 0x00007f5467e76ab5 <+1125>: mov %rcx,%rax > 0x00007f5467e76ab8 <+1128>: pop %rbx > 0x00007f5467e76ab9 <+1129>: pop %rbp > 0x00007f5467e76aba <+1130>: pop %r12 > 0x00007f5467e76abc <+1132>: pop %r13 > 0x00007f5467e76abe <+1134>: pop %r14 > 0x00007f5467e76ac0 <+1136>: pop %r15 > 0x00007f5467e76ac2 <+1138>: retq > 0x00007f5467e76ac3 <+1139>: nopl 0x0(%rax,%rax,1) > 0x00007f5467e76ac8 <+1144>: lea 0x337171(%rip),%rdi # 0x7f54681adc40 <main_arena> > 0x00007f5467e76acf <+1151>: orq $0x1,0x8(%rax,%r14,1) > 0x00007f5467e76ad5 <+1157>: cmp %rdi,%r12 > 0x00007f5467e76ad8 <+1160>: je 0x7f5467e76adf <_int_malloc+1167> > 0x00007f5467e76ada <+1162>: orq $0x4,0x8(%rax) > 0x00007f5467e76adf <+1167>: cmpq $0x0,0x8(%rsp) > 0x00007f5467e76ae5 <+1173>: lea 0x10(%rax),%rcx > 0x00007f5467e76ae9 <+1177>: je 0x7f5467e76afe <_int_malloc+1198> > 0x00007f5467e76aeb <+1179>: movsbq (%r10,%rbp,1),%rdi > 0x00007f5467e76af0 <+1184>: mov %rdi,%rsi > 0x00007f5467e76af3 <+1187>: cmp 0x10(%rsp),%rdi > 0x00007f5467e76af8 <+1192>: jb 0x7f5467e76c90 <_int_malloc+1600> > 0x00007f5467e76afe <+1198>: mov 0x338e28(%rip),%esi # 0x7f54681af92c <perturb_byte> > 0x00007f5467e76b04 <+1204>: test %esi,%esi > 0x00007f5467e76b06 <+1206>: je 0x7f5467e76aae <_int_malloc+1118> > 0x00007f5467e76b08 <+1208>: mov (%rsp),%rdx > 0x00007f5467e76b0c <+1212>: mov %rcx,%rdi > 0x00007f5467e76b0f <+1215>: xor $0xff,%sil > 0x00007f5467e76b13 <+1219>: callq 0x7f5467e15260 <*ABS*+0x890a0@plt> > 0x00007f5467e76b18 <+1224>: mov %rax,%rcx > 0x00007f5467e76b1b <+1227>: jmp 0x7f5467e76aae <_int_malloc+1118> > 0x00007f5467e76b1d <+1229>: nopl (%rax) > 0x00007f5467e76b20 <+1232>: add $0x1,%r9d > 0x00007f5467e76b24 <+1236>: cmp $0x270f,%r9d > 0x00007f5467e76b2b <+1243>: jle 0x7f5467e769be <_int_malloc+878> > 0x00007f5467e76b31 <+1249>: cmp $0x3ff,%r14 > 0x00007f5467e76b38 <+1256>: jbe 0x7f5467e76b60 <_int_malloc+1296> > 0x00007f5467e76b3a <+1258>: mov 0x20(%rsp),%eax > 0x00007f5467e76b3e <+1262>: add $0x7fffffff,%eax > 0x00007f5467e76b43 <+1267>: add %eax,%eax > 0x00007f5467e76b45 <+1269>: lea 0x70(%r12,%rax,8),%rax > 0x00007f5467e76b4a <+1274>: mov (%rax),%rdx > 0x00007f5467e76b4d <+1277>: lea -0x10(%rax),%rcx > 0x00007f5467e76b51 <+1281>: cmp %rcx,%rdx > 0x00007f5467e76b54 <+1284>: je 0x7f5467e76b60 <_int_malloc+1296> > 0x00007f5467e76b56 <+1286>: cmp %r14,0x8(%rdx) > 0x00007f5467e76b5a <+1290>: jae 0x7f5467e77394 <_int_malloc+3396> > 0x00007f5467e76b60 <+1296>: mov 0x20(%rsp),%eax > 0x00007f5467e76b64 <+1300>: lea 0x1(%rax),%ecx > 0x00007f5467e76b67 <+1303>: add %eax,%eax > 0x00007f5467e76b69 <+1305>: mov %ecx,%edi > 0x00007f5467e76b6b <+1307>: lea 0x60(%r12,%rax,8),%rdx > 0x00007f5467e76b70 <+1312>: mov $0x1,%eax > 0x00007f5467e76b75 <+1317>: shr $0x5,%edi > 0x00007f5467e76b78 <+1320>: shl %cl,%eax > 0x00007f5467e76b7a <+1322>: mov %edi,%r8d > 0x00007f5467e76b7d <+1325>: mov 0x860(%r12,%r8,4),%esi > 0x00007f5467e76b85 <+1333>: nopl (%rax) > 0x00007f5467e76b88 <+1336>: cmp %esi,%eax > 0x00007f5467e76b8a <+1338>: ja 0x7f5467e76eeb <_int_malloc+2203> > 0x00007f5467e76b90 <+1344>: test %eax,%eax > 0x00007f5467e76b92 <+1346>: je 0x7f5467e76eeb <_int_malloc+2203> > 0x00007f5467e76b98 <+1352>: nopl 0x0(%rax,%rax,1) > 0x00007f5467e76ba0 <+1360>: test %esi,%eax > 0x00007f5467e76ba2 <+1362>: jne 0x7f5467e76fd8 <_int_malloc+2440> > 0x00007f5467e76ba8 <+1368>: add $0x10,%rdx > 0x00007f5467e76bac <+1372>: add %eax,%eax > 0x00007f5467e76bae <+1374>: jne 0x7f5467e76ba0 <_int_malloc+1360> > 0x00007f5467e76bb0 <+1376>: lea 0x102ed1(%rip),%rcx # 0x7f5467f79a88 <__PRETTY_FUNCTION__.13151> > 0x00007f5467e76bb7 <+1383>: mov $0xfa4,%edx > 0x00007f5467e76bbc <+1388>: lea 0xfeb34(%rip),%rsi # 0x7f5467f756f7 > 0x00007f5467e76bc3 <+1395>: lea 0xfeca8(%rip),%rdi # 0x7f5467f75872 > 0x00007f5467e76bca <+1402>: callq 0x7f5467e73c00 <__malloc_assert> > 0x00007f5467e76bcf <+1407>: nop > 0x00007f5467e76bd0 <+1408>: mov %rcx,%rdx > 0x00007f5467e76bd3 <+1411>: shr $0x6,%rdx > 0x00007f5467e76bd7 <+1415>: cmp $0x30,%rdx > 0x00007f5467e76bdb <+1419>: ja 0x7f5467e76c70 <_int_malloc+1568> > 0x00007f5467e76be1 <+1425>: add $0x30,%edx > 0x00007f5467e76be4 <+1428>: lea -0x2(%rdx,%rdx,1),%esi > 0x00007f5467e76be8 <+1432>: movslq %esi,%rsi > 0x00007f5467e76beb <+1435>: lea 0x70(%r12,%rsi,8),%r8 > 0x00007f5467e76bf0 <+1440>: mov (%r8),%rsi > 0x00007f5467e76bf3 <+1443>: lea -0x10(%r8),%rdi > 0x00007f5467e76bf7 <+1447>: cmp %rsi,%rdi > 0x00007f5467e76bfa <+1450>: je 0x7f5467e76e48 <_int_malloc+2040> > 0x00007f5467e76c00 <+1456>: mov 0x8(%r8),%r8 > 0x00007f5467e76c04 <+1460>: or $0x1,%rcx > 0x00007f5467e76c08 <+1464>: mov 0x8(%r8),%r13 > 0x00007f5467e76c0c <+1468>: test $0x4,%r13b > 0x00007f5467e76c10 <+1472>: jne 0x7f5467e76e90 <_int_malloc+2112> > 0x00007f5467e76c16 <+1478>: cmp %rcx,%r13 > 0x00007f5467e76c19 <+1481>: jbe 0x7f5467e77000 <_int_malloc+2480> > 0x00007f5467e76c1f <+1487>: mov 0x28(%rsi),%rcx > 0x00007f5467e76c23 <+1491>: mov %rsi,0x20(%rax) > 0x00007f5467e76c27 <+1495>: mov %rcx,0x28(%rax) > 0x00007f5467e76c2b <+1499>: mov %rax,0x20(%rcx) > 0x00007f5467e76c2f <+1503>: mov %edx,%ecx > 0x00007f5467e76c31 <+1505>: mov %rax,0x28(%rsi) > 0x00007f5467e76c35 <+1509>: jmpq 0x7f5467e76969 <_int_malloc+793> > 0x00007f5467e76c3a <+1514>: nopw 0x0(%rax,%rax,1) > 0x00007f5467e76c40 <+1520>: mov 0x10(%rax),%r9 > 0x00007f5467e76c44 <+1524>: mov %rax,%rdx > 0x00007f5467e76c47 <+1527>: mov %rdx,%rax > 0x00007f5467e76c4a <+1530>: cmpl $0x0,%fs:0x18 > 0x00007f5467e76c53 <+1539>: je 0x7f5467e76c56 <_int_malloc+1542> > 0x00007f5467e76c55 <+1541>: lock cmpxchg %r9,(%rsi) > 0x00007f5467e76c5a <+1546>: cmp %rdx,%rax > 0x00007f5467e76c5d <+1549>: je 0x7f5467e76754 <_int_malloc+260> > 0x00007f5467e76c63 <+1555>: test %rax,%rax > 0x00007f5467e76c66 <+1558>: jne 0x7f5467e76c40 <_int_malloc+1520> > 0x00007f5467e76c68 <+1560>: jmpq 0x7f5467e76aa0 <_int_malloc+1104> > 0x00007f5467e76c6d <+1565>: nopl (%rax) > 0x00007f5467e76c70 <+1568>: mov %rcx,%rdx > 0x00007f5467e76c73 <+1571>: shr $0x9,%rdx > 0x00007f5467e76c77 <+1575>: cmp $0x14,%rdx > 0x00007f5467e76c7b <+1579>: ja 0x7f5467e76e60 <_int_malloc+2064> > 0x00007f5467e76c81 <+1585>: add $0x5b,%edx > 0x00007f5467e76c84 <+1588>: jmpq 0x7f5467e76be4 <_int_malloc+1428> > 0x00007f5467e76c89 <+1593>: nopl 0x0(%rax) > 0x00007f5467e76c90 <+1600>: cmpq $0x3ff,0x30(%rsp) > 0x00007f5467e76c99 <+1609>: ja 0x7f5467e77078 <_int_malloc+2600> > 0x00007f5467e76c9f <+1615>: mov 0x28(%rsp),%r15 > 0x00007f5467e76ca4 <+1620>: add $0x1,%esi > 0x00007f5467e76ca7 <+1623>: mov 0x40(%r15),%rdi > 0x00007f5467e76cab <+1627>: mov %rdi,0x10(%rax) > 0x00007f5467e76caf <+1631>: mov %rdx,%rax > 0x00007f5467e76cb2 <+1634>: mov %rcx,0x40(%r15) > 0x00007f5467e76cb6 <+1638>: mov $0x1,%r15d > 0x00007f5467e76cbc <+1644>: mov %sil,(%r10,%rbp,1) > 0x00007f5467e76cc0 <+1648>: jmpq 0x7f5467e768f3 <_int_malloc+675> > 0x00007f5467e76cc5 <+1653>: nopl (%rax) > 0x00007f5467e76cc8 <+1656>: mov %r12,%rdi > 0x00007f5467e76ccb <+1659>: callq 0x7f5467e73e70 <malloc_consolidate> > 0x00007f5467e76cd0 <+1664>: jmpq 0x7f5467e7686d <_int_malloc+541> > 0x00007f5467e76cd5 <+1669>: nopl (%rax) > 0x00007f5467e76cd8 <+1672>: mov %r14,%rax > 0x00007f5467e76cdb <+1675>: mov %r14,%rbx > 0x00007f5467e76cde <+1678>: mov %r14,%rdi > 0x00007f5467e76ce1 <+1681>: mov %r14,%rcx > 0x00007f5467e76ce4 <+1684>: shr $0x6,%rax > 0x00007f5467e76ce8 <+1688>: shr $0x9,%rbx > 0x00007f5467e76cec <+1692>: mov $0x2,%edx > 0x00007f5467e76cf1 <+1697>: mov %r13d,0x20(%rsp) > 0x00007f5467e76cf6 <+1702>: mov %rax,0x48(%rsp) > 0x00007f5467e76cfb <+1707>: shr $0xc,%rdi > 0x00007f5467e76cff <+1711>: add $0x30,%eax > 0x00007f5467e76d02 <+1714>: shr $0xf,%rcx > 0x00007f5467e76d06 <+1718>: mov %eax,0x54(%rsp) > 0x00007f5467e76d0a <+1722>: mov %ebx,%eax > 0x00007f5467e76d0c <+1724>: add $0x5b,%eax > 0x00007f5467e76d0f <+1727>: mov %rbx,0x58(%rsp) > 0x00007f5467e76d14 <+1732>: mov %eax,0x68(%rsp) > 0x00007f5467e76d18 <+1736>: mov %edi,%eax > 0x00007f5467e76d1a <+1738>: add $0x6e,%eax > 0x00007f5467e76d1d <+1741>: mov %rdi,0x60(%rsp) > 0x00007f5467e76d22 <+1746>: mov %eax,0x6c(%rsp) > 0x00007f5467e76d26 <+1750>: mov %ecx,%eax > 0x00007f5467e76d28 <+1752>: add $0x77,%eax > 0x00007f5467e76d2b <+1755>: mov %rcx,0x70(%rsp) > 0x00007f5467e76d30 <+1760>: mov %eax,0x7c(%rsp) > 0x00007f5467e76d34 <+1764>: mov %r14,%rax > 0x00007f5467e76d37 <+1767>: shr $0x12,%rax > 0x00007f5467e76d3b <+1771>: cmp $0x2,%rax > 0x00007f5467e76d3f <+1775>: cmova %rdx,%rax > 0x00007f5467e76d43 <+1779>: add $0x7c,%eax > 0x00007f5467e76d46 <+1782>: mov %eax,0x78(%rsp) > 0x00007f5467e76d4a <+1786>: jmpq 0x7f5467e7686d <_int_malloc+541> > 