Attachment 1485601 Details for Bug 1631782 – File: backtrace

File: backtrace

backtrace (text/plain), 15.35 KB, created by Фукидид on 2018-09-21 14:42:41 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Фукидид

Created: 2018-09-21 14:42:41 UTC

Size: 15.35 KB

patch

obsolete

>[New LWP 2101]
>[New LWP 2102]
>[New LWP 2103]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `xfce4-session'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  SmsSaveYourself (smsConn=0x55e0688a1400, saveType=saveType@entry=0, shutdown=shutdown@entry=1, interactStyle=interactStyle@entry=2, fast=fast@entry=0) at sm_manager.c:217
>[Current thread is 1 (Thread 0x7f7dac661080 (LWP 2101))]
>
>Thread 1 (Thread 0x7f7dac661080 (LWP 2101)):
>#0  SmsSaveYourself (smsConn=0x55e0688a1400, saveType=saveType@entry=0, shutdown=shutdown@entry=1, interactStyle=interactStyle@entry=2, fast=fast@entry=0) at sm_manager.c:217
>        iceConn = 0x55e00000012d
>        pMsg = <optimized out>
>#1  0x000055e06688f3f3 in xfsm_manager_save_yourself_global (manager=0x55e068886800, save_type=0, save_type@entry=2, shutdown=shutdown@entry=1, interact_style=interact_style@entry=2, fast=fast@entry=0, shutdown_type=<optimized out>, allow_shutdown_save=1) at xfsm-manager.c:1212
>        client = 0x55e068889b70
>        properties = <optimized out>
>        program = <optimized out>
>        shutdown_save = 0
>        lp = 0x7f7d88001520
>        error = 0x0
>        __func__ = "xfsm_manager_save_yourself_global"
>#2  0x000055e06688f5ca in xfsm_manager_dbus_shutdown_idled (data=data@entry=0x55e06890b780) at xfsm-manager.c:2032
>        idata = 0x55e06890b780
>#3  0x00007f7da8e211cb in g_idle_dispatch (source=0x55e0688c2150, callback=0x55e06688f5a0 <xfsm_manager_dbus_shutdown_idled>, user_data=0x55e06890b780) at gmain.c:5535
>        again = <optimized out>
>#4  0x00007f7da8e248ad in g_main_dispatch (context=0x55e06887d890) at gmain.c:3177
>        dispatch = 0x7f7da8e211b0 <g_idle_dispatch>
>        prev_source = 0x0
>        was_in_call = 0
>        user_data = 0x55e06890b780
>        callback = 0x55e06688f5a0 <xfsm_manager_dbus_shutdown_idled>
>        cb_funcs = 0x7f7da90ee280 <g_source_callback_funcs>
>        cb_data = 0x55e0688c1dd0
>        need_destroy = <optimized out>
>        source = 0x55e0688c2150
>        current = 0x55e068890d30
>        i = 0
>        current = <optimized out>
>        i = <optimized out>
>        __func__ = "g_main_dispatch"
>        source = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        was_in_call = <optimized out>
>        user_data = <optimized out>
>        callback = <optimized out>
>        cb_funcs = <optimized out>
>        cb_data = <optimized out>
>        need_destroy = <optimized out>
>        dispatch = <optimized out>
>        prev_source = <optimized out>
>        _g_boolean_var_ = <optimized out>
>#5  g_main_context_dispatch (context=context@entry=0x55e06887d890) at gmain.c:3830
>No locals.
>#6  0x00007f7da8e24c78 in g_main_context_iterate (context=0x55e06887d890, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3903
>        max_priority = 0
>        timeout = 0
>        some_ready = 1
>        nfds = <optimized out>
>        allocated_nfds = 14
>        fds = 0x55e068913de0
>#7  0x00007f7da8e24fa2 in g_main_loop_run (loop=0x55e0688ae880) at gmain.c:4099
>        self = <optimized out>
>        __func__ = "g_main_loop_run"
>#8  0x00007f7daad5995f in IA__gtk_main () at gtkmain.c:1270
>        tmp_list = 0x0
>        functions = 0x0
>        init = <optimized out>
>        loop = 0x55e0688ae880
>#9  0x000055e0668871aa in main (argc=<optimized out>, argv=<optimized out>) at main.c:308
>        manager = 0x55e068886800
>        error = 0x0
>        dpy = 0x55e06885b000
>        channel = 0x7f7d88004e40
>        shutdown_type = <optimized out>
>        shutdown_helper = <optimized out>
>        succeed = 1
>
>Thread 2 (Thread 0x7f7d95264700 (LWP 2102)):
>#0  0x00007f7da88e9659 in internal_fallocate (fd=-1461500640, offset=4294967295, len=94422314809968) at ../sysdeps/posix/posix_fallocate.c:62
>        st = {st_dev = 0, st_ino = 140177683966392, st_nlink = 0, st_mode = 2833403233, st_uid = 32637, st_gid = 1753782272, __pad0 = 21984, st_rdev = 140177681207082, st_size = 0, st_blksize = 140177678534036, st_blocks = 0, st_atim = {tv_sec = 140177349953280, tv_nsec = 140177349953280}, st_mtim = {tv_sec = 7847717449135420258, tv_nsec = 140720722203822}, st_ctim = {tv_sec = 140720722203823, tv_nsec = 140720722203952}, __glibc_reserved = {140720722203952, -7920816635150470302, -7920740990624730270}}
>        increment = <optimized out>
>#1  0xf6ebe9c9297a5000 in ?? ()
>No symbol table info available.
