Attachment 1452099 Details for Bug 1592012 – File: backtrace

File: backtrace

backtrace (text/plain), 29.56 KB, created by Frank Büttner on 2018-06-16 06:35:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Frank Büttner

Created: 2018-06-16 06:35:42 UTC

Size: 29.56 KB

patch

obsolete

>[New LWP 5200]
>[New LWP 2213]
>[New LWP 2225]
>[New LWP 2226]
>[New LWP 5083]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/packagekitd'.
>Program terminated with signal SIGABRT, Aborted.
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>50	  return ret;
>[Current thread is 1 (Thread 0x7f94ea5a1700 (LWP 5200))]
>
>Thread 1 (Thread 0x7f94ea5a1700 (LWP 5200)):
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>        set = {__val = {0, 15346993598199622400, 140277462094745, 140277658241856, 140277563652656, 4, 0, 0, 140277563652664, 140277655147906, 140277563652520, 140277655146288, 140277655807904, 4022355316, 140277563652720, 9}}
>        pid = <optimized out>
>        tid = <optimized out>
>        ret = <optimized out>
>#1  0x00007f950f4a5561 in __GI_abort () at abort.c:79
>        save_stage = 1
>        act = {__sigaction_handler = {sa_handler = 0x7f, sa_sigaction = 0x7f}, sa_mask = {__val = {140277521374674, 0, 0, 0, 0, 0, 15346993598199622400, 0, 140277658240832, 140277461569088, 3, 0, 0, 140277563653128, 140277563652928, 140277563653184}}, sa_flags = 4096, sa_restorer = 0x7f94ea59fb40}
>        sigs = {__val = {32, 0 <repeats 15 times>}}
>#2  0x00007f950f4fd927 in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7f950f607579 "%s\n") at ../sysdeps/posix/libc_fatal.c:181
>        ap = {{gp_offset = 24, fp_offset = 32660, overflow_arg_area = 0x7f94ea59fc50, reg_save_area = 0x7f94ea59fbe0}}
>        fd = <optimized out>
>        list = <optimized out>
>        nlist = <optimized out>
>        cp = <optimized out>
>        written = <optimized out>
>#3  0x00007f950f503e0c in malloc_printerr (str=str@entry=0x7f950f608e30 "corrupted double-linked list (not small)") at malloc.c:5350
>No locals.
>#4  0x00007f950f507520 in _int_malloc (av=av@entry=0x7f94e4000020, bytes=bytes@entry=32) at malloc.c:3926
>        p = 0x7f950f4baf2b <__GI_raise+267>
>        iters = <optimized out>
>        nb = 48
>        idx = <optimized out>
>        bin = <optimized out>
>        victim = <optimized out>
>        size = <optimized out>
>        victim_index = <optimized out>
>        remainder = <optimized out>
>        remainder_size = <optimized out>
>        block = <optimized out>
>        bit = <optimized out>
>        map = <optimized out>
>        fwd = <optimized out>
>        bck = <optimized out>
>        tcache_unsorted_count = <optimized out>
>        tcache_nb = 48
>        tc_idx = 1
>        return_cached = 0
>        __PRETTY_FUNCTION__ = "_int_malloc"
>#5  0x00007f950f50872a in __GI___libc_malloc (bytes=32) at malloc.c:3065
>        ar_ptr = 0x7f94e4000020
>        victim = <optimized out>
>        hook = <optimized out>
>        tbytes = <optimized out>
>        tc_idx = 1
>        __PRETTY_FUNCTION__ = "__libc_malloc"
>#6  0x00007f94efcd6a2d in CRYPTO_zalloc (num=num@entry=32, file=file@entry=0x7f94efd635ac "crypto/buffer/buffer.c", line=line@entry=35) at crypto/mem.c:107
>        ret = <optimized out>
>#7  0x00007f94efc344de in BUF_MEM_new () at crypto/buffer/buffer.c:35
>        ret = <optimized out>
>#8  0x00007f94efd45561 in x509_name_ex_new (val=0x7f94e40124a8, it=<optimized out>) at crypto/x509/x_name.c:98
>        ret = 0x7f94e557c900
>#9  0x00007f94efc06cc5 in asn1_item_embed_new (pval=0x7f94e40124a8, it=0x7f94effe7060 <X509_NAME_it>, embed=0) at crypto/asn1/tasn_new.c:64
>        tt = 0x0
>        ef = <optimized out>
>        aux = <optimized out>
>        asn1_cb = <optimized out>
>        pseqval = <optimized out>
>        i = <optimized out>
>#10 0x00007f94efc069a8 in asn1_template_new (pval=<optimized out>, tt=<optimized out>, tt=<optimized out>) at crypto/asn1/tasn_new.c:240
