Attachment 1450266 Details for Bug 1590076 – File: backtrace

File: backtrace

backtrace (text/plain), 24.20 KB, created by Chen_Min_Chin on 2018-06-12 02:32:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Chen_Min_Chin

Created: 2018-06-12 02:32:42 UTC

Size: 24.20 KB

patch

obsolete

>[New LWP 3992]
>[New LWP 3993]
>[New LWP 3988]
>[New LWP 3987]
>[New LWP 3989]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/gvfsd-dav --spawner :1.15 /org/gtk/gvfs/exec_spaw/5'.
>Program terminated with signal SIGABRT, Aborted.
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>50	  return ret;
>[Current thread is 1 (Thread 0x7fdbeeffd700 (LWP 3992))]
>
>Thread 1 (Thread 0x7fdbeeffd700 (LWP 3992)):
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>        set = {__val = {0, 140582938393632, 16, 3935794229215523584, 108, 94763561397064, 108, 0, 140582584305568, 94763561390824, 94763561390824, 140582936096817, 140582584305560, 140582936096765, 42, 94763561397064}}
>        pid = <optimized out>
>        tid = <optimized out>
>        ret = <optimized out>
>#1  0x00007fdc05a3c561 in __GI_abort () at abort.c:79
>        save_stage = 1
>        act = {__sigaction_handler = {sa_handler = 0x562fdc6a2b10, sa_sigaction = 0x562fdc6a2b10}, sa_mask = {__val = {2048, 0, 0, 140582584305856, 1, 140582584305712, 80, 0, 3935794229215523584, 94763561390352, 56, 115, 140582936173650, 94763561390352, 140582584306032, 140582584306288}}, sa_flags = 4096, sa_restorer = 0x7fdbeeffc970}
>        sigs = {__val = {32, 0 <repeats 15 times>}}
>#2  0x00007fdc05a94927 in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7fdc05b9e579 "%s\n") at ../sysdeps/posix/libc_fatal.c:181
>        ap = {{gp_offset = 24, fp_offset = 32732, overflow_arg_area = 0x7fdbeeffca80, reg_save_area = 0x7fdbeeffca10}}
>        fd = <optimized out>
>        list = <optimized out>
>        nlist = <optimized out>
>        cp = <optimized out>
>        written = <optimized out>
>#3  0x00007fdc05a9ae0c in malloc_printerr (str=str@entry=0x7fdc05ba0230 "double free or corruption (out)") at malloc.c:5350
>No locals.
>#4  0x00007fdc05a9c870 in _int_free (av=0x7fdc05dd4c40 <main_arena>, p=0x562fdc69e240, have_lock=<optimized out>) at malloc.c:4278
>        size = 912
>        fb = <optimized out>
>        nextchunk = 0x562fdc69e5d0
>        nextsize = <optimized out>
>        nextinuse = <optimized out>
>        prevsize = <optimized out>
>        bck = <optimized out>
>        fwd = <optimized out>
>        __PRETTY_FUNCTION__ = "_int_free"
>#5  0x00007fdc0624e4d2 in g_free (mem=mem@entry=0x562fdc69e250) at gmem.c:194
>No locals.
>#6  0x00007fdc0653df3c in g_bsearch_array_free (bconfig=0x7fdc06765040 <g_signal_hlbsa_bconfig>, barray=0x562fdc69e250) at ../glib/gbsearcharray.h:298
>        __func__ = <optimized out>
>        _g_boolean_var_ = <optimized out>
>#7  g_signal_handlers_destroy (instance=instance@entry=0x562fdc68b2a0) at gsignal.c:2718
>        i = <optimized out>
>        hlbsa = <optimized out>
>        __func__ = "g_signal_handlers_destroy"
>#8  0x00007fdc065285a1 in g_object_real_dispose (object=0x562fdc68b2a0) at gobject.c:1048
>No locals.
