Attachment 1449848 Details for Bug 1589643 – File: backtrace

File: backtrace

backtrace (text/plain), 29.96 KB, created by Joachim Frieben on 2018-06-11 04:27:37 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joachim Frieben

Created: 2018-06-11 04:27:37 UTC

Size: 29.96 KB

patch

obsolete

>[New LWP 3117]
>[New LWP 3118]
>[New LWP 3119]
>[New LWP 3120]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/gnome-terminal-server'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  _gdk_wayland_cursor_get_buffer (cursor=0x55804f6d0800, image_index=<optimized out>, hotspot_x=0x7ffee62ddf70, hotspot_y=0x7ffee62ddf74, w=0x7ffee62ddf78, h=0x7ffee62ddf7c, scale=0x7ffee62ddf80) at gdkcursor-wayland.c:237
>[Current thread is 1 (Thread 0x7f613a21fac0 (LWP 3117))]
>
>Thread 1 (Thread 0x7f613a21fac0 (LWP 3117)):
>#0  _gdk_wayland_cursor_get_buffer (cursor=0x55804f6d0800, image_index=<optimized out>, hotspot_x=0x7ffee62ddf70, hotspot_y=0x7ffee62ddf74, w=0x7ffee62ddf78, h=0x7ffee62ddf7c, scale=0x7ffee62ddf80) at gdkcursor-wayland.c:237
>        image = 0x7e
>        wayland_cursor = 0x55804f6d0800
>        __func__ = "_gdk_wayland_cursor_get_buffer"
>#1  0x00007f6138cd2af0 in gdk_wayland_device_update_window_cursor (device=0x55804f157190) at gdkdevice-wayland.c:413
>        seat = 0x55804f176010
>        pointer = 0x55804f1760f0
>        buffer = <optimized out>
>        x = 1332545536
>        y = 21888
>        w = 1326932208
>        h = 21888
>        scale = 1326805392
>        next_image_index = <optimized out>
>        next_image_delay = 21888
>        retval = 0
>        tablet = 0x0
>#2  0x00007f6138c943bb in gdk_window_set_cursor (window=0x55804f70b330, cursor=cursor@entry=0x55804f6d0800) at gdkwindow.c:6597
>        devices = <optimized out>
>        d = <optimized out>
>        device = <optimized out>
>        seats = 0x55804f33ce40
>        s = 0x55804f33ce40
>        display = <optimized out>
>        __func__ = "gdk_window_set_cursor"
>#3  0x00007f6139de93bb in VteTerminalPrivate::set_cursor_from_regex_match (this=0x55804f4ef6b0, regex=<optimized out>) at vte.cc:1101
>        gdk_cursor = 0x55804f6d0800
>        regex = <optimized out>
>        this = 0x55804f4ef6b0
>        gdk_cursor = <optimized out>
>        __PRETTY_FUNCTION__ = "void VteTerminalPrivate::set_cursor_from_regex_match(vte_match_regex*)"
>        __PRETTY_FUNCTION__ = "void VteTerminalPrivate::set_cursor_from_regex_match(vte_match_regex*)"
>#4  0x00007f6139def3db in VteTerminalPrivate::match_hilite_update (this=this@entry=0x55804f4ef6b0) at vte.cc:5781
>        pos = <optimized out>
>        col = <optimized out>
>        row = <optimized out>
>        do_check_hilite = true
>        start = 1176
>        end = 1264
>        new_match = <optimized out>
>        __PRETTY_FUNCTION__ = "void VteTerminalPrivate::match_hilite_update()"
>#5  0x00007f6139df1fd8 in VteTerminalPrivate::widget_motion_notify (this=0x55804f4ef6b0, event=event@entry=0x55804f164c70) at vte.cc:7157
>        handled = false
>        base_event = 0x55804f164c70
>        pos = {x = 571, y = 681}
>        rowcol = {m_row = 59, m_column = 63}
>#6  0x00007f6139e03292 in vte_terminal_motion_notify (widget=0x55804f4f2a60, event=0x55804f164c70) at vtegtk.cc:198
>        terminal = <optimized out>
>#7  0x00007f61391797a8 in _gtk_marshal_BOOLEAN__BOXEDv (closure=0x55804f191420, return_value=0x7ffee62de290, instance=<optimized out>, args=<optimized out>, marshal_data=<optimized out>, n_params=<optimized out>, param_types=0x55804f162bc0) at gtkmarshalers.c:129
>        cc = 0x55804f191420
>        data1 = 0x55804f4f2a60
>        data2 = <optimized out>
>        callback = <optimized out>
>        v_return = <optimized out>
>        arg0 = 0x55804f164c70
>        args_copy = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7ffee62de440, reg_save_area = 0x7ffee62de380}}
>        __func__ = "_gtk_marshal_BOOLEAN__BOXEDv"
>#8  0x00007f613746ad36 in _g_closure_invoke_va (closure=0x55804f191420, return_value=0x7ffee62de290, instance=0x55804f4f2a60, args=0x7ffee62de360, n_params=1, param_types=0x55804f162bc0) at gclosure.c:867
>        marshal = 0x7f6137468f10 <g_type_class_meta_marshalv>
>        marshal_data = 0x198
>        in_marshal = 0
>        real_closure = 0x55804f191400
>        __func__ = "_g_closure_invoke_va"