>        it = <optimized out>
>        embed = <optimized out>
>        tval = 0x7f94e4012498
>        ret = <optimized out>
>#11 0x00007f94efc06bec in asn1_item_embed_new (pval=0x7f94ea59fe60, it=0x7f94effe73a0 <X509_CINF_it>, embed=4096) at crypto/asn1/tasn_new.c:137
>        tt = 0x7f94effee648 <X509_CINF_seq_tt+200>
>        ef = <optimized out>
>        aux = <optimized out>
>        asn1_cb = <optimized out>
>        pseqval = <optimized out>
>        i = 5
>#12 0x00007f94efc069a8 in asn1_template_new (pval=<optimized out>, tt=<optimized out>, tt=<optimized out>) at crypto/asn1/tasn_new.c:240
>        it = <optimized out>
>        embed = <optimized out>
>        tval = 0x7f94e4012460
>        ret = <optimized out>
>#13 0x00007f94efc06bec in asn1_item_embed_new (pval=pval@entry=0x7f94e55abf20, it=it@entry=0x7f94effe7320 <X509_it>, embed=embed@entry=0) at crypto/asn1/tasn_new.c:137
>        tt = 0x7f94effee500 <X509_seq_tt>
>        ef = <optimized out>
>        aux = <optimized out>
>        asn1_cb = <optimized out>
>        pseqval = <optimized out>
>        i = 0
>#14 0x00007f94efc06d3b in ASN1_item_ex_new (pval=pval@entry=0x7f94e55abf20, it=it@entry=0x7f94effe7320 <X509_it>) at crypto/asn1/tasn_new.c:39
>No locals.
>#15 0x00007f94efc0451b in asn1_item_embed_d2i (pval=pval@entry=0x7f94e55abf20, in=0x7f94ea5a0090, len=<optimized out>, it=it@entry=0x7f94effe7320 <X509_it>, tag=<optimized out>, tag@entry=-1, aclass=<optimized out>, aclass@entry=0, opt=0 '\000', ctx=0x7f94ea59ffd0, depth=1) at crypto/asn1/tasn_dec.c:421
>        tt = <optimized out>
>        errtt = 0x0
>        ef = <optimized out>
>        aux = 0x7f94effe7360 <X509_aux>
>        asn1_cb = 0x7f94efd46ab0 <x509_cb>
>        p = 0x7f94e44c0d04 "0\202\003k\240\003\002\001\002\002\017]\223\215\060g6\310\006\035\032\307T\204i\a0\r\006\t*\206H\206\367\r\001\001\v\005"
>        q = <optimized out>
>        oclass = 0 '\000'
>        seq_eoc = 0 '\000'
>        seq_nolen = 0 '\000'
>        cst = 32 ' '
>        isopt = <optimized out>
>        tmplen = 1415
>        i = <optimized out>
>        otag = 0
>        ret = <optimized out>
>        pchptr = <optimized out>
>#16 0x00007f94efc05101 in ASN1_item_ex_d2i (pval=pval@entry=0x7f94e55abf20, in=<optimized out>, len=<optimized out>, it=0x7f94effe7320 <X509_it>, tag=tag@entry=-1, aclass=aclass@entry=0, opt=0 '\000', ctx=0x7f94ea59ffd0) at crypto/asn1/tasn_dec.c:123
>        rv = <optimized out>
>#17 0x00007f94efc0517f in ASN1_item_d2i (pval=0x7f94e55abf20, in=<optimized out>, len=<optimized out>, it=<optimized out>) at crypto/asn1/tasn_dec.c:113
>        c = {valid = 0 '\000', ret = 32, plen = 1411, ptag = 16, pclass = 0, hdrlen = 4}
>        ptmpval = 0x0
>#18 0x00007f94efce79fd in PEM_X509_INFO_read_bio (bp=bp@entry=0x7f94e43b7dd0, sk=sk@entry=0x0, cb=cb@entry=0x0, u=u@entry=0x7f94efd893ff) at crypto/pem/pem_info.c:195
>        cipher = {cipher = 0x0, iv = "\000\353\341\236]y\373\324\021\000\000\000\000\000\000"}
>        xi = 0x7f94e55abf20
>        name = 0x7f94e7e39ca0 "CERTIFICATE"
>        header = 0x7f94e55cabc0 ""
>        pp = <optimized out>
>        data = 0x7f94e44c0d00 "0\202\005\203\060\202\003k\240\003\002\001\002\002\017]\223\215\060g6\310\006\035\032\307T\204i\a0\r\006\t*\206H\206\367\r\001\001\v\005"
>        p = 0x7f94e44c0d00 "0\202\005\203\060\202\003k\240\003\002\001\002\002\017]\223\215\060g6\310\006\035\032\307T\204i\a0\r\006\t*\206H\206\367\r\001\001\v\005"
>        len = 1415
>        error = 0
>        ok = 0
>        ret = 0x7f94e44466f0
>        i = <optimized out>
>        raw = 0
>        ptype = <optimized out>
>        d2i = <optimized out>
>#19 0x00007f94efd36bac in X509_load_cert_crl_file (ctx=0x7f94e55c0ee0, file=<optimized out>, type=<optimized out>) at crypto/x509/by_file.c:204
>        inf = <optimized out>
>        itmp = <optimized out>
>        i = <optimized out>
>        count = <optimized out>
>        in = 0x7f94e43b7dd0