>#9  0x00007fdc06528f38 in g_object_unref (_object=0x562fdc68b2a0) at gobject.c:3303
>        weak_locations = 0x0
>        object = <optimized out>
>        old_ref = <optimized out>
>        _object = <optimized out>
>        __func__ = "g_object_unref"
>        has_toggle_ref = <optimized out>
>        weak_locations = <optimized out>
>        weak_ref_location = <optimized out>
>        has_toggle_ref = <optimized out>
>        object = <optimized out>
>        old_ref = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        object = 0x562fdc68b2a0
>        old_ref = <optimized out>
>        __func__ = "g_object_unref"
>        _g_boolean_var_ = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        has_toggle_ref = <optimized out>
>        weak_locations = <optimized out>
>        weak_ref_location = <optimized out>
>        has_toggle_ref = <optimized out>
>        _g_boolean_var_ = <optimized out>
>#10 0x00007fdc08639247 in registered_path_free (data=0x562fdc694430) at gvfsdaemon.c:141
>No locals.
>#11 0x00007fdc06236699 in g_hash_table_remove_internal (hash_table=0x562fdc6731e0, key=0x562fdc694410, notify=1) at ghash.c:1376
>        node_index = 1
>        node_hash = 2015426673
>        __func__ = "g_hash_table_remove_internal"
>        _g_boolean_var_ = <optimized out>
>#12 0x00007fdc0863b130 in g_vfs_backend_finalize (object=0x562fdc6970a0) at gvfsbackend.c:144
>        backend = 0x562fdc6970a0
>#13 0x00007fdc06528fb9 in g_object_unref (_object=0x562fdc6970a0) at gobject.c:3340
>        weak_locations = <optimized out>
>        object = <optimized out>
>        old_ref = <optimized out>
>        _object = <optimized out>
>        __func__ = "g_object_unref"
>        has_toggle_ref = <optimized out>
>        weak_locations = <optimized out>
>        weak_ref_location = <optimized out>
>        has_toggle_ref = <optimized out>
>        object = <optimized out>
>        old_ref = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        object = 0x562fdc6970a0
>        old_ref = <optimized out>
>        __func__ = "g_object_unref"
>        _g_boolean_var_ = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        has_toggle_ref = <optimized out>
>        weak_locations = <optimized out>
>        weak_ref_location = <optimized out>
>        has_toggle_ref = <optimized out>
>        _g_boolean_var_ = <optimized out>
>#14 0x00007fdc0864064b in g_vfs_job_mount_finalize (object=0x562fdc68b2e0) at gvfsjobmount.c:49
>        job = 0x562fdc68b2e0
>        _pp = <optimized out>
>        _p = <optimized out>
>        _destroy = <optimized out>
>        _pp = <optimized out>
>        _p = <optimized out>
>        _destroy = <optimized out>
>#15 0x00007fdc06528fb9 in g_object_unref (_object=0x562fdc68b2e0) at gobject.c:3340
>        weak_locations = <optimized out>
>        object = <optimized out>
>        old_ref = <optimized out>
>        _object = <optimized out>
>        __func__ = "g_object_unref"
>        has_toggle_ref = <optimized out>
>        weak_locations = <optimized out>
>        weak_ref_location = <optimized out>
>        has_toggle_ref = <optimized out>
>        object = <optimized out>
>        old_ref = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        object = 0x562fdc68b2e0
>        old_ref = <optimized out>
>        __func__ = "g_object_unref"
>        _g_boolean_var_ = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        has_toggle_ref = <optimized out>
>        weak_locations = <optimized out>
>        weak_ref_location = <optimized out>
>        has_toggle_ref = <optimized out>
>        _g_boolean_var_ = <optimized out>
>#16 0x00007fdc06271933 in g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:307
>        task = 0x562fdc68b2e0
>        pool = 0x562fdc675cb0
>#17 0x00007fdc06270f2a in g_thread_proxy (data=0x562fdc665400) at gthread.c:784
>        thread = 0x562fdc665400
>        __func__ = "g_thread_proxy"
>#18 0x00007fdc05de1594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140582584309504, 8199362500735421384, 140722268077326, 140722268077327, 140722268077456, 140722268077456, -8179063318749754424, -8182486933016392760}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#19 0x00007fdc05b1500f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 2 (Thread 0x7fdbede4f700 (LWP 3993)):
