Attachment 1469937 Details for Bug 1607410 – File: backtrace

File: backtrace

backtrace (text/plain), 14.14 KB, created by Alex Gluck on 2018-07-23 13:16:25 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Alex Gluck

Created: 2018-07-23 13:16:25 UTC

Size: 14.14 KB

patch

obsolete

>[New LWP 1593]
>[New LWP 1602]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/Xorg vt2 -displayfd 3 -auth /run/user/1000/gdm/Xauthority -backgro'.
>Program terminated with signal SIGABRT, Aborted.
>#0  0x00007f0c45ae4feb in __GI___libc_sigaction (sig=2, act=0x7ffc90e92ad0, oact=0x0) at ../sysdeps/unix/sysv/linux/x86_64/sigaction.c:53
>53	      kact.k_sa_handler = act->sa_handler;
>[Current thread is 1 (Thread 0x7f0c4891eac0 (LWP 1593))]
>
>Thread 1 (Thread 0x7f0c4891eac0 (LWP 1593)):
>#0  0x00007f0c45ae4feb in __GI___libc_sigaction (sig=2, act=0x7ffc90e92ad0, oact=0x0) at ../sysdeps/unix/sysv/linux/x86_64/sigaction.c:53
>        result = <optimized out>
>        kact = {k_sa_handler = 0xa392400, sa_flags = 0, sa_restorer = 0x0, sa_mask = {__val = {0, 0, 0, 0, 0, 0, 0, 0, 9805331776908979200, 4, 18717664, 0, 139690729490985, 18446744067267100671, 18446744073709551615, 18446744073709551615}}}
>        koact = {k_sa_handler = 0xffffffffffffffff, sa_flags = 18446744073709551615, sa_restorer = 0xffffffffffffffff, sa_mask = {__val = {18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 0, 9805331776908979200, 1, 139690685298113, 32, 0, 0}}}
>#1  0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 2 (Thread 0x7f0c3c9b1700 (LWP 1602)):
>#0  __lll_lock_wait () at ../sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:135
>No locals.
>#1  0x00007f0c45e76d94 in __GI___pthread_mutex_lock (mutex=0x82fec0) at ../nptl/pthread_mutex_lock.c:113
>        ignore1 = <optimized out>
>        ignore2 = <optimized out>
>        ignore3 = <optimized out>
>        id = 1602
>        type = 1
>        __PRETTY_FUNCTION__ = "__pthread_mutex_lock"
>        id = <optimized out>
>#2  0x000000000059b614 in ?? ()
>No symbol table info available.
>#3  0x0000000000000015 in ?? ()
>No symbol table info available.
>#4  0x000000000059b8a5 in ?? ()
>No symbol table info available.
>#5  0x00007f0c3c9afe90 in ?? ()
>No symbol table info available.
>#6  0x0000000000000001 in ?? ()
>No symbol table info available.
>#7  0x0000000001bfde90 in ?? ()
>No symbol table info available.
>#8  0x000000000059ded1 in ?? ()
>No symbol table info available.
>#9  0x38008b7000000001 in ?? ()
>No symbol table info available.
>#10 0x0000000100007f0c in ?? ()
>No symbol table info available.
>#11 0x00007f0c38008b70 in ?? ()
>No symbol table info available.
