Attachment 1475562 Details for Bug 1607410 – File: backtrace

File: backtrace

backtrace (text/plain), 10.35 KB, created by Mike on 2018-08-13 12:07:59 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mike

Created: 2018-08-13 12:07:59 UTC

Size: 10.35 KB

patch

obsolete

>[New LWP 1318]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/bin/Xwayland :1024 -rootless -terminate -accessx -core -listen 4 -listen 5'.
>Program terminated with signal SIGABRT, Aborted.
>#0  0x00007f2707ac5feb in __GI___libc_sigaction (sig=2, act=0x7ffe50c1f060, oact=0x0) at ../sysdeps/unix/sysv/linux/x86_64/sigaction.c:53
>53	      kact.k_sa_handler = act->sa_handler;
>
>Thread 1 (Thread 0x7f270ae77ac0 (LWP 1318)):
>#0  0x00007f2707ac5feb in __GI___libc_sigaction (sig=2, act=0x7ffe50c1f060, oact=0x0) at ../sysdeps/unix/sysv/linux/x86_64/sigaction.c:53
>        result = <optimized out>
>        kact = {k_sa_handler = 0xa392000, sa_flags = 0, sa_restorer = 0x0, sa_mask = {__val = {0, 0, 0, 0, 0, 139805612965824, 0, 0, 0, 2, 9223372036854775822, 0, 0, 18446744067267100671, 18446744073709551615, 18446744073709551615}}}
>        koact = {k_sa_handler = 0xffffffffffffffff, sa_flags = 18446744073709551615, sa_restorer = 0xffffffffffffffff, sa_mask = {__val = {18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 18446744073709551615, 0, 3198620311241923328, 5922810, 139805609100737, 32, 0, 0}}}
>#1  0x0000000000000000 in ?? ()
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>0x00007f270aa5bdf0  0x00007f270aa7393f  Yes         /lib64/libselinux.so.1
>0x00007f270a634000  0x00007f270a7ae6be  Yes         /lib64/libcrypto.so.1.1
>0x00007f270a3c5ee0  0x00007f270a3c6bbe  Yes         /lib64/libdl.so.2
>0x00007f270a1ac580  0x00007f270a1b3505  Yes         /lib64/libunwind.so.8
>0x00007f2709fa13c0  0x00007f2709fa62d5  No          /lib64/libwayland-client.so.0
>                                        No          /lib64/libdrm.so.2
>0x00007f2709aef520  0x00007f2709b725c4  Yes         /lib64/libpixman-1.so.0
>0x00007f27098ba210  0x00007f27098d7eff  Yes         /lib64/libXfont2.so.2
>0x00007f27096b1e70  0x00007f27096b2b5e  Yes         /lib64/libXau.so.6
>0x00007f2709423150  0x00007f27094879d9  Yes (*)     /lib64/libsystemd.so.0
>0x00007f27092119b0  0x00007f2709211c60  Yes         /lib64/libxshmfence.so.1
>0x00007f270900c450  0x00007f270900dd3b  Yes         /lib64/libXdmcp.so.6
>0x00007f2708d36f00  0x00007f2708d9ce5d  Yes         /lib64/libepoxy.so.0
>                                        No          /lib64/libgbm.so.1
>                                        No          /lib64/libEGL.so.1
>                                        No          /lib64/libGL.so.1