0x00007f5467e76d4f <+1791>: nop > 0x00007f5467e76d50 <+1792>: lea 0xfeab1(%rip),%rdi # 0x7f5467f75808 > 0x00007f5467e76d57 <+1799>: callq 0x7f5467e73df0 <malloc_printerr> > 0x00007f5467e76d5c <+1804>: nopl 0x0(%rax) > 0x00007f5467e76d60 <+1808>: mov 0x336139(%rip),%rax # 0x7f54681acea0 > 0x00007f5467e76d67 <+1815>: xor %ecx,%ecx > 0x00007f5467e76d69 <+1817>: movl $0xc,%fs:(%rax) > 0x00007f5467e76d70 <+1824>: jmpq 0x7f5467e76aae <_int_malloc+1118> > 0x00007f5467e76d75 <+1829>: nopl (%rax) > 0x00007f5467e76d78 <+1832>: cmp %rax,0x68(%r12) > 0x00007f5467e76d7d <+1837>: jne 0x7f5467e76932 <_int_malloc+738> > 0x00007f5467e76d83 <+1843>: cmp %rcx,0x38(%rsp) > 0x00007f5467e76d88 <+1848>: jae 0x7f5467e76932 <_int_malloc+738> > 0x00007f5467e76d8e <+1854>: mov %rcx,%rdi > 0x00007f5467e76d91 <+1857>: lea (%rax,%r14,1),%rdx > 0x00007f5467e76d95 <+1861>: sub %r14,%rdi > 0x00007f5467e76d98 <+1864>: mov %rdx,0x70(%r12) > 0x00007f5467e76d9d <+1869>: mov %rdx,0x78(%r12) > 0x00007f5467e76da2 <+1874>: mov %rdx,0x68(%r12) > 0x00007f5467e76da7 <+1879>: mov %rbx,0x10(%rdx) > 0x00007f5467e76dab <+1883>: mov %rbx,0x18(%rdx) > 0x00007f5467e76daf <+1887>: cmp $0x3ff,%rdi > 0x00007f5467e76db6 <+1894>: jbe 0x7f5467e76dc8 <_int_malloc+1912> > 0x00007f5467e76db8 <+1896>: movq $0x0,0x20(%rdx) > 0x00007f5467e76dc0 <+1904>: movq $0x0,0x28(%rdx) > 0x00007f5467e76dc8 <+1912>: lea 0x336e71(%rip),%rsi # 0x7f54681adc40 <main_arena> > 0x00007f5467e76dcf <+1919>: cmp %rsi,%r12 > 0x00007f5467e76dd2 <+1922>: setne %sil > 0x00007f5467e76dd6 <+1926>: movzbl %sil,%esi > 0x00007f5467e76dda <+1930>: shl $0x2,%rsi > 0x00007f5467e76dde <+1934>: or %r14,%rsi > 0x00007f5467e76de1 <+1937>: or $0x1,%rsi > 0x00007f5467e76de5 <+1941>: mov %rsi,0x8(%rax) > 0x00007f5467e76de9 <+1945>: mov %rdi,%rsi > 0x00007f5467e76dec <+1948>: or $0x1,%rsi > 0x00007f5467e76df0 <+1952>: mov %rsi,0x8(%rdx) > 0x00007f5467e76df4 <+1956>: mov %rdi,(%rax,%rcx,1) > 0x00007f5467e76df8 <+1960>: lea 0x10(%rax),%rcx > 0x00007f5467e76dfc <+1964>: mov 0x338b2a(%rip),%eax # 0x7f54681af92c <perturb_byte> > 0x00007f5467e76e02 <+1970>: test %eax,%eax > 0x00007f5467e76e04 <+1972>: je 0x7f5467e76aae <_int_malloc+1118> > 0x00007f5467e76e0a <+1978>: xor $0xff,%al > 0x00007f5467e76e0c <+1980>: mov (%rsp),%rdx > 0x00007f5467e76e10 <+1984>: mov %rcx,%rdi > 0x00007f5467e76e13 <+1987>: mov %eax,%esi > 0x00007f5467e76e15 <+1989>: callq 0x7f5467e15260 <*ABS*+0x890a0@plt> > 0x00007f5467e76e1a <+1994>: mov %rax,%rcx > 0x00007f5467e76e1d <+1997>: jmpq 0x7f5467e76aae <_int_malloc+1118> > 0x00007f5467e76e22 <+2002>: nopw 0x0(%rax,%rax,1) > 0x00007f5467e76e28 <+2008>: xor %esi,%esi > 0x00007f5467e76e2a <+2010>: mov %r14,%rdi > 0x00007f5467e76e2d <+2013>: callq 0x7f5467e75e00 <sysmalloc> > 0x00007f5467e76e32 <+2018>: mov %rax,%rcx > 0x00007f5467e76e35 <+2021>: test %rax,%rax > 0x00007f5467e76e38 <+2024>: jne 0x7f5467e76afe <_int_malloc+1198> > 0x00007f5467e76e3e <+2030>: xor %ecx,%ecx > 0x00007f5467e76e40 <+2032>: jmpq 0x7f5467e76aae <_int_malloc+1118> > 0x00007f5467e76e45 <+2037>: nopl (%rax) > 0x00007f5467e76e48 <+2040>: mov %rax,0x28(%rax) > 0x00007f5467e76e4c <+2044>: mov %edx,%ecx > 0x00007f5467e76e4e <+2046>: mov %rdi,%r8 > 0x00007f5467e76e51 <+2049>: mov %rax,0x20(%rax) > 0x00007f5467e76e55 <+2053>: jmpq 0x7f5467e76969 <_int_malloc+793> > 0x00007f5467e76e5a <+2058>: nopw 0x0(%rax,%rax,1) > 0x00007f5467e76e60 <+2064>: mov %rcx,%rdx > 0x00007f5467e76e63 <+2067>: shr $0xc,%rdx > 0x00007f5467e76e67 <+2071>: cmp $0xa,%rdx > 0x00007f5467e76e6b <+2075>: jbe 0x7f5467e76eb0 <_int_malloc+2144> > 0x00007f5467e76e6d <+2077>: mov %rcx,%rdx > 0x00007f5467e76e70 <+2080>: shr $0xf,%rdx > 0x00007f5467e76e74 <+2084>: cmp $0x4,%rdx > 0x00007f5467e76e78 <+2088>: ja 0x7f5467e77130 <_int_malloc+2784> > 0x00007f5467e76e7e <+2094>: add $0x77,%edx > 0x00007f5467e76e81 <+2097>: jmpq 0x7f5467e76be4 <_int_malloc+1428> > 0x00007f5467e76e86 <+2102>: nopw %cs:0x0(%rax,%rax,1) > 0x00007f5467e76e90 <+2112>: lea 0x102bf1(%rip),%rcx # 0x7f5467f79a88 <__PRETTY_FUNCTION__.13151> > 0x00007f5467e76e97 <+2119>: mov $0xef6,%edx > 0x00007f5467e76e9c <+2124>: lea 0xfe854(%rip),%rsi # 0x7f5467f756f7 > 0x00007f5467e76ea3 <+2131>: lea 0xfe97a(%rip),%rdi # 0x7f5467f75824 > 0x00007f5467e76eaa <+2138>: callq 0x7f5467e73c00 <__malloc_assert> > 0x00007f5467e76eaf <+2143>: nop > 