Attachment 1480962 Details for Bug 1625465 – File: backtrace

File: backtrace

backtrace (text/plain), 7.93 KB, created by Angie on 2018-09-05 03:44:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Angie

Created: 2018-09-05 03:44:56 UTC

Size: 7.93 KB

patch

obsolete

>[New LWP 30556]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `bluetoothctl'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  0x000055aa93535d9b in cmd_advertise (argc=<optimized out>, argv=<optimized out>) at client/main.c:2177
>
>Thread 1 (Thread 0x7f5157d1f900 (LWP 30556)):
>#0  0x000055aa93535d9b in cmd_advertise (argc=<optimized out>, argv=<optimized out>) at client/main.c:2177
>        enable = 1
>        type = 0x55aa9354a8f1 ""
>#1  0x000055aa935465ab in cmd_exec (argv=0x55aa947b1370, argc=2, entry=0x55aa93756bb0 <main_menu+688>) at src/shared/shell.c:373
>        w = {we_wordc = 1, we_wordv = 0x0, we_offs = 0}
>        len = <optimized out>
>        opt = <optimized out>
>        flags = <optimized out>
>        man = <optimized out>
>        optargs = <optimized out>
>        w = <optimized out>
>        len = <optimized out>
>        man = <optimized out>
>        opt = <optimized out>
>        flags = <optimized out>
>        optargs = <optimized out>
>#2  menu_exec (entry=0x55aa93756bb0 <main_menu+688>, argc=argc@entry=2, argv=argv@entry=0x55aa947b1370) at src/shared/shell.c:400
>No locals.
>#3  0x000055aa9354697d in shell_exec (argc=2, argv=0x55aa947b1370) at src/shared/shell.c:443
>        err = -2
>#4  0x000055aa935474a4 in rl_handler (input=0x55aa947b1f20 "advertise on") at src/shared/shell.c:590
>        w = {we_wordc = 2, we_wordv = 0x55aa947b1370, we_offs = 0}
>#5  0x00007f51573a4e9e in rl_callback_read_char () from /lib64/libreadline.so.7
>No symbol table info available.
>#6  0x000055aa9354684d in input_read (io=<optimized out>, user_data=<optimized out>) at src/shared/shell.c:1097
>No locals.
>#7  0x000055aa93547e29 in watch_callback (channel=<optimized out>, cond=<optimized out>, user_data=<optimized out>) at src/shared/io-glib.c:170
>        watch = <optimized out>
>        result = <optimized out>
>        destroy = <optimized out>
>#8  0x00007f51578608ad in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
>No symbol table info available.
>#9  0x00007f5157860c78 in ?? () from /lib64/libglib-2.0.so.0
>No symbol table info available.
>#10 0x00007f5157860fa2 in g_main_loop_run () from /lib64/libglib-2.0.so.0
>No symbol table info available.
>#11 0x000055aa93548409 in mainloop_run () at src/shared/mainloop-glib.c:73
>No locals.
>#12 0x000055aa93547982 in bt_shell_run () at src/shared/shell.c:1020
>        signal = 0x55aa947afa50
>        status = <optimized out>
>#13 0x000055aa93532f51 in main (argc=<optimized out>, argv=<optimized out>) at client/main.c:2642
>        client = 0x55aa947ae400
>        status = <optimized out>
>From                To                  Syms Read   Shared Object Library
>0x00007f515782f0d0  0x00007f51578aa34e  Yes (*)     /lib64/libglib-2.0.so.0
>0x00007f51575d0a90  0x00007f51575fd1c5  Yes (*)     /lib64/libdbus-1.so.3
>0x00007f515738b890  0x00007f51573af989  Yes (*)     /lib64/libreadline.so.7
>0x00007f5156fd7320  0x00007f515711e23f  Yes         /lib64/libc.so.6
>0x00007f5156d46660  0x00007f5156d96b86  Yes (*)     /lib64/libpcre.so.1
>0x00007f5156b2bbe0  0x00007f5156b39801  Yes         /lib64/libpthread.so.0
>0x00007f5156898150  0x00007f51568fc9d9  Yes (*)     /lib64/libsystemd.so.0
>0x00007f5156669fa0  0x00007f515667771c  No          /lib64/libtinfo.so.6
>0x00007f5157b2df60  0x00007f5157b4a910  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f5156456210  0x00007f515645947c  Yes         /lib64/librt.so.1
>0x00007f51562300b0  0x00007f5156246f66  Yes         /lib64/liblzma.so.5
>0x00007f5156017fd0  0x00007f51560293db  No          /lib64/liblz4.so.1
>0x00007f5155e125b0  0x00007f5155e13e8f  Yes         /lib64/libcap.so.2
>0x00007f5155bc3ee0  0x00007f5155bfb25e  Yes (*)     /lib64/libmount.so.1
>0x00007f51558a75c0  0x00007f5155974bfc  Yes (*)     /lib64/libgcrypt.so.20
>0x00007f5155686ad0  0x00007f5155697705  Yes (*)     /lib64/libgcc_s.so.1
>0x00007f515543d6d0  0x00007f515546e25e  Yes (*)     /lib64/libblkid.so.1
