Attachment 1458985 Details for Bug 1601247 – File: backtrace

File: backtrace

backtrace (text/plain), 11.51 KB, created by Jan Vlug on 2018-07-15 13:59:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Vlug

Created: 2018-07-15 13:59:29 UTC

Size: 11.51 KB

patch

obsolete

>[New LWP 1049]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/lib/systemd/systemd-udevd'.
>Program terminated with signal SIGABRT, Aborted.
>#0  0x00007f2929ebacde in __GI_getenv (name=name@entry=0x7f292ae80642 "NOTIFY_SOCKET") at getenv.c:39
>39	  if (__environ == NULL || name[0] == '\0')
>
>Thread 1 (Thread 0x7f292b33e180 (LWP 1049)):
>#0  0x00007f2929ebacde in __GI_getenv (name=name@entry=0x7f292ae80642 "NOTIFY_SOCKET") at getenv.c:39
>        len = <optimized out>
>        ep = <optimized out>
>        name_start = <optimized out>
>#1  0x00007f292ae27b2c in sd_pid_notify_with_fds () at ../src/libsystemd/sd-daemon/sd-daemon.c:493
>        sockaddr = {sa = {sa_family = 1, sa_data = '\000' <repeats 13 times>}, storage = {ss_family = 1, __ss_padding = '\000' <repeats 117 times>, __ss_align = 0}, in = {sin_family = 1, sin_port = 0, sin_addr = {s_addr = 0}, sin_zero = "\000\000\000\000\000\000\000"}, in6 = {sin6_family = 1, sin6_port = 0, sin6_flowinfo = 0, sin6_addr = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}, un = {sun_family = 1, sun_path = '\000' <repeats 107 times>}, nl = {nl_family = 1, nl_pad = 0, nl_pid = 0, nl_groups = 0}, ll = {sll_family = 1, sll_protocol = 0, sll_ifindex = 0, sll_hatype = 0, sll_pkttype = 0 '\000', sll_halen = 0 '\000', sll_addr = "\000\000\000\000\000\000\000"}, vm = {svm_family = 1, svm_reserved1 = 0, svm_port = 0, svm_cid = 0, svm_zero = "\000\000\000"}, ll_buffer = "\001", '\000' <repeats 30 times>, un_buffer = "\001", '\000' <repeats 109 times>}
>        iovec = {iov_base = 0x7f292ae80eda, iov_len = 0}
>        msghdr = {msg_name = 0x7ffe0a6078f0, msg_namelen = 0, msg_iov = 0x7ffe0a6078a0, msg_iovlen = 1, msg_control = 0x0, msg_controllen = 0, msg_flags = 0}
>        fd = -1
>        cmsg = 0x0
>        e = <optimized out>
>        send_ucred = <optimized out>
>        r = <optimized out>
>        __PRETTY_FUNCTION__ = "sd_pid_notify_with_fds"
>#2  0x00007f292ae27fb5 in sd_notify (unset_environment=unset_environment@entry=0, state=state@entry=0x7f292ae80eda "WATCHDOG=1") at ../src/libsystemd/sd-daemon/sd-daemon.c:595
>No locals.
>#3  0x00007f292ae2dcd2 in process_watchdog (e=0x5602efb89db0) at ../src/libsystemd/sd-event/sd-event.c:2479
>        __PRETTY_FUNCTION__ = <optimized out>
>#4  sd_event_wait (e=e@entry=0x5602efb89db0, timeout=timeout@entry=18446744073709551615) at ../src/libsystemd/sd-event/sd-event.c:2605
>        ev_queue = 0x7ffe0a6079c0
>        ev_queue_max = <optimized out>
>        r = <optimized out>
>        m = <optimized out>
>        i = <optimized out>
>        __PRETTY_FUNCTION__ = "sd_event_wait"
>#5  0x00007f292ae2e6bb in sd_event_run (e=e@entry=0x5602efb89db0, timeout=timeout@entry=18446744073709551615) at ../src/libsystemd/sd-event/sd-event.c:2720