>#2  0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 3 (Thread 0x7f7d94a63700 (LWP 2103)):
>#0  0x00007f7da88e9659 in internal_fallocate (fd=-1461500640, offset=4294967295, len=140177129375104) at ../sysdeps/posix/posix_fallocate.c:62
>        st = {st_dev = 94422314898144, st_ino = 140177681038246, st_nlink = 140720722203775, st_mode = 1753862832, st_uid = 21984, st_gid = 0, __pad0 = 0, st_rdev = 140177694168762, st_size = 94422314817696, st_blksize = 140177681207082, st_blocks = 0, st_atim = {tv_sec = 140177678534036, tv_nsec = 0}, st_mtim = {tv_sec = 140177341560576, tv_nsec = 140177341560576}, st_ctim = {tv_sec = 7847717449135420258, tv_nsec = 140720722203774}, __glibc_reserved = {140720722203775, 140720722203904, 140720722203904}}
>        increment = <optimized out>
>#1  0x0000000000000000 in ?? ()
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>0x00007f7dac26fa00  0x00007f7dac27063b  Yes         /lib64/libxfsm-4.6.so.0
>0x00007f7dac066bc0  0x00007f7dac06ae07  Yes         /lib64/libSM.so.6
>0x00007f7dabe4df30  0x00007f7dabe5bada  Yes         /lib64/libICE.so.6
>0x00007f7dabb25f50  0x00007f7dabbae9a6  Yes         /lib64/libX11.so.6
>0x00007f7dab8fb740  0x00007f7dab90239e  Yes         /lib64/libxfce4ui-1.so.0
>0x00007f7dab6e86d0  0x00007f7dab6edea5  Yes         /lib64/libxfce4util.so.7
>0x00007f7dab4e2140  0x00007f7dab4e3066  Yes         /lib64/libgmodule-2.0.so.0
>0x00007f7dab2af840  0x00007f7dab2cf8b6  Yes         /lib64/libwnck-1.so.22
>0x00007f7daac7b850  0x00007f7daaf1778e  Yes         /lib64/libgtk-x11-2.0.so.0
>0x00007f7daa96c670  0x00007f7daa9cf083  Yes         /lib64/libgdk-x11-2.0.so.0
>0x00007f7daa732280  0x00007f7daa73f016  Yes         /lib64/libatk-1.0.so.0
>0x00007f7daa419690  0x00007f7daa4e695e  Yes         /lib64/libcairo.so.2
>0x00007f7daa1e65f0  0x00007f7daa1fcb4d  Yes         /lib64/libgdk_pixbuf-2.0.so.0
>0x00007f7da9fa4f30  0x00007f7da9fc6224  Yes         /lib64/libpango-1.0.so.0
>0x00007f7da9d81b50  0x00007f7da9d8dbc6  No          /lib64/libpolkit-gobject-1.so.0
>0x00007f7da9a0e4b0  0x00007f7da9af60f2  Yes         /lib64/libgio-2.0.so.0
>0x00007f7da97c6c70  0x00007f7da97cf6c1  Yes         /lib64/libxfconf-0.so.2
>0x00007f7da959ef40  0x00007f7da95b3b98  Yes         /lib64/libdbus-glib-1.so.2
>0x00007f7da9350a90  0x00007f7da937d1c5  No          /lib64/libdbus-1.so.3
>0x00007f7da90fa7a0  0x00007f7da912b660  Yes         /lib64/libgobject-2.0.so.0
>0x00007f7da8df30d0  0x00007f7da8e6e34e  Yes         /lib64/libglib-2.0.so.0
>0x00007f7da8bbebe0  0x00007f7da8bcc7f1  Yes         /lib64/libpthread.so.0
>0x00007f7da881b3a0  0x00007f7da896203f  Yes         /lib64/libc.so.6
>0x00007f7da85f0b70  0x00007f7da85f5fe6  Yes         /lib64/libpangocairo-1.0.so.0
>0x00007f7da83dd510  0x00007f7da83e68c1  Yes         /lib64/libpangoft2-1.0.so.0