>#9  0x00007f6137486ae4 in g_signal_emit_valist (instance=0x55804f4f2a60, signal_id=<optimized out>, detail=0, var_args=var_args@entry=0x7ffee62de360) at gsignal.c:3300
>        return_accu = 0x7ffee62de290
>        accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
>        accumulator = 0x55804f162c50
>        emission = {next = 0x0, instance = 0x55804f4f2a60, ihint = {signal_id = 86, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 94009572937840}
>        signal_id = 86
>        instance_type = 94009572937840
>        emission_return = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
>        rtype = 20
>        static_scope = 0
>        fastpath_handler = <optimized out>
>        closure = <optimized out>
>        run_type = <optimized out>
>        hlist = <optimized out>
>        l = <optimized out>
>        fastpath = 1
>        instance_and_params = <optimized out>
>        signal_return_type = <optimized out>
>        param_values = <optimized out>
>        node = 0x55804f162be0
>        i = <optimized out>
>        n_params = <optimized out>
>        __func__ = "g_signal_emit_valist"
>#10 0x00007f6137487663 in g_signal_emit (instance=instance@entry=0x55804f4f2a60, signal_id=<optimized out>, detail=detail@entry=0) at gsignal.c:3447
>        var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7ffee62de440, reg_save_area = 0x7ffee62de380}}
>#11 0x00007f61392c7134 in gtk_widget_event_internal (widget=widget@entry=0x55804f4f2a60, event=event@entry=0x55804f164c70) at gtkwidget.c:7744
>        signal_num = <optimized out>
>        return_val = <optimized out>
>        handled = 0
>        __func__ = "gtk_widget_event_internal"
>#12 0x00007f61392c92be in gtk_widget_event (widget=widget@entry=0x55804f4f2a60, event=event@entry=0x55804f164c70) at gtkwidget.c:7314
>        __func__ = "gtk_widget_event"
>#13 0x00007f61391765d6 in propagate_event_up (topmost=<optimized out>, event=<optimized out>, widget=0x55804f4f2a60) at gtkmain.c:2582
>        tmp = <optimized out>
>        handled_event = <optimized out>
>        handled_event = <optimized out>
>        tmp = <optimized out>
>#14 propagate_event (widget=<optimized out>, event=0x55804f164c70, captured=<optimized out>, topmost=0x0) at gtkmain.c:2685
>        handled_event = 0
>        propagate_func = <optimized out>
>#15 0x00007f6139178793 in gtk_main_do_event (event=<optimized out>) at gtkmain.c:1915
>        grab_widget = <optimized out>
>        window_group = <optimized out>
>        rewritten_event = <optimized out>
>        device = <optimized out>
>        tmp_list = <optimized out>
>        event_widget = <optimized out>
>        topmost_widget = <optimized out>
>        grab_widget = <optimized out>
>        rewritten_event = <optimized out>
>        tmp_list = <optimized out>
>        __inst = <optimized out>
>        window = <optimized out>
>        __inst = <optimized out>
>        __inst = <optimized out>
>        window = <optimized out>
>        __inst = <optimized out>
>        event_widget = <optimized out>
>        __t = <optimized out>
>        __t = <optimized out>
>        __t = <optimized out>
>        __t = <optimized out>
>        window_group = <optimized out>
>        device = <optimized out>
>        event = 0x55804f164c70
>        __func__ = "gtk_main_do_event"
>        topmost_widget = <optimized out>
>        __r = <optimized out>
>        __r = <optimized out>
>        __r = <optimized out>
>        mnemonics_visible = <optimized out>
>        __r = <optimized out>
>        event_widget = <optimized out>
>        window_group = <optimized out>
>        device = <optimized out>
>        tmp_list = <optimized out>
>        __func__ = "gtk_main_do_event"
>        __inst = <optimized out>
>        __t = <optimized out>
>        __r = <optimized out>
>        window = <optimized out>
>        __inst = <optimized out>
>        __t = <optimized out>
>        __r = <optimized out>
>        __inst = <optimized out>
>        __t = <optimized out>
>        __r = <optimized out>
>        mnemonics_visible = <optimized out>
>        window = <optimized out>
>        __inst = <optimized out>
>        __t = <optimized out>
>        __r = <optimized out>
>#16 0x00007f6138c81639 in _gdk_event_emit (event=event@entry=0x55804f164c70) at gdkevents.c:73
>No locals.