>#12 0x0000000000000000 in ?? ()
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>0x00007f0c484eda90  0x00007f0c4851a1c5  No          /lib64/libdbus-1.so.3
>0x00007f0c482bce30  0x00007f0c482d3d61  No          /lib64/libudev.so.1
>0x00007f0c48096df0  0x00007f0c480ae93f  Yes         /lib64/libselinux.so.1
>0x00007f0c47c6f000  0x00007f0c47de96be  Yes         /lib64/libcrypto.so.1.1
>0x00007f0c47a00ee0  0x00007f0c47a01bbe  Yes         /lib64/libdl.so.2
>0x00007f0c477e7580  0x00007f0c477ee505  Yes         /lib64/libunwind.so.8
>0x00007f0c475de2e0  0x00007f0c475e2661  Yes         /lib64/libpciaccess.so.0
>0x00007f0c473cdf10  0x00007f0c473d6e0f  Yes         /lib64/libdrm.so.2
>0x00007f0c4712e520  0x00007f0c471b15c4  Yes         /lib64/libpixman-1.so.0
>0x00007f0c46ef9210  0x00007f0c46f16eff  Yes         /lib64/libXfont2.so.2
>0x00007f0c46cf0e70  0x00007f0c46cf1b5e  Yes         /lib64/libXau.so.6
>0x00007f0c46a62150  0x00007f0c46ac69d9  No          /lib64/libsystemd.so.0
>0x00007f0c468509b0  0x00007f0c46850c60  Yes         /lib64/libxshmfence.so.1
>0x00007f0c4664b450  0x00007f0c4664cd3b  Yes         /lib64/libXdmcp.so.6
>0x00007f0c46423210  0x00007f0c46429e53  Yes (*)     /lib64/libaudit.so.1
>0x00007f0c460979f0  0x00007f0c46149e6a  Yes         /lib64/libm.so.6
>0x00007f0c45e72be0  0x00007f0c45e80801  Yes         /lib64/libpthread.so.0
>0x00007f0c45acf320  0x00007f0c45c1623f  Yes         /lib64/libc.so.6
>0x00007f0c458a8210  0x00007f0c458ab47c  Yes         /lib64/librt.so.1
>0x00007f0c45658ee0  0x00007f0c4569025e  Yes (*)     /lib64/libmount.so.1
>0x00007f0c45436ad0  0x00007f0c45447705  Yes (*)     /lib64/libgcc_s.so.1
>0x00007f0c48732f60  0x00007f0c4874f910  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f0c451b6160  0x00007f0c45210cb3  Yes (*)     /lib64/libpcre2-8.so.0
>0x00007f0c44f9f420  0x00007f0c44fac5f7  Yes         /lib64/libz.so.1
>0x00007f0c44d975a0  0x00007f0c44d99523  Yes         /lib64/libfontenc.so.1
>0x00007f0c44aeb6d0  0x00007f0c44b65643  Yes         /lib64/libfreetype.so.6
>0x00007f0c448bb0b0  0x00007f0c448d1f66  Yes         /lib64/liblzma.so.5
>0x00007f0c446a2fd0  0x00007f0c446b43db  No          /lib64/liblz4.so.1
>0x00007f0c4449d5b0  0x00007f0c4449ee8f  Yes         /lib64/libcap.so.2
>0x00007f0c4418c5c0  0x00007f0c44259bfc  Yes (*)     /lib64/libgcrypt.so.20
>0x00007f0c43f7c5e0  0x00007f0c43f7e419  Yes         /lib64/libcap-ng.so.0
>0x00007f0c43d346d0  0x00007f0c43d6525e  Yes (*)     /lib64/libblkid.so.1
>0x00007f0c43b24740  0x00007f0c43b28171  Yes (*)     /lib64/libuuid.so.1
>0x00007f0c43913700  0x00007f0c439203e6  No          /lib64/libbz2.so.1
>0x00007f0c436e35a0  0x00007f0c43705a05  Yes         /lib64/libpng16.so.16
>0x00007f0c434c21e0  0x00007f0c434d37ee  Yes         /lib64/libgpg-error.so.0
>0x00007f0c43285b80  0x00007f0c432a7d3f  No          /usr/lib64/xorg/modules/extensions/libglx.so
>                                        No          /lib64/libGL.so.1
>                                        No          /lib64/libGLX.so.0
>0x00007f0c42a95f50  0x00007f0c42b1e9a6  Yes         /lib64/libX11.so.6