>0x00007f7da8199200  0x00007f7da81bb7de  Yes         /lib64/libfontconfig.so.1
>0x00007f7da7ee76d0  0x00007f7da7f61643  Yes         /lib64/libfreetype.so.6
>0x00007f7da7cd5740  0x00007f7da7cd9171  No          /lib64/libuuid.so.1
>0x00007f7da7ab6a40  0x00007f7da7ac9699  Yes         /lib64/libxcb.so.1
>0x00007f7da78a7ee0  0x00007f7da78a8bbe  Yes         /lib64/libdl.so.2
>0x00007f7da76a0190  0x00007f7da76a36b2  Yes         /lib64/libstartup-notification-1.so.0
>0x00007f7da742d660  0x00007f7da747dc66  Yes (*)     /lib64/libpcre.so.1
>0x00007f7da7228d00  0x00007f7da7229b13  Yes         /lib64/libXRes.so.1
>0x00007f7da6e9f9f0  0x00007f7da6f51e6a  Yes         /lib64/libm.so.6
>0x00007f7da6c8f590  0x00007f7da6c9195a  Yes         /lib64/libXfixes.so.3
>0x00007f7da6a84ad0  0x00007f7da6a8ae01  Yes         /lib64/libXrender.so.1
>0x00007f7da6880b50  0x00007f7da68814c1  Yes         /lib64/libXinerama.so.1
>0x00007f7da66711e0  0x00007f7da667bddb  Yes         /lib64/libXi.so.6
>0x00007f7da6465ce0  0x00007f7da646bf59  Yes         /lib64/libXrandr.so.2
>0x00007f7da625ba00  0x00007f7da62604bf  Yes         /lib64/libXcursor.so.1
>0x00007f7da6056c70  0x00007f7da6057695  Yes         /lib64/libXcomposite.so.1
>0x00007f7da5e53be0  0x00007f7da5e5453b  Yes         /lib64/libXdamage.so.1
>0x00007f7da5c44710  0x00007f7da5c4e853  Yes         /lib64/libXext.so.6
>0x00007f7da59a5520  0x00007f7da5a285c4  Yes         /lib64/libpixman-1.so.0
>0x00007f7da576c5a0  0x00007f7da578ea05  Yes         /lib64/libpng16.so.16
>0x00007f7da5563db0  0x00007f7da5564907  Yes         /lib64/libxcb-shm.so.0
>0x00007f7da535a0d0  0x00007f7da535edfc  Yes         /lib64/libxcb-render.so.0
>0x00007f7da5140420  0x00007f7da514d5f7  Yes         /lib64/libz.so.1
>0x00007f7da4f38210  0x00007f7da4f3b46c  Yes         /lib64/librt.so.1
>0x00007f7da4d2df10  0x00007f7da4d31ad7  Yes         /lib64/libthai.so.0
>0x00007f7da4b116b0  0x00007f7da4b15a3f  Yes         /lib64/libfribidi.so.0
>0x00007f7da4882150  0x00007f7da48e69d9  No          /lib64/libsystemd.so.0
>0x00007f7da466b810  0x00007f7da467029a  Yes         /lib64/libffi.so.6
>0x00007f7da4447df0  0x00007f7da445f93f  Yes         /lib64/libselinux.so.1
>0x00007f7da422d840  0x00007f7da423960e  Yes         /lib64/libresolv.so.2
>0x00007f7da3fdcf30  0x00007f7da401453e  No          /lib64/libmount.so.1
>0x00007f7da3dbaad0  0x00007f7da3dcb715  No          /lib64/libgcc_s.so.1
>0x00007f7da3bb6660  0x00007f7da3bb67a2  Yes         /lib64/libgthread-2.0.so.0
>0x00007f7dac473f60  0x00007f7dac492060  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f7da3919530  0x00007f7da397bcbe  Yes         /lib64/libharfbuzz.so.0
>0x00007f7da36d9b50  0x00007f7da36f9e87  Yes         /lib64/libexpat.so.1
>0x00007f7da34c6700  0x00007f7da34d33e6  No          /lib64/libbz2.so.1
>0x00007f7da32c1e70  0x00007f7da32c2b5e  Yes         /lib64/libXau.so.6
