Attachment 1470223 Details for Bug 1607764 – File: backtrace

File: backtrace

backtrace (text/plain), 8.14 KB, created by Jan Vlug on 2018-07-24 08:27:57 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Vlug

Created: 2018-07-24 08:27:57 UTC

Size: 8.14 KB

patch

obsolete

>[New LWP 1031]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/lib/systemd/systemd-logind'.
>Program terminated with signal SIGABRT, Aborted.
>#0  0x00007ff9c324b361 in epoll_wait (epfd=4, events=events@entry=0x7ffddf024010, maxevents=<optimized out>, timeout=-1) at ../sysdeps/unix/sysv/linux/epoll_wait.c:30
>30	  return SYSCALL_CANCEL (epoll_wait, epfd, events, maxevents, timeout);
>
>Thread 1 (Thread 0x7ff9c41999c0 (LWP 1031)):
>#0  0x00007ff9c324b361 in epoll_wait (epfd=4, events=events@entry=0x7ffddf024010, maxevents=<optimized out>, timeout=-1) at ../sysdeps/unix/sysv/linux/epoll_wait.c:30
>        resultvar = <optimized out>
>        sc_ret = <optimized out>
>#1  0x00007ff9c3c94903 in sd_event_wait (e=e@entry=0x56316b1b1ca0, timeout=timeout@entry=18446744073709551615) at ../src/libsystemd/sd-event/sd-event.c:2560
>        ev_queue = 0x7ffddf024010
>        ev_queue_max = <optimized out>
>        r = <optimized out>
>        m = <optimized out>
>        i = <optimized out>
>        __PRETTY_FUNCTION__ = "sd_event_wait"
>#2  0x00007ff9c3c956bb in sd_event_run (e=0x56316b1b1ca0, timeout=timeout@entry=18446744073709551615) at ../src/libsystemd/sd-event/sd-event.c:2720
>        r = 0
>        __PRETTY_FUNCTION__ = "sd_event_run"
>#3  0x0000563168fac01d in manager_run (m=0x56316b1b0a90) at ../src/login/logind.c:1207
>        r = <optimized out>
>        r = <optimized out>
>        __PRETTY_FUNCTION__ = <optimized out>
>#4  main () at ../src/login/logind.c:1265
>        m = 0x56316b1b0a90
>        r = <optimized out>
>        __func__ = "main"
>#5  0x00007ff9c317418b in __libc_start_main (main=0x563168fab4d0 <main>, argc=1, argv=0x7ffddf024468, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffddf024458) at ../csu/libc-start.c:308
>        self = <optimized out>
>        result = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 7685295169699012960, 94770214655616, 140728344921184, 0, 0, 4124955038152876384, 4122747399236575584}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x7ffddf024478, 0x7ff9c41e2130}, data = {prev = 0x0, cleanup = 0x0, canceltype = -553499528}}}
>        not_first_call = <optimized out>
>#6  0x0000563168fad6aa in _start () at ../src/login/logind.c:952
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>0x00007ff9c3b969b0  0x00007ff9c3cb9520  Yes         /usr/lib/systemd/libsystemd-shared-238.so
>0x00007ff9c3948ee0  0x00007ff9c394d191  No          /lib64/libacl.so.1
>0x00007ff9c3731ad0  0x00007ff9c3742705  No          /lib64/libgcc_s.so.1
>0x00007ff9c3515be0  0x00007ff9c3523801  Yes         /lib64/libpthread.so.0