>#17 0x00007f6138cddac6 in gdk_event_source_dispatch (base=<optimized out>, callback=<optimized out>, data=<optimized out>) at gdkeventsource.c:124
>        source = <optimized out>
>        display = <optimized out>
>        event = 0x55804f164c70
>#18 0x00007f613718f8ad in g_main_dispatch (context=0x55804f146170) at gmain.c:3177
>        dispatch = 0x7f6138cddaa0 <gdk_event_source_dispatch>
>        prev_source = 0x0
>        was_in_call = 0
>        user_data = 0x0
>        callback = 0x0
>        cb_funcs = 0x0
>        cb_data = 0x0
>        need_destroy = <optimized out>
>        source = 0x55804f1702a0
>        current = 0x55804f168010
>        i = 0
>        current = <optimized out>
>        i = <optimized out>
>        __func__ = "g_main_dispatch"
>        source = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        was_in_call = <optimized out>
>        user_data = <optimized out>
>        callback = <optimized out>
>        cb_funcs = <optimized out>
>        cb_data = <optimized out>
>        need_destroy = <optimized out>
>        dispatch = <optimized out>
>        prev_source = <optimized out>
>        _g_boolean_var_ = <optimized out>
>#19 g_main_context_dispatch (context=context@entry=0x55804f146170) at gmain.c:3830
>No locals.
>#20 0x00007f613718fc78 in g_main_context_iterate (context=context@entry=0x55804f146170, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3903
>        max_priority = 0
>        timeout = 0
>        some_ready = 1
>        nfds = <optimized out>
>        allocated_nfds = 4
>        fds = 0x55804f72fad0
>#21 0x00007f613718fd10 in g_main_context_iteration (context=context@entry=0x55804f146170, may_block=may_block@entry=1) at gmain.c:3964
>        retval = <optimized out>
>#22 0x00007f6137753675 in g_application_run (application=application@entry=0x55804f140410, argc=argc@entry=0, argv=argv@entry=0x0) at gapplication.c:2470
>        arguments = 0x55804f1d5490
>        status = 0
>        context = 0x55804f146170
>        acquired_context = <optimized out>
>        __func__ = "g_application_run"
>#23 0x000055804de968d0 in main () at server.c:183
>        app = 0x55804f140410
>        r = 0
>#24 0x00007f61361a818b in __libc_start_main (main=0x55804de96740 <main>, argc=1, argv=0x7ffee62de808, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffee62de7f8) at ../csu/libc-start.c:308
>        self = <optimized out>
>        result = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 6779336741135569588, 94009551317536, 140732760188928, 0, 0, 785980752130200244, 853429082776785588}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x7ffee62de818, 0x7f613a25c130}, data = {prev = 0x0, cleanup = 0x0, canceltype = -433199080}}}
>        not_first_call = <optimized out>
>#25 0x000055804de96a4a in _start () at server.c:180
>No symbol table info available.
>
>Thread 2 (Thread 0x7f61210e0700 (LWP 3118)):
>#0  0x00007f6136274589 in __GI___poll (fds=0x55804f11fb50, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f613718fbe6 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x55804f11fb50, timeout=<optimized out>, context=0x55804f159000) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f613719f520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=context@entry=0x55804f159000, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x55804f11fb50
>#3  0x00007f613718fd10 in g_main_context_iteration (context=0x55804f159000, may_block=may_block@entry=1) at gmain.c:3964
>        retval = <optimized out>
>#4  0x00007f613718fd61 in glib_worker_main (data=<optimized out>) at gmain.c:5773
>No locals.