>0x00007f7da30bd550  0x00007f7da30be320  Yes         /lib64/libxcb-util.so.1
>0x00007f7da2eb9590  0x00007f7da2eb966f  Yes         /lib64/libX11-xcb.so.1
>0x00007f7da2cb33b0  0x00007f7da2cb65a0  Yes         /lib64/libdatrie.so.1
>0x00007f7da2a8e0b0  0x00007f7da2aa4f66  Yes         /lib64/liblzma.so.5
>0x00007f7da2875fd0  0x00007f7da28873db  No          /lib64/liblz4.so.1
>0x00007f7da26705b0  0x00007f7da2671e8f  Yes         /lib64/libcap.so.2
>0x00007f7da235f5c0  0x00007f7da242d53c  Yes         /lib64/libgcrypt.so.20
>0x00007f7da20d2160  0x00007f7da212d543  Yes (*)     /lib64/libpcre2-8.so.0
>0x00007f7da1e8d740  0x00007f7da1ebe59e  No          /lib64/libblkid.so.1
>0x00007f7da1c59780  0x00007f7da1c7a68c  Yes         /lib64/libgraphite2.so.3
>0x00007f7da1a3b1e0  0x00007f7da1a4c7ee  Yes         /lib64/libgpg-error.so.0
>                                        No          /lib64/libnss_sss.so.2
>0x00007f7d8fdf0340  0x00007f7d8fdf65c8  Yes         /lib64/libnss_files.so.2
>0x00007f7d8fbeb2a0  0x00007f7d8fbeb9dd  Yes         /usr/lib64/gtk-2.0/2.10.0/engines/libadwaita.so
>0x00007f7d8f9e1550  0x00007f7d8f9e67b5  Yes         /usr/lib64/gtk-2.0/2.10.0/engines/libpixmap.so
>0x00007f7d8f167110  0x00007f7d8f18238a  No          /usr/lib64/gio/modules/libgvfsdbus.so
>0x00007f7d8ef2fa70  0x00007f7d8ef4724a  No          /usr/lib64/gvfs/libgvfscommon.so
>0x00007f7d8ed19e80  0x00007f7d8ed1a7a8  Yes         /lib64/libutil.so.1
>(*): Shared library is missing debugging information.
>$1 = 0x0
>$2 = 0x0
>rax            0x55e0688a1400	94422314914816
>rbx            0x55e00000012d	94420561035565
>rcx            0x2	2
>rdx            0x1	1
>rsi            0x0	0
>rdi            0x55e0688a1400	94422314914816
>rbp            0x55e0688a1400	0x55e0688a1400
>rsp            0x7ffc18a8e080	0x7ffc18a8e080
>r8             0x0	0
>r9             0x1	1
>r10            0x7f7da888d7e0	140177675180000
>r11            0x0	0
>r12            0x2	2
>r13            0x1	1
>r14            0x0	0
>r15            0x0	0
>rip            0x7f7dac0689e0	0x7f7dac0689e0 <SmsSaveYourself+32>
>eflags         0x10202	[ IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function SmsSaveYourself:
>   0x00007f7dac0689c0 <+0>:	endbr64 
>   0x00007f7dac0689c4 <+4>:	push   %r14
>   0x00007f7dac0689c6 <+6>:	mov    %esi,%r14d
>   0x00007f7dac0689c9 <+9>:	push   %r13
>   0x00007f7dac0689cb <+11>:	mov    %edx,%r13d
>   0x00007f7dac0689ce <+14>:	push   %r12
>   0x00007f7dac0689d0 <+16>:	mov    %ecx,%r12d
>   0x00007f7dac0689d3 <+19>:	push   %rbp
>   0x00007f7dac0689d4 <+20>:	mov    %rdi,%rbp
>   0x00007f7dac0689d7 <+23>:	push   %rbx
>   0x00007f7dac0689d8 <+24>:	sub    $0x10,%rsp
>   0x00007f7dac0689dc <+28>:	mov    0x8(%rdi),%rbx
>=> 0x00007f7dac0689e0 <+32>:	mov    0x60(%rbx),%rax
>   0x00007f7dac0689e4 <+36>:	lea    0x10(%rax),%rdx
>   0x00007f7dac0689e8 <+40>:	cmp    %rdx,0x68(%rbx)