>        r = 0
>        __PRETTY_FUNCTION__ = "sd_event_run"
>#6  0x00007f292ae2e84b in sd_event_loop (e=0x5602efb89db0) at ../src/libsystemd/sd-event/sd-event.c:2748
>        r = <optimized out>
>        __PRETTY_FUNCTION__ = "sd_event_loop"
>#7  0x00005602ee3d0d1a in run (cgroup=<optimized out>, fd_uevent=3, fd_ctrl=<optimized out>) at ../src/udev/udevd.c:1633
>        manager = 0x5602efb61670
>        r = 0
>        manager = <optimized out>
>        r = <optimized out>
>        __func__ = "run"
>        _level = <optimized out>
>        _e = <optimized out>
>        _realm = <optimized out>
>        _level = <optimized out>
>        _e = <optimized out>
>        _realm = <optimized out>
>        _level = <optimized out>
>        _e = <optimized out>
>        _realm = <optimized out>
>#8  main () at ../src/udev/udevd.c:1766
>        cgroup = 0x5602efb61640 "/system.slice/systemd-udevd.service"
>        fd_ctrl = <optimized out>
>        fd_uevent = 3
>        r = <optimized out>
>        __func__ = "main"
>        _found = <optimized out>
>        _static_assert__macros_need_to_be_extended = <optimized out>
>#9  0x00007f2929ea518b in __libc_start_main (main=0x5602ee3d0350 <main>, argc=1, argv=0x7ffe0a607d48, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffe0a607d38) at ../csu/libc-start.c:308
>        self = <optimized out>
>        result = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 8141330613996137811, 94570586904880, 140729072516416, 0, 0, 2522606994376928595, 2498475962315222355}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x7ffe0a607d58, 0x7f292b37c130}, data = {prev = 0x0, cleanup = 0x0, canceltype = 174095704}}}
>        not_first_call = <optimized out>
>#10 0x00005602ee3d195a in _start ()
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>0x00007f292ad2f9b0  0x00007f292ae52520  Yes         /usr/lib/systemd/libsystemd-shared-238.so
>0x00007f292aad53c0  0x00007f292aae2c5d  No          /lib64/libkmod.so.2
>0x00007f292a8caf18  0x00007f292a8cf1c9  Yes (*)     /lib64/libacl.so.1
>0x00007f292a6826f0  0x00007f292a6b327e  No          /lib64/libblkid.so.1
>0x00007f292a462ad0  0x00007f292a473705  No          /lib64/libgcc_s.so.1
>0x00007f292a246be0  0x00007f292a254801  Yes         /lib64/libpthread.so.0
>0x00007f2929ea3340  0x00007f2929fea25f  Yes         /lib64/libc.so.6
>0x00007f2929c7c210  0x00007f2929c7f47c  Yes         /lib64/librt.so.1
>0x00007f2929a765b0  0x00007f2929a77e8f  Yes         /lib64/libcap.so.2
>0x00007f292982b780  0x00007f2929860387  No          /lib64/libcryptsetup.so.12
>0x00007f29295155c0  0x00007f29295e2bfc  Yes (*)     /lib64/libgcrypt.so.20
>0x00007f2929303920  0x00007f2929306aaf  No          /lib64/libip4tc.so.0
>0x00007f29290dfaa0  0x00007f29290e8c05  Yes         /lib64/libseccomp.so.2
>0x00007f2928e9ddf0  0x00007f2928eb593f  Yes         /lib64/libselinux.so.1
>0x00007f2928c7b750  0x00007f2928c7f2b7  Yes         /lib64/libidn2.so.0