>0x00007f2708404210  0x00007f270840ae53  Yes (*)     /lib64/libaudit.so.1
>0x00007f27080789f0  0x00007f270812ae6a  Yes         /lib64/libm.so.6
>0x00007f2707e53be0  0x00007f2707e61801  Yes         /lib64/libpthread.so.0
>0x00007f2707ab0320  0x00007f2707bf723f  Yes         /lib64/libc.so.6
>0x00007f2707811160  0x00007f270786bcb3  Yes (*)     /lib64/libpcre2-8.so.0
>0x00007f270ac7ff60  0x00007f270ac9c910  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f27075fa420  0x00007f27076075f7  Yes         /lib64/libz.so.1
>0x00007f27073e2ad0  0x00007f27073f3705  Yes (*)     /lib64/libgcc_s.so.1
>0x00007f27071d8810  0x00007f27071dd29a  Yes         /lib64/libffi.so.6
>0x00007f2706fd1210  0x00007f2706fd447c  Yes         /lib64/librt.so.1
>0x00007f2706dc95a0  0x00007f2706dcb523  Yes         /lib64/libfontenc.so.1
>0x00007f2706b1d6d0  0x00007f2706b97643  Yes         /lib64/libfreetype.so.6
>0x00007f27068ed0b0  0x00007f2706903f66  Yes         /lib64/liblzma.so.5
>0x00007f27066d4fd0  0x00007f27066e63db  No          /lib64/liblz4.so.1
>0x00007f27064cf5b0  0x00007f27064d0e8f  Yes         /lib64/libcap.so.2
>0x00007f2706280ee0  0x00007f27062b825e  Yes (*)     /lib64/libmount.so.1
>0x00007f2705f645c0  0x00007f2706031bfc  Yes (*)     /lib64/libgcrypt.so.20
>0x00007f2705d21b50  0x00007f2705d41e87  Yes         /lib64/libexpat.so.1
>0x00007f2705b10840  0x00007f2705b16f25  No          /lib64/libwayland-server.so.0
>                                        No          /lib64/libGLdispatch.so.0
>                                        No          /lib64/libGLX.so.0
>0x00007f27052fef50  0x00007f27053879a6  Yes         /lib64/libX11.so.6
>0x00007f27050d2710  0x00007f27050dc853  Yes         /lib64/libXext.so.6
>0x00007f2704eca5e0  0x00007f2704ecc419  Yes         /lib64/libcap-ng.so.0
>0x00007f2704cb9700  0x00007f2704cc63e6  No          /lib64/libbz2.so.1
>                                        No          /lib64/libpng16.so.16
>0x00007f270483d6d0  0x00007f270486e25e  Yes (*)     /lib64/libblkid.so.1
>0x00007f270462d740  0x00007f2704631171  Yes (*)     /lib64/libuuid.so.1
>0x00007f27044101e0  0x00007f27044217ee  Yes         /lib64/libgpg-error.so.0
>0x00007f27041eea40  0x00007f2704201699  Yes         /lib64/libxcb.so.1
>(*): Shared library is missing debugging information.
>$1 = 0x0
>rax            0x0	0
>rbx            0x6	6
>rcx            0x7f2707ac5feb	139805609189355
>rdx            0x0	0
>rsi            0x7ffe50c1f060	140730253308000
>rdi            0x2	2
>rbp            0x7ffe50c1f2f0	0x7ffe50c1f2f0
>rsp            0x7ffe50c1f060	0x7ffe50c1f060
>r8             0x0	0
>r9             0x7ffe50c1f060	140730253308000
>r10            0x8	8
>r11            0x246	582
>r12            0x0	0