>        file = <optimized out>
>        ctx = 0x7f94e55c0ee0
>        inf = <optimized out>
>        itmp = <optimized out>
>        i = <optimized out>
>        count = <optimized out>
>        in = <optimized out>
>        inf = <optimized out>
>        itmp = <optimized out>
>        in = <optimized out>
>        i = <optimized out>
>#20 0x00007f94efd36cda in by_file_ctrl (ctx=0x7f94e55c0ee0, cmd=<optimized out>, argp=<optimized out>, argl=<optimized out>, ret=<optimized out>) at crypto/x509/by_file.c:67
>        ok = 0
>        file = <optimized out>
>#21 0x00007f94efd399e3 in X509_STORE_load_locations (ctx=0x7f94e55c0f20, file=0x7f94e55994f0 "/etc/pki/tls/certs/ca-bundle.crt", path=0x0) at crypto/x509/x509_d2.c:44
>        lookup = <optimized out>
>#22 0x00007f94fc253d7a in ossl_send () from /lib64/libcurl.so.4
>No symbol table info available.
>#23 0x00007f950f58bbe6 in __GI___clock_gettime (clock_id=1, tp=0x7f94e43167d0) at ../sysdeps/unix/clock_gettime.c:115
>        sc_ret = <optimized out>
>        vdsop = <optimized out>
>        resultvar = <optimized out>
>        __arg2 = <optimized out>
>        __arg1 = <optimized out>
>        _a2 = <optimized out>
>        _a1 = <optimized out>
>        sc_ret = <optimized out>
>        vdsop = <optimized out>
>        resultvar = <optimized out>
>        __arg2 = <optimized out>
>        __arg1 = <optimized out>
>        _a2 = <optimized out>
>        _a1 = <optimized out>
>#24 0x00007f94fc1fd627 in ?? () from /lib64/libcurl.so.4
>No symbol table info available.
>#25 0x0000000000000001 in ?? ()
>No symbol table info available.
>#26 0x0000000000000001 in ?? ()
>No symbol table info available.
>#27 0x0000000000000586 in ?? ()
>No symbol table info available.
>#28 0x0000000022a5f2d6 in ?? ()
>No symbol table info available.
>#29 0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 2 (Thread 0x7f9511391fc0 (LWP 2213)):
>#0  0x00007f950f573589 in __GI___poll (fds=0x555c75a41550, nfds=3, timeout=4442) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f950ff63be6 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x555c75a41550, timeout=<optimized out>, context=0x555c757a23f0) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f950ff73520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=0x555c757a23f0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = 4442
>        some_ready = <optimized out>
>        nfds = 3
>        allocated_nfds = 3
>        fds = 0x555c75a41550
>#3  0x00007f950ff63fa2 in g_main_loop_run (loop=0x555c757a2500) at gmain.c:4099
>        self = <optimized out>
>        __func__ = "g_main_loop_run"
>#4  0x0000555c74faaea6 in main () at pk-main.c:256
>        loop = 0x555c757a2500
>        context = <optimized out>
>        ret = <optimized out>
>        disable_timer = 0
>        version = 0
>        timed_exit = 0
>        immediate_exit = 0
>        keep_environment = 0
>        exit_idle_time = 0
>        timer_id = 0
>        error = 0x0
>        backend_name = 0x0
>        conf_filename = 0x555c757a0100 "/etc/PackageKit/PackageKit.conf"
>        conf = 0x555c7579f400
>        engine = 0x555c757a41a0
>        options = {{long_name = 0x555c74fd4576 "backend", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_STRING, arg_data = 0x7ffe369e6cc8, description = 0x555c74fcd810 "Packaging backend to use, e.g. dummy", arg_description = 0x0}, {long_name = 0x555c74fcd6ab "disable-timer", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffe369e6cac, description = 0x555c74fcd6b9 "Disable the idle timer", arg_description = 0x0}, {long_name = 0x555c74fcd6d0 "version", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffe369e6cb0, description = 0x555c74fcd6d8 "Show version and exit", arg_description = 0x0}, {long_name = 0x555c74fcd6ee "timed-exit", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffe369e6cb4, description = 0x555c74fcd6f9 "Exit after a small delay", arg_description = 0x0}, {long_name = 0x555c74fcd712 "immediate-exit", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffe369e6cb8, description = 0x555c74fcd838 "Exit after the engine has loaded", arg_description = 0x0}, {long_name = 0x555c74fcd721 "keep-environment", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffe369e6cbc, description = 0x555c74fcd860 "Don't clear environment on startup", arg_description = 0x0}, {long_name = 0x0, short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x0, description = 0x0, arg_description = 0x0}}