>   0x00007f7dac0689ec <+44>:	jb     0x7f7dac068a88 <SmsSaveYourself+200>
>   0x00007f7dac0689f2 <+50>:	mov    0x2045d7(%rip),%rdx        # 0x7f7dac26cfd0
>   0x00007f7dac0689f9 <+57>:	movl   $0x1,0x4(%rax)
>   0x00007f7dac068a00 <+64>:	mov    %rbx,%rdi
>   0x00007f7dac068a03 <+67>:	mov    (%rdx),%edx
>   0x00007f7dac068a05 <+69>:	movb   $0x3,0x1(%rax)
>   0x00007f7dac068a09 <+73>:	mov    %dl,(%rax)
>   0x00007f7dac068a0b <+75>:	addq   $0x10,0x60(%rbx)
>   0x00007f7dac068a10 <+80>:	addq   $0x1,0x18(%rbx)
>   0x00007f7dac068a15 <+85>:	mov    %r14b,0x8(%rax)
>   0x00007f7dac068a19 <+89>:	mov    %r13b,0x9(%rax)
>   0x00007f7dac068a1d <+93>:	mov    %r12b,0xa(%rax)
>   0x00007f7dac068a21 <+97>:	mov    %r8b,0xb(%rax)
>   0x00007f7dac068a25 <+101>:	callq  0x7f7dac0669c0 <IceFlush@plt>
>   0x00007f7dac068a2a <+106>:	orb    $0x1,0x0(%rbp)
>   0x00007f7dac068a2e <+110>:	cmp    $0x2,%r12d
>   0x00007f7dac068a32 <+114>:	ja     0x7f7dac068a78 <SmsSaveYourself+184>
>   0x00007f7dac068a34 <+116>:	mov    %r12b,0xc0(%rbp)
>   0x00007f7dac068a3b <+123>:	test   %r13d,%r13d
>   0x00007f7dac068a3e <+126>:	jne    0x7f7dac068a60 <SmsSaveYourself+160>
>   0x00007f7dac068a40 <+128>:	xor    %eax,%eax
>   0x00007f7dac068a42 <+130>:	lea    (%rax,%rax,1),%edx
>   0x00007f7dac068a45 <+133>:	movzbl 0x0(%rbp),%eax
>   0x00007f7dac068a49 <+137>:	and    $0xfffffffd,%eax
>   0x00007f7dac068a4c <+140>:	or     %edx,%eax
>   0x00007f7dac068a4e <+142>:	mov    %al,0x0(%rbp)
>   0x00007f7dac068a51 <+145>:	add    $0x10,%rsp
>   0x00007f7dac068a55 <+149>:	pop    %rbx
>   0x00007f7dac068a56 <+150>:	pop    %rbp
>   0x00007f7dac068a57 <+151>:	pop    %r12
>   0x00007f7dac068a59 <+153>:	pop    %r13
>   0x00007f7dac068a5b <+155>:	pop    %r14
>   0x00007f7dac068a5d <+157>:	retq   
>   0x00007f7dac068a5e <+158>:	xchg   %ax,%ax
>   0x00007f7dac068a60 <+160>:	sub    $0x1,%r12d
>   0x00007f7dac068a64 <+164>:	mov    $0x1,%eax
>   0x00007f7dac068a69 <+169>:	cmp    $0x1,%r12d
>   0x00007f7dac068a6d <+173>:	jbe    0x7f7dac068a42 <SmsSaveYourself+130>
>   0x00007f7dac068a6f <+175>:	jmp    0x7f7dac068a40 <SmsSaveYourself+128>
>   0x00007f7dac068a71 <+177>:	nopl   0x0(%rax)
>   0x00007f7dac068a78 <+184>:	movb   $0x0,0xc0(%rbp)
>   0x00007f7dac068a7f <+191>:	jmp    0x7f7dac068a40 <SmsSaveYourself+128>
>   0x00007f7dac068a81 <+193>:	nopl   0x0(%rax)
>   0x00007f7dac068a88 <+200>:	mov    %rbx,%rdi
>   0x00007f7dac068a8b <+203>:	mov    %r8d,0xc(%rsp)
>   0x00007f7dac068a90 <+208>:	callq  0x7f7dac0669c0 <IceFlush@plt>
>   0x00007f7dac068a95 <+213>:	mov    0x60(%rbx),%rax
>   0x00007f7dac068a99 <+217>:	mov    0xc(%rsp),%r8d
>   0x00007f7dac068a9e <+222>:	jmpq   0x7f7dac0689f2 <SmsSaveYourself+50>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1631782: 1485601 | 1485602 | 1485603 | 1485604 | 1485605 | 1485606 | 1485607 | 1485608 | 1485609 | 1485610 | 1485611 | 1485612