Attachment 1451469 Details for Bug 1591420 – File: backtrace

File: backtrace

backtrace (text/plain), 11.73 KB, created by deadrat on 2018-06-14 16:55:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: deadrat

Created: 2018-06-14 16:55:53 UTC

Size: 11.73 KB

patch

obsolete

>[New LWP 3853]
>[New LWP 3854]
>[New LWP 3855]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `bt-adapter -i'.
>Program terminated with signal SIGABRT, Aborted.
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>50	  return ret;
>[Current thread is 1 (Thread 0x7f3b19203f80 (LWP 3853))]
>
>Thread 1 (Thread 0x7f3b19203f80 (LWP 3853)):
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>        set = {__val = {0, 10, 140732516253912, 139891796822430, 94661777921728, 139891796574383, 0, 32, 2048, 139891789687872, 129, 139891786317008, 2048, 0, 7, 0}}
>        pid = <optimized out>
>        tid = <optimized out>
>        ret = <optimized out>
>#1  0x00007f3b1834e561 in __GI_abort () at abort.c:79
>        save_stage = 1
>        act = {__sigaction_handler = {sa_handler = 0x8000, sa_sigaction = 0x8000}, sa_mask = {__val = {140728898420737, 0, 87, 94661777932288, 17465120771842052352, 0, 139891796822430, 139891796635338, 94662941474816, 94661777932288, 17465120771842052352, 0, 94661777932288, 88, 139891799199264, 140732516254160}}, sa_flags = 678952896, sa_restorer = 0x0}
>        sigs = {__val = {32, 0 <repeats 15 times>}}
>#2  0x00007f3b18cfd0f3 in g_assertion_message (domain=0x0, file=0x56182877fb3f "lib/helpers.c", line=319, func=0x56182877ffc0 <__func__.27553> "intf_supported", message=0x561829a5e400 "assertion failed: (introspection_proxy != NULL)") at gtestutils.c:2532
>        lstr = "319\000\376\177\000\000\000\021\361\314\316\222`\362`\000\245)\030V\000\000\261\373w(\030V\000"
>        s = 0x561829a5c000 "\240\062\245)\030V"
>#3  0x00007f3b18d5615e in g_assertion_message_expr () at gtestutils.c:2555
>        s = 0x561829a5e400 "assertion failed: (introspection_proxy != NULL)"
>#4  0x0000561828766b19 in intf_supported (dbus_service_name=<optimized out>, dbus_object_path=0x5618287820a7 "/", intf_name=<optimized out>) at lib/helpers.c:319
>        __func__ = "intf_supported"
>        supported = 0
>        conn = 0x561829a50060
>        check_intf_regex_str = 0x561829a49990 "<interface name=\"org.freedesktop.DBus.ObjectManager\">"
>        error = 0x561829a53540
>        introspection_proxy = 0x0
>        introspection_ret = <optimized out>
>        introspection_xml = <optimized out>
>#5  0x00005618287646d8 in main (argc=<optimized out>, argv=<optimized out>) at bt-adapter.c:149
>        error = 0x0
>        context = 0x561829a3e340
>        manager = <optimized out>
>        __func__ = "main"
>
>Thread 2 (Thread 0x7f3b09d10700 (LWP 3854)):
>#0  0x00007f3b1841c589 in __GI___poll (fds=0x561829a439d0, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f3b18d2ebe6 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x561829a439d0, timeout=<optimized out>, context=0x561829a426d0) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f3b18d3e520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=context@entry=0x561829a426d0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x561829a439d0
>#3  0x00007f3b18d2ed10 in g_main_context_iteration (context=0x561829a426d0, may_block=may_block@entry=1) at gmain.c:3964
>        retval = <optimized out>
>#4  0x00007f3b18d2ed61 in glib_worker_main (data=<optimized out>) at gmain.c:5773
>No locals.
>#5  0x00007f3b18d56f2a in g_thread_proxy (data=0x561829a42c00) at gthread.c:784
>        thread = 0x561829a42c00
>        __func__ = "g_thread_proxy"
