Attachment 1453551 Details for Bug 1593831 – File: backtrace

File: backtrace

backtrace (text/plain), 13.12 KB, created by Luca Giuzzi on 2018-06-21 16:03:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Luca Giuzzi

Created: 2018-06-21 16:03:29 UTC

Size: 13.12 KB

patch

obsolete

>[New LWP 527]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/lib/systemd/systemd-udevd'.
>Program terminated with signal SIGABRT, Aborted.
>#0  0x00007f7fa939241b in __libc_open64 (file=0x55f9bb0e3260 "/dev/sdg", oflag=oflag@entry=657408) at ../sysdeps/unix/sysv/linux/open64.c:47
>47	  return SYSCALL_CANCEL (openat, AT_FDCWD, file, oflag | EXTRA_OPEN_FLAGS,
>
>Thread 1 (Thread 0x7f7faa45d180 (LWP 527)):
>#0  0x00007f7fa939241b in __libc_open64 (file=0x55f9bb0e3260 "/dev/sdg", oflag=oflag@entry=657408) at ../sysdeps/unix/sysv/linux/open64.c:47
>        resultvar = 14
>        sc_ret = <optimized out>
>        mode = 0
>#1  0x000055f9b976a12e in open64 (__oflag=657408, __path=<optimized out>) at /usr/include/bits/fcntl2.h:53
>No locals.
>#2  synthesize_change (dev=0x55f9bb0f0480) at ../src/udev/udevd.c:1033
>        part_table_read = false
>        has_partitions = false
>        fd = <optimized out>
>        udev = 0x55f9bb0dd9f0
>        e = 0x0
>        item = <optimized out>
>        filename = "p*\020\273\371U\000\000\262\207\324<g\000\000\000\340\244\022\273\371U\000\000J!\356\251\003\000\000\000:C\000\000\000\000\000\000\220C\361\261\376\177\000\000p*\020\273\371U\000\000\000\234\024[\211,\375W:C\000\000\000\000\000\000\340\244\022\273\371U\000\000\340\071\022\273\371U\000\000p*\020\273\371U\000\000\340\244\022\273\371U\000\000:C\000\000\000\000\000\000P\247\021\273\371U\000\000p|v\271\371U\000\000\340\244\022\273\371U\000\000\b|v\271\371U\000\000\262\362\031\062g\000\000\000\000\234\024[\211,\375W\320E\361\261\376\177\000\000\060\331\r\273\371U\000\000\320E\361\261\376\177\000\000\204\211v\271\371U\000\000\360\000\000\000\000\000\000\000\000"...
>        r = <optimized out>
>        filename = <optimized out>
>        r = <optimized out>
>        __func__ = "synthesize_change"
>        part_table_read = <optimized out>
>        has_partitions = <optimized out>
>        fd = <optimized out>
>        udev = <optimized out>
>        e = <optimized out>
>        item = <optimized out>
>        d = <optimized out>
>        _level = <optimized out>
>        _e = <optimized out>
>        _realm = <optimized out>
>        d = <optimized out>
>        _level = <optimized out>
>        _e = <optimized out>
>        _realm = <optimized out>
>        _level = <optimized out>
>        _e = <optimized out>
>        _realm = <optimized out>
>#3  on_inotify () at ../src/udev/udevd.c:1142
>        dev = <optimized out>
>        manager = 0x55f9bb0dd930
>        buffer = {ev = {wd = 34, mask = 8, cookie = 0, len = 0, name = 0x7ffeb1f14240 "\020"}, raw = "\"\000\000\000\b", '\000' <repeats 11 times>, "\020\000\000\000\000\200\000\000\200\260\b\273\371U\000\000\357\000\000\000\000\000\000\000 \001\000\000\000\000\000\000\350\376\377\377\377\377\377\377\004\000\000\000\000\000\000\000\020\000\000\000\064", '\000' <repeats 19 times>, "[\000\000\000n", '\000' <repeats 11 times>, "|\000\000\000w\000\000\000\001\002\000\000\000\000\000\000@\274\067\251\177\177\000\000\360\000\000\000\000\000\000\000p#\002\000\000\000\000\000\330\t8\251\177\177\000\000\220\334*\273\371U\000\000\340\071\022\273\371U\000\000\232t\004\251\177\177\000\000\001\000\000\000\000\000\000\000lV\357\251\177\177\000\000 \250\017\273\371U\000\000"...}