>#0  0x00007fdc05b0a589 in __GI___poll (fds=0x7fdbe402b940, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007fdc06248be6 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x7fdbe402b940, timeout=<optimized out>, context=0x7fdbe402b9d0) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7fdc06258520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=context@entry=0x7fdbe402b9d0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x7fdbe402b940
>#3  0x00007fdc06248d10 in g_main_context_iteration (context=context@entry=0x7fdbe402b9d0, may_block=may_block@entry=1) at gmain.c:3964
>        retval = <optimized out>
>#4  0x00007fdbede57e4d in dconf_gdbus_worker_thread (user_data=0x7fdbe402b9d0) at ../gdbus/dconf-gdbus-thread.c:82
>        context = 0x7fdbe402b9d0
>#5  0x00007fdc06270f2a in g_thread_proxy (data=0x7fdbe4028720) at gthread.c:784
>        thread = 0x7fdbe4028720
>        __func__ = "g_thread_proxy"
>#6  0x00007fdc05de1594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140582565771008, 8199362500735421384, 140582584304062, 140582584304063, 140582584304192, 140582584304192, -8179056952534479928, -8182486933016392760}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007fdc05b1500f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 3 (Thread 0x7fdbf4d21700 (LWP 3988)):
>#0  0x00007fdc05b0a589 in __GI___poll (fds=0x562fdc665a50, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007fdc06248be6 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x562fdc665a50, timeout=<optimized out>, context=0x562fdc664730) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7fdc06258520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=context@entry=0x562fdc664730, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x562fdc665a50
>#3  0x00007fdc06248d10 in g_main_context_iteration (context=0x562fdc664730, may_block=may_block@entry=1) at gmain.c:3964
>        retval = <optimized out>
>#4  0x00007fdc06248d61 in glib_worker_main (data=<optimized out>) at gmain.c:5773
>No locals.
>#5  0x00007fdc06270f2a in g_thread_proxy (data=0x562fdc664c00) at gthread.c:784
>        thread = 0x562fdc664c00
>        __func__ = "g_thread_proxy"
>#6  0x00007fdc05de1594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140582681974528, 8199362500735421384, 140722268079166, 140722268079167, 140722268079296, 140722268079296, -8179076351828014136, -8182486933016392760}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007fdc05b1500f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 4 (Thread 0x7fdc08a44900 (LWP 3987)):
>#0  __lll_lock_wait_private () at ../sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:95
>No locals.
>#1  0x00007fdc05a9c996 in _int_free (av=0x7fdc05dd4c40 <main_arena>, p=0x562fdc6989e0, have_lock=<optimized out>) at malloc.c:4266
>        ignore1 = <optimized out>
>        ignore2 = <optimized out>
>        ignore3 = <optimized out>
>        size = 176
>        fb = <optimized out>
>        nextchunk = <optimized out>
>        nextsize = <optimized out>
>        nextinuse = <optimized out>
>        prevsize = <optimized out>
>        bck = <optimized out>
>        fwd = <optimized out>
>        __PRETTY_FUNCTION__ = "_int_free"
>#2  0x00007fdc05a3c42c in __assert_fail_base (fmt=0x7fdc05b9f188 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=0x7fdc05dee3c0 "previous_prio == -1 || (previous_prio >= fifo_min_prio && previous_prio <= fifo_max_prio)", file=0x7fdc05dee364 "tpp.c", line=87, function=0x7fdc05dee420 <__PRETTY_FUNCTION__.7783> "__pthread_tpp_change_priority") at assert.c:83
>        buf = <optimized out>
>        str = 0x562fdc6989f0 "gvfsd-dav: tpp.c:87: __pthread_tpp_change_priority: Assertion `previous_prio == -1 || (previous_prio >= fifo_min_prio && previous_prio <= fifo_max_prio)' failed.\n"
>        total = 4096
>#3  0x00007fdc05a4a692 in __GI___assert_fail (assertion=assertion@entry=0x7fdc05dee3c0 "previous_prio == -1 || (previous_prio >= fifo_min_prio && previous_prio <= fifo_max_prio)", file=file@entry=0x7fdc05dee364 "tpp.c", line=line@entry=87, function=function@entry=0x7fdc05dee420 <__PRETTY_FUNCTION__.7783> "__pthread_tpp_change_priority") at assert.c:101
>No locals.