>#5  0x00007f61371b7f2a in g_thread_proxy (data=0x55804f1418a0) at gthread.c:784
>        thread = 0x55804f1418a0
>        __func__ = "g_thread_proxy"
>#6  0x00007f613654b594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140055143122688, -786563063520963916, 140732760185134, 140732760185135, 140732760185264, 140732760185264, 853382738645078708, 853429547303293620}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f613627f00f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 3 (Thread 0x7f61208df700 (LWP 3119)):
>#0  0x00007f6136274589 in __GI___poll (fds=0x55804f16ae20, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f613718fbe6 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x55804f16ae20, timeout=<optimized out>, context=0x55804f1688f0) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f613719f520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=0x55804f1688f0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 3
>        allocated_nfds = 3
>        fds = 0x55804f16ae20
>#3  0x00007f613718ffa2 in g_main_loop_run (loop=0x55804f168a30) at gmain.c:4099
>        self = <optimized out>
>        __func__ = "g_main_loop_run"
>#4  0x00007f61377806ba in gdbus_shared_thread_func (user_data=0x55804f1688c0) at gdbusprivate.c:275
>        data = 0x55804f1688c0
>#5  0x00007f61371b7f2a in g_thread_proxy (data=0x55804f141940) at gthread.c:784
>        thread = 0x55804f141940
>        __func__ = "g_thread_proxy"
>#6  0x00007f613654b594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140055134729984, -786563063520963916, 140732760185518, 140732760185519, 140732760185648, 140732760185648, 853379440647066292, 853429547303293620}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f613627f00f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 4 (Thread 0x7f611bdca700 (LWP 3120)):
>#0  0x00007f6136274589 in __GI___poll (fds=0x55804f1494e0, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f613718fbe6 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x55804f1494e0, timeout=<optimized out>, context=0x55804f14a070) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f613719f520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=context@entry=0x55804f14a070, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x55804f1494e0
>#3  0x00007f613718fd10 in g_main_context_iteration (context=context@entry=0x55804f14a070, may_block=may_block@entry=1) at gmain.c:3964
>        retval = <optimized out>
>#4  0x00007f6121748e4d in dconf_gdbus_worker_thread (user_data=0x55804f14a070) at ../gdbus/dconf-gdbus-thread.c:82
>        context = 0x55804f14a070
>#5  0x00007f61371b7f2a in g_thread_proxy (data=0x55804f144000) at gthread.c:784
>        thread = 0x55804f144000
>        __func__ = "g_thread_proxy"
>#6  0x00007f613654b594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140055056000768, -786563063520963916, 140732760186782, 140732760186783, 140732760186912, 140732760186912, 853333957480272564, 853429547303293620}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f613627f00f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x00007f6139de0d60  0x00007f6139e18c46  Yes         /lib64/libvte-2.91.so.0
>0x00007f6139bbb420  0x00007f6139bc85f7  Yes         /lib64/libz.so.1
>0x00007f6139886280  0x00007f6139962ce8  Yes         /lib64/libgnutls.so.30