>0x00007ff9c3172340  0x00007ff9c32b925f  Yes         /lib64/libc.so.6
>0x00007ff9c3fbbf60  0x00007ff9c3fd8910  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007ff9c2f4b210  0x00007ff9c2f4e47c  Yes         /lib64/librt.so.1
>0x00007ff9c2d455b0  0x00007ff9c2d46e8f  Yes         /lib64/libcap.so.2
>0x00007ff9c2afa780  0x00007ff9c2b2f387  No          /lib64/libcryptsetup.so.12
>0x00007ff9c27e45c0  0x00007ff9c28b1bfc  Yes (*)     /lib64/libgcrypt.so.20
>0x00007ff9c25d2920  0x00007ff9c25d5aaf  No          /lib64/libip4tc.so.0
>0x00007ff9c23aeaa0  0x00007ff9c23b7c05  Yes         /lib64/libseccomp.so.2
>0x00007ff9c216cdf0  0x00007ff9c218493f  Yes         /lib64/libselinux.so.1
>0x00007ff9c1f4a750  0x00007ff9c1f4e2b7  Yes         /lib64/libidn2.so.0
>0x00007ff9c1d250b0  0x00007ff9c1d3bf66  Yes         /lib64/liblzma.so.5
>0x00007ff9c1b0cfd0  0x00007ff9c1b1e3db  No          /lib64/liblz4.so.1
>0x00007ff9c18c46f0  0x00007ff9c18f527e  No          /lib64/libblkid.so.1
>0x00007ff9c166cee0  0x00007ff9c16a425e  No          /lib64/libmount.so.1
>0x00007ff9c145c370  0x00007ff9c145e48e  No          /lib64/libattr.so.1
>0x00007ff9c1255740  0x00007ff9c1259171  No          /lib64/libuuid.so.1
>0x00007ff9c1008650  0x00007ff9c103b59a  No          /lib64/libdevmapper.so.1.02
>0x00007ff9c0de11e0  0x00007ff9c0df27ee  Yes (*)     /lib64/libgpg-error.so.0
>0x00007ff9c0bd5eb0  0x00007ff9c0bd9c7e  No          /lib64/libargon2.so.0
>0x00007ff9c09d1ee0  0x00007ff9c09d2bbe  Yes         /lib64/libdl.so.2
>0x00007ff9c07c5700  0x00007ff9c07ccc3b  Yes         /lib64/libjson-c.so.4
>0x00007ff9c05848b0  0x00007ff9c05a645e  Yes (*)     /lib64/libpcap.so.1
>0x00007ff9c0301160  0x00007ff9c035bcb3  Yes         /lib64/libpcre2-8.so.0
>0x00007ff9bff8fa70  0x00007ff9bffc3e9e  Yes         /lib64/libunistring.so.2
>0x00007ff9bfcd3bd0  0x00007ff9bfd51fab  Yes         /lib64/libsepol.so.1
>0x00007ff9bfaaae30  0x00007ff9bfac1d61  Yes         /lib64/libudev.so.1
>0x00007ff9bf71e9f0  0x00007ff9bf7d0e6a  Yes         /lib64/libm.so.6
>0x00007ff9bf503340  0x00007ff9bf5095c8  Yes         /lib64/libnss_files.so.2
>(*): Shared library is missing debugging information.
>$1 = 0x0
>rax            0x4	4
>rbx            0x56316b1b1ca0	94770250325152
>rcx            0x7ff9c324b2f7	140710697546487
>rdx            0xfffffffffffffe58	-424
>rsi            0x7ffddf024010	140728344920080
>rdi            0x4	4
>rbp            0x7ffddf024210	0x7ffddf024210
>rsp            0x7ffddf024008	0x7ffddf024008
>r8             0x7	7
>r9             0x7ffddf024010	140728344920080
>r10            0xffffffff	4294967295
>r11            0x246	582
>r12            0x1	1
>r13            0x7ffddf024010	140728344920080
>r14            0xffffffffffffffff	-1
>r15            0x0	0
>rip            0x7ff9c324b361	0x7ff9c324b361 <epoll_wait+129>
>eflags         0x10213	[ CF AF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function epoll_wait:
>   0x00007ff9c324b2e0 <+0>:	lea    0x2c46f1(%rip),%rax        # 0x7ff9c350f9d8 <__libc_multiple_threads>
>   0x00007ff9c324b2e7 <+7>:	mov    %ecx,%r10d
>   0x00007ff9c324b2ea <+10>:	mov    (%rax),%eax
>   0x00007ff9c324b2ec <+12>:	test   %eax,%eax
>   0x00007ff9c324b2ee <+14>:	jne    0x7ff9c324b300 <epoll_wait+32>
>   0x00007ff9c324b2f0 <+16>:	mov    $0xe8,%eax
>   0x00007ff9c324b2f5 <+21>:	syscall 
>   0x00007ff9c324b2f7 <+23>:	cmp    $0xfffffffffffff000,%rax
>   0x00007ff9c324b2fd <+29>:	ja     0x7ff9c324b358 <epoll_wait+120>
>   0x00007ff9c324b2ff <+31>:	retq   
>   0x00007ff9c324b300 <+32>:	push   %r13
>   0x00007ff9c324b302 <+34>:	mov    %ecx,%r13d
>   0x00007ff9c324b305 <+37>:	push   %r12
>   0x00007ff9c324b307 <+39>:	mov    %edx,%r12d
>   0x00007ff9c324b30a <+42>:	push   %rbp
>   0x00007ff9c324b30b <+43>:	mov    %rsi,%rbp
>   0x00007ff9c324b30e <+46>:	push   %rbx
>   0x00007ff9c324b30f <+47>:	mov    %edi,%ebx
>   0x00007ff9c324b311 <+49>:	sub    $0x18,%rsp
>   0x00007ff9c324b315 <+53>:	callq  0x7ff9c3258470 <__libc_enable_asynccancel>
>   0x00007ff9c324b31a <+58>:	mov    %r13d,%r10d
>   0x00007ff9c324b31d <+61>:	mov    %r12d,%edx
>   0x00007ff9c324b320 <+64>:	mov    %rbp,%rsi
>   0x00007ff9c324b323 <+67>:	mov    %eax,%r8d
>   0x00007ff9c324b326 <+70>:	mov    %ebx,%edi
>   0x00007ff9c324b328 <+72>:	mov    $0xe8,%eax
>   0x00007ff9c324b32d <+77>:	syscall 
>   0x00007ff9c324b32f <+79>:	cmp    $0xfffffffffffff000,%rax
>   0x00007ff9c324b335 <+85>:	ja     0x7ff9c324b36a <epoll_wait+138>
>   0x00007ff9c324b337 <+87>:	mov    %r8d,%edi
>   0x00007ff9c324b33a <+90>:	mov    %eax,0xc(%rsp)
>   0x00007ff9c324b33e <+94>:	callq  0x7ff9c32584d0 <__libc_disable_asynccancel>
>   0x00007ff9c324b343 <+99>:	mov    0xc(%rsp),%eax
>   0x00007ff9c324b347 <+103>:	add    $0x18,%rsp
>   0x00007ff9c324b34b <+107>:	pop    %rbx
>   0x00007ff9c324b34c <+108>:	pop    %rbp
>   0x00007ff9c324b34d <+109>:	pop    %r12
>   0x00007ff9c324b34f <+111>:	pop    %r13
>   0x00007ff9c324b351 <+113>:	retq   
>   0x00007ff9c324b352 <+114>:	nopw   0x0(%rax,%rax,1)
>   0x00007ff9c324b358 <+120>:	mov    0x2beb41(%rip),%rdx        # 0x7ff9c3509ea0
>   0x00007ff9c324b35f <+127>:	neg    %eax
>=> 0x00007ff9c324b361 <+129>:	mov    %eax,%fs:(%rdx)
>   0x00007ff9c324b364 <+132>:	mov    $0xffffffff,%eax
>   0x00007ff9c324b369 <+137>:	retq   
>   0x00007ff9c324b36a <+138>:	mov    0x2beb2f(%rip),%rdx        # 0x7ff9c3509ea0
>   0x00007ff9c324b371 <+145>:	neg    %eax
>   0x00007ff9c324b373 <+147>:	mov    %eax,%fs:(%rdx)
>   0x00007ff9c324b376 <+150>:	mov    $0xffffffff,%eax
>   0x00007ff9c324b37b <+155>:	jmp    0x7ff9c324b337 <epoll_wait+87>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1607764: 1470223 | 1470224 | 1470225 | 1470226 | 1470227 | 1470228 | 1470229 | 1470230 | 1470231 | 1470232 | 1470233 | 1470234