Attachment 1489145 Details for Bug 1634836 – File: backtrace

File: backtrace

backtrace (text/plain), 32.45 KB, created by Benjamin Masse on 2018-10-01 18:49:18 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Benjamin Masse

Created: 2018-10-01 18:49:18 UTC

Size: 32.45 KB

patch

obsolete

>[New LWP 3075]
>[New LWP 1609]
>[New LWP 1610]
>[New LWP 1597]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/packagekitd'.
>Program terminated with signal SIGABRT, Aborted.
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>50	  return ret;
>[Current thread is 1 (Thread 0x7f175806a700 (LWP 3075))]
>
>Thread 1 (Thread 0x7f175806a700 (LWP 3075)):
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>        set = {__val = {0, 81604378715, 139737707421220, 1517705682782161408, 0, 139738339017544, 139737707687912, 139738237798000, 139738237800416, 139738237798000, 1, 139738334915937, 0, 139738237800416, 3, 139737707687912}}
>        pid = <optimized out>
>        tid = <optimized out>
>        ret = <optimized out>
>#1  0x00007f177db3b5b9 in __GI_abort () at abort.c:79
>        save_stage = 1
>        act = {__sigaction_handler = {sa_handler = 0x7f1758068878, sa_sigaction = 0x7f1758068878}, sa_mask = {__val = {139738334922827, 139737707421275, 1517705682782161408, 139738338912064, 139738334923357, 5, 0, 5, 139738338912064, 139738237798520, 0, 0, 139737707688544, 139737707688544, 139738237798112, 139738237798368}}, sa_flags = 4096, sa_restorer = 0x7f17580686e0}
>        sigs = {__val = {32, 0 <repeats 15 times>}}
>#2  0x00007f177db937b7 in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7f177dc9d359 "%s\n") at ../sysdeps/posix/libc_fatal.c:181
>        ap = {{gp_offset = 24, fp_offset = 0, overflow_arg_area = 0x7f17580687f0, reg_save_area = 0x7f1758068780}}
>        fd = <optimized out>
>        list = <optimized out>
>        nlist = <optimized out>
>        cp = <optimized out>
>        written = <optimized out>
>#3  0x00007f177db99c4c in malloc_printerr (str=str@entry=0x7f177dc9ec10 "corrupted double-linked list (not small)") at malloc.c:5350
>No locals.
>#4  0x00007f177db9d360 in _int_malloc (av=av@entry=0x7f1750000020, bytes=bytes@entry=168) at malloc.c:3926
>        p = 0x7f177db50eab <__GI_raise+267>
>        iters = <optimized out>
>        nb = 176
>        idx = <optimized out>
>        bin = <optimized out>
>        victim = <optimized out>
>        size = <optimized out>
>        victim_index = <optimized out>
>        remainder = <optimized out>
>        remainder_size = <optimized out>
>        block = <optimized out>
>        bit = <optimized out>
>        map = <optimized out>
>        fwd = <optimized out>
>        bck = <optimized out>
>        tcache_unsorted_count = <optimized out>
>        tcache_nb = 176
>        tc_idx = 9
>        return_cached = 0
>        __PRETTY_FUNCTION__ = "_int_malloc"
>#5  0x00007f177db9e56a in __GI___libc_malloc (bytes=168) at malloc.c:3065
>        ar_ptr = 0x7f1750000020
>        victim = <optimized out>
>        hook = <optimized out>
