Attachment 1458650 Details for Bug 1600829 – File: backtrace

File: backtrace

backtrace (text/plain), 6.20 KB, created by Matej Marušák on 2018-07-13 07:01:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Matej Marušák

Created: 2018-07-13 07:01:56 UTC

Size: 6.20 KB

patch

obsolete

>[New LWP 31852]
>Core was generated by `will_abort'.
>Program terminated with signal SIGABRT, Aborted.
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>50	  return ret;
>
>Thread 1 (LWP 31852):
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>        set = {__val = {0, 140386800034743, 0, 94276782325760, 624, 18446744073709547520, 140386805473280, 0, 140734645849888, 0, 0, 140386803408032, 35, 140386803407936, 37, 592}}
>        pid = <optimized out>
>        tid = <optimized out>
>        ret = <optimized out>
>#1  0x00007fae5952d561 in __GI_abort () at abort.c:79
>        save_stage = 1
>        act = {__sigaction_handler = {sa_handler = 0x1, sa_sigaction = 0x1}, sa_mask = {__val = {4294967304592, 5, 34823, 0, 1024, 0, 1529934560, 212653590, 1529934560, 212653590, 1529930320, 212653590, 0, 0, 0, 94276750913995}}, sa_flags = 1498969517, sa_restorer = 0x7fae598c1780 <_IO_helper_jumps>}
>        sigs = {__val = {32, 0 <repeats 15 times>}}
>#2  0x000055be843fab75 in a (s=<optimized out>) at will_abort.c:25
>        idx = <optimized out>
>#3  0x000055be843fae28 in a () at will_abort.c:25
>        idx = <optimized out>
>#4  0x000055be843fae28 in a () at will_abort.c:25
>        idx = <optimized out>
>#5  0x000055be843fae28 in a () at will_abort.c:25
>        idx = <optimized out>
>#6  0x000055be843fae28 in a () at will_abort.c:25
>        idx = <optimized out>
>#7  0x000055be843fae28 in a () at will_abort.c:25
>        idx = <optimized out>
>#8  0x000055be843fae28 in a () at will_abort.c:25
>        idx = <optimized out>
>#9  0x000055be843fae28 in a () at will_abort.c:25
>        idx = <optimized out>
>#10 0x000055be843fae28 in a () at will_abort.c:25
>        idx = <optimized out>
>#11 0x000055be843fae28 in a () at will_abort.c:25
>        idx = <optimized out>
>#12 0x000055be843fae28 in a () at will_abort.c:25
>        idx = <optimized out>
>#13 0x000055be843faca6 in main (argc=<optimized out>, argv=<optimized out>) at will_abort.c:70
>        arr = "\000\000\000\000\000\000\000\000\205\260?\204\276U\000"
>        str = 0x55be843fb188 "pampelmuse"
>From                To                  Syms Read   Shared Object Library
>0x00007fae5952d340  0x00007fae5967425f  Yes         /lib64/libc.so.6
>0x00007fae598cbf60  0x00007fae598e8910  Yes         /lib64/ld-linux-x86-64.so.2
>$1 = 0x0
>rax            0x0	0
>rbx            0x6	6
>rcx            0x7fae59542f2b	140386799726379
>rdx            0x0	0
>rsi            0x7fff5692ce30	140734645849648
>rdi            0x2	2
>rbp            0x55be843fb040	0x55be843fb040 <__libc_csu_init>
>rsp            0x7fff5692ce30	0x7fff5692ce30
>r8             0x0	0
>r9             0x7fff5692ce30	140734645849648
>r10            0x8	8
>r11            0x246	582
>r12            0x55be843fb188	94276750913928
>r13            0x7fff5692d250	140734645850704
>r14            0x0	0
>r15            0x0	0
>rip            0x7fae59542f2b	0x7fae59542f2b <__GI_raise+267>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI_raise:
>   0x00007fae59542e20 <+0>:	push   %rbx
