Attachment 1449398 Details for Bug 1589432 – File: backtrace

File: backtrace

backtrace (text/plain), 9.89 KB, created by Shadab Faiz on 2018-06-09 12:10:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Shadab Faiz

Created: 2018-06-09 12:10:53 UTC

Size: 9.89 KB

patch

obsolete

>[New LWP 2707]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `vainfo'.
>Program terminated with signal SIGFPE, Arithmetic exception.
>#0  0x00007f639216a195 in object_heap_destroy (heap=heap@entry=0x55b683a77dc0) at object_heap.c:275
>
>Thread 1 (Thread 0x7f6394c7d740 (LWP 2707)):
>#0  0x00007f639216a195 in object_heap_destroy (heap=heap@entry=0x55b683a77dc0) at object_heap.c:275
>        obj = <optimized out>
>        bucket_index = <optimized out>
>        obj_index = <optimized out>
>        i = 0
>        __PRETTY_FUNCTION__ = "object_heap_destroy"
>#1  0x00007f639216cf54 in destroy_heap (name=name@entry=0x7f6392177503 "buffer", heap=heap@entry=0x55b683a77dc0, destroy_func=destroy_func@entry=0x7f639216cec0 <destroy_buffer_cb>, user_data=user_data@entry=0x55b683a77c70) at vdpau_driver.c:138
>        obj = <optimized out>
>        iter = 0
>#2  0x00007f639216cfb6 in destroy_heap (user_data=0x55b683a77c70, destroy_func=0x7f639216cec0 <destroy_buffer_cb>, heap=0x55b683a77dc0, name=0x7f6392177503 "buffer") at vdpau_driver.c:126
>No locals.
>#3  vdpau_common_Terminate (driver_data=0x55b683a77c70) at vdpau_driver.c:159
>No locals.
>#4  0x00007f639216d18c in vdpau_Terminate_Current (ctx=ctx@entry=0x55b683a70bf0) at vdpau_driver_template.h:537
>        driver_data = <optimized out>
>#5  0x00007f639216df50 in vdpau_Initialize_Current (ctx=0x55b683a70bf0) at vdpau_driver_template.h:563
>        driver_data = 0x55b683a77c70
>        va_status = -1
>        vtable = <optimized out>
>        glx_vtable = <optimized out>
>#6  __vaDriverInit_0_40 (ctx=0x55b683a70bf0) at vdpau_driver.c:317
>No locals.
>#7  0x00007f6393d08215 in va_openDriver (dpy=dpy@entry=0x55b683a70ba0, driver_name=driver_name@entry=0x55b683a71630 "nvidia") at va.c:383
>        vtable = <optimized out>
>        vtable_vpp = <optimized out>
>        init_func = <optimized out>
>        init_func_s = "__vaDriverInit_0_40\000\375\177\000\000\a\000\000\000\000\000\000\000\213)T\224c\177\000\000jW|\223c\177\000\000\220\226w\006\375\177\000\000\063\026\247\203\266U\000\000\340\226w\006\375\177\000\000\327!T\224c\177\000\000\000\226w\006\375\177\000\000\a\000\000\000\000\000\000\000\002\000\000\000\266U\000\000\000\234|N\266\214{\275\066\026\247\203\266U\000\000\000\000\000\000\000\000\000\000\a", '\000' <repeats 15 times>, "\001", '\000' <repeats 15 times>, "\003\000\000\000\000\000\000\000\340\226w\006\375\177\000\000\000\000\000\000\000\000\000\000\360\v\247\203\266U\000\000\240\v\247\203\266U\000\000"...
>        compatible_versions = {{major = 0, minor = 40}, {major = 0, minor = 39}, {major = 0, minor = 38}, {major = 0, minor = 37}, {major = 0, minor = 36}, {major = 0, minor = 35}, {major = 0, minor = 34}, {major = 0, minor = 33}, {major = 0, minor = 32}, {major = -1, minor = 0}}
>        handle = 0x55b683a716d0
>        driver_path = 0x55b683a71570 "/usr/lib64/dri/nvidia_drv_video.so"
>        ctx = 0x55b683a70bf0
>        vaStatus = <optimized out>
>        search_path = 0x55b683a71650 "/usr/lib64/dri"
>        saveptr = 0x55b683a7165e ""
>        driver_dir = 0x55b683a71650 "/usr/lib64/dri"
>        __FUNCTION__ = "va_openDriver"
>#8  0x00007f6393d0921f in vaInitialize (dpy=0x55b683a70ba0, major_version=0x7ffd0677974c, minor_version=0x7ffd06779750) at va.c:647