>        tbytes = <optimized out>
>        tc_idx = 9
>        __PRETTY_FUNCTION__ = "__libc_malloc"
>#6  0x00007f175ddd8a2d in CRYPTO_zalloc (num=num@entry=168, file=file@entry=0x7f175de8d140 "crypto/rsa/rsa_lib.c", line=line@entry=56) at crypto/mem.c:107
>        ret = <optimized out>
>#7  0x00007f175de04093 in RSA_new_method (engine=engine@entry=0x0) at crypto/rsa/rsa_lib.c:56
>        ret = <optimized out>
>#8  0x00007f175de0429b in RSA_new () at crypto/rsa/rsa_lib.c:20
>No locals.
>#9  0x00007f175de01ed5 in rsa_cb (operation=<optimized out>, pval=0x7f1758068a78, it=<optimized out>, exarg=<optimized out>) at crypto/rsa/rsa_asn1.c:22
>No locals.
>#10 0x00007f175dd08b5d in asn1_item_embed_new (pval=pval@entry=0x7f1758068a78, it=it@entry=0x7f175e0e8620 <RSAPublicKey_it>, embed=embed@entry=0) at crypto/asn1/tasn_new.c:109
>        tt = 0x0
>        ef = <optimized out>
>        aux = <optimized out>
>        asn1_cb = 0x7f175de01eb0 <rsa_cb>
>        pseqval = <optimized out>
>        i = <optimized out>
>#11 0x00007f175dd08d3b in ASN1_item_ex_new (pval=pval@entry=0x7f1758068a78, it=it@entry=0x7f175e0e8620 <RSAPublicKey_it>) at crypto/asn1/tasn_new.c:39
>No locals.
>#12 0x00007f175dd0651b in asn1_item_embed_d2i (pval=pval@entry=0x7f1758068a78, in=in@entry=0x7f1758068ad0, len=<optimized out>, it=it@entry=0x7f175e0e8620 <RSAPublicKey_it>, tag=<optimized out>, tag@entry=-1, aclass=<optimized out>, aclass@entry=0, opt=0 '\000', ctx=0x7f1758068a80, depth=1) at crypto/asn1/tasn_dec.c:421
>        tt = <optimized out>
>        errtt = 0x0
>        ef = <optimized out>
>        aux = 0x7f175e0e8660 <RSAPublicKey_aux>
>        asn1_cb = 0x7f175de01eb0 <rsa_cb>
>        p = 0x7f17386db344 "\002\202\001\001"
>        q = <optimized out>
>        oclass = 138 '\212'
>        seq_eoc = 0 '\000'
>        seq_nolen = 0 '\000'
>        cst = 32 ' '
>        isopt = <optimized out>
>        tmplen = 270
>        i = <optimized out>
>        otag = 353368390
>        ret = <optimized out>
>        pchptr = <optimized out>
>#13 0x00007f175dd07101 in ASN1_item_ex_d2i (pval=pval@entry=0x7f1758068a78, in=in@entry=0x7f1758068ad0, len=<optimized out>, it=it@entry=0x7f175e0e8620 <RSAPublicKey_it>, tag=tag@entry=-1, aclass=aclass@entry=0, opt=0 '\000', ctx=0x7f1758068a80) at crypto/asn1/tasn_dec.c:123
>        rv = <optimized out>
>#14 0x00007f175dd0717f in ASN1_item_d2i (pval=0x7f1758068a78, pval@entry=0x0, in=in@entry=0x7f1758068ad0, len=<optimized out>, it=it@entry=0x7f175e0e8620 <RSAPublicKey_it>) at crypto/asn1/tasn_dec.c:113
>        c = {valid = 0 '\000', ret = 32, plen = 266, ptag = 16, pclass = 0, hdrlen = 4}
>        ptmpval = 0x0
>#15 0x00007f175de01fb0 in d2i_RSAPublicKey (a=a@entry=0x0, in=in@entry=0x7f1758068ad0, len=<optimized out>) at crypto/rsa/rsa_asn1.c:71
>No locals.
>#16 0x00007f175de01357 in rsa_pub_decode (pkey=0x7f17536ed010, pubkey=<optimized out>) at crypto/rsa/rsa_ameth.c:50
>        p = 0x7f17386db340 "0\202\001\n\002\202\001\001"
>        pklen = 270
>        rsa = 0x0