>        __func__ = "main"
>#5  0x00007f950f4a718b in __libc_start_main (main=0x555c74faaa40 <main>, argc=1, argv=0x7ffe369e6f68, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffe369e6f58) at ../csu/libc-start.c:308
>        self = <optimized out>
>        result = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 5650471888591193163, 93855587938624, 140729814773600, 0, 0, 1958510566111642699, 2015489834911073355}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x7ffe369e6f78, 0x7f95113d5130}, data = {prev = 0x0, cleanup = 0x0, canceltype = 916352888}}}
>        not_first_call = <optimized out>
>#6  0x0000555c74fab16a in _start () at pk-main.c:260
>No symbol table info available.
>
>Thread 3 (Thread 0x7f9500592700 (LWP 2225)):
>#0  0x00007f950f573589 in __GI___poll (fds=0x555c757bf770, nfds=2, timeout=100) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f950ff63be6 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x555c757bf770, timeout=<optimized out>, context=0x555c757bf630) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f950ff73520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=context@entry=0x555c757bf630, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = 100
>        some_ready = <optimized out>
>        nfds = 2
>        allocated_nfds = 2
>        fds = 0x555c757bf770
>#3  0x00007f950ff63d10 in g_main_context_iteration (context=0x555c757bf630, may_block=may_block@entry=1) at gmain.c:3964
>        retval = <optimized out>
>#4  0x00007f950ff63d61 in glib_worker_main (data=<optimized out>) at gmain.c:5773
>No locals.
>#5  0x00007f950ff8bf2a in g_thread_proxy (data=0x555c757bf800) at gthread.c:784
>        thread = 0x555c757bf800
>        __func__ = "g_thread_proxy"
>#6  0x00007f950f84a594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140277932697344, -1958384383751682997, 140729814770510, 140729814770511, 140729814770640, 140729814770640, 2015478984884552779, 2015489261938738251}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f950f57e00f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 4 (Thread 0x7f94ffd91700 (LWP 2226)):
>#0  0x00007f950f573589 in __GI___poll (fds=0x555c757b5f60, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f950ff63be6 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x555c757b5f60, timeout=<optimized out>, context=0x555c757b6480) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f950ff73520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=0x555c757b6480, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 2
>        allocated_nfds = 2
>        fds = 0x555c757b5f60
>#3  0x00007f950ff63fa2 in g_main_loop_run (loop=0x555c757b65c0) at gmain.c:4099
>        self = <optimized out>
>        __func__ = "g_main_loop_run"
>#4  0x00007f95105546ba in gdbus_shared_thread_func (user_data=0x555c757b6450) at gdbusprivate.c:275
>        data = 0x555c757b6450
>#5  0x00007f950ff8bf2a in g_thread_proxy (data=0x555c757bf8a0) at gthread.c:784
>        thread = 0x555c757bf8a0
>        __func__ = "g_thread_proxy"
>#6  0x00007f950f84a594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140277924304640, -1958384383751682997, 140729814770462, 140729814770463, 140729814770592, 140729814770592, 2016368490328294475, 2015489261938738251}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f950f57e00f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 5 (Thread 0x7f94e2ffd700 (LWP 5083)):
>#0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
>No locals.