0x00007f5467e76eb0 <+2144>: add $0x6e,%edx > 0x00007f5467e76eb3 <+2147>: jmpq 0x7f5467e76be4 <_int_malloc+1428> > 0x00007f5467e76eb8 <+2152>: nopl 0x0(%rax,%rax,1) > 0x00007f5467e76ec0 <+2160>: cmp $0x5,%rsi > 0x00007f5467e76ec4 <+2164>: cmovb %r8d,%eax > 0x00007f5467e76ec8 <+2168>: mov %eax,0x20(%rsp) > 0x00007f5467e76ecc <+2172>: jmpq 0x7f5467e76860 <_int_malloc+528> > 0x00007f5467e76ed1 <+2177>: nopl 0x0(%rax) > 0x00007f5467e76ed8 <+2184>: mov %edi,%r8d > 0x00007f5467e76edb <+2187>: mov 0x860(%r12,%r8,4),%esi > 0x00007f5467e76ee3 <+2195>: test %esi,%esi > 0x00007f5467e76ee5 <+2197>: jne 0x7f5467e770f0 <_int_malloc+2720> > 0x00007f5467e76eeb <+2203>: add $0x1,%edi > 0x00007f5467e76eee <+2206>: cmp $0x4,%edi > 0x00007f5467e76ef1 <+2209>: jne 0x7f5467e76ed8 <_int_malloc+2184> > 0x00007f5467e76ef3 <+2211>: mov 0x60(%r12),%rcx > 0x00007f5467e76ef8 <+2216>: lea 0x20(%r14),%rdx > 0x00007f5467e76efc <+2220>: mov 0x8(%rcx),%rax > 0x00007f5467e76f00 <+2224>: and $0xfffffffffffffff8,%rax > 0x00007f5467e76f04 <+2228>: cmp %rax,%rdx > 0x00007f5467e76f07 <+2231>: jbe 0x7f5467e772f2 <_int_malloc+3234> > 0x00007f5467e76f0d <+2237>: mov %r11,0x10(%rsp) > 0x00007f5467e76f12 <+2242>: mov 0x8(%r12),%eax > 0x00007f5467e76f17 <+2247>: test %eax,%eax > 0x00007f5467e76f19 <+2249>: je 0x7f5467e77336 <_int_malloc+3302> > 0x00007f5467e76f1f <+2255>: mov %r12,%rdi > 0x00007f5467e76f22 <+2258>: callq 0x7f5467e73e70 <malloc_consolidate> > 0x00007f5467e76f27 <+2263>: mov 0x50(%rsp),%eax > 0x00007f5467e76f2b <+2267>: mov 0x10(%rsp),%r11 > 0x00007f5467e76f30 <+2272>: cmp $0x3ff,%r14 > 0x00007f5467e76f37 <+2279>: mov %eax,0x20(%rsp) > 0x00007f5467e76f3b <+2283>: jbe 0x7f5467e76f80 <_int_malloc+2352> > 0x00007f5467e76f3d <+2285>: mov 0x54(%rsp),%eax > 0x00007f5467e76f41 <+2289>: cmpq $0x30,0x48(%rsp) > 0x00007f5467e76f47 <+2295>: mov %eax,0x20(%rsp) > 0x00007f5467e76f4b <+2299>: jbe 0x7f5467e76f80 <_int_malloc+2352> > 0x00007f5467e76f4d <+2301>: mov 0x68(%rsp),%eax > 0x00007f5467e76f51 <+2305>: cmpq $0x14,0x58(%rsp) > 0x00007f5467e76f57 <+2311>: mov %eax,0x20(%rsp) > 0x00007f5467e76f5b <+2315>: jbe 0x7f5467e76f80 <_int_malloc+2352> > 0x00007f5467e76f5d <+2317>: mov 0x6c(%rsp),%eax > 0x00007f5467e76f61 <+2321>: cmpq $0xa,0x60(%rsp) > 0x00007f5467e76f67 <+2327>: mov %eax,0x20(%rsp) > 0x00007f5467e76f6b <+2331>: jbe 0x7f5467e76f80 <_int_malloc+2352> > 0x00007f5467e76f6d <+2333>: cmpq $0x4,0x70(%rsp) > 0x00007f5467e76f73 <+2339>: mov 0x7c(%rsp),%eax > 0x00007f5467e76f77 <+2343>: cmova 0x78(%rsp),%eax > 0x00007f5467e76f7c <+2348>: mov %eax,0x20(%rsp) > 0x00007f5467e76f80 <+2352>: mov 0x40(%rsp),%rax > 0x00007f5467e76f85 <+2357>: mov %fs:(%rax),%r10 > 0x00007f5467e76f89 <+2361>: jmpq 0x7f5467e768b6 <_int_malloc+614> > 0x00007f5467e76f8e <+2366>: xchg %ax,%ax > 0x00007f5467e76f90 <+2368>: test %r15d,%r15d > 0x00007f5467e76f93 <+2371>: je 0x7f5467e76b31 <_int_malloc+1249> > 0x00007f5467e76f99 <+2377>: cmpq $0x3ff,0x30(%rsp) > 0x00007f5467e76fa2 <+2386>: mov 0x40(%rsp),%r15 > 0x00007f5467e76fa7 <+2391>: mov %fs:(%r15),%rax > 0x00007f5467e76fab <+2395>: lea (%rax,%rbp,8),%rdx > 0x00007f5467e76faf <+2399>: mov 0x40(%rdx),%rcx > 0x00007f5467e76fb3 <+2403>: ja 0x7f5467e772a8 <_int_malloc+3160> > 0x00007f5467e76fb9 <+2409>: test %rcx,%rcx > 0x00007f5467e76fbc <+2412>: je 0x7f5467e772d3 <_int_malloc+3203> > 0x00007f5467e76fc2 <+2418>: mov (%rcx),%rsi > 0x00007f5467e76fc5 <+2421>: mov %rsi,0x40(%rdx) > 0x00007f5467e76fc9 <+2425>: subb $0x1,(%rax,%rbp,1) > 0x00007f5467e76fcd <+2429>: jmpq 0x7f5467e76aae <_int_malloc+1118> > 0x00007f5467e76fd2 <+2434>: nopw 0x0(%rax,%rax,1) > 0x00007f5467e76fd8 <+2440>: mov 0x18(%rdx),%rcx > 0x00007f5467e76fdc <+2444>: cmp %rcx,%rdx > 0x00007f5467e76fdf <+2447>: jne 0x7f5467e7716f <_int_malloc+2847> > 0x00007f5467e76fe5 <+2453>: mov %eax,%ecx > 0x00007f5467e76fe7 <+2455>: add $0x10,%rdx > 0x00007f5467e76feb <+2459>: add %eax,%eax > 0x00007f5467e76fed <+2461>: not %ecx > 0x00007f5467e76fef <+2463>: and %ecx,%esi > 0x00007f5467e76ff1 <+2465>: mov %esi,0x860(%r12,%r8,4) > 0x00007f5467e76ff9 <+2473>: jmpq 0x7f5467e76b88 <_int_malloc+1336> > 0x00007f5467e76ffe <+2478>: xchg %ax,%ax > 0x00007f5467e77000 <+2480>: mov 0x8(%rsi),%rdi > 0x00007f5467e77004 <+2484>: test $0x4,%dil > 0x00007f5467e77008 <+2488>: jne 0x7f5467e77150 <_int_malloc+2816> > 