>   0x00007fae59542e21 <+1>:	mov    $0xffffffffffffffff,%r8
>   0x00007fae59542e28 <+8>:	mov    %edi,%ebx
>   0x00007fae59542e2a <+10>:	mov    $0x8,%r10d
>   0x00007fae59542e30 <+16>:	xor    %edi,%edi
>   0x00007fae59542e32 <+18>:	sub    $0x110,%rsp
>   0x00007fae59542e39 <+25>:	mov    %fs:0x28,%rax
>   0x00007fae59542e42 <+34>:	mov    %rax,0x108(%rsp)
>   0x00007fae59542e4a <+42>:	xor    %eax,%eax
>   0x00007fae59542e4c <+44>:	mov    %rsp,%r9
>   0x00007fae59542e4f <+47>:	movabs $0xfffffffe7fffffff,%rax
>   0x00007fae59542e59 <+57>:	mov    %r8,0x88(%rsp)
>   0x00007fae59542e61 <+65>:	mov    %rax,0x80(%rsp)
>   0x00007fae59542e69 <+73>:	mov    %r9,%rdx
>   0x00007fae59542e6c <+76>:	lea    0x80(%rsp),%rsi
>   0x00007fae59542e74 <+84>:	mov    $0xe,%eax
>   0x00007fae59542e79 <+89>:	mov    %r8,0x90(%rsp)
>   0x00007fae59542e81 <+97>:	mov    %r8,0x98(%rsp)
>   0x00007fae59542e89 <+105>:	mov    %r8,0xa0(%rsp)
>   0x00007fae59542e91 <+113>:	mov    %r8,0xa8(%rsp)
>   0x00007fae59542e99 <+121>:	mov    %r8,0xb0(%rsp)
>   0x00007fae59542ea1 <+129>:	mov    %r8,0xb8(%rsp)
>   0x00007fae59542ea9 <+137>:	mov    %r8,0xc0(%rsp)
>   0x00007fae59542eb1 <+145>:	mov    %r8,0xc8(%rsp)
>   0x00007fae59542eb9 <+153>:	mov    %r8,0xd0(%rsp)
>   0x00007fae59542ec1 <+161>:	mov    %r8,0xd8(%rsp)
>   0x00007fae59542ec9 <+169>:	mov    %r8,0xe0(%rsp)
>   0x00007fae59542ed1 <+177>:	mov    %r8,0xe8(%rsp)
>   0x00007fae59542ed9 <+185>:	mov    %r8,0xf0(%rsp)
>   0x00007fae59542ee1 <+193>:	mov    %r8,0xf8(%rsp)
>   0x00007fae59542ee9 <+201>:	syscall 
>   0x00007fae59542eeb <+203>:	mov    $0x27,%ecx
>   0x00007fae59542ef0 <+208>:	mov    %ecx,%eax
>   0x00007fae59542ef2 <+210>:	syscall 
>   0x00007fae59542ef4 <+212>:	mov    %rax,%rdi
>   0x00007fae59542ef7 <+215>:	mov    $0xba,%eax
>   0x00007fae59542efc <+220>:	syscall 
>   0x00007fae59542efe <+222>:	mov    %eax,%esi
>   0x00007fae59542f00 <+224>:	mov    %ebx,%edx
>   0x00007fae59542f02 <+226>:	mov    $0xea,%eax
>   0x00007fae59542f07 <+231>:	syscall 
>   0x00007fae59542f09 <+233>:	cmp    $0xfffffffffffff000,%rax
>   0x00007fae59542f0f <+239>:	ja     0x7fae59542f50 <__GI_raise+304>
>   0x00007fae59542f11 <+241>:	mov    %eax,%r8d
>   0x00007fae59542f14 <+244>:	mov    $0x8,%r10d
>   0x00007fae59542f1a <+250>:	xor    %edx,%edx
>   0x00007fae59542f1c <+252>:	mov    %r9,%rsi
>   0x00007fae59542f1f <+255>:	mov    $0x2,%edi
>   0x00007fae59542f24 <+260>:	mov    $0xe,%eax
>   0x00007fae59542f29 <+265>:	syscall 
>=> 0x00007fae59542f2b <+267>:	mov    0x108(%rsp),%rcx
>   0x00007fae59542f33 <+275>:	xor    %fs:0x28,%rcx
>   0x00007fae59542f3c <+284>:	mov    %r8d,%eax
>   0x00007fae59542f3f <+287>:	jne    0x7fae59542f5e <__GI_raise+318>
>   0x00007fae59542f41 <+289>:	add    $0x110,%rsp
>   0x00007fae59542f48 <+296>:	pop    %rbx
>   0x00007fae59542f49 <+297>:	retq   
>   0x00007fae59542f4a <+298>:	nopw   0x0(%rax,%rax,1)
>   0x00007fae59542f50 <+304>:	mov    0x381f49(%rip),%rdx        # 0x7fae598c4ea0
>   0x00007fae59542f57 <+311>:	neg    %eax
>   0x00007fae59542f59 <+313>:	mov    %eax,%fs:(%rdx)
>   0x00007fae59542f5c <+316>:	jmp    0x7fae59542f14 <__GI_raise+244>
>   0x00007fae59542f5e <+318>:	callq  0x7fae59617480 <__stack_chk_fail>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1600829: 1458650 | 1458651 | 1458652 | 1458653 | 1458654 | 1458655 | 1458656 | 1458657 | 1458658 | 1458659 | 1458660 | 1458661