>#4  0x00007fdc05deccce in __pthread_tpp_change_priority (previous_prio=-1139, new_prio=-1) at tpp.c:85
>        self = 0x7fdc08a44900
>        tpp = <optimized out>
>        fifo_min_prio = 1
>        fifo_max_prio = 99
>        __PRETTY_FUNCTION__ = "__pthread_tpp_change_priority"
>        priomax = <optimized out>
>        newpriomax = <optimized out>
>        result = <optimized out>
>#5  0x00007fdc03f6fa8d in ?? () from /lib64/libdbus-1.so.3
>No symbol table info available.
>#6  0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 5 (Thread 0x7fdbeffff700 (LWP 3989)):
>#0  0x00007fdc05b0a589 in __GI___poll (fds=0x7fdbe8004920, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007fdc06248be6 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x7fdbe8004920, timeout=<optimized out>, context=0x562fdc67b810) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7fdc06258520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=0x562fdc67b810, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 3
>        allocated_nfds = 3
>        fds = 0x7fdbe8004920
>#3  0x00007fdc06248fa2 in g_main_loop_run (loop=0x562fdc67b950) at gmain.c:4099
>        self = <optimized out>
>        __func__ = "g_main_loop_run"
>#4  0x00007fdc068396ba in gdbus_shared_thread_func (user_data=0x562fdc67b7e0) at gdbusprivate.c:275
>        data = 0x562fdc67b7e0
>#5  0x00007fdc06270f2a in g_thread_proxy (data=0x562fdc664ca0) at gthread.c:784
>        thread = 0x562fdc664ca0
>        __func__ = "g_thread_proxy"
>#6  0x00007fdc05de1594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140582601094912, 8199362500735421384, 140722268079550, 140722268079551, 140722268079680, 140722268079680, -8179061118652757048, -8182486933016392760}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007fdc05b1500f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x00007fdc08638ba0  0x00007fdc0864a612  Yes         /usr/lib64/gvfs/libgvfsdaemon.so
>0x00007fdc083b3900  0x00007fdc083fbc71  Yes         /lib64/libgcr-base-3.so.1
>0x00007fdc08160870  0x00007fdc0817eecb  Yes         /lib64/libgck-1.so.0
>0x00007fdc07e4f430  0x00007fdc07ee737c  Yes         /lib64/libp11-kit.so.0
>0x00007fdc07bf8a70  0x00007fdc07c1022a  Yes         /usr/lib64/gvfs/libgvfscommon.so
>0x00007fdc079a07a0  0x00007fdc079cc0a6  Yes         /lib64/libsecret-1.so.0
>0x00007fdc076e8430  0x00007fdc07731b59  Yes         /lib64/libsoup-2.4.so.1
>0x00007fdc0735f7b0  0x00007fdc0744449e  Yes         /lib64/libxml2.so.2
>0x00007fdc0712dd80  0x00007fdc0712eb28  No          /lib64/libavahi-glib.so.1
>0x00007fdc06f23490  0x00007fdc06f28629  No          /lib64/libavahi-common.so.3
>0x00007fdc06d11a30  0x00007fdc06d19e5d  No          /lib64/libavahi-client.so.3