>        e = 0x7ffeb1f14230
>        l = <optimized out>
>        __PRETTY_FUNCTION__ = "on_inotify"
>        __func__ = "on_inotify"
>#4  0x00007f7fa9f6ccb8 in source_dispatch (s=s@entry=0x55f9bb1007b0) at ../src/libsystemd/sd-event/sd-event.c:2307
>        saved_type = SOURCE_IO
>        r = <optimized out>
>        __PRETTY_FUNCTION__ = "source_dispatch"
>        __func__ = "source_dispatch"
>        _found = <optimized out>
>        _static_assert__macros_need_to_be_extended = <optimized out>
>#5  0x00007f7fa9f6e48c in sd_event_dispatch (e=e@entry=0x55f9bb1239e0) at ../src/libsystemd/sd-event/sd-event.c:2667
>        p = <optimized out>
>        r = <optimized out>
>        __PRETTY_FUNCTION__ = "sd_event_dispatch"
>#6  0x00007f7fa9f6e630 in sd_event_run (e=e@entry=0x55f9bb1239e0, timeout=timeout@entry=18446744073709551615) at ../src/libsystemd/sd-event/sd-event.c:2727
>        r = 1
>        __PRETTY_FUNCTION__ = "sd_event_run"
>#7  0x00007f7fa9f6e84b in sd_event_loop (e=0x55f9bb1239e0) at ../src/libsystemd/sd-event/sd-event.c:2748
>        r = <optimized out>
>        __PRETTY_FUNCTION__ = "sd_event_loop"
>#8  0x000055f9b9766d1a in run (cgroup=<optimized out>, fd_uevent=3, fd_ctrl=<optimized out>) at ../src/udev/udevd.c:1633
>        manager = 0x55f9bb0dd930
>        r = 0
>        manager = <optimized out>
>        r = <optimized out>
>        __func__ = "run"
>        _level = <optimized out>
>        _e = <optimized out>
>        _realm = <optimized out>
>        _level = <optimized out>
>        _e = <optimized out>
>        _realm = <optimized out>
>        _level = <optimized out>
>        _e = <optimized out>
>        _realm = <optimized out>
>#9  main () at ../src/udev/udevd.c:1766
>        cgroup = 0x55f9bb0dd900 "/system.slice/systemd-udevd.service"
>        fd_ctrl = <optimized out>
>        fd_uevent = 3
>        r = <optimized out>
>        __func__ = "main"
>        _found = <optimized out>
>        _static_assert__macros_need_to_be_extended = <optimized out>
>#10 0x00007f7fa8fe518b in __libc_start_main (main=0x55f9b9766350 <main>, argc=1, argv=0x7ffeb1f14a18, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffeb1f14a08) at ../csu/libc-start.c:308
>        self = <optimized out>
>        result = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 8853168372751240390, 94531046766896, 140731883801104, 0, 0, 3373992891313523910, 3445507387004914886}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x7ffeb1f14a28, 0x7f7faa4bb130}, data = {prev = 0x0, cleanup = 0x0, canceltype = -1309586904}}}
>        not_first_call = <optimized out>
>#11 0x000055f9b976795a in _start ()
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>0x00007f7fa9e6f9b0  0x00007f7fa9f92520  Yes         /usr/lib/systemd/libsystemd-shared-238.so
>0x00007f7fa9c153c0  0x00007f7fa9c22c5d  No          /lib64/libkmod.so.2
>0x00007f7fa9a0aee0  0x00007f7fa9a0f191  No          /lib64/libacl.so.1
>0x00007f7fa97c26f0  0x00007f7fa97f327e  No          /lib64/libblkid.so.1
>0x00007f7fa95a2ad0  0x00007f7fa95b3705  No          /lib64/libgcc_s.so.1
>0x00007f7fa9386be0  0x00007f7fa9394801  Yes         /lib64/libpthread.so.0
>0x00007f7fa8fe3340  0x00007f7fa912a25f  Yes         /lib64/libc.so.6
>0x00007f7fa8dbc210  0x00007f7fa8dbf47c  Yes         /lib64/librt.so.1