>#1  0x00007f950ffaa6ee in g_cond_wait_until (cond=cond@entry=0x555c757a93e8, mutex=mutex@entry=0x555c757a93e0, end_time=end_time@entry=1428096370) at gthread-posix.c:1449
>        now = {tv_sec = 1413, tv_nsec = 96371954}
>        span = {tv_sec = 14, tv_nsec = 999998046}
>        sampled = 11
>        res = <optimized out>
>#2  0x00007f950ff360f1 in g_async_queue_pop_intern_unlocked (queue=queue@entry=0x555c757a93e0, wait=wait@entry=1, end_time=end_time@entry=1428096370) at gasyncqueue.c:422
>        retval = <optimized out>
>        __func__ = "g_async_queue_pop_intern_unlocked"
>#3  0x00007f950ff366e0 in g_async_queue_timeout_pop (queue=0x555c757a93e0, timeout=timeout@entry=15000000) at gasyncqueue.c:543
>        end_time = 1428096370
>        retval = <optimized out>
>#4  0x00007f950ff8c9d1 in g_thread_pool_wait_for_new_pool () at gthreadpool.c:167
>        pool = <optimized out>
>        local_max_idle_time = 15000
>        local_wakeup_thread_serial = <optimized out>
>        local_max_unused_threads = <optimized out>
>        last_wakeup_thread_serial = 0
>        have_relayed_thread_marker = <optimized out>
>        pool = <optimized out>
>        local_wakeup_thread_serial = <optimized out>
>        local_max_unused_threads = <optimized out>
>        local_max_idle_time = <optimized out>
>        last_wakeup_thread_serial = <optimized out>
>        have_relayed_thread_marker = <optimized out>
>#5  g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:364
>        free_pool = <optimized out>
>        task = <optimized out>
>        pool = <optimized out>
>#6  0x00007f950ff8bf2a in g_thread_proxy (data=0x555c75a3fad0) at gthread.c:784
>        thread = 0x555c75a3fad0
>        __func__ = "g_thread_proxy"
>#7  0x00007f950f84a594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140277440304896, -1958384383751682997, 140729814766782, 140729814766783, 140729814766912, 140729814766912, 2016396817785095243, 2015489261938738251}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#8  0x00007f950f57e00f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x00007f9510fab140  0x00007f9510fac066  Yes         /lib64/libgmodule-2.0.so.0
>0x00007f9510d5a930  0x00007f9510d8b2bb  Yes         /lib64/libpackagekit-glib2.so.18
>0x00007f9510a505d0  0x00007f9510b143d0  No          /lib64/libsqlite3.so.0
>0x00007f951082caf0  0x00007f9510838ad6  No          /lib64/libpolkit-gobject-1.so.0
>0x00007f95104b94b0  0x00007f95105a10d2  Yes         /lib64/libgio-2.0.so.0
>0x00007f95102397a0  0x00007f951026a660  Yes         /lib64/libgobject-2.0.so.0
>0x00007f950ff320d0  0x00007f950ffad34e  Yes         /lib64/libglib-2.0.so.0
>0x00007f950fc89150  0x00007f950fced9d9  No          /lib64/libsystemd.so.0
>0x00007f950fa64ad0  0x00007f950fa75705  No          /lib64/libgcc_s.so.1
>0x00007f950f848be0  0x00007f950f856801  Yes         /lib64/libpthread.so.0
>0x00007f950f4a5340  0x00007f950f5ec25f  Yes         /lib64/libc.so.6
>0x00007f950f280ee0  0x00007f950f281bbe  Yes         /lib64/libdl.so.2
>0x00007f950f010660  0x00007f950f060b86  Yes         /lib64/libpcre.so.1
>0x00007f950ec869f0  0x00007f950ed38e6a  Yes         /lib64/libm.so.6
>0x00007f950ea66420  0x00007f950ea735f7  Yes         /lib64/libz.so.1