0x00007f5467e7700e <+2494>: xchg %ax,%ax > 0x00007f5467e77010 <+2496>: cmp %rdi,%rcx > 0x00007f5467e77013 <+2499>: jae 0x7f5467e77048 <_int_malloc+2552> > 0x00007f5467e77015 <+2501>: mov 0x20(%rsi),%rsi >=> 0x00007f5467e77019 <+2505>: mov 0x8(%rsi),%rdi > 0x00007f5467e7701d <+2509>: test $0x4,%dil > 0x00007f5467e77021 <+2513>: je 0x7f5467e77010 <_int_malloc+2496> > 0x00007f5467e77023 <+2515>: lea 0x102a5e(%rip),%rcx # 0x7f5467f79a88 <__PRETTY_FUNCTION__.13151> > 0x00007f5467e7702a <+2522>: mov $0xf07,%edx > 0x00007f5467e7702f <+2527>: lea 0xfe6c1(%rip),%rsi # 0x7f5467f756f7 > 0x00007f5467e77036 <+2534>: lea 0xfe802(%rip),%rdi # 0x7f5467f7583f > 0x00007f5467e7703d <+2541>: callq 0x7f5467e73c00 <__malloc_assert> > 0x00007f5467e77042 <+2546>: nopw 0x0(%rax,%rax,1) > 0x00007f5467e77048 <+2552>: je 0x7f5467e77120 <_int_malloc+2768> > 0x00007f5467e7704e <+2558>: mov 0x28(%rsi),%rcx > 0x00007f5467e77052 <+2562>: mov %rsi,0x20(%rax) > 0x00007f5467e77056 <+2566>: mov %rsi,%rdi > 0x00007f5467e77059 <+2569>: mov %rcx,0x28(%rax) > 0x00007f5467e7705d <+2573>: mov %rax,0x28(%rsi) > 0x00007f5467e77061 <+2577>: mov 0x28(%rax),%rcx > 0x00007f5467e77065 <+2581>: mov %rax,0x20(%rcx) > 0x00007f5467e77069 <+2585>: mov 0x18(%rdi),%r8 > 0x00007f5467e7706d <+2589>: mov %edx,%ecx > 0x00007f5467e7706f <+2591>: jmpq 0x7f5467e76969 <_int_malloc+793> > 0x00007f5467e77074 <+2596>: nopl 0x0(%rax) > 0x00007f5467e77078 <+2600>: lea 0x1029f9(%rip),%rcx # 0x7f5467f79a78 <__PRETTY_FUNCTION__.12930> > 0x00007f5467e7707f <+2607>: mov $0xb71,%edx > 0x00007f5467e77084 <+2612>: lea 0xfe66c(%rip),%rsi # 0x7f5467f756f7 > 0x00007f5467e7708b <+2619>: lea 0xfe71d(%rip),%rdi # 0x7f5467f757af > 0x00007f5467e77092 <+2626>: callq 0x7f5467e73c00 <__malloc_assert> > 0x00007f5467e77097 <+2631>: nopw 0x0(%rax,%rax,1) > 0x00007f5467e770a0 <+2640>: mov 0x18(%rax),%rdi > 0x00007f5467e770a4 <+2644>: orq $0x1,0x8(%rax,%r14,1) > 0x00007f5467e770aa <+2650>: cmp %r11,%r12 > 0x00007f5467e770ad <+2653>: je 0x7f5467e770b4 <_int_malloc+2660> > 0x00007f5467e770af <+2655>: orq $0x4,0x8(%rax) > 0x00007f5467e770b4 <+2660>: mov %rdi,0x8(%rdx) > 0x00007f5467e770b8 <+2664>: add $0x10,%rax > 0x00007f5467e770bc <+2668>: add $0x1,%ebx > 0x00007f5467e770bf <+2671>: mov %rsi,0x10(%rdi) > 0x00007f5467e770c3 <+2675>: mov 0x40(%rbp),%rdi > 0x00007f5467e770c7 <+2679>: mov %rdi,(%rax) > 0x00007f5467e770ca <+2682>: mov %rax,0x40(%rbp) > 0x00007f5467e770ce <+2686>: mov %bl,(%r10,%r9,1) > 0x00007f5467e770d2 <+2690>: jmpq 0x7f5467e76a7d <_int_malloc+1069> > 0x00007f5467e770d7 <+2695>: nopw 0x0(%rax,%rax,1) > 0x00007f5467e770e0 <+2704>: lea 0x102499(%rip),%rdi # 0x7f5467f79580 > 0x00007f5467e770e7 <+2711>: callq 0x7f5467e73df0 <malloc_printerr> > 0x00007f5467e770ec <+2716>: nopl 0x0(%rax) > 0x00007f5467e770f0 <+2720>: mov %edi,%eax > 0x00007f5467e770f2 <+2722>: shl $0x6,%eax > 0x00007f5467e770f5 <+2725>: sub $0x2,%eax > 0x00007f5467e770f8 <+2728>: lea 0x60(%r12,%rax,8),%rdx > 0x00007f5467e770fd <+2733>: mov $0x1,%eax > 0x00007f5467e77102 <+2738>: jmpq 0x7f5467e76ba0 <_int_malloc+1360> > 0x00007f5467e77107 <+2743>: nopw 0x0(%rax,%rax,1) > 0x00007f5467e77110 <+2752>: lea 0x102491(%rip),%rdi # 0x7f5467f795a8 > 0x00007f5467e77117 <+2759>: callq 0x7f5467e73df0 <malloc_printerr> > 0x00007f5467e7711c <+2764>: nopl 0x0(%rax) > 0x00007f5467e77120 <+2768>: mov 0x10(%rsi),%rdi > 0x00007f5467e77124 <+2772>: jmpq 0x7f5467e77069 <_int_malloc+2585> > 0x00007f5467e77129 <+2777>: nopl 0x0(%rax) > 0x00007f5467e77130 <+2784>: mov %rcx,%rdx > 0x00007f5467e77133 <+2787>: mov $0x2,%edi > 0x00007f5467e77138 <+2792>: shr $0x12,%rdx > 0x00007f5467e7713c <+2796>: cmp $0x2,%rdx > 0x00007f5467e77140 <+2800>: cmova %rdi,%rdx > 0x00007f5467e77144 <+2804>: add $0x7c,%edx > 0x00007f5467e77147 <+2807>: jmpq 0x7f5467e76be4 <_int_malloc+1428> > 0x00007f5467e7714c <+2812>: nopl 0x0(%rax) > 0x00007f5467e77150 <+2816>: lea 0x102931(%rip),%rcx # 0x7f5467f79a88 <__PRETTY_FUNCTION__.13151> > 0x00007f5467e77157 <+2823>: mov $0xf03,%edx > 0x00007f5467e7715c <+2828>: lea 0xfe594(%rip),%rsi # 0x7f5467f756f7 > 0x00007f5467e77163 <+2835>: lea 0xfe6d5(%rip),%rdi # 0x7f5467f7583f > 0x00007f5467e7716a <+2842>: callq 0x7f5467e73c00 <__malloc_assert> > 0x00007f5467e7716f <+2847>: mov 0x8(%rcx),%r8 > 0x00007f5467e77173 <+2851>: mov %r8,%rax > 0x00007f5467e77176 <+2854>: and $0xfffffffffffffff8,%rax > 0x00007f5467e7717a <+2858>: cmp %rax,%r14 > 0x00007f5467e7717d <+2861>: ja 0x7f5467e77265 <_int_malloc+3093> > 0x00007f5467e77183 <+2867>: lea (%rcx,%rax,1),%rdi > 0x00007f5467e77187 <+2871>: cmp %rax,(%rdi) > 0x00007f5467e7718a <+2874>: jne 0x7f5467e772c7 <_int_malloc+3191> > 0x00007f5467e77190 <+2880>: mov 0x10(%rcx),%rdx > 0x00007f5467e77194 <+2884>: mov 0x18(%rcx),%rsi > 0x00007f5467e77198 <+2888>: cmp %rcx,0x18(%rdx) > 0x00007f5467e7719c <+2892>: jne 0x7f5467e7729c <_int_malloc+3148> > 0x00007f5467e771a2 <+2898>: cmp %rcx,0x10(%rsi) > 0x00007f5467e771a6 <+2902>: jne 0x7f5467e7729c <_int_malloc+3148> > 0x00007f5467e771ac <+2908>: mov %rsi,0x18(%rdx) > 0x00007f5467e771b0 <+2912>: mov %rdx,0x10(%rsi) > 0x00007f5467e771b4 <+2916>: cmp $0x3ff,%r8 > 0x00007f5467e771bb <+2923>: jbe 0x7f5467e771ca <_int_malloc+2938> > 0x00007f5467e771bd <+2925>: mov 0x20(%rcx),%rsi > 0x00007f5467e771c1 <+2929>: test %rsi,%rsi > 0x00007f5467e771c4 <+2932>: jne 0x7f5467e77360 <_int_malloc+3344> > 0x00007f5467e771ca <+2938>: sub %r14,%rax > 0x00007f5467e771cd <+2941>: cmp $0x1f,%rax > 0x00007f5467e771d1 <+2945>: jbe 0x7f5467e77284 <_int_malloc+3124> > 0x00007f5467e771d7 <+2951>: mov 0x70(%r12),%rdx > 0x00007f5467e771dc <+2956>: lea (%rcx,%r14,1),%rsi > 0x00007f5467e771e0 <+2960>: cmp %rbx,0x18(%rdx) > 0x00007f5467e771e4 <+2964>: jne 0x7f5467e7732a <_int_malloc+3290> > 0x00007f5467e771ea <+2970>: mov %rbx,0x18(%rsi) > 0x00007f5467e771ee <+2974>: mov %rdx,0x10(%rsi) > 0x00007f5467e771f2 <+2978>: mov %rsi,0x70(%r12) > 0x00007f5467e771f7 <+2983>: mov %rsi,0x18(%rdx) > 0x00007f5467e771fb <+2987>: cmp $0x3ff,%r14 > 0x00007f5467e77202 <+2994>: ja 0x7f5467e77209 <_int_malloc+3001> > 0x00007f5467e77204 <+2996>: mov %rsi,0x68(%r12) > 0x00007f5467e77209 <+3001>: cmp $0x3ff,%rax > 0x00007f5467e7720f <+3007>: jbe 0x7f5467e77221 <_int_malloc+3025> > 0x00007f5467e77211 <+3009>: movq $0x0,0x20(%rsi) > 0x00007f5467e77219 <+3017>: movq $0x0,0x28(%rsi) > 0x00007f5467e77221 <+3025>: lea 0x336a18(%rip),%rdx # 0x7f54681adc40 <main_arena> > 0x00007f5467e77228 <+3032>: cmp %rdx,%r12 > 0x00007f5467e7722b <+3035>: setne %dl > 0x00007f5467e7722e <+3038>: movzbl %dl,%edx > 0x00007f5467e77231 <+3041>: shl $0x2,%rdx > 0x00007f5467e77235 <+3045>: or %r14,%rdx > 0x00007f5467e77238 <+3048>: or $0x1,%rdx > 0x00007f5467e7723c <+3052>: mov %rdx,0x8(%rcx) > 0x00007f5467e77240 <+3056>: mov %rax,%rdx > 0x00007f5467e77243 <+3059>: or $0x1,%rdx > 0x00007f5467e77247 <+3063>: mov %rdx,0x8(%rsi) > 0x00007f5467e7724b <+3067>: mov %rax,(%rdi) > 0x00007f5467e7724e <+3070>: mov 0x3386d8(%rip),%eax # 0x7f54681af92c <perturb_byte> > 0x00007f5467e77254 <+3076>: add $0x10,%rcx > 0x00007f5467e77258 <+3080>: test %eax,%eax > 0x00007f5467e7725a <+3082>: je 0x7f5467e76aae <_int_malloc+1118> > 0x00007f5467e77260 <+3088>: jmpq 0x7f5467e76e0a <_int_malloc+1978> > 0x00007f5467e77265 <+3093>: lea 0x10281c(%rip),%rcx # 0x7f5467f79a88 <__PRETTY_FUNCTION__.13151> > 0x00007f5467e7726c <+3100>: mov $0xfb7,%edx > 0x00007f5467e77271 <+3105>: lea 0xfe47f(%rip),%rsi # 0x7f5467f756f7 > 0x00007f5467e77278 <+3112>: lea 0x102381(%rip),%rdi # 0x7f5467f79600 > 0x00007f5467e7727f <+3119>: callq 0x7f5467e73c00 <__malloc_assert> > 0x00007f5467e77284 <+3124>: lea 0x3369b5(%rip),%rax # 0x7f54681adc40 <main_arena> > 0x00007f5467e7728b <+3131>: orq $0x1,0x8(%rdi) > 0x00007f5467e77290 <+3136>: cmp %rax,%r12 > 0x00007f5467e77293 <+3139>: je 0x7f5467e7724e <_int_malloc+3070> > 0x00007f5467e77295 <+3141>: orq $0x4,0x8(%rcx) > 0x00007f5467e7729a <+3146>: jmp 0x7f5467e7724e <_int_malloc+3070> > 0x00007f5467e7729c <+3148>: lea 0xfe437(%rip),%rdi # 0x7f5467f756da > 0x00007f5467e772a3 <+3155>: callq 0x7f5467e73df0 <malloc_printerr> > 0x00007f5467e772a8 <+3160>: lea 0x1027b9(%rip),%rcx # 0x7f5467f79a68 <__PRETTY_FUNCTION__.12935> > 0x00007f5467e772af <+3167>: mov $0xb7d,%edx > 0x00007f5467e772b4 <+3172>: lea 0xfe43c(%rip),%rsi # 0x7f5467f756f7 > 0x00007f5467e772bb <+3179>: lea 0xfe4ed(%rip),%rdi # 0x7f5467f757af > 0x00007f5467e772c2 <+3186>: callq 0x7f5467e73c00 <__malloc_assert> > 0x00007f5467e772c7 <+3191>: lea 0xfe3ef(%rip),%rdi # 0x7f5467f756bd > 0x00007f5467e772ce <+3198>: callq 0x7f5467e73df0 <malloc_printerr> > 0x00007f5467e772d3 <+3203>: lea 0x10278e(%rip),%rcx # 0x7f5467f79a68 <__PRETTY_FUNCTION__.12935> > 0x00007f5467e772da <+3210>: mov $0xb7e,%edx > 0x00007f5467e772df <+3215>: lea 0xfe411(%rip),%rsi # 0x7f5467f756f7 > 0x00007f5467e772e6 <+3222>: lea 0xfe569(%rip),%rdi # 0x7f5467f75856 > 0x00007f5467e772ed <+3229>: callq 0x7f5467e73c00 <__malloc_assert> > 0x00007f5467e772f2 <+3234>: lea 0x336947(%rip),%rdx # 0x7f54681adc40 <main_arena> > 0x00007f5467e772f9 <+3241>: sub %r14,%rax > 0x00007f5467e772fc <+3244>: lea (%rcx,%r14,1),%rsi > 0x00007f5467e77300 <+3248>: cmp %rdx,%r12 > 0x00007f5467e77303 <+3251>: mov %rsi,0x60(%r12) > 0x00007f5467e77308 <+3256>: setne %dl > 0x00007f5467e7730b <+3259>: or $0x1,%rax > 0x00007f5467e7730f <+3263>: movzbl %dl,%edx > 0x00007f5467e77312 <+3266>: shl $0x2,%rdx > 0x00007f5467e77316 <+3270>: or %r14,%rdx > 0x00007f5467e77319 <+3273>: or $0x1,%rdx > 0x00007f5467e7731d <+3277>: mov %rdx,0x8(%rcx) > 0x00007f5467e77321 <+3281>: mov %rax,0x8(%rsi) > 0x00007f5467e77325 <+3285>: jmpq 0x7f5467e7724e <_int_malloc+3070> > 0x00007f5467e7732a <+3290>: lea 0x1022ff(%rip),%rdi # 0x7f5467f79630 > 0x00007f5467e77331 <+3297>: callq 0x7f5467e73df0 <malloc_printerr> > 0x00007f5467e77336 <+3302>: mov %r12,%rsi > 0x00007f5467e77339 <+3305>: mov %r14,%rdi > 0x00007f5467e7733c <+3308>: callq 0x7f5467e75e00 <sysmalloc> > 0x00007f5467e77341 <+3313>: mov %rax,%rcx > 0x00007f5467e77344 <+3316>: test %rax,%rax > 0x00007f5467e77347 <+3319>: je 0x7f5467e76e3e <_int_malloc+2030> > 0x00007f5467e7734d <+3325>: mov 0x3385d9(%rip),%eax # 0x7f54681af92c <perturb_byte> > 0x00007f5467e77353 <+3331>: test %eax,%eax > 0x00007f5467e77355 <+3333>: je 0x7f5467e76aae <_int_malloc+1118> > 0x00007f5467e7735b <+3339>: jmpq 0x7f5467e76e0a <_int_malloc+1978> > 0x00007f5467e77360 <+3344>: cmp %rcx,0x28(%rsi) > 0x00007f5467e77364 <+3348>: jne 0x7f5467e77514 <_int_malloc+3780> > 0x00007f5467e7736a <+3354>: mov 0x28(%rcx),%r8 > 0x00007f5467e7736e <+3358>: cmp %rcx,0x20(%r8) > 0x00007f5467e77372 <+3362>: jne 0x7f5467e77514 <_int_malloc+3780> > 0x00007f5467e77378 <+3368>: cmpq $0x0,0x20(%rdx) > 0x00007f5467e7737d <+3373>: je 0x7f5467e774a3 <_int_malloc+3667> > 0x00007f5467e77383 <+3379>: mov %r8,0x28(%rsi) > 0x00007f5467e77387 <+3383>: mov 0x28(%rcx),%rdx > 0x00007f5467e7738b <+3387>: mov %rsi,0x20(%rdx) > 0x00007f5467e7738f <+3391>: jmpq 0x7f5467e771ca <_int_malloc+2938> > 0x00007f5467e77394 <+3396>: mov 0x28(%rdx),%rsi > 0x00007f5467e77398 <+3400>: mov 0x8(%rsi),%rdi > 0x00007f5467e7739c <+3404>: mov %rdi,%rdx > 0x00007f5467e7739f <+3407>: and $0xfffffffffffffff8,%rdx > 0x00007f5467e773a3 <+3411>: cmp %r14,%rdx > 0x00007f5467e773a6 <+3414>: jae 0x7f5467e773bc <_int_malloc+3436> > 0x00007f5467e773a8 <+3416>: mov 0x28(%rsi),%rsi > 0x00007f5467e773ac <+3420>: mov 0x8(%rsi),%rdi > 0x00007f5467e773b0 <+3424>: mov %rdi,%rdx > 0x00007f5467e773b3 <+3427>: and $0xfffffffffffffff8,%rdx > 0x00007f5467e773b7 <+3431>: cmp %rdx,%r14 > 0x00007f5467e773ba <+3434>: ja 0x7f5467e773a8 <_int_malloc+3416> > 0x00007f5467e773bc <+3436>: mov 0x8(%rax),%rcx > 0x00007f5467e773c0 <+3440>: cmp %rcx,%rsi > 0x00007f5467e773c3 <+3443>: je 0x7f5467e773d2 <_int_malloc+3458> > 0x00007f5467e773c5 <+3445>: mov 0x10(%rsi),%rcx > 0x00007f5467e773c9 <+3449>: cmp %rdi,0x8(%rcx) > 0x00007f5467e773cd <+3453>: je 0x7f5467e773d2 <_int_malloc+3458> > 0x00007f5467e773cf <+3455>: mov %rsi,%rcx > 0x00007f5467e773d2 <+3458>: mov 0x8(%rcx),%rdi > 0x00007f5467e773d6 <+3462>: mov %rdi,%rax > 0x00007f5467e773d9 <+3465>: and $0xfffffffffffffff8,%rax > 0x00007f5467e773dd <+3469>: cmp (%rcx,%rax,1),%rax > 0x00007f5467e773e1 <+3473>: jne 0x7f5467e772c7 <_int_malloc+3191> > 0x00007f5467e773e7 <+3479>: mov 0x10(%rcx),%rax > 0x00007f5467e773eb <+3483>: mov 0x18(%rcx),%rsi > 0x00007f5467e773ef <+3487>: cmp %rcx,0x18(%rax) > 0x00007f5467e773f3 <+3491>: jne 0x7f5467e7729c <_int_malloc+3148> > 0x00007f5467e773f9 <+3497>: cmp %rcx,0x10(%rsi) > 0x00007f5467e773fd <+3501>: jne 0x7f5467e7729c <_int_malloc+3148> > 0x00007f5467e77403 <+3507>: mov %rsi,0x18(%rax) > 0x00007f5467e77407 <+3511>: mov %rax,0x10(%rsi) > 0x00007f5467e7740b <+3515>: cmp $0x3ff,%rdi > 0x00007f5467e77412 <+3522>: jbe 0x7f5467e77421 <_int_malloc+3537> > 0x00007f5467e77414 <+3524>: mov 0x20(%rcx),%rsi > 0x00007f5467e77418 <+3528>: test %rsi,%rsi > 0x00007f5467e7741b <+3531>: jne 0x7f5467e774ec <_int_malloc+3740> > 