>0x00007f0c42869710  0x00007f0c42873853  Yes         /lib64/libXext.so.6
>                                        No          /lib64/libGLdispatch.so.0
>0x00007f0c42392a40  0x00007f0c423a5699  Yes         /lib64/libxcb.so.1
>0x00007f0c42176d50  0x00007f0c4218185a  No          /usr/lib64/xorg/modules/drivers/modesetting_drv.so
>0x00007f0c419318e0  0x00007f0c41951275  No          /usr/lib64/xorg/modules/libglamoregl.so
>                                        No          /lib64/libgbm.so.1
>0x00007f0c41448f00  0x00007f0c414aee5d  Yes         /lib64/libepoxy.so.0
>0x00007f0c411b3b50  0x00007f0c411d3e87  Yes         /lib64/libexpat.so.1
>0x00007f0c40fa2840  0x00007f0c40fa8f25  No          /lib64/libwayland-server.so.0
>0x00007f0c40d94810  0x00007f0c40d9929a  Yes         /lib64/libffi.so.6
>                                        No          /lib64/libglapi.so.0
>                                        No          /usr/lib64/dri/i965_dri.so
>0x00007f0c3fdca000  0x00007f0c3fddf431  Yes         /lib64/libdrm_intel.so.1
>0x00007f0c3fbbf9e0  0x00007f0c3fbc38ec  Yes         /lib64/libdrm_nouveau.so.2
>0x00007f0c3f9b3760  0x00007f0c3f9bb122  Yes         /lib64/libdrm_radeon.so.1
>0x00007f0c3f6ac590  0x00007f0c3f76268e  Yes (*)     /lib64/libstdc++.so.6
>                                        No          /lib64/libEGL.so.1
>                                        No          /lib64/libEGL_mesa.so.0
>0x00007f0c3efce8d0  0x00007f0c3efcfb39  Yes         /lib64/libxcb-dri2.so.0
>0x00007f0c3edcb590  0x00007f0c3edcb66f  Yes         /lib64/libX11-xcb.so.1
>0x00007f0c3ebc75c0  0x00007f0c3ebc84c7  Yes         /lib64/libxcb-dri3.so.0
>0x00007f0c3e9c0c00  0x00007f0c3e9c342e  Yes         /lib64/libxcb-xfixes.so.0
>0x00007f0c3e7bbd90  0x00007f0c3e7bc66a  Yes         /lib64/libxcb-present.so.0
>0x00007f0c3e5b6270  0x00007f0c3e5b8526  Yes         /lib64/libxcb-sync.so.1
>0x00007f0c3e3aa3c0  0x00007f0c3e3af2d5  No          /lib64/libwayland-client.so.0
>0x00007f0c3e1870d0  0x00007f0c3e19f673  No          /usr/lib64/xorg/modules/libfb.so
>0x00007f0c41e8f1d0  0x00007f0c41e9744e  Yes         /usr/lib64/xorg/modules/input/libinput_drv.so
>                                        No          /lib64/libinput.so.10
>0x00007f0c3df7cfa0  0x00007f0c3df7f538  Yes         /lib64/libmtdev.so.1
>                                        No          /lib64/libevdev.so.2
>0x00007f0c3db5a260  0x00007f0c3db5e59a  Yes         /lib64/libwacom.so.2
>0x00007f0c3d94f9a0  0x00007f0c3d952bf6  Yes         /lib64/libgudev-1.0.so.0
>0x00007f0c3d7047a0  0x00007f0c3d735660  Yes (*)     /lib64/libgobject-2.0.so.0
>0x00007f0c3d3fd0d0  0x00007f0c3d47834e  Yes (*)     /lib64/libglib-2.0.so.0
>0x00007f0c3d0764b0  0x00007f0c3d15e0d2  Yes (*)     /lib64/libgio-2.0.so.0
>0x00007f0c3cdce660  0x00007f0c3ce1eb86  Yes (*)     /lib64/libpcre.so.1
>0x00007f0c3cbca140  0x00007f0c3cbcb066  Yes (*)     /lib64/libgmodule-2.0.so.0
>0x00007f0c3c9b5840  0x00007f0c3c9c160e  Yes         /lib64/libresolv.so.2
>                                        No          /lib64/libnss_sss.so.2
>(*): Shared library is missing debugging information.