>0x00007f950e85c810  0x00007f950e86129a  Yes         /lib64/libffi.so.6
>0x00007f950e638df0  0x00007f950e65093f  Yes         /lib64/libselinux.so.1
>0x00007f950e41e840  0x00007f950e42a60e  Yes         /lib64/libresolv.so.2
>0x00007f950e1cdee0  0x00007f950e20525e  No          /lib64/libmount.so.1
>0x00007f950dfbb210  0x00007f950dfbe47c  Yes         /lib64/librt.so.1
>0x00007f950dd950b0  0x00007f950ddabf66  Yes         /lib64/liblzma.so.5
>0x00007f950db7cfd0  0x00007f950db8e3db  No          /lib64/liblz4.so.1
>0x00007f950d9775b0  0x00007f950d978e8f  Yes         /lib64/libcap.so.2
>0x00007f950d6665c0  0x00007f950d733bfc  Yes         /lib64/libgcrypt.so.20
>0x00007f95111aef60  0x00007f95111cb910  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f950d3dd160  0x00007f950d437cb3  Yes         /lib64/libpcre2-8.so.0
>0x00007f950d1946f0  0x00007f950d1c527e  No          /lib64/libblkid.so.1
>0x00007f950cf84740  0x00007f950cf88171  No          /lib64/libuuid.so.1
>0x00007f950cd671e0  0x00007f950cd7878e  Yes         /lib64/libgpg-error.so.0
>0x00007f94fed12530  0x00007f94fed173f9  No          /lib64/libnss_sss.so.2
>0x00007f94feb01340  0x00007f94feb075c8  Yes         /lib64/libnss_files.so.2
>0x00007f94ff381180  0x00007f94ff38afa1  Yes         /usr/lib64/packagekit-backend/libpk_backend_dnf.so
>0x00007f94ff12c0e0  0x00007f94ff15d0b7  Yes         /lib64/libappstream-glib.so.8
>0x00007f94fe0dd5f0  0x00007f94fe0f3b4d  Yes         /lib64/libgdk_pixbuf-2.0.so.0
>0x00007f94fdea3950  0x00007f94fdec3d60  Yes         /lib64/libdnf.so.1
>0x00007f94fdc6f2e0  0x00007f94fdc83efd  Yes         /lib64/librepo.so.0
>0x00007f94fda03bf0  0x00007f94fda46fde  No          /lib64/librpm.so.8
>0x00007f94fd7ca300  0x00007f94fd7e1c10  No          /lib64/librpmio.so.8
>0x00007f94fd51c530  0x00007f94fd593a1f  Yes         /lib64/libarchive.so.13
>0x00007f94fd2f9790  0x00007f94fd302b09  No          /lib64/libgcab-1.0.so.0
>0x00007f94fd04b430  0x00007f94fd094b59  Yes         /lib64/libsoup-2.4.so.1
>0x00007f94fcdc2cb0  0x00007f94fcdd725c  Yes         /lib64/libstemmer.so.0
>0x00007f94fcb7a5a0  0x00007f94fcb9ca05  Yes         /lib64/libpng16.so.16
>0x00007f94fc8f4d60  0x00007f94fc9632b5  Yes         /lib64/libsolv.so.0
>0x00007f94fc6bafd0  0x00007f94fc6df846  Yes         /lib64/libsolvext.so.0
>0x00007f94fc47ab50  0x00007f94fc49ae87  Yes         /lib64/libexpat.so.1
>0x00007f94fc2022c0  0x00007f94fc25a00b  Yes (*)     /lib64/libcurl.so.4
>0x00007f94efbdf000  0x00007f94efd596be  Yes         /lib64/libcrypto.so.1.1
>0x00007f94ef933290  0x00007f94ef960872  Yes         /lib64/libgpgme.so.11
>0x00007f94ef71c700  0x00007f94ef7293e6  No          /lib64/libbz2.so.1
>0x00007f94ef505f50  0x00007f94ef515321  No          /lib64/libelf.so.1
>0x00007f94ef281620  0x00007f94ef2f183a  No          /lib64/libzstd.so.1
>0x00007f94ef0724e0  0x00007f94ef079576  Yes         /lib64/libpopt.so.0
>0x00007f94eee68ee0  0x00007f94eee6d191  No          /lib64/libacl.so.1
>0x00007f94eec34dd0  0x00007f94eec57f91  No          /lib64/liblua-5.3.so
>0x00007f94ee89a6b0  0x00007f94ee9dd360  Yes         /lib64/libdb-5.3.so
>0x00007f94ee5317b0  0x00007f94ee61649e  Yes         /lib64/libxml2.so.2