0x00007f5467e77421 <+3537>: mov %rdx,%rdi > 0x00007f5467e77424 <+3540>: sub %r14,%rdi > 0x00007f5467e77427 <+3543>: cmp $0x1f,%rdi > 0x00007f5467e7742b <+3547>: jbe 0x7f5467e774d1 <_int_malloc+3713> > 0x00007f5467e77431 <+3553>: mov 0x70(%r12),%rsi > 0x00007f5467e77436 <+3558>: lea (%rcx,%r14,1),%rax > 0x00007f5467e7743a <+3562>: cmp %rbx,0x18(%rsi) > 0x00007f5467e7743e <+3566>: jne 0x7f5467e774c5 <_int_malloc+3701> > 0x00007f5467e77444 <+3572>: mov %rbx,0x18(%rax) > 0x00007f5467e77448 <+3576>: mov %rsi,0x10(%rax) > 0x00007f5467e7744c <+3580>: mov %rax,0x70(%r12) > 0x00007f5467e77451 <+3585>: mov %rax,0x18(%rsi) > 0x00007f5467e77455 <+3589>: cmp $0x3ff,%rdi > 0x00007f5467e7745c <+3596>: jbe 0x7f5467e7746e <_int_malloc+3614> > 0x00007f5467e7745e <+3598>: movq $0x0,0x20(%rax) > 0x00007f5467e77466 <+3606>: movq $0x0,0x28(%rax) > 0x00007f5467e7746e <+3614>: lea 0x3367cb(%rip),%rsi # 0x7f54681adc40 <main_arena> > 0x00007f5467e77475 <+3621>: cmp %rsi,%r12 > 0x00007f5467e77478 <+3624>: setne %sil > 0x00007f5467e7747c <+3628>: movzbl %sil,%esi > 0x00007f5467e77480 <+3632>: shl $0x2,%rsi > 0x00007f5467e77484 <+3636>: or %r14,%rsi > 0x00007f5467e77487 <+3639>: or $0x1,%rsi > 0x00007f5467e7748b <+3643>: mov %rsi,0x8(%rcx) > 0x00007f5467e7748f <+3647>: mov %rdi,%rsi > 0x00007f5467e77492 <+3650>: or $0x1,%rsi > 0x00007f5467e77496 <+3654>: mov %rsi,0x8(%rax) > 0x00007f5467e7749a <+3658>: mov %rdi,(%rcx,%rdx,1) > 0x00007f5467e7749e <+3662>: jmpq 0x7f5467e7724e <_int_malloc+3070> > 0x00007f5467e774a3 <+3667>: cmp %rcx,%rsi > 0x00007f5467e774a6 <+3670>: je 0x7f5467e77520 <_int_malloc+3792> > 0x00007f5467e774a8 <+3672>: mov %rsi,0x20(%rdx) > 0x00007f5467e774ac <+3676>: mov 0x20(%rcx),%rsi > 0x00007f5467e774b0 <+3680>: mov %r8,0x28(%rdx) > 0x00007f5467e774b4 <+3684>: mov %rdx,0x28(%rsi) > 0x00007f5467e774b8 <+3688>: mov 0x28(%rcx),%rsi > 0x00007f5467e774bc <+3692>: mov %rdx,0x20(%rsi) > 0x00007f5467e774c0 <+3696>: jmpq 0x7f5467e771ca <_int_malloc+2938> > 0x00007f5467e774c5 <+3701>: lea 0x10210c(%rip),%rdi # 0x7f5467f795d8 > 0x00007f5467e774cc <+3708>: callq 0x7f5467e73df0 <malloc_printerr> > 0x00007f5467e774d1 <+3713>: lea 0x336768(%rip),%rax # 0x7f54681adc40 <main_arena> > 0x00007f5467e774d8 <+3720>: orq $0x1,0x8(%rcx,%rdx,1) > 0x00007f5467e774de <+3726>: cmp %rax,%r12 > 0x00007f5467e774e1 <+3729>: jne 0x7f5467e77295 <_int_malloc+3141> > 0x00007f5467e774e7 <+3735>: jmpq 0x7f5467e7724e <_int_malloc+3070> > 0x00007f5467e774ec <+3740>: cmp %rcx,0x28(%rsi) > 0x00007f5467e774f0 <+3744>: jne 0x7f5467e77514 <_int_malloc+3780> > 0x00007f5467e774f2 <+3746>: mov 0x28(%rcx),%rdi > 0x00007f5467e774f6 <+3750>: cmp %rcx,0x20(%rdi) > 0x00007f5467e774fa <+3754>: jne 0x7f5467e77514 <_int_malloc+3780> > 0x00007f5467e774fc <+3756>: cmpq $0x0,0x20(%rax) > 0x00007f5467e77501 <+3761>: je 0x7f5467e7752d <_int_malloc+3805> > 0x00007f5467e77503 <+3763>: mov %rdi,0x28(%rsi) > 0x00007f5467e77507 <+3767>: mov 0x28(%rcx),%rax > 0x00007f5467e7750b <+3771>: mov %rsi,0x20(%rax) > 0x00007f5467e7750f <+3775>: jmpq 0x7f5467e77421 <_int_malloc+3537> > 0x00007f5467e77514 <+3780>: lea 0x101915(%rip),%rdi # 0x7f5467f78e30 > 0x00007f5467e7751b <+3787>: callq 0x7f5467e73df0 <malloc_printerr> > 0x00007f5467e77520 <+3792>: mov %rdx,0x28(%rdx) > 0x00007f5467e77524 <+3796>: mov %rdx,0x20(%rdx) > 0x00007f5467e77528 <+3800>: jmpq 0x7f5467e771ca <_int_malloc+2938> > 0x00007f5467e7752d <+3805>: cmp %rcx,%rsi > 0x00007f5467e77530 <+3808>: je 0x7f5467e7754f <_int_malloc+3839> > 0x00007f5467e77532 <+3810>: mov %rsi,0x20(%rax) > 0x00007f5467e77536 <+3814>: mov 0x20(%rcx),%rsi > 0x00007f5467e7753a <+3818>: mov %rdi,0x28(%rax) > 0x00007f5467e7753e <+3822>: mov %rax,0x28(%rsi) > 0x00007f5467e77542 <+3826>: mov 0x28(%rcx),%rsi > 0x00007f5467e77546 <+3830>: mov %rax,0x20(%rsi) > 0x00007f5467e7754a <+3834>: jmpq 0x7f5467e77421 <_int_malloc+3537> > 0x00007f5467e7754f <+3839>: mov %rax,0x28(%rax) > 0x00007f5467e77553 <+3843>: mov %rax,0x20(%rax) > 0x00007f5467e77557 <+3847>: jmpq 0x7f5467e77421 <_int_malloc+3537> >End of assembler dump. >== EXPLOITABLE ==
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=1448375">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 1588114
: 1448375 |
1448376
|
1448377
|
1448378
|
1448379
|
1448380
|
1448381
|
1448382
|
1448383
|
1448384
|
1448385
|
1448386