>0x00007f7fa8bb65b0  0x00007f7fa8bb7e8f  Yes         /lib64/libcap.so.2
>0x00007f7fa896b780  0x00007f7fa89a0387  No          /lib64/libcryptsetup.so.12
>0x00007f7fa86555c0  0x00007f7fa8722bfc  Yes         /lib64/libgcrypt.so.20
>0x00007f7fa8443920  0x00007f7fa8446aaf  No          /lib64/libip4tc.so.0
>0x00007f7fa821faa0  0x00007f7fa8228c05  Yes         /lib64/libseccomp.so.2
>0x00007f7fa7fdddf0  0x00007f7fa7ff593f  Yes         /lib64/libselinux.so.1
>0x00007f7fa7dbb750  0x00007f7fa7dbf2b7  Yes         /lib64/libidn2.so.0
>0x00007f7fa7b960b0  0x00007f7fa7bacf66  Yes         /lib64/liblzma.so.5
>0x00007f7fa797dfd0  0x00007f7fa798f3db  No          /lib64/liblz4.so.1
>0x00007f7fa772eee0  0x00007f7fa776625e  No          /lib64/libmount.so.1
>0x00007f7faa294f60  0x00007f7faa2b1910  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f7fa750d420  0x00007f7fa751a5f7  Yes         /lib64/libz.so.1
>0x00007f7fa7307370  0x00007f7fa730948e  No          /lib64/libattr.so.1
>0x00007f7fa7100740  0x00007f7fa7104171  No          /lib64/libuuid.so.1
>0x00007f7fa6eb3650  0x00007f7fa6ee659a  No          /lib64/libdevmapper.so.1.02
>0x00007f7fa6c8c1e0  0x00007f7fa6c9d78e  Yes         /lib64/libgpg-error.so.0
>0x00007f7fa6a80eb0  0x00007f7fa6a84c7e  No          /lib64/libargon2.so.0
>0x00007f7fa687cee0  0x00007f7fa687dbbe  Yes         /lib64/libdl.so.2
>0x00007f7fa6670700  0x00007f7fa6677c3b  Yes         /lib64/libjson-c.so.4
>0x00007f7fa642f880  0x00007f7fa645133e  Yes         /lib64/libpcap.so.1
>0x00007f7fa61ac160  0x00007f7fa6206cb3  Yes         /lib64/libpcre2-8.so.0
>0x00007f7fa5e3aab0  0x00007f7fa5e6eede  Yes (*)     /lib64/libunistring.so.2
>0x00007f7fa5b7fbd0  0x00007f7fa5bfdfab  Yes         /lib64/libsepol.so.1
>0x00007f7fa5956e30  0x00007f7fa596dd61  Yes         /lib64/libudev.so.1
>0x00007f7fa55ca9f0  0x00007f7fa567ce6a  Yes         /lib64/libm.so.6
>0x00007f7fa48d4340  0x00007f7fa48da5c8  Yes         /lib64/libnss_files.so.2
>(*): Shared library is missing debugging information.
>$1 = 0x0
>rax            0xe	14
>rbx            0x7ffeb1f14230	140731883799088
>rcx            0x7f7fa939241b	140186276668443
>rdx            0xa0800	657408
>rsi            0x55f9bb0e3260	94531073487456
>rdi            0xffffff9c	4294967196
>rbp            0x7ffeb1f14780	0x7ffeb1f14780
>rsp            0x7ffeb1f14190	0x7ffeb1f14190
>r8             0x7f7fa9fba400	140186289415168
>r9             0x2	2
>r10            0x0	0
>r11            0x246	582
>r12            0x55f9bb0dd930	94531073464624
>r13            0x7ffeb1f14240	140731883799104
>r14            0x7ffeb1f14340	140731883799360
>r15            0x55f9b978532d	94531046888237
>rip            0x7f7fa939241b	0x7f7fa939241b <__libc_open64+75>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __libc_open64:
>   0x00007f7fa93923d0 <+0>:	sub    $0x68,%rsp
>   0x00007f7fa93923d4 <+4>:	mov    %esi,%r10d
>   0x00007f7fa93923d7 <+7>:	mov    %rdx,0x40(%rsp)
>   0x00007f7fa93923dc <+12>:	mov    %fs:0x28,%rax
>   0x00007f7fa93923e5 <+21>:	mov    %rax,0x28(%rsp)
>   0x00007f7fa93923ea <+26>:	xor    %eax,%eax
>   0x00007f7fa93923ec <+28>:	and    $0x40,%r10d
>   0x00007f7fa93923f0 <+32>:	jne    0x7f7fa9392440 <__libc_open64+112>
>   0x00007f7fa93923f2 <+34>:	mov    %esi,%eax
>   0x00007f7fa93923f4 <+36>:	and    $0x410000,%eax
>   0x00007f7fa93923f9 <+41>:	cmp    $0x410000,%eax
>   0x00007f7fa93923fe <+46>:	je     0x7f7fa9392440 <__libc_open64+112>