>0x00007f94ee2c0860  0x00007f94ee2f3acf  No          /lib64/libgssapi_krb5.so.2
>0x00007f94ee092d20  0x00007f94ee0a5295  No          /lib64/libnghttp2.so.14
>0x00007f94ede72750  0x00007f94ede762b7  Yes         /lib64/libidn2.so.0
>0x00007f94edc0c3a0  0x00007f94edc3eaf0  Yes         /lib64/libssh.so.4
>0x00007f94ed9f0360  0x00007f94ed9f1dc6  Yes         /lib64/libpsl.so.5
>0x00007f94ed79a450  0x00007f94ed7d2fca  No          /lib64/libssl.so.1.1
>0x00007f94ed4bb3e0  0x00007f94ed526db1  Yes         /lib64/libkrb5.so.3
>0x00007f94ed27e590  0x00007f94ed28ceb4  No          /lib64/libk5crypto.so.3
>0x00007f94ed076500  0x00007f94ed0770d9  No          /lib64/libcom_err.so.2
>0x00007f94ece30d60  0x00007f94ece61780  Yes         /lib64/libldap-2.4.so.2
>0x00007f94ecc15680  0x00007f94ecc1c9ca  Yes         /lib64/liblber-2.4.so.2
>0x00007f94eca026e0  0x00007f94eca0c347  Yes         /lib64/libassuan.so.0
>0x00007f94ec7fb370  0x00007f94ec7fd48e  No          /lib64/libattr.so.1
>0x00007f94ec5eebb0  0x00007f94ec5f61fb  No          /lib64/libkrb5support.so.0
>0x00007f94ec3e85f0  0x00007f94ec3e9378  No          /lib64/libkeyutils.so.1
>0x00007f94ec077a70  0x00007f94ec0abe9e  Yes         /lib64/libunistring.so.2
>0x00007f94ebe4daf0  0x00007f94ebe5ed17  No          /lib64/libsasl2.so.3
>0x00007f94ebc031c0  0x00007f94ebc32973  Yes         /lib64/libssl3.so
>0x00007f94eb9d8330  0x00007f94eb9ed177  Yes         /lib64/libsmime3.so
>0x00007f94eb6bddc0  0x00007f94eb79210b  Yes         /lib64/libnss3.so
>0x00007f94eb4808f0  0x00007f94eb490bbc  Yes         /lib64/libnssutil3.so
>0x00007f94eb270ec0  0x00007f94eb271c0c  Yes         /lib64/libplds4.so
>0x00007f94eb06c4b0  0x00007f94eb06dc01  Yes         /lib64/libplc4.so
>0x00007f94eae37c20  0x00007f94eae595bf  Yes         /lib64/libnspr4.so
>0x00007f94eac03580  0x00007f94eac0d380  Yes         /lib64/libcrypt.so.1
>0x00007f94ea9eb760  0x00007f94ea9f78aa  No          /usr/lib64/gio/modules/libgioremote-volume-monitor.so
>0x00007f94ea7b8a70  0x00007f94ea7d022a  No          /usr/lib64/gvfs/libgvfscommon.so
>0x00007f94ea5a2e80  0x00007f94ea5a37a8  Yes         /lib64/libutil.so.1
>0x00007f94e993ced0  0x00007f94e993e324  Yes         /lib64/libnss_mdns4_minimal.so.2
>0x00007f94e9736fe0  0x00007f94e973a3cb  Yes         /lib64/libnss_dns.so.2
>(*): Shared library is missing debugging information.
>$1 = 0x7f95113a4000 ""
>$2 = 0x0
>rax            0x0	0
>rbx            0x6	6
>rcx            0x7f950f4baf2b	140278183472939
>rdx            0x0	0
>rsi            0x7f94ea59f8f0	140277563652336
>rdi            0x2	2
>rbp            0x7f94ea59fc40	0x7f94ea59fc40
>rsp            0x7f94ea59f8f0	0x7f94ea59f8f0
>r8             0x0	0
>r9             0x7f94ea59f8f0	140277563652336
>r10            0x8	8
>r11            0x246	582
>r12            0x1000	4096
>r13            0x7f94ea59fb60	140277563652960
>r14            0x10	16
>r15            0x7f95113a4000	140278215884800
>rip            0x7f950f4baf2b	0x7f950f4baf2b <__GI_raise+267>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI_raise:
>   0x00007f950f4bae20 <+0>:	push   %rbx
>   0x00007f950f4bae21 <+1>:	mov    $0xffffffffffffffff,%r8
>   0x00007f950f4bae28 <+8>:	mov    %edi,%ebx
>   0x00007f950f4bae2a <+10>:	mov    $0x8,%r10d