>        driver_name_env = <optimized out>
>        driver_name = 0x55b683a71630 "nvidia"
>        vaStatus = <optimized out>
>        ctx = <optimized out>
>#9  0x000055b681f8297c in main (argc=<optimized out>, argv=0x7ffd067798a8) at vainfo.c:160
>        va_dpy = 0x55b683a70ba0
>        va_status = <optimized out>
>        major_version = 0
>        minor_version = 8388608
>        driver = <optimized out>
>        name = 0x7ffd0677b251 "vainfo"
>        profile = <optimized out>
>        profile_list = 0x0
>        num_profiles = 0
>        max_num_profiles = <optimized out>
>        i = <optimized out>
>        entrypoint = <optimized out>
>        entrypoints = {194, 0, 108500886, 32765, VAEntrypointVLD, 0, 2474508837, 32611, VAEntrypointVLD, 0}
>        num_entrypoint = 0
>        ret_val = 0
>From                To                  Syms Read   Shared Object Library
>0x00007f6394762d50  0x00007f63947e9b98  Yes         /lib64/libX11.so.6
>0x00007f63945406b0  0x00007f63945428cc  Yes         /lib64/libva-x11.so.1
>0x00007f6394330fe0  0x00007f6394339d30  Yes         /lib64/libdrm.so.2
>0x00007f639412ac70  0x00007f639412b336  Yes         /lib64/libva-drm.so.1
>0x00007f6393f26730  0x00007f6393f27461  Yes         /lib64/libva-wayland.so.1
>0x00007f6393d07880  0x00007f6393d18177  Yes         /lib64/libva.so.1
>0x00007f6393afb380  0x00007f6393affcff  No          /lib64/libwayland-client.so.0
>0x00007f6393760770  0x00007f63938a13ac  Yes         /lib64/libc.so.6
>0x00007f63935239f0  0x00007f6393535b15  Yes         /lib64/libxcb.so.1
>0x00007f6393314e50  0x00007f6393315ace  Yes         /lib64/libdl.so.2
>0x00007f63931056c0  0x00007f639310f6cf  Yes         /lib64/libXext.so.6
>0x00007f6392efd540  0x00007f6392eff7d6  Yes         /lib64/libXfixes.so.3
>0x00007f6392bb87e0  0x00007f6392c56215  Yes         /lib64/libm.so.6
>0x00007f63929aa7c0  0x00007f63929aef7a  Yes         /lib64/libffi.so.6
>0x00007f63927a31a0  0x00007f63927a6326  Yes         /lib64/librt.so.1
>0x00007f6392588b10  0x00007f6392596941  Yes         /lib64/libpthread.so.0
>0x00007f6394a83d50  0x00007f6394aa04d0  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f639237fe20  0x00007f6392380b28  Yes         /lib64/libXau.so.6
>0x00007f63921696c0  0x00007f6392177349  Yes         /usr/lib64/dri/nvidia_drv_video.so
>0x00007f6391f1b3f0  0x00007f6391f1e72f  Yes         /lib64/libGL.so.1
>0x00007f6391cd8060  0x00007f6391cd8eaf  Yes         /lib64/libvdpau.so.1
>0x00007f6391aa7fb0  0x00007f6391ab1b45  Yes         /lib64/libGLX.so.0
>0x00007f639182dbb0  0x00007f6391830a37  Yes         /lib64/libGLdispatch.so.0
>                                        No          /usr/lib64/vdpau/libvdpau_nvidia.so.1
>$1 = 0x0
>rax            0x0	0
>rbx            0x55b683a77dc0	94242381200832
>rcx            0x0	0
>rdx            0x0	0
>rsi            0x0	0
>rdi            0x55b683a77dc0	94242381200832
>rbp            0x55b683a77dc0	0x55b683a77dc0
>rsp            0x7ffd067794b0	0x7ffd067794b0
>r8             0x0	0
>r9             0x0	0
>r10            0x0	0
>r11            0x246	582
>r12            0x7ffd067794d4	140724711953620
>r13            0x7f6392177503	140065629500675
>r14            0x7f6393d18be8	140065658473448
>r15            0x55b683a77c70	94242381200496
>rip            0x7f639216a195	0x7f639216a195 <object_heap_destroy+85>
>eflags         0x10246	[ PF ZF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function object_heap_destroy:
>   0x00007f639216a140 <+0>:	push   %r12
>   0x00007f639216a142 <+2>:	push   %rbp
>   0x00007f639216a143 <+3>:	push   %rbx
>   0x00007f639216a144 <+4>:	mov    0x34(%rdi),%r8d
>   0x00007f639216a148 <+8>:	mov    %rdi,%rbx
>   0x00007f639216a14b <+11>:	mov    0x38(%rdi),%esi
>   0x00007f639216a14e <+14>:	test   %r8d,%r8d
>   0x00007f639216a151 <+17>:	jle    0x7f639216a191 <object_heap_destroy+81>
>   0x00007f639216a153 <+19>:	mov    0x40(%rdi),%r9
>   0x00007f639216a157 <+23>:	mov    0x28(%rdi),%r10d
>   0x00007f639216a15b <+27>:	mov    (%r9),%rax
>   0x00007f639216a15e <+30>:	cmpl   $0xfffffffe,0x4(%rax)
>   0x00007f639216a162 <+34>:	je     0x7f639216a1e6 <object_heap_destroy+166>
>   0x00007f639216a168 <+40>:	xor    %ecx,%ecx
>   0x00007f639216a16a <+42>:	jmp    0x7f639216a189 <object_heap_destroy+73>
>   0x00007f639216a16c <+44>:	nopl   0x0(%rax)
>   0x00007f639216a170 <+48>:	mov    %ecx,%eax
>   0x00007f639216a172 <+50>:	cltd   
>   0x00007f639216a173 <+51>:	idiv   %esi
>   0x00007f639216a175 <+53>:	imul   %r10d,%edx
>   0x00007f639216a179 <+57>:	cltq   
>   0x00007f639216a17b <+59>:	mov    (%r9,%rax,8),%rdi
>   0x00007f639216a17f <+63>:	movslq %edx,%rdx
>   0x00007f639216a182 <+66>:	cmpl   $0xfffffffe,0x4(%rdi,%rdx,1)
>   0x00007f639216a187 <+71>:	je     0x7f639216a1e6 <object_heap_destroy+166>
>   0x00007f639216a189 <+73>:	add    $0x1,%ecx
>   0x00007f639216a18c <+76>:	cmp    %r8d,%ecx
>   0x00007f639216a18f <+79>:	jne    0x7f639216a170 <object_heap_destroy+48>
>   0x00007f639216a191 <+81>:	mov    %r8d,%eax
>   0x00007f639216a194 <+84>:	cltd   
>=> 0x00007f639216a195 <+85>:	idiv   %esi
>   0x00007f639216a197 <+87>:	test   %eax,%eax
>   0x00007f639216a199 <+89>:	jle    0x7f639216a1bf <object_heap_destroy+127>
>   0x00007f639216a19b <+91>:	xor    %r12d,%r12d
>   0x00007f639216a19e <+94>:	xor    %ebp,%ebp
>   0x00007f639216a1a0 <+96>:	mov    0x40(%rbx),%rax
>   0x00007f639216a1a4 <+100>:	add    $0x1,%ebp
>   0x00007f639216a1a7 <+103>:	mov    (%rax,%r12,1),%rdi
>   0x00007f639216a1ab <+107>:	add    $0x8,%r12
>   0x00007f639216a1af <+111>:	callq  0x7f63921692b0 <free@plt>
>   0x00007f639216a1b4 <+116>:	mov    0x34(%rbx),%eax
>   0x00007f639216a1b7 <+119>:	cltd   
>   0x00007f639216a1b8 <+120>:	idivl  0x38(%rbx)
>   0x00007f639216a1bb <+123>:	cmp    %ebp,%eax
>   0x00007f639216a1bd <+125>:	jg     0x7f639216a1a0 <object_heap_destroy+96>
>   0x00007f639216a1bf <+127>:	mov    %rbx,%rdi
>   0x00007f639216a1c2 <+130>:	callq  0x7f6392169610 <pthread_mutex_destroy@plt>
>   0x00007f639216a1c7 <+135>:	mov    0x40(%rbx),%rdi
>   0x00007f639216a1cb <+139>:	callq  0x7f63921692b0 <free@plt>
>   0x00007f639216a1d0 <+144>:	mov    $0xffffffff,%eax
>   0x00007f639216a1d5 <+149>:	movq   $0x0,0x40(%rbx)
>   0x00007f639216a1dd <+157>:	mov    %rax,0x30(%rbx)
>   0x00007f639216a1e1 <+161>:	pop    %rbx
>   0x00007f639216a1e2 <+162>:	pop    %rbp
>   0x00007f639216a1e3 <+163>:	pop    %r12
>   0x00007f639216a1e5 <+165>:	retq   
>   0x00007f639216a1e6 <+166>:	lea    0xd243(%rip),%rcx        # 0x7f6392177430 <__PRETTY_FUNCTION__.3968>
>   0x00007f639216a1ed <+173>:	lea    0xd1d3(%rip),%rsi        # 0x7f63921773c7
>   0x00007f639216a1f4 <+180>:	lea    0xd20b(%rip),%rdi        # 0x7f6392177406
>   0x00007f639216a1fb <+187>:	mov    $0x110,%edx
>   0x00007f639216a200 <+192>:	callq  0x7f6392169190 <__assert_fail@plt>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1589432: 1449398 | 1449399 | 1449400 | 1449401 | 1449402 | 1449403 | 1449404 | 1449405 | 1449406 | 1449407 | 1449408