>0x00007f6138fcb980  0x00007f61393179e3  Yes         /lib64/libgtk-3.so.0
>0x00007f6138c74e00  0x00007f6138cea9fb  Yes         /lib64/libgdk-3.so.0
>0x00007f6138a3fb70  0x00007f6138a44fe6  Yes         /lib64/libpangocairo-1.0.so.0
>0x00007f6138800f30  0x00007f6138822224  Yes         /lib64/libpango-1.0.so.0
>0x00007f61385d96b0  0x00007f61385dda3f  Yes         /lib64/libfribidi.so.0
>0x00007f61383bc280  0x00007f61383c9016  Yes         /lib64/libatk-1.0.so.0
>0x00007f61381ab5d0  0x00007f61381ac73d  Yes         /lib64/libcairo-gobject.so.2
>0x00007f6137e9a690  0x00007f6137f6795e  Yes         /lib64/libcairo.so.2
>0x00007f6137c675f0  0x00007f6137c7db4d  Yes         /lib64/libgdk_pixbuf-2.0.so.0
>0x00007f6137a55690  0x00007f6137a5ad52  Yes         /lib64/libdconf.so.1
>0x00007f61376e54b0  0x00007f61377cd0d2  Yes         /lib64/libgio-2.0.so.0
>0x00007f61374657a0  0x00007f6137496660  Yes         /lib64/libgobject-2.0.so.0
>0x00007f613715e0d0  0x00007f61371d934e  Yes         /lib64/libglib-2.0.so.0
>0x00007f6136f3d740  0x00007f6136f41171  No          /lib64/libuuid.so.1
>0x00007f6136cbe160  0x00007f6136d18cb3  Yes         /lib64/libpcre2-8.so.0
>0x00007f6136998f50  0x00007f6136a219a6  Yes         /lib64/libX11.so.6
>0x00007f6136765ad0  0x00007f6136776705  No          /lib64/libgcc_s.so.1
>0x00007f6136549be0  0x00007f6136557801  Yes         /lib64/libpthread.so.0
>0x00007f61361a6340  0x00007f61362ed25f  Yes         /lib64/libc.so.6
>0x00007f6135e7f590  0x00007f6135f3568e  No          /lib64/libstdc++.so.6
>0x00007f6135a6a9f0  0x00007f6135b1ce6a  Yes         /lib64/libm.so.6
>0x00007f6135758430  0x00007f61357f037c  Yes         /lib64/libp11-kit.so.0
>0x00007f6135511750  0x00007f61355152b7  Yes         /lib64/libidn2.so.0
>0x00007f61351a16d0  0x00007f61351d523e  Yes         /lib64/libunistring.so.2
>0x00007f6134f8cee0  0x00007f6134f8dbbe  Yes         /lib64/libdl.so.2
>0x00007f6134d7bcd0  0x00007f6134d86a23  Yes         /lib64/libtasn1.so.6
>0x00007f6134b49c60  0x00007f6134b66eec  Yes         /lib64/libnettle.so.6
>0x00007f6134919840  0x00007f6134927fdf  Yes         /lib64/libhogweed.so.4
>0x00007f61346a25c0  0x00007f61346f8524  Yes         /lib64/libgmp.so.10
>0x00007f613a035f60  0x00007f613a052910  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f6134493140  0x00007f6134494066  Yes         /lib64/libgmodule-2.0.so.0
>0x00007f61342831e0  0x00007f613428dddb  Yes         /lib64/libXi.so.6
>0x00007f613407c590  0x00007f613407e95a  Yes         /lib64/libXfixes.so.3
>0x00007f6133e557d0  0x00007f6133e69b2e  Yes         /lib64/libatk-bridge-2.0.so.0
>0x00007f6133c413c0  0x00007f6133c462d5  No          /lib64/libwayland-client.so.0
>0x00007f6133967f00  0x00007f61339cde5d  Yes         /lib64/libepoxy.so.0
>0x00007f61336fb510  0x00007f61337048c1  Yes         /lib64/libpangoft2-1.0.so.0
>0x00007f61334b7200  0x00007f61334d97de  Yes         /lib64/libfontconfig.so.1
>0x00007f61332adb50  0x00007f61332ae4c1  Yes         /lib64/libXinerama.so.1
>0x00007f61330a3ce0  0x00007f61330a9f59  Yes         /lib64/libXrandr.so.2
>0x00007f6132e99a00  0x00007f6132e9e4bf  Yes         /lib64/libXcursor.so.1
>0x00007f6132c94c70  0x00007f6132c95695  Yes         /lib64/libXcomposite.so.1
>0x00007f6132a91be0  0x00007f6132a9253b  Yes         /lib64/libXdamage.so.1