>   0x00007f7fa9392400 <+48>:	mov    0x20cffa(%rip),%eax        # 0x7f7fa959f400 <__pthread_multiple_threads>
>   0x00007f7fa9392406 <+54>:	test   %eax,%eax
>   0x00007f7fa9392408 <+56>:	jne    0x7f7fa939246b <__libc_open64+155>
>   0x00007f7fa939240a <+58>:	mov    %esi,%edx
>   0x00007f7fa939240c <+60>:	mov    $0x101,%eax
>   0x00007f7fa9392411 <+65>:	mov    %rdi,%rsi
>   0x00007f7fa9392414 <+68>:	mov    $0xffffff9c,%edi
>   0x00007f7fa9392419 <+73>:	syscall 
>=> 0x00007f7fa939241b <+75>:	cmp    $0xfffffffffffff000,%rax
>   0x00007f7fa9392421 <+81>:	ja     0x7f7fa93924c0 <__libc_open64+240>
>   0x00007f7fa9392427 <+87>:	mov    0x28(%rsp),%rcx
>   0x00007f7fa939242c <+92>:	xor    %fs:0x28,%rcx
>   0x00007f7fa9392435 <+101>:	jne    0x7f7fa93924e9 <__libc_open64+281>
>   0x00007f7fa939243b <+107>:	add    $0x68,%rsp
>   0x00007f7fa939243f <+111>:	retq   
>   0x00007f7fa9392440 <+112>:	lea    0x70(%rsp),%rax
>   0x00007f7fa9392445 <+117>:	movl   $0x10,0x10(%rsp)
>   0x00007f7fa939244d <+125>:	mov    0x40(%rsp),%r10d
>   0x00007f7fa9392452 <+130>:	mov    %rax,0x18(%rsp)
>   0x00007f7fa9392457 <+135>:	lea    0x30(%rsp),%rax
>   0x00007f7fa939245c <+140>:	mov    %rax,0x20(%rsp)
>   0x00007f7fa9392461 <+145>:	mov    0x20cf99(%rip),%eax        # 0x7f7fa959f400 <__pthread_multiple_threads>
>   0x00007f7fa9392467 <+151>:	test   %eax,%eax
>   0x00007f7fa9392469 <+153>:	je     0x7f7fa939240a <__libc_open64+58>
>   0x00007f7fa939246b <+155>:	mov    %esi,0xc(%rsp)
>   0x00007f7fa939246f <+159>:	mov    %rdi,(%rsp)
>   0x00007f7fa9392473 <+163>:	mov    %r10d,0x8(%rsp)
>   0x00007f7fa9392478 <+168>:	callq  0x7f7fa93916f0 <__pthread_enable_asynccancel>
>   0x00007f7fa939247d <+173>:	mov    0xc(%rsp),%esi
>   0x00007f7fa9392481 <+177>:	mov    (%rsp),%rdi
>   0x00007f7fa9392485 <+181>:	mov    %eax,%r8d
>   0x00007f7fa9392488 <+184>:	mov    0x8(%rsp),%r10d
>   0x00007f7fa939248d <+189>:	mov    $0x101,%eax
>   0x00007f7fa9392492 <+194>:	mov    %esi,%edx
>   0x00007f7fa9392494 <+196>:	mov    %rdi,%rsi
>   0x00007f7fa9392497 <+199>:	mov    $0xffffff9c,%edi
>   0x00007f7fa939249c <+204>:	syscall 
>   0x00007f7fa939249e <+206>:	cmp    $0xfffffffffffff000,%rax
>   0x00007f7fa93924a4 <+212>:	ja     0x7f7fa93924d6 <__libc_open64+262>
>   0x00007f7fa93924a6 <+214>:	mov    %r8d,%edi
>   0x00007f7fa93924a9 <+217>:	mov    %eax,0x8(%rsp)
>   0x00007f7fa93924ad <+221>:	callq  0x7f7fa9391750 <__pthread_disable_asynccancel>
>   0x00007f7fa93924b2 <+226>:	mov    0x8(%rsp),%eax
>   0x00007f7fa93924b6 <+230>:	jmpq   0x7f7fa9392427 <__libc_open64+87>
>   0x00007f7fa93924bb <+235>:	nopl   0x0(%rax,%rax,1)
>   0x00007f7fa93924c0 <+240>:	mov    0x208ad9(%rip),%rdx        # 0x7f7fa959afa0
>   0x00007f7fa93924c7 <+247>:	neg    %eax
>   0x00007f7fa93924c9 <+249>:	mov    %eax,%fs:(%rdx)
>   0x00007f7fa93924cc <+252>:	mov    $0xffffffff,%eax
>   0x00007f7fa93924d1 <+257>:	jmpq   0x7f7fa9392427 <__libc_open64+87>
>   0x00007f7fa93924d6 <+262>:	mov    0x208ac3(%rip),%rdx        # 0x7f7fa959afa0
>   0x00007f7fa93924dd <+269>:	neg    %eax
>   0x00007f7fa93924df <+271>:	mov    %eax,%fs:(%rdx)
>   0x00007f7fa93924e2 <+274>:	mov    $0xffffffff,%eax
>   0x00007f7fa93924e7 <+279>:	jmp    0x7f7fa93924a6 <__libc_open64+214>
>   0x00007f7fa93924e9 <+281>:	callq  0x7f7fa9386800 <__stack_chk_fail@plt>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1593831: 1453551 | 1453552 | 1453553 | 1453554 | 1453555 | 1453556 | 1453557 | 1453558 | 1453559 | 1453560 | 1453561