>r13            0x7ffe50c1f620	140730253309472
>r14            0x0	0
>r15            0x128a690	19441296
>rip            0x7f2707ac5feb	0x7f2707ac5feb <__GI___libc_sigaction+75>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI___libc_sigaction:
>   0x00007f2707ac5fa0 <+0>:	sub    $0x148,%rsp
>   0x00007f2707ac5fa7 <+7>:	mov    %rdx,%r8
>   0x00007f2707ac5faa <+10>:	mov    %fs:0x28,%rax
>   0x00007f2707ac5fb3 <+19>:	mov    %rax,0x138(%rsp)
>   0x00007f2707ac5fbb <+27>:	xor    %eax,%eax
>   0x00007f2707ac5fbd <+29>:	test   %rsi,%rsi
>   0x00007f2707ac5fc0 <+32>:	je     0x7f2707ac6138 <__GI___libc_sigaction+408>
>   0x00007f2707ac5fc6 <+38>:	mov    (%rsi),%rax
>   0x00007f2707ac5fc9 <+41>:	movdqu 0x8(%rsi),%xmm0
>   0x00007f2707ac5fce <+46>:	mov    %rsp,%rcx
>   0x00007f2707ac5fd1 <+49>:	lea    0xa0(%rsp),%rdx
>   0x00007f2707ac5fd9 <+57>:	movdqu 0x18(%rsi),%xmm1
>   0x00007f2707ac5fde <+62>:	movdqu 0x28(%rsi),%xmm2
>   0x00007f2707ac5fe3 <+67>:	movdqu 0x38(%rsi),%xmm3
>   0x00007f2707ac5fe8 <+72>:	movdqu 0x48(%rsi),%xmm4
>   0x00007f2707ac5fed <+77>:	mov    %rax,(%rsp)
>   0x00007f2707ac5ff1 <+81>:	mov    0x88(%rsi),%eax
>   0x00007f2707ac5ff7 <+87>:	movdqu 0x58(%rsi),%xmm5
>   0x00007f2707ac5ffc <+92>:	movups %xmm0,0x18(%rsp)
>   0x00007f2707ac6001 <+97>:	movdqu 0x68(%rsi),%xmm6
>   0x00007f2707ac6006 <+102>:	movdqu 0x78(%rsi),%xmm7
>   0x00007f2707ac600b <+107>:	movups %xmm1,0x28(%rcx)
>   0x00007f2707ac600f <+111>:	mov    %rcx,%rsi
>   0x00007f2707ac6012 <+114>:	or     $0x4000000,%eax
>   0x00007f2707ac6017 <+119>:	test   %r8,%r8
>   0x00007f2707ac601a <+122>:	movups %xmm2,0x38(%rcx)
>   0x00007f2707ac601e <+126>:	cltq   
>   0x00007f2707ac6020 <+128>:	movups %xmm3,0x48(%rcx)
>   0x00007f2707ac6024 <+132>:	mov    %rax,0x8(%rsp)
>   0x00007f2707ac6029 <+137>:	lea    -0xa0(%rip),%rax        # 0x7f2707ac5f90 <__restore_rt>
>   0x00007f2707ac6030 <+144>:	mov    %rax,0x10(%rsp)
>   0x00007f2707ac6035 <+149>:	mov    $0x0,%eax
>   0x00007f2707ac603a <+154>:	cmove  %rax,%rdx
>   0x00007f2707ac603e <+158>:	movups %xmm4,0x58(%rcx)
>   0x00007f2707ac6042 <+162>:	movups %xmm5,0x68(%rcx)
>   0x00007f2707ac6046 <+166>:	movups %xmm6,0x78(%rcx)
>   0x00007f2707ac604a <+170>:	movups %xmm7,0x88(%rcx)
>   0x00007f2707ac6051 <+177>:	mov    $0xd,%ecx
>   0x00007f2707ac6056 <+182>:	mov    $0x8,%r10d
>   0x00007f2707ac605c <+188>:	mov    %ecx,%eax
>   0x00007f2707ac605e <+190>:	syscall 
>   0x00007f2707ac6060 <+192>:	mov    %rax,%rdx
>   0x00007f2707ac6063 <+195>:	cmp    $0xfffffffffffff000,%rax
>   0x00007f2707ac6069 <+201>:	ja     0x7f2707ac6158 <__GI___libc_sigaction+440>
>   0x00007f2707ac606f <+207>:	test   %r8,%r8
>   0x00007f2707ac6072 <+210>:	je     0x7f2707ac6119 <__GI___libc_sigaction+377>