>0x00007f61328555e0  0x00007f613287025e  Yes         /lib64/libxkbcommon.so.0
>0x00007f613264a250  0x00007f613264bce1  No          /lib64/libwayland-cursor.so.0
>0x00007f6132447690  0x00007f6132447819  No          /lib64/libwayland-egl.so.1
>0x00007f6132238710  0x00007f6132242853  Yes         /lib64/libXext.so.6
>0x00007f613202f210  0x00007f613203247c  Yes         /lib64/librt.so.1
>0x00007f6131d826d0  0x00007f6131dfc643  Yes         /lib64/libfreetype.so.6
>0x00007f6131b6df10  0x00007f6131b71ad7  Yes         /lib64/libthai.so.0
>0x00007f61318d0520  0x00007f61319535c4  Yes         /lib64/libpixman-1.so.0
>0x00007f61316975a0  0x00007f61316b9a05  Yes         /lib64/libpng16.so.16
>0x00007f613148edb0  0x00007f613148f907  Yes         /lib64/libxcb-shm.so.0
>0x00007f6131270a40  0x00007f6131283699  Yes         /lib64/libxcb.so.1
>0x00007f613105c0d0  0x00007f6131060dfc  Yes         /lib64/libxcb-render.so.0
>0x00007f6130e4dad0  0x00007f6130e53e01  Yes         /lib64/libXrender.so.1
>0x00007f6130c44810  0x00007f6130c4929a  Yes         /lib64/libffi.so.6
>0x00007f61309d3660  0x00007f6130a23b86  Yes         /lib64/libpcre.so.1
>0x00007f61307afdf0  0x00007f61307c77ff  Yes         /lib64/libselinux.so.1
>0x00007f6130595840  0x00007f61305a160e  Yes         /lib64/libresolv.so.2
>0x00007f6130344ee0  0x00007f613037c25e  No          /lib64/libmount.so.1
>0x00007f6130115a30  0x00007f6130127efc  Yes         /lib64/libatspi.so.0
>0x00007f612fec2a90  0x00007f612feef1c5  No          /lib64/libdbus-1.so.3
>0x00007f612fc17530  0x00007f612fc79cbe  Yes         /lib64/libharfbuzz.so.0
>0x00007f612f9d7b50  0x00007f612f9f7e87  Yes         /lib64/libexpat.so.1
>0x00007f612f7c4700  0x00007f612f7d13e6  No          /lib64/libbz2.so.1
>0x00007f612f5bd3b0  0x00007f612f5c05a0  Yes         /lib64/libdatrie.so.1
>0x00007f612f3b8e70  0x00007f612f3b9b5e  Yes         /lib64/libXau.so.6
>0x00007f612f1716f0  0x00007f612f1a227e  No          /lib64/libblkid.so.1
>0x00007f612eed9150  0x00007f612ef3d9d9  No          /lib64/libsystemd.so.0
>0x00007f612eca0780  0x00007f612ecc168c  Yes         /lib64/libgraphite2.so.3
>0x00007f612ea7a0b0  0x00007f612ea90f66  Yes         /lib64/liblzma.so.5
>0x00007f612e861fd0  0x00007f612e8733db  No          /lib64/liblz4.so.1
>0x00007f612e65c5b0  0x00007f612e65de8f  Yes         /lib64/libcap.so.2
>0x00007f612e34b5c0  0x00007f612e418bfc  Yes         /lib64/libgcrypt.so.20
>0x00007f612e1241e0  0x00007f612e13578e  Yes         /lib64/libgpg-error.so.0
>0x00007f6121744ce0  0x00007f6121749e12  Yes         /usr/lib64/gio/modules/libdconfsettings.so
>0x00007f612152a760  0x00007f61215368aa  No          /usr/lib64/gio/modules/libgioremote-volume-monitor.so
>0x00007f61212f7a70  0x00007f612130f22a  No          /usr/lib64/gvfs/libgvfscommon.so
>0x00007f61210e1e80  0x00007f61210e27a8  Yes         /lib64/libutil.so.1
>0x00007f611bdd7110  0x00007f611bdf232a  No          /usr/lib64/gio/modules/libgvfsdbus.so
>$1 = 0x0
>$2 = 0x0
>rax            0x55804f14a140	94009570926912
>rbx            0x55804f6d0800	94009576720384
>rcx            0x7ffee62ddf74	140732760186740
>rdx            0x0	0
>rsi            0x0	0
>rdi            0x7e	126
>rbp            0x7ffee62ddf80	0x7ffee62ddf80
>rsp            0x7ffee62ddf20	0x7ffee62ddf20