>0x00007fdc06b0b140  0x00007fdc06b0c066  Yes         /lib64/libgmodule-2.0.so.0
>0x00007fdc0679e4b0  0x00007fdc068860d2  Yes         /lib64/libgio-2.0.so.0
>0x00007fdc0651e7a0  0x00007fdc0654f660  Yes         /lib64/libgobject-2.0.so.0
>0x00007fdc062170d0  0x00007fdc0629234e  Yes         /lib64/libglib-2.0.so.0
>0x00007fdc05ff9e80  0x00007fdc05ffa7a8  Yes         /lib64/libutil.so.1
>0x00007fdc05ddfbe0  0x00007fdc05ded801  Yes         /lib64/libpthread.so.0
>0x00007fdc05a3c340  0x00007fdc05b8325f  Yes         /lib64/libc.so.6
>0x00007fdc05819660  0x00007fdc058197a2  Yes         /lib64/libgthread-2.0.so.0
>0x00007fdc055095c0  0x00007fdc055d6bfc  Yes         /lib64/libgcrypt.so.20
>0x00007fdc052faee0  0x00007fdc052fbbbe  Yes         /lib64/libdl.so.2
>0x00007fdc050de1e0  0x00007fdc050ef78e  Yes         /lib64/libgpg-error.so.0
>0x00007fdc04ed2810  0x00007fdc04ed729a  Yes         /lib64/libffi.so.6
>0x00007fdc04bdc5d0  0x00007fdc04ca03d0  No          /lib64/libsqlite3.so.0
>0x00007fdc0498c860  0x00007fdc049bfacf  No          /lib64/libgssapi_krb5.so.2
>0x00007fdc0476b420  0x00007fdc047785f7  Yes         /lib64/libz.so.1
>0x00007fdc045450b0  0x00007fdc0455bf66  Yes         /lib64/liblzma.so.5
>0x00007fdc041b99f0  0x00007fdc0426be6a  Yes         /lib64/libm.so.6
>0x00007fdc03f6aa90  0x00007fdc03f971c5  No          /lib64/libdbus-1.so.3
>0x00007fdc03cec660  0x00007fdc03d3cb86  Yes         /lib64/libpcre.so.1
>0x00007fdc03ac8df0  0x00007fdc03ae093f  Yes         /lib64/libselinux.so.1
>0x00007fdc038ae840  0x00007fdc038ba60e  Yes         /lib64/libresolv.so.2
>0x00007fdc0365dee0  0x00007fdc0369525e  No          /lib64/libmount.so.1
>0x00007fdc0343bad0  0x00007fdc0344c705  No          /lib64/libgcc_s.so.1
>0x00007fdc08856f60  0x00007fdc08873910  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007fdc031723c0  0x00007fdc031dde41  Yes         /lib64/libkrb5.so.3
>0x00007fdc02f35590  0x00007fdc02f43eb4  No          /lib64/libk5crypto.so.3
>0x00007fdc02d2d500  0x00007fdc02d2e0d9  No          /lib64/libcom_err.so.2
>0x00007fdc02b20ae0  0x00007fdc02b27f5b  No          /lib64/libkrb5support.so.0
>0x00007fdc026fc000  0x00007fdc028766be  Yes         /lib64/libcrypto.so.1.1
>0x00007fdc0248e5f0  0x00007fdc0248f378  No          /lib64/libkeyutils.so.1
>0x00007fdc021ff150  0x00007fdc022639d9  No          /lib64/libsystemd.so.0
>0x00007fdc01f72160  0x00007fdc01fcccb3  Yes         /lib64/libpcre2-8.so.0
>0x00007fdc01d296f0  0x00007fdc01d5a27e  No          /lib64/libblkid.so.1
>0x00007fdc01b19740  0x00007fdc01b1d171  No          /lib64/libuuid.so.1
>0x00007fdc01912210  0x00007fdc0191547c  Yes         /lib64/librt.so.1
>0x00007fdc016fafd0  0x00007fdc0170c3db  No          /lib64/liblz4.so.1