>$1 = 0x0
>$2 = 0x0
>rax            0x0	0
>rbx            0x6	6
>rcx            0x7f0c45ae4feb	139690685386731
>rdx            0x0	0
>rsi            0x7ffc90e92ad0	140722739686096
>rdi            0x2	2
>rbp            0x7ffc90e92d70	0x7ffc90e92d70
>rsp            0x7ffc90e92ad0	0x7ffc90e92ad0
>r8             0x0	0
>r9             0x7ffc90e92ad0	140722739686096
>r10            0x8	8
>r11            0x246	582
>r12            0x7f0c484dd9b0	139690729396656
>r13            0x4891ea01	1217522177
>r14            0x22289a4	35817892
>r15            0x7ffc90e936d8	140722739689176
>rip            0x7f0c45ae4feb	0x7f0c45ae4feb <__GI___libc_sigaction+75>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI___libc_sigaction:
>   0x00007f0c45ae4fa0 <+0>:	sub    $0x148,%rsp
>   0x00007f0c45ae4fa7 <+7>:	mov    %rdx,%r8
>   0x00007f0c45ae4faa <+10>:	mov    %fs:0x28,%rax
>   0x00007f0c45ae4fb3 <+19>:	mov    %rax,0x138(%rsp)
>   0x00007f0c45ae4fbb <+27>:	xor    %eax,%eax
>   0x00007f0c45ae4fbd <+29>:	test   %rsi,%rsi
>   0x00007f0c45ae4fc0 <+32>:	je     0x7f0c45ae5138 <__GI___libc_sigaction+408>
>   0x00007f0c45ae4fc6 <+38>:	mov    (%rsi),%rax
>   0x00007f0c45ae4fc9 <+41>:	movdqu 0x8(%rsi),%xmm0
>   0x00007f0c45ae4fce <+46>:	mov    %rsp,%rcx
>   0x00007f0c45ae4fd1 <+49>:	lea    0xa0(%rsp),%rdx
>   0x00007f0c45ae4fd9 <+57>:	movdqu 0x18(%rsi),%xmm1
>   0x00007f0c45ae4fde <+62>:	movdqu 0x28(%rsi),%xmm2
>   0x00007f0c45ae4fe3 <+67>:	movdqu 0x38(%rsi),%xmm3
>   0x00007f0c45ae4fe8 <+72>:	movdqu 0x48(%rsi),%xmm4
>   0x00007f0c45ae4fed <+77>:	mov    %rax,(%rsp)
>   0x00007f0c45ae4ff1 <+81>:	mov    0x88(%rsi),%eax
>   0x00007f0c45ae4ff7 <+87>:	movdqu 0x58(%rsi),%xmm5
>   0x00007f0c45ae4ffc <+92>:	movups %xmm0,0x18(%rsp)
>   0x00007f0c45ae5001 <+97>:	movdqu 0x68(%rsi),%xmm6
>   0x00007f0c45ae5006 <+102>:	movdqu 0x78(%rsi),%xmm7
>   0x00007f0c45ae500b <+107>:	movups %xmm1,0x28(%rcx)
>   0x00007f0c45ae500f <+111>:	mov    %rcx,%rsi
>   0x00007f0c45ae5012 <+114>:	or     $0x4000000,%eax
>   0x00007f0c45ae5017 <+119>:	test   %r8,%r8
>   0x00007f0c45ae501a <+122>:	movups %xmm2,0x38(%rcx)
>   0x00007f0c45ae501e <+126>:	cltq   
>   0x00007f0c45ae5020 <+128>:	movups %xmm3,0x48(%rcx)
>   0x00007f0c45ae5024 <+132>:	mov    %rax,0x8(%rsp)
>   0x00007f0c45ae5029 <+137>:	lea    -0xa0(%rip),%rax        # 0x7f0c45ae4f90 <__restore_rt>
>   0x00007f0c45ae5030 <+144>:	mov    %rax,0x10(%rsp)
>   0x00007f0c45ae5035 <+149>:	mov    $0x0,%eax
>   0x00007f0c45ae503a <+154>:	cmove  %rax,%rdx
>   0x00007f0c45ae503e <+158>:	movups %xmm4,0x58(%rcx)
>   0x00007f0c45ae5042 <+162>:	movups %xmm5,0x68(%rcx)
>   0x00007f0c45ae5046 <+166>:	movups %xmm6,0x78(%rcx)
>   0x00007f0c45ae504a <+170>:	movups %xmm7,0x88(%rcx)
>   0x00007f0c45ae5051 <+177>:	mov    $0xd,%ecx
>   0x00007f0c45ae5056 <+182>:	mov    $0x8,%r10d
>   0x00007f0c45ae505c <+188>:	mov    %ecx,%eax
>   0x00007f0c45ae505e <+190>:	syscall 
>   0x00007f0c45ae5060 <+192>:	mov    %rax,%rdx