>#6  0x00007f3b17ea4594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139891544491776, -7166046555941227557, 140732516253422, 140732516253423, 140732516253552, 140732516253552, 7132300199098463195, 7132357430893097947}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f3b1842700f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 3 (Thread 0x7f3b0950f700 (LWP 3855)):
>#0  0x00007f3b1841c589 in __GI___poll (fds=0x561829a5ad50, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 1
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f3b18d2ebe6 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x561829a5ad50, timeout=<optimized out>, context=0x561829a58be0) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f3b18d3e520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=0x561829a58be0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 2
>        allocated_nfds = 2
>        fds = 0x561829a5ad50
>#3  0x00007f3b18d2efa2 in g_main_loop_run (loop=0x561829a58d20) at gmain.c:4099
>        self = <optimized out>
>        __func__ = "g_main_loop_run"
>#4  0x00007f3b18a116ba in gdbus_shared_thread_func (user_data=0x561829a58bb0) at gdbusprivate.c:275
>        data = 0x561829a58bb0
>#5  0x00007f3b18d56f2a in g_thread_proxy (data=0x561829a42ca0) at gthread.c:784
>        thread = 0x561829a42ca0
>        __func__ = "g_thread_proxy"
>#6  0x00007f3b17ea4594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139891536099072, -7166046555941227557, 140732516253806, 140732516253807, 140732516253936, 140732516253936, 7132299100123706331, 7132357430893097947}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f3b1842700f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x00007f3b18cfd0d0  0x00007f3b18d7834e  Yes         /lib64/libglib-2.0.so.0
>0x00007f3b189764b0  0x00007f3b18a5e0d2  Yes         /lib64/libgio-2.0.so.0
>0x00007f3b186f67a0  0x00007f3b18727660  Yes         /lib64/libgobject-2.0.so.0
>0x00007f3b1834e340  0x00007f3b1849525f  Yes         /lib64/libc.so.6
>0x00007f3b180bd660  0x00007f3b1810db86  Yes         /lib64/libpcre.so.1
>0x00007f3b17ea2be0  0x00007f3b17eb0801  Yes         /lib64/libpthread.so.0
>0x00007f3b17c95810  0x00007f3b17c9a29a  Yes         /lib64/libffi.so.6
>0x00007f3b17a91140  0x00007f3b17a92066  Yes         /lib64/libgmodule-2.0.so.0
>0x00007f3b1788cee0  0x00007f3b1788dbbe  Yes         /lib64/libdl.so.2
>0x00007f3b17677420  0x00007f3b176845f7  Yes         /lib64/libz.so.1
>0x00007f3b17452df0  0x00007f3b1746a93f  Yes         /lib64/libselinux.so.1
>0x00007f3b17238840  0x00007f3b1724460e  Yes         /lib64/libresolv.so.2
>0x00007f3b16fe7ee0  0x00007f3b1701f25e  No          /lib64/libmount.so.1
>0x00007f3b16dc5ad0  0x00007f3b16dd6705  No          /lib64/libgcc_s.so.1
>0x00007f3b18ffaf60  0x00007f3b19017910  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f3b16b45160  0x00007f3b16b9fcb3  Yes         /lib64/libpcre2-8.so.0
>0x00007f3b168fc6f0  0x00007f3b1692d27e  No          /lib64/libblkid.so.1
>0x00007f3b166ec740  0x00007f3b166f0171  No          /lib64/libuuid.so.1
>0x00007f3b164e5210  0x00007f3b164e847c  Yes         /lib64/librt.so.1
>$1 = 0x0
>$2 = 0x7f3afc00a960 "ERROR:lib/helpers.c:319:intf_supported: assertion failed: (introspection_proxy != NULL)"
>rax            0x0	0
>rbx            0x6	6
>rcx            0x7f3b18363f2b	139891786006315
>rdx            0x0	0
>rsi            0x7ffed7a3bf80	140732516253568
>rdi            0x2	2
>rbp            0x58	0x58
>rsp            0x7ffed7a3bf80	0x7ffed7a3bf80
>r8             0x0	0
>r9             0x7ffed7a3bf80	140732516253568
>r10            0x8	8
>r11            0x246	582
>r12            0x7f3b18ff8e20	139891799199264