>   0x00007f2707ac6078 <+216>:	test   %eax,%eax
>   0x00007f2707ac607a <+218>:	js     0x7f2707ac6119 <__GI___libc_sigaction+377>
>   0x00007f2707ac6080 <+224>:	mov    0xa0(%rsp),%rdx
>   0x00007f2707ac6088 <+232>:	movdqu 0xb8(%rsp),%xmm0
>   0x00007f2707ac6091 <+241>:	movdqu 0xc8(%rsp),%xmm1
>   0x00007f2707ac609a <+250>:	movdqu 0xd8(%rsp),%xmm2
>   0x00007f2707ac60a3 <+259>:	movdqu 0xe8(%rsp),%xmm3
>   0x00007f2707ac60ac <+268>:	mov    %rdx,(%r8)
>   0x00007f2707ac60af <+271>:	mov    0xa8(%rsp),%rdx
>   0x00007f2707ac60b7 <+279>:	movups %xmm0,0x8(%r8)
>   0x00007f2707ac60bc <+284>:	movdqu 0xf8(%rsp),%xmm4
>   0x00007f2707ac60c5 <+293>:	movdqu 0x108(%rsp),%xmm5
>   0x00007f2707ac60ce <+302>:	movups %xmm1,0x18(%r8)
>   0x00007f2707ac60d3 <+307>:	movdqu 0x118(%rsp),%xmm6
>   0x00007f2707ac60dc <+316>:	movdqu 0x128(%rsp),%xmm7
>   0x00007f2707ac60e5 <+325>:	mov    %edx,0x88(%r8)
>   0x00007f2707ac60ec <+332>:	mov    0xb0(%rsp),%rdx
>   0x00007f2707ac60f4 <+340>:	movups %xmm2,0x28(%r8)
>   0x00007f2707ac60f9 <+345>:	movups %xmm3,0x38(%r8)
>   0x00007f2707ac60fe <+350>:	mov    %rdx,0x90(%r8)
>   0x00007f2707ac6105 <+357>:	movups %xmm4,0x48(%r8)
>   0x00007f2707ac610a <+362>:	movups %xmm5,0x58(%r8)
>   0x00007f2707ac610f <+367>:	movups %xmm6,0x68(%r8)
>   0x00007f2707ac6114 <+372>:	movups %xmm7,0x78(%r8)
>   0x00007f2707ac6119 <+377>:	mov    0x138(%rsp),%rcx
>   0x00007f2707ac6121 <+385>:	xor    %fs:0x28,%rcx
>   0x00007f2707ac612a <+394>:	jne    0x7f2707ac616b <__GI___libc_sigaction+459>
>   0x00007f2707ac612c <+396>:	add    $0x148,%rsp
>   0x00007f2707ac6133 <+403>:	retq   
>   0x00007f2707ac6134 <+404>:	nopl   0x0(%rax)
>   0x00007f2707ac6138 <+408>:	xor    %edx,%edx
>   0x00007f2707ac613a <+410>:	xor    %esi,%esi
>   0x00007f2707ac613c <+412>:	test   %r8,%r8
>   0x00007f2707ac613f <+415>:	je     0x7f2707ac6051 <__GI___libc_sigaction+177>
>   0x00007f2707ac6145 <+421>:	lea    0xa0(%rsp),%rdx
>   0x00007f2707ac614d <+429>:	xor    %esi,%esi
>   0x00007f2707ac614f <+431>:	jmpq   0x7f2707ac6051 <__GI___libc_sigaction+177>
>   0x00007f2707ac6154 <+436>:	nopl   0x0(%rax)
>   0x00007f2707ac6158 <+440>:	mov    0x381d21(%rip),%rax        # 0x7f2707e47e80
>   0x00007f2707ac615f <+447>:	neg    %edx
>   0x00007f2707ac6161 <+449>:	mov    %edx,%fs:(%rax)
>   0x00007f2707ac6164 <+452>:	mov    $0xffffffff,%eax
>   0x00007f2707ac6169 <+457>:	jmp    0x7f2707ac6119 <__GI___libc_sigaction+377>
>   0x00007f2707ac616b <+459>:	callq  0x7f2707b9a460 <__stack_chk_fail>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1607410: 1469937 | 1469938 | 1469939 | 1469940 | 1469941 | 1469942 | 1469943 | 1469944 | 1469945 | 1469946 | 1469947 | 1471545 | 1475562