>   0x00007f950f4bae30 <+16>:	xor    %edi,%edi
>   0x00007f950f4bae32 <+18>:	sub    $0x110,%rsp
>   0x00007f950f4bae39 <+25>:	mov    %fs:0x28,%rax
>   0x00007f950f4bae42 <+34>:	mov    %rax,0x108(%rsp)
>   0x00007f950f4bae4a <+42>:	xor    %eax,%eax
>   0x00007f950f4bae4c <+44>:	mov    %rsp,%r9
>   0x00007f950f4bae4f <+47>:	movabs $0xfffffffe7fffffff,%rax
>   0x00007f950f4bae59 <+57>:	mov    %r8,0x88(%rsp)
>   0x00007f950f4bae61 <+65>:	mov    %rax,0x80(%rsp)
>   0x00007f950f4bae69 <+73>:	mov    %r9,%rdx
>   0x00007f950f4bae6c <+76>:	lea    0x80(%rsp),%rsi
>   0x00007f950f4bae74 <+84>:	mov    $0xe,%eax
>   0x00007f950f4bae79 <+89>:	mov    %r8,0x90(%rsp)
>   0x00007f950f4bae81 <+97>:	mov    %r8,0x98(%rsp)
>   0x00007f950f4bae89 <+105>:	mov    %r8,0xa0(%rsp)
>   0x00007f950f4bae91 <+113>:	mov    %r8,0xa8(%rsp)
>   0x00007f950f4bae99 <+121>:	mov    %r8,0xb0(%rsp)
>   0x00007f950f4baea1 <+129>:	mov    %r8,0xb8(%rsp)
>   0x00007f950f4baea9 <+137>:	mov    %r8,0xc0(%rsp)
>   0x00007f950f4baeb1 <+145>:	mov    %r8,0xc8(%rsp)
>   0x00007f950f4baeb9 <+153>:	mov    %r8,0xd0(%rsp)
>   0x00007f950f4baec1 <+161>:	mov    %r8,0xd8(%rsp)
>   0x00007f950f4baec9 <+169>:	mov    %r8,0xe0(%rsp)
>   0x00007f950f4baed1 <+177>:	mov    %r8,0xe8(%rsp)
>   0x00007f950f4baed9 <+185>:	mov    %r8,0xf0(%rsp)
>   0x00007f950f4baee1 <+193>:	mov    %r8,0xf8(%rsp)
>   0x00007f950f4baee9 <+201>:	syscall 
>   0x00007f950f4baeeb <+203>:	mov    $0x27,%ecx
>   0x00007f950f4baef0 <+208>:	mov    %ecx,%eax
>   0x00007f950f4baef2 <+210>:	syscall 
>   0x00007f950f4baef4 <+212>:	mov    %rax,%rdi
>   0x00007f950f4baef7 <+215>:	mov    $0xba,%eax
>   0x00007f950f4baefc <+220>:	syscall 
>   0x00007f950f4baefe <+222>:	mov    %eax,%esi
>   0x00007f950f4baf00 <+224>:	mov    %ebx,%edx
>   0x00007f950f4baf02 <+226>:	mov    $0xea,%eax
>   0x00007f950f4baf07 <+231>:	syscall 
>   0x00007f950f4baf09 <+233>:	cmp    $0xfffffffffffff000,%rax
>   0x00007f950f4baf0f <+239>:	ja     0x7f950f4baf50 <__GI_raise+304>
>   0x00007f950f4baf11 <+241>:	mov    %eax,%r8d
>   0x00007f950f4baf14 <+244>:	mov    $0x8,%r10d
>   0x00007f950f4baf1a <+250>:	xor    %edx,%edx
>   0x00007f950f4baf1c <+252>:	mov    %r9,%rsi
>   0x00007f950f4baf1f <+255>:	mov    $0x2,%edi
>   0x00007f950f4baf24 <+260>:	mov    $0xe,%eax
>   0x00007f950f4baf29 <+265>:	syscall 
>=> 0x00007f950f4baf2b <+267>:	mov    0x108(%rsp),%rcx
>   0x00007f950f4baf33 <+275>:	xor    %fs:0x28,%rcx
>   0x00007f950f4baf3c <+284>:	mov    %r8d,%eax
>   0x00007f950f4baf3f <+287>:	jne    0x7f950f4baf5e <__GI_raise+318>
>   0x00007f950f4baf41 <+289>:	add    $0x110,%rsp
>   0x00007f950f4baf48 <+296>:	pop    %rbx
>   0x00007f950f4baf49 <+297>:	retq   
>   0x00007f950f4baf4a <+298>:	nopw   0x0(%rax,%rax,1)
>   0x00007f950f4baf50 <+304>:	mov    0x381f49(%rip),%rdx        # 0x7f950f83cea0
>   0x00007f950f4baf57 <+311>:	neg    %eax
>   0x00007f950f4baf59 <+313>:	mov    %eax,%fs:(%rdx)
>   0x00007f950f4baf5c <+316>:	jmp    0x7f950f4baf14 <__GI_raise+244>
>   0x00007f950f4baf5e <+318>:	callq  0x7f950f58f480 <__stack_chk_fail>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1592012: 1452099 | 1452100 | 1452101 | 1452102 | 1452103 | 1452104 | 1452105 | 1452106 | 1452107 | 1452108 | 1452109 | 1452110