>r8             0x7ffee62ddf78	140732760186744
>r9             0x7ffee62ddf7c	140732760186748
>r10            0x55804f14e2b8	94009570943672
>r11            0x7f613630e5c0	140055497729472
>r12            0x7ffee62ddf7c	140732760186748
>r13            0x7ffee62ddf78	140732760186744
>r14            0x7ffee62ddf74	140732760186740
>r15            0x7ffee62ddf70	140732760186736
>rip            0x7f6138cd1be5	0x7f6138cd1be5 <_gdk_wayland_cursor_get_buffer+69>
>eflags         0x10246	[ PF ZF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function _gdk_wayland_cursor_get_buffer:
>   0x00007f6138cd1ba0 <+0>:	endbr64 
>   0x00007f6138cd1ba4 <+4>:	push   %r15
>   0x00007f6138cd1ba6 <+6>:	mov    %rdx,%r15
>   0x00007f6138cd1ba9 <+9>:	push   %r14
>   0x00007f6138cd1bab <+11>:	mov    %rcx,%r14
>   0x00007f6138cd1bae <+14>:	push   %r13
>   0x00007f6138cd1bb0 <+16>:	mov    %r8,%r13
>   0x00007f6138cd1bb3 <+19>:	push   %r12
>   0x00007f6138cd1bb5 <+21>:	mov    %r9,%r12
>   0x00007f6138cd1bb8 <+24>:	push   %rbp
>   0x00007f6138cd1bb9 <+25>:	push   %rbx
>   0x00007f6138cd1bba <+26>:	mov    %rdi,%rbx
>   0x00007f6138cd1bbd <+29>:	sub    $0x8,%rsp
>   0x00007f6138cd1bc1 <+33>:	mov    0x50(%rdi),%rax
>   0x00007f6138cd1bc5 <+37>:	mov    0x40(%rsp),%rbp
>   0x00007f6138cd1bca <+42>:	test   %rax,%rax
>   0x00007f6138cd1bcd <+45>:	je     0x7f6138cd1c30 <_gdk_wayland_cursor_get_buffer+144>
>   0x00007f6138cd1bcf <+47>:	mov    (%rax),%edx
>   0x00007f6138cd1bd1 <+49>:	cmp    %esi,%edx
>   0x00007f6138cd1bd3 <+51>:	jbe    0x7f6138cd1c50 <_gdk_wayland_cursor_get_buffer+176>
>   0x00007f6138cd1bd5 <+53>:	mov    %esi,%esi
>   0x00007f6138cd1bd7 <+55>:	shl    $0x3,%rsi
>   0x00007f6138cd1bdb <+59>:	mov    0x8(%rax),%rax
>   0x00007f6138cd1bdf <+63>:	xor    %edx,%edx
>   0x00007f6138cd1be1 <+65>:	mov    (%rax,%rsi,1),%rdi
>=> 0x00007f6138cd1be5 <+69>:	mov    0x8(%rdi),%eax
>   0x00007f6138cd1be8 <+72>:	divl   0x58(%rbx)
>   0x00007f6138cd1beb <+75>:	xor    %edx,%edx
>   0x00007f6138cd1bed <+77>:	mov    %eax,(%r15)
>   0x00007f6138cd1bf0 <+80>:	mov    0xc(%rdi),%eax
>   0x00007f6138cd1bf3 <+83>:	divl   0x58(%rbx)
>   0x00007f6138cd1bf6 <+86>:	xor    %edx,%edx
>   0x00007f6138cd1bf8 <+88>:	mov    %eax,(%r14)
>   0x00007f6138cd1bfb <+91>:	mov    (%rdi),%eax
>   0x00007f6138cd1bfd <+93>:	divl   0x58(%rbx)
>   0x00007f6138cd1c00 <+96>:	xor    %edx,%edx
>   0x00007f6138cd1c02 <+98>:	mov    %eax,0x0(%r13)
>   0x00007f6138cd1c06 <+102>:	mov    0x4(%rdi),%eax
>   0x00007f6138cd1c09 <+105>:	divl   0x58(%rbx)
>   0x00007f6138cd1c0c <+108>:	mov    %eax,(%r12)
>   0x00007f6138cd1c10 <+112>:	mov    0x58(%rbx),%eax
>   0x00007f6138cd1c13 <+115>:	mov    %eax,0x0(%rbp)
>   0x00007f6138cd1c16 <+118>:	add    $0x8,%rsp
>   0x00007f6138cd1c1a <+122>:	pop    %rbx
>   0x00007f6138cd1c1b <+123>:	pop    %rbp
>   0x00007f6138cd1c1c <+124>:	pop    %r12
>   0x00007f6138cd1c1e <+126>:	pop    %r13
>   0x00007f6138cd1c20 <+128>:	pop    %r14
>   0x00007f6138cd1c22 <+130>:	pop    %r15
>   0x00007f6138cd1c24 <+132>:	jmpq   0x7f6138c74cd0 <wl_cursor_image_get_buffer@plt>
>   0x00007f6138cd1c29 <+137>:	nopl   0x0(%rax)
>   0x00007f6138cd1c30 <+144>:	cmpq   $0x0,0x28(%rdi)
>   0x00007f6138cd1c35 <+149>:	je     0x7f6138cd1c98 <_gdk_wayland_cursor_get_buffer+248>