>0x00007f2928a560b0  0x00007f2928a6cf66  Yes         /lib64/liblzma.so.5
>0x00007f292883dfd0  0x00007f292884f3db  No          /lib64/liblz4.so.1
>0x00007f29285eeee0  0x00007f292862625e  No          /lib64/libmount.so.1
>0x00007f292b155f60  0x00007f292b172910  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f29283cd420  0x00007f29283da5f7  Yes         /lib64/libz.so.1
>0x00007f29281c7368  0x00007f29281c9486  Yes (*)     /lib64/libattr.so.1
>0x00007f2927fbf740  0x00007f2927fc3171  No          /lib64/libuuid.so.1
>0x00007f2927d72650  0x00007f2927da559a  Yes (*)     /lib64/libdevmapper.so.1.02
>0x00007f2927b4b1e0  0x00007f2927b5c7ee  Yes         /lib64/libgpg-error.so.0
>0x00007f292793feb0  0x00007f2927943c7e  No          /lib64/libargon2.so.0
>0x00007f292773bee0  0x00007f292773cbbe  Yes         /lib64/libdl.so.2
>0x00007f292752f700  0x00007f2927536c3b  Yes         /lib64/libjson-c.so.4
>0x00007f29272ee8b0  0x00007f292731045e  Yes         /lib64/libpcap.so.1
>0x00007f292706b160  0x00007f29270c5cb3  Yes (*)     /lib64/libpcre2-8.so.0
>0x00007f2926cf9a70  0x00007f2926d2de9e  Yes         /lib64/libunistring.so.2
>0x00007f2926a3dbd0  0x00007f2926abbfab  Yes         /lib64/libsepol.so.1
>0x00007f2926814e30  0x00007f292682bd61  Yes         /lib64/libudev.so.1
>0x00007f29264889f0  0x00007f292653ae6a  Yes         /lib64/libm.so.6
>0x00007f2925794340  0x00007f292579a5c8  Yes         /lib64/libnss_files.so.2
>(*): Shared library is missing debugging information.
>$1 = 0x0
>rax            0x7ffe0a6078a0	140729072515232
>rbx            0x7f292ae80eda	139814790237914
>rcx            0x0	0
>rdx            0x7f292ae80eda	139814790237914
>rsi            0x1	1
>rdi            0x7f292ae80642	139814790235714
>rbp            0x7ffe0a6079b0	0x7ffe0a6079b0
>rsp            0x7ffe0a607840	0x7ffe0a607840
>r8             0x0	0
>r9             0x7ffe0a6079c0	140729072515520
>r10            0x10116351faa3da	4522717902185434
>r11            0x246	582
>r12            0x1	1
>r13            0x7ffe0a6079cc	140729072515532
>r14            0x7ffe0a6078f0	140729072515312
>r15            0x0	0
>rip            0x7f2929ebacde	0x7f2929ebacde <__GI_getenv+14>
>eflags         0x10202	[ IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI_getenv:
>   0x00007f2929ebacd0 <+0>:	push   %r15
>   0x00007f2929ebacd2 <+2>:	push   %r14
>   0x00007f2929ebacd4 <+4>:	push   %r13
>   0x00007f2929ebacd6 <+6>:	push   %r12
>   0x00007f2929ebacd8 <+8>:	push   %rbp
>   0x00007f2929ebacd9 <+9>:	push   %rbx
>   0x00007f2929ebacda <+10>:	sub    $0x8,%rsp
>=> 0x00007f2929ebacde <+14>:	mov    0x3801f3(%rip),%rax        # 0x7f292a23aed8
>   0x00007f2929ebace5 <+21>:	mov    (%rax),%rbp
>   0x00007f2929ebace8 <+24>:	test   %rbp,%rbp
>   0x00007f2929ebaceb <+27>:	je     0x7f2929ebad98 <__GI_getenv+200>
>   0x00007f2929ebacf1 <+33>:	movzbl (%rdi),%eax
>   0x00007f2929ebacf4 <+36>:	test   %al,%al
>   0x00007f2929ebacf6 <+38>:	je     0x7f2929ebad98 <__GI_getenv+200>
>   0x00007f2929ebacfc <+44>:	cmpb   $0x0,0x1(%rdi)