>r13            0x7ffed7a3c1d0	140732516254160
>r14            0x56182877ffc0	94661758156736
>r15            0x0	0
>rip            0x7f3b18363f2b	0x7f3b18363f2b <__GI_raise+267>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI_raise:
>   0x00007f3b18363e20 <+0>:	push   %rbx
>   0x00007f3b18363e21 <+1>:	mov    $0xffffffffffffffff,%r8
>   0x00007f3b18363e28 <+8>:	mov    %edi,%ebx
>   0x00007f3b18363e2a <+10>:	mov    $0x8,%r10d
>   0x00007f3b18363e30 <+16>:	xor    %edi,%edi
>   0x00007f3b18363e32 <+18>:	sub    $0x110,%rsp
>   0x00007f3b18363e39 <+25>:	mov    %fs:0x28,%rax
>   0x00007f3b18363e42 <+34>:	mov    %rax,0x108(%rsp)
>   0x00007f3b18363e4a <+42>:	xor    %eax,%eax
>   0x00007f3b18363e4c <+44>:	mov    %rsp,%r9
>   0x00007f3b18363e4f <+47>:	movabs $0xfffffffe7fffffff,%rax
>   0x00007f3b18363e59 <+57>:	mov    %r8,0x88(%rsp)
>   0x00007f3b18363e61 <+65>:	mov    %rax,0x80(%rsp)
>   0x00007f3b18363e69 <+73>:	mov    %r9,%rdx
>   0x00007f3b18363e6c <+76>:	lea    0x80(%rsp),%rsi
>   0x00007f3b18363e74 <+84>:	mov    $0xe,%eax
>   0x00007f3b18363e79 <+89>:	mov    %r8,0x90(%rsp)
>   0x00007f3b18363e81 <+97>:	mov    %r8,0x98(%rsp)
>   0x00007f3b18363e89 <+105>:	mov    %r8,0xa0(%rsp)
>   0x00007f3b18363e91 <+113>:	mov    %r8,0xa8(%rsp)
>   0x00007f3b18363e99 <+121>:	mov    %r8,0xb0(%rsp)
>   0x00007f3b18363ea1 <+129>:	mov    %r8,0xb8(%rsp)
>   0x00007f3b18363ea9 <+137>:	mov    %r8,0xc0(%rsp)
>   0x00007f3b18363eb1 <+145>:	mov    %r8,0xc8(%rsp)
>   0x00007f3b18363eb9 <+153>:	mov    %r8,0xd0(%rsp)
>   0x00007f3b18363ec1 <+161>:	mov    %r8,0xd8(%rsp)
>   0x00007f3b18363ec9 <+169>:	mov    %r8,0xe0(%rsp)
>   0x00007f3b18363ed1 <+177>:	mov    %r8,0xe8(%rsp)
>   0x00007f3b18363ed9 <+185>:	mov    %r8,0xf0(%rsp)
>   0x00007f3b18363ee1 <+193>:	mov    %r8,0xf8(%rsp)
>   0x00007f3b18363ee9 <+201>:	syscall 
>   0x00007f3b18363eeb <+203>:	mov    $0x27,%ecx
>   0x00007f3b18363ef0 <+208>:	mov    %ecx,%eax
>   0x00007f3b18363ef2 <+210>:	syscall 
>   0x00007f3b18363ef4 <+212>:	mov    %rax,%rdi
>   0x00007f3b18363ef7 <+215>:	mov    $0xba,%eax
>   0x00007f3b18363efc <+220>:	syscall 
>   0x00007f3b18363efe <+222>:	mov    %eax,%esi
>   0x00007f3b18363f00 <+224>:	mov    %ebx,%edx
>   0x00007f3b18363f02 <+226>:	mov    $0xea,%eax
>   0x00007f3b18363f07 <+231>:	syscall 
>   0x00007f3b18363f09 <+233>:	cmp    $0xfffffffffffff000,%rax
>   0x00007f3b18363f0f <+239>:	ja     0x7f3b18363f50 <__GI_raise+304>
>   0x00007f3b18363f11 <+241>:	mov    %eax,%r8d
>   0x00007f3b18363f14 <+244>:	mov    $0x8,%r10d
>   0x00007f3b18363f1a <+250>:	xor    %edx,%edx
>   0x00007f3b18363f1c <+252>:	mov    %r9,%rsi
>   0x00007f3b18363f1f <+255>:	mov    $0x2,%edi
>   0x00007f3b18363f24 <+260>:	mov    $0xe,%eax
>   0x00007f3b18363f29 <+265>:	syscall 
>=> 0x00007f3b18363f2b <+267>:	mov    0x108(%rsp),%rcx
>   0x00007f3b18363f33 <+275>:	xor    %fs:0x28,%rcx
>   0x00007f3b18363f3c <+284>:	mov    %r8d,%eax
>   0x00007f3b18363f3f <+287>:	jne    0x7f3b18363f5e <__GI_raise+318>
>   0x00007f3b18363f41 <+289>:	add    $0x110,%rsp
>   0x00007f3b18363f48 <+296>:	pop    %rbx
>   0x00007f3b18363f49 <+297>:	retq   
>   0x00007f3b18363f4a <+298>:	nopw   0x0(%rax,%rax,1)
>   0x00007f3b18363f50 <+304>:	mov    0x381f49(%rip),%rdx        # 0x7f3b186e5ea0
>   0x00007f3b18363f57 <+311>:	neg    %eax
>   0x00007f3b18363f59 <+313>:	mov    %eax,%fs:(%rdx)
>   0x00007f3b18363f5c <+316>:	jmp    0x7f3b18363f14 <__GI_raise+244>
>   0x00007f3b18363f5e <+318>:	callq  0x7f3b18438480 <__stack_chk_fail>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1591420: 1451469 | 1451470 | 1451471 | 1451472 | 1451473 | 1451474 | 1451475 | 1451476 | 1451477 | 1451478 | 1451479