>0x00007fdc014f55b0  0x00007fdc014f6e8f  Yes         /lib64/libcap.so.2
>0x00007fdbf4103c50  0x00007fdbf411657e  Yes         /lib64/libproxy.so.1
>0x00007fdbee5f6020  0x00007fdbee5fa26b  Yes         /lib64/libmodman.so.1
>0x00007fdbee2ee590  0x00007fdbee3a468e  No          /lib64/libstdc++.so.6
>0x00007fdbee05e9d0  0x00007fdbee05fa9e  Yes         /usr/lib64/gio/modules/libgiognomeproxy.so
>0x00007fdbede53ce0  0x00007fdbede58e12  Yes         /usr/lib64/gio/modules/libdconfsettings.so
>0x00007fdbed437060  0x00007fdbed445e01  Yes         /usr/lib64/gio/modules/libgiognutls.so
>0x00007fdbed0fc280  0x00007fdbed1d8ce8  Yes         /lib64/libgnutls.so.30
>0x00007fdbeceb1750  0x00007fdbeceb52b7  Yes         /lib64/libidn2.so.0
>0x00007fdbecb416d0  0x00007fdbecb7523e  Yes         /lib64/libunistring.so.2
>0x00007fdbec91fcd0  0x00007fdbec92aa23  Yes         /lib64/libtasn1.so.6
>0x00007fdbec6edc60  0x00007fdbec70aeec  Yes         /lib64/libnettle.so.6
>0x00007fdbec4bd840  0x00007fdbec4cbfdf  Yes         /lib64/libhogweed.so.4
>0x00007fdbec2465c0  0x00007fdbec29c524  Yes         /lib64/libgmp.so.10
>0x00007fdbec02a340  0x00007fdbec0305c8  Yes         /lib64/libnss_files.so.2
>0x00007fdbf431ded0  0x00007fdbf431f324  Yes         /lib64/libnss_mdns4_minimal.so.2
>0x00007fdbdfdfafe0  0x00007fdbdfdfe3cb  Yes         /lib64/libnss_dns.so.2
>$1 = 0x7fdc08a6d000 ""
>$2 = 0x0
>rax            0x0	0
>rbx            0x6	6
>rcx            0x7fdc05a51f2b	140582964240171
>rdx            0x0	0
>rsi            0x7fdbeeffc720	140582584305440
>rdi            0x2	2
>rbp            0x7fdbeeffca70	0x7fdbeeffca70
>rsp            0x7fdbeeffc720	0x7fdbeeffc720
>r8             0x0	0
>r9             0x7fdbeeffc720	140582584305440
>r10            0x8	8
>r11            0x246	582
>r12            0x1000	4096
>r13            0x7fdbeeffc990	140582584306064
>r14            0x10	16
>r15            0x7fdc08a6d000	140583014682624
>rip            0x7fdc05a51f2b	0x7fdc05a51f2b <__GI_raise+267>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI_raise:
>   0x00007fdc05a51e20 <+0>:	push   %rbx
>   0x00007fdc05a51e21 <+1>:	mov    $0xffffffffffffffff,%r8
>   0x00007fdc05a51e28 <+8>:	mov    %edi,%ebx
>   0x00007fdc05a51e2a <+10>:	mov    $0x8,%r10d
>   0x00007fdc05a51e30 <+16>:	xor    %edi,%edi
>   0x00007fdc05a51e32 <+18>:	sub    $0x110,%rsp
>   0x00007fdc05a51e39 <+25>:	mov    %fs:0x28,%rax
>   0x00007fdc05a51e42 <+34>:	mov    %rax,0x108(%rsp)
>   0x00007fdc05a51e4a <+42>:	xor    %eax,%eax
>   0x00007fdc05a51e4c <+44>:	mov    %rsp,%r9
>   0x00007fdc05a51e4f <+47>:	movabs $0xfffffffe7fffffff,%rax
>   0x00007fdc05a51e59 <+57>:	mov    %r8,0x88(%rsp)
>   0x00007fdc05a51e61 <+65>:	mov    %rax,0x80(%rsp)
>   0x00007fdc05a51e69 <+73>:	mov    %r9,%rdx