>   0x00007f0c45ae5063 <+195>:	cmp    $0xfffffffffffff000,%rax
>   0x00007f0c45ae5069 <+201>:	ja     0x7f0c45ae5158 <__GI___libc_sigaction+440>
>   0x00007f0c45ae506f <+207>:	test   %r8,%r8
>   0x00007f0c45ae5072 <+210>:	je     0x7f0c45ae5119 <__GI___libc_sigaction+377>
>   0x00007f0c45ae5078 <+216>:	test   %eax,%eax
>   0x00007f0c45ae507a <+218>:	js     0x7f0c45ae5119 <__GI___libc_sigaction+377>
>   0x00007f0c45ae5080 <+224>:	mov    0xa0(%rsp),%rdx
>   0x00007f0c45ae5088 <+232>:	movdqu 0xb8(%rsp),%xmm0
>   0x00007f0c45ae5091 <+241>:	movdqu 0xc8(%rsp),%xmm1
>   0x00007f0c45ae509a <+250>:	movdqu 0xd8(%rsp),%xmm2
>   0x00007f0c45ae50a3 <+259>:	movdqu 0xe8(%rsp),%xmm3
>   0x00007f0c45ae50ac <+268>:	mov    %rdx,(%r8)
>   0x00007f0c45ae50af <+271>:	mov    0xa8(%rsp),%rdx
>   0x00007f0c45ae50b7 <+279>:	movups %xmm0,0x8(%r8)
>   0x00007f0c45ae50bc <+284>:	movdqu 0xf8(%rsp),%xmm4
>   0x00007f0c45ae50c5 <+293>:	movdqu 0x108(%rsp),%xmm5
>   0x00007f0c45ae50ce <+302>:	movups %xmm1,0x18(%r8)
>   0x00007f0c45ae50d3 <+307>:	movdqu 0x118(%rsp),%xmm6
>   0x00007f0c45ae50dc <+316>:	movdqu 0x128(%rsp),%xmm7
>   0x00007f0c45ae50e5 <+325>:	mov    %edx,0x88(%r8)
>   0x00007f0c45ae50ec <+332>:	mov    0xb0(%rsp),%rdx
>   0x00007f0c45ae50f4 <+340>:	movups %xmm2,0x28(%r8)
>   0x00007f0c45ae50f9 <+345>:	movups %xmm3,0x38(%r8)
>   0x00007f0c45ae50fe <+350>:	mov    %rdx,0x90(%r8)
>   0x00007f0c45ae5105 <+357>:	movups %xmm4,0x48(%r8)
>   0x00007f0c45ae510a <+362>:	movups %xmm5,0x58(%r8)
>   0x00007f0c45ae510f <+367>:	movups %xmm6,0x68(%r8)
>   0x00007f0c45ae5114 <+372>:	movups %xmm7,0x78(%r8)
>   0x00007f0c45ae5119 <+377>:	mov    0x138(%rsp),%rcx
>   0x00007f0c45ae5121 <+385>:	xor    %fs:0x28,%rcx
>   0x00007f0c45ae512a <+394>:	jne    0x7f0c45ae516b <__GI___libc_sigaction+459>
>   0x00007f0c45ae512c <+396>:	add    $0x148,%rsp
>   0x00007f0c45ae5133 <+403>:	retq   
>   0x00007f0c45ae5134 <+404>:	nopl   0x0(%rax)
>   0x00007f0c45ae5138 <+408>:	xor    %edx,%edx
>   0x00007f0c45ae513a <+410>:	xor    %esi,%esi
>   0x00007f0c45ae513c <+412>:	test   %r8,%r8
>   0x00007f0c45ae513f <+415>:	je     0x7f0c45ae5051 <__GI___libc_sigaction+177>
>   0x00007f0c45ae5145 <+421>:	lea    0xa0(%rsp),%rdx
>   0x00007f0c45ae514d <+429>:	xor    %esi,%esi
>   0x00007f0c45ae514f <+431>:	jmpq   0x7f0c45ae5051 <__GI___libc_sigaction+177>
>   0x00007f0c45ae5154 <+436>:	nopl   0x0(%rax)
>   0x00007f0c45ae5158 <+440>:	mov    0x381d21(%rip),%rax        # 0x7f0c45e66e80
>   0x00007f0c45ae515f <+447>:	neg    %edx
>   0x00007f0c45ae5161 <+449>:	mov    %edx,%fs:(%rax)
>   0x00007f0c45ae5164 <+452>:	mov    $0xffffffff,%eax
>   0x00007f0c45ae5169 <+457>:	jmp    0x7f0c45ae5119 <__GI___libc_sigaction+377>
>   0x00007f0c45ae516b <+459>:	callq  0x7f0c45bb9460 <__stack_chk_fail>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1607410: 1469937 | 1469938 | 1469939 | 1469940 | 1469941 | 1469942 | 1469943 | 1469944 | 1469945 | 1469946 | 1469947 | 1471545 | 1475562