>0x00007f515522d740  0x00007f5155231171  Yes (*)     /lib64/libuuid.so.1
>0x00007f5155009df0  0x00007f515502193f  Yes         /lib64/libselinux.so.1
>0x00007f5154de71e0  0x00007f5154df87ee  Yes         /lib64/libgpg-error.so.0
>0x00007f5154bdfee0  0x00007f5154be0bbe  Yes         /lib64/libdl.so.2
>0x00007f5154961160  0x00007f51549bbcb3  Yes (*)     /lib64/libpcre2-8.so.0
>(*): Shared library is missing debugging information.
>$1 = 0x0
>$2 = 0x0
>rax            0x0	0
>rbx            0x7ffff3dd86a0	140737284769440
>rcx            0x1	1
>rdx            0x7f51573718c0	139987332307136
>rsi            0x1f	31
>rdi            0x55aa947ac1a0	94191123874208
>rbp            0x1	0x1
>rsp            0x7ffff3dd8650	0x7ffff3dd8650
>r8             0x7f5157d1f900	139987342457088
>r9             0x55aa93549c20	94191104597024
>r10            0x1	1
>r11            0x246	582
>r12            0x1	1
>r13            0x55aa93756bb0	94191106747312
>r14            0x0	0
>r15            0x55aa947b1920	94191123896608
>rip            0x55aa93535d9b	0x55aa93535d9b <cmd_advertise+171>
>eflags         0x10246	[ PF ZF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function cmd_advertise:
>   0x000055aa93535cf0 <+0>:	endbr64 
>   0x000055aa93535cf4 <+4>:	sub    $0x28,%rsp
>   0x000055aa93535cf8 <+8>:	mov    %rsi,%rdi
>   0x000055aa93535cfb <+11>:	lea    0x22637e(%rip),%rsi        # 0x55aa9375c080 <ad_arguments>
>   0x000055aa93535d02 <+18>:	mov    %fs:0x28,%rax
>   0x000055aa93535d0b <+27>:	mov    %rax,0x18(%rsp)
>   0x000055aa93535d10 <+32>:	xor    %eax,%eax
>   0x000055aa93535d12 <+34>:	lea    0x10(%rsp),%rcx
>   0x000055aa93535d17 <+39>:	lea    0xc(%rsp),%rdx
>   0x000055aa93535d1c <+44>:	callq  0x55aa93535640 <parse_argument>
>   0x000055aa93535d21 <+49>:	test   %eax,%eax
>   0x000055aa93535d23 <+51>:	je     0x55aa93535db0 <cmd_advertise+192>
>   0x000055aa93535d29 <+57>:	mov    0x226528(%rip),%rax        # 0x55aa9375c258 <default_ctrl>
>   0x000055aa93535d30 <+64>:	test   %rax,%rax
>   0x000055aa93535d33 <+67>:	je     0x55aa93535d70 <cmd_advertise+128>
>   0x000055aa93535d35 <+69>:	mov    0x8(%rax),%rsi
>   0x000055aa93535d39 <+73>:	test   %rsi,%rsi
>   0x000055aa93535d3c <+76>:	je     0x55aa93535d70 <cmd_advertise+128>
>   0x000055aa93535d3e <+78>:	cmpl   $0x1,0xc(%rsp)
>   0x000055aa93535d43 <+83>:	mov    0x226526(%rip),%rdi        # 0x55aa9375c270 <dbus_conn>
>   0x000055aa93535d4a <+90>:	je     0x55aa93535da1 <cmd_advertise+177>
>   0x000055aa93535d4c <+92>:	callq  0x55aa93539830 <ad_unregister>
>   0x000055aa93535d51 <+97>:	mov    0x18(%rsp),%rax
>   0x000055aa93535d56 <+102>:	xor    %fs:0x28,%rax
>   0x000055aa93535d5f <+111>:	jne    0x55aa93535dbc <cmd_advertise+204>
>   0x000055aa93535d61 <+113>:	add    $0x28,%rsp
>   0x000055aa93535d65 <+117>:	retq   
>   0x000055aa93535d66 <+118>:	nopw   %cs:0x0(%rax,%rax,1)
>   0x000055aa93535d70 <+128>:	xor    %eax,%eax
>   0x000055aa93535d72 <+130>:	lea    0x13ea7(%rip),%rdi        # 0x55aa93549c20
>   0x000055aa93535d79 <+137>:	callq  0x55aa93546dd0 <bt_shell_printf>
>   0x000055aa93535d7e <+142>:	mov    $0x1,%edi
>   0x000055aa93535d83 <+147>:	callq  0x55aa93547520 <bt_shell_noninteractive_quit>
>   0x000055aa93535d88 <+152>:	mov    0x2264c9(%rip),%rax        # 0x55aa9375c258 <default_ctrl>
>   0x000055aa93535d8f <+159>:	cmpl   $0x1,0xc(%rsp)
>   0x000055aa93535d94 <+164>:	mov    0x2264d5(%rip),%rdi        # 0x55aa9375c270 <dbus_conn>
>=> 0x000055aa93535d9b <+171>:	mov    0x8(%rax),%rsi
>   0x000055aa93535d9f <+175>:	jne    0x55aa93535d4c <cmd_advertise+92>
>   0x000055aa93535da1 <+177>:	mov    0x10(%rsp),%rdx
>   0x000055aa93535da6 <+182>:	callq  0x55aa93539760 <ad_register>
>   0x000055aa93535dab <+187>:	jmp    0x55aa93535d51 <cmd_advertise+97>
>   0x000055aa93535dad <+189>:	nopl   (%rax)
>   0x000055aa93535db0 <+192>:	mov    $0x1,%edi
>   0x000055aa93535db5 <+197>:	callq  0x55aa93547520 <bt_shell_noninteractive_quit>
>   0x000055aa93535dba <+202>:	jmp    0x55aa93535d51 <cmd_advertise+97>
>   0x000055aa93535dbc <+204>:	callq  0x55aa93532a50 <__stack_chk_fail@plt>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1625465: 1480962 | 1480963 | 1480964 | 1480965 | 1480966 | 1480967 | 1480968 | 1480969 | 1480970 | 1480971 | 1480972 | 1480973