>   0x00007fdc05a51e6c <+76>:	lea    0x80(%rsp),%rsi
>   0x00007fdc05a51e74 <+84>:	mov    $0xe,%eax
>   0x00007fdc05a51e79 <+89>:	mov    %r8,0x90(%rsp)
>   0x00007fdc05a51e81 <+97>:	mov    %r8,0x98(%rsp)
>   0x00007fdc05a51e89 <+105>:	mov    %r8,0xa0(%rsp)
>   0x00007fdc05a51e91 <+113>:	mov    %r8,0xa8(%rsp)
>   0x00007fdc05a51e99 <+121>:	mov    %r8,0xb0(%rsp)
>   0x00007fdc05a51ea1 <+129>:	mov    %r8,0xb8(%rsp)
>   0x00007fdc05a51ea9 <+137>:	mov    %r8,0xc0(%rsp)
>   0x00007fdc05a51eb1 <+145>:	mov    %r8,0xc8(%rsp)
>   0x00007fdc05a51eb9 <+153>:	mov    %r8,0xd0(%rsp)
>   0x00007fdc05a51ec1 <+161>:	mov    %r8,0xd8(%rsp)
>   0x00007fdc05a51ec9 <+169>:	mov    %r8,0xe0(%rsp)
>   0x00007fdc05a51ed1 <+177>:	mov    %r8,0xe8(%rsp)
>   0x00007fdc05a51ed9 <+185>:	mov    %r8,0xf0(%rsp)
>   0x00007fdc05a51ee1 <+193>:	mov    %r8,0xf8(%rsp)
>   0x00007fdc05a51ee9 <+201>:	syscall 
>   0x00007fdc05a51eeb <+203>:	mov    $0x27,%ecx
>   0x00007fdc05a51ef0 <+208>:	mov    %ecx,%eax
>   0x00007fdc05a51ef2 <+210>:	syscall 
>   0x00007fdc05a51ef4 <+212>:	mov    %rax,%rdi
>   0x00007fdc05a51ef7 <+215>:	mov    $0xba,%eax
>   0x00007fdc05a51efc <+220>:	syscall 
>   0x00007fdc05a51efe <+222>:	mov    %eax,%esi
>   0x00007fdc05a51f00 <+224>:	mov    %ebx,%edx
>   0x00007fdc05a51f02 <+226>:	mov    $0xea,%eax
>   0x00007fdc05a51f07 <+231>:	syscall 
>   0x00007fdc05a51f09 <+233>:	cmp    $0xfffffffffffff000,%rax
>   0x00007fdc05a51f0f <+239>:	ja     0x7fdc05a51f50 <__GI_raise+304>
>   0x00007fdc05a51f11 <+241>:	mov    %eax,%r8d
>   0x00007fdc05a51f14 <+244>:	mov    $0x8,%r10d
>   0x00007fdc05a51f1a <+250>:	xor    %edx,%edx
>   0x00007fdc05a51f1c <+252>:	mov    %r9,%rsi
>   0x00007fdc05a51f1f <+255>:	mov    $0x2,%edi
>   0x00007fdc05a51f24 <+260>:	mov    $0xe,%eax
>   0x00007fdc05a51f29 <+265>:	syscall 
>=> 0x00007fdc05a51f2b <+267>:	mov    0x108(%rsp),%rcx
>   0x00007fdc05a51f33 <+275>:	xor    %fs:0x28,%rcx
>   0x00007fdc05a51f3c <+284>:	mov    %r8d,%eax
>   0x00007fdc05a51f3f <+287>:	jne    0x7fdc05a51f5e <__GI_raise+318>
>   0x00007fdc05a51f41 <+289>:	add    $0x110,%rsp
>   0x00007fdc05a51f48 <+296>:	pop    %rbx
>   0x00007fdc05a51f49 <+297>:	retq   
>   0x00007fdc05a51f4a <+298>:	nopw   0x0(%rax,%rax,1)
>   0x00007fdc05a51f50 <+304>:	mov    0x381f49(%rip),%rdx        # 0x7fdc05dd3ea0
>   0x00007fdc05a51f57 <+311>:	neg    %eax
>   0x00007fdc05a51f59 <+313>:	mov    %eax,%fs:(%rdx)
>   0x00007fdc05a51f5c <+316>:	jmp    0x7fdc05a51f14 <__GI_raise+244>
>   0x00007fdc05a51f5e <+318>:	callq  0x7fdc05b26480 <__stack_chk_fail>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1590076: 1450266 | 1450267 | 1450268 | 1450269 | 1450270 | 1450271 | 1450272 | 1450273 | 1450274 | 1450275 | 1450276