>   0x00007f2929ebad00 <+48>:	mov    0x0(%rbp),%rbx
>   0x00007f2929ebad04 <+52>:	jne    0x7f2929ebad40 <__GI_getenv+112>
>   0x00007f2929ebad06 <+54>:	or     $0x3d,%ah
>   0x00007f2929ebad09 <+57>:	test   %rbx,%rbx
>   0x00007f2929ebad0c <+60>:	jne    0x7f2929ebad1d <__GI_getenv+77>
>   0x00007f2929ebad0e <+62>:	jmp    0x7f2929ebad26 <__GI_getenv+86>
>   0x00007f2929ebad10 <+64>:	add    $0x8,%rbp
>   0x00007f2929ebad14 <+68>:	mov    0x0(%rbp),%rbx
>   0x00007f2929ebad18 <+72>:	test   %rbx,%rbx
>   0x00007f2929ebad1b <+75>:	je     0x7f2929ebad26 <__GI_getenv+86>
>   0x00007f2929ebad1d <+77>:	cmp    (%rbx),%ax
>   0x00007f2929ebad20 <+80>:	jne    0x7f2929ebad10 <__GI_getenv+64>
>   0x00007f2929ebad22 <+82>:	add    $0x2,%rbx
>   0x00007f2929ebad26 <+86>:	add    $0x8,%rsp
>   0x00007f2929ebad2a <+90>:	mov    %rbx,%rax
>   0x00007f2929ebad2d <+93>:	pop    %rbx
>   0x00007f2929ebad2e <+94>:	pop    %rbp
>   0x00007f2929ebad2f <+95>:	pop    %r12
>   0x00007f2929ebad31 <+97>:	pop    %r13
>   0x00007f2929ebad33 <+99>:	pop    %r14
>   0x00007f2929ebad35 <+101>:	pop    %r15
>   0x00007f2929ebad37 <+103>:	retq   
>   0x00007f2929ebad38 <+104>:	nopl   0x0(%rax,%rax,1)
>   0x00007f2929ebad40 <+112>:	mov    %rdi,%r13
>   0x00007f2929ebad43 <+115>:	callq  0x7f2929ea3170 <*ABS*+0x88100@plt>
>   0x00007f2929ebad48 <+120>:	add    $0x2,%r13
>   0x00007f2929ebad4c <+124>:	movzwl -0x2(%r13),%r12d
>   0x00007f2929ebad51 <+129>:	mov    %rax,%r15
>   0x00007f2929ebad54 <+132>:	lea    -0x2(%rax),%r14
>   0x00007f2929ebad58 <+136>:	test   %rbx,%rbx
>   0x00007f2929ebad5b <+139>:	jne    0x7f2929ebad6d <__GI_getenv+157>
>   0x00007f2929ebad5d <+141>:	jmp    0x7f2929ebad26 <__GI_getenv+86>
>   0x00007f2929ebad5f <+143>:	nop
>   0x00007f2929ebad60 <+144>:	add    $0x8,%rbp
>   0x00007f2929ebad64 <+148>:	mov    0x0(%rbp),%rbx
>   0x00007f2929ebad68 <+152>:	test   %rbx,%rbx
>   0x00007f2929ebad6b <+155>:	je     0x7f2929ebad26 <__GI_getenv+86>
>   0x00007f2929ebad6d <+157>:	cmp    (%rbx),%r12w
>   0x00007f2929ebad71 <+161>:	jne    0x7f2929ebad60 <__GI_getenv+144>
>   0x00007f2929ebad73 <+163>:	lea    0x2(%rbx),%rdi
>   0x00007f2929ebad77 <+167>:	mov    %r14,%rdx
>   0x00007f2929ebad7a <+170>:	mov    %r13,%rsi
>   0x00007f2929ebad7d <+173>:	callq  0x7f2929ea3280 <*ABS*+0x88190@plt>
>   0x00007f2929ebad82 <+178>:	test   %eax,%eax
>   0x00007f2929ebad84 <+180>:	jne    0x7f2929ebad60 <__GI_getenv+144>
>   0x00007f2929ebad86 <+182>:	cmpb   $0x3d,(%rbx,%r15,1)
>   0x00007f2929ebad8b <+187>:	jne    0x7f2929ebad60 <__GI_getenv+144>
>   0x00007f2929ebad8d <+189>:	lea    0x1(%rbx,%r15,1),%rbx
>   0x00007f2929ebad92 <+194>:	jmp    0x7f2929ebad26 <__GI_getenv+86>
>   0x00007f2929ebad94 <+196>:	nopl   0x0(%rax)
>   0x00007f2929ebad98 <+200>:	xor    %ebx,%ebx
>   0x00007f2929ebad9a <+202>:	jmp    0x7f2929ebad26 <__GI_getenv+86>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1601247: 1458985 | 1458986 | 1458987 | 1458988 | 1458989 | 1458990 | 1458991 | 1458992 | 1458993 | 1458994 | 1458995