>   0x00007f6138cd1c37 <+151>:	add    $0x8,%rsp
>   0x00007f6138cd1c3b <+155>:	xor    %eax,%eax
>   0x00007f6138cd1c3d <+157>:	pop    %rbx
>   0x00007f6138cd1c3e <+158>:	pop    %rbp
>   0x00007f6138cd1c3f <+159>:	pop    %r12
>   0x00007f6138cd1c41 <+161>:	pop    %r13
>   0x00007f6138cd1c43 <+163>:	pop    %r14
>   0x00007f6138cd1c45 <+165>:	pop    %r15
>   0x00007f6138cd1c47 <+167>:	retq   
>   0x00007f6138cd1c48 <+168>:	nopl   0x0(%rax,%rax,1)
>   0x00007f6138cd1c50 <+176>:	sub    $0x1,%edx
>   0x00007f6138cd1c53 <+179>:	lea    0x3e514(%rip),%rcx        # 0x7f6138d1016e
>   0x00007f6138cd1c5a <+186>:	xor    %eax,%eax
>   0x00007f6138cd1c5c <+188>:	push   %rdx
>   0x00007f6138cd1c5d <+189>:	lea    0x3cca4(%rip),%r9        # 0x7f6138d0e908
>   0x00007f6138cd1c64 <+196>:	lea    0x3cc34(%rip),%rdx        # 0x7f6138d0e89f
>   0x00007f6138cd1c6b <+203>:	push   %rsi
>   0x00007f6138cd1c6c <+204>:	lea    0x3cddd(%rip),%r8        # 0x7f6138d0ea50 <__func__.71313>
>   0x00007f6138cd1c73 <+211>:	mov    $0x10,%esi
>   0x00007f6138cd1c78 <+216>:	lea    0x18daf(%rip),%rdi        # 0x7f6138ceaa2e
>   0x00007f6138cd1c7f <+223>:	callq  0x7f6138c748b0 <g_log_structured_standard@plt>
>   0x00007f6138cd1c84 <+228>:	pop    %rdx
>   0x00007f6138cd1c85 <+229>:	mov    0x50(%rbx),%rax
>   0x00007f6138cd1c89 <+233>:	xor    %esi,%esi
>   0x00007f6138cd1c8b <+235>:	pop    %rcx
>   0x00007f6138cd1c8c <+236>:	jmpq   0x7f6138cd1bdb <_gdk_wayland_cursor_get_buffer+59>
>   0x00007f6138cd1c91 <+241>:	nopl   0x0(%rax)
>   0x00007f6138cd1c98 <+248>:	mov    0x30(%rdi),%eax
>   0x00007f6138cd1c9b <+251>:	cltd   
>   0x00007f6138cd1c9c <+252>:	idivl  0x40(%rdi)
>   0x00007f6138cd1c9f <+255>:	mov    %eax,(%r15)
>   0x00007f6138cd1ca2 <+258>:	mov    0x34(%rdi),%eax
>   0x00007f6138cd1ca5 <+261>:	cltd   
>   0x00007f6138cd1ca6 <+262>:	idivl  0x40(%rdi)
>   0x00007f6138cd1ca9 <+265>:	mov    %eax,(%rcx)
>   0x00007f6138cd1cab <+267>:	mov    0x38(%rdi),%eax
>   0x00007f6138cd1cae <+270>:	cltd   
>   0x00007f6138cd1caf <+271>:	idivl  0x40(%rdi)
>   0x00007f6138cd1cb2 <+274>:	mov    %eax,(%r8)
>   0x00007f6138cd1cb5 <+277>:	mov    0x3c(%rdi),%eax
>   0x00007f6138cd1cb8 <+280>:	cltd   
>   0x00007f6138cd1cb9 <+281>:	idivl  0x40(%rdi)
>   0x00007f6138cd1cbc <+284>:	mov    %eax,(%r9)
>   0x00007f6138cd1cbf <+287>:	mov    0x40(%rdi),%eax
>   0x00007f6138cd1cc2 <+290>:	mov    %eax,0x0(%rbp)
>   0x00007f6138cd1cc5 <+293>:	mov    0x48(%rdi),%rdi
>   0x00007f6138cd1cc9 <+297>:	callq  0x7f6138c74dd0 <cairo_surface_reference@plt>
>   0x00007f6138cd1cce <+302>:	mov    0x48(%rbx),%rdi
>   0x00007f6138cd1cd2 <+306>:	test   %rdi,%rdi
>   0x00007f6138cd1cd5 <+309>:	je     0x7f6138cd1c37 <_gdk_wayland_cursor_get_buffer+151>
>   0x00007f6138cd1cdb <+315>:	add    $0x8,%rsp
>   0x00007f6138cd1cdf <+319>:	pop    %rbx
>   0x00007f6138cd1ce0 <+320>:	pop    %rbp
>   0x00007f6138cd1ce1 <+321>:	pop    %r12
>   0x00007f6138cd1ce3 <+323>:	pop    %r13
>   0x00007f6138cd1ce5 <+325>:	pop    %r14
>   0x00007f6138cd1ce7 <+327>:	pop    %r15
>   0x00007f6138cd1ce9 <+329>:	jmpq   0x7f6138cdcc30 <_gdk_wayland_shm_surface_get_wl_buffer>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1589643: 1449848 | 1449849 | 1449850 | 1449851 | 1449852 | 1449853 | 1449854 | 1449855 | 1449856 | 1449857 | 1449858 | 1449859