>#17 0x00007f175de4811e in x509_pubkey_decode (ppkey=ppkey@entry=0x7f173869a800, key=key@entry=0x7f173869a7f0) at crypto/x509/x_pubkey.c:123
>        pkey = 0x7f17536ed010
>#18 0x00007f175de48235 in pubkey_cb (operation=<optimized out>, pval=<optimized out>, it=<optimized out>, exarg=<optimized out>) at crypto/x509/x_pubkey.c:45
>        pubkey = 0x7f173869a7f0
>        exarg = <optimized out>
>        pubkey = <optimized out>
>        it = <optimized out>
>        pval = <optimized out>
>        pubkey = <optimized out>
>        pubkey = <optimized out>
>#19 0x00007f175dd06574 in asn1_item_embed_d2i (pval=pval@entry=0x7f17536ec610, in=<optimized out>, len=<optimized out>, it=0x7f175e0e91e0 <X509_PUBKEY_it>, tag=<optimized out>, tag@entry=-1, aclass=<optimized out>, aclass@entry=0, opt=0 '\000', ctx=0x7f1758068fe0, depth=3) at crypto/asn1/tasn_dec.c:270
>        tt = <optimized out>
>        errtt = 0x0
>        ef = <optimized out>
>        aux = <optimized out>
>        asn1_cb = <optimized out>
>        p = 0x7f1738699f6e "\243\201\237\060\201\234\060\023\006\t+\006\001\004\001\202\067\024\002\004\006\036\004"
>        q = <optimized out>
>        oclass = 0 '\000'
>        seq_eoc = 0 '\000'
>        seq_nolen = <optimized out>
>        cst = 32 ' '
>        isopt = <optimized out>
>        tmplen = <optimized out>
>        i = <optimized out>
>        otag = 32535
>        ret = <optimized out>
>        pchptr = <optimized out>
>#20 0x00007f175dd06d61 in asn1_template_noexp_d2i (val=0x7f17536ec610, in=0x7f1758068d50, len=<optimized out>, tt=tt@entry=0x7f175e0f0670 <X509_CINF_seq_tt+240>, opt=<optimized out>, ctx=0x7f1758068fe0, depth=2) at crypto/asn1/tasn_dec.c:623
>        flags = <optimized out>
>        aclass = <optimized out>
>        ret = <optimized out>
>        tval = 0x7f17536ec5f8
>        p = 0x7f1738699e48 "0\202\001\"0\r\006\t*\206H\206\367\r\001\001\001\005"
>        q = <optimized out>
>#21 0x00007f175dd06ff9 in asn1_template_ex_d2i (val=val@entry=0x7f17536ec610, in=in@entry=0x7f1758068d50, inlen=<optimized out>, tt=tt@entry=0x7f175e0f0670 <X509_CINF_seq_tt+240>, opt=<optimized out>, ctx=ctx@entry=0x7f1758068fe0, depth=2) at crypto/asn1/tasn_dec.c:498
>        flags = <optimized out>
>        aclass = <optimized out>
>        ret = <optimized out>
>        len = 0
>        p = <optimized out>
>        q = <optimized out>
>        exp_eoc = 0 '\000'
>#22 0x00007f175dd066a2 in asn1_item_embed_d2i (pval=pval@entry=0x7f1758068de0, in=0x7f1758068de8, len=<optimized out>, it=0x7f175e0e93a0 <X509_CINF_it>, tag=<optimized out>, tag@entry=-1, aclass=<optimized out>, aclass@entry=0, opt=0 '\000', ctx=0x7f1758068fe0, depth=2) at crypto/asn1/tasn_dec.c:362
>        seqtt = 0x7f175e0f0670 <X509_CINF_seq_tt+240>
>        pseqval = 0x7f17536ec610
>        tt = 0x7f175e0f0670 <X509_CINF_seq_tt+240>
>        errtt = 0x0
>        ef = <optimized out>
>        aux = <optimized out>
>        asn1_cb = <optimized out>
>        p = 0x7f1738699e48 "0\202\001\"0\r\006\t*\206H\206\367\r\001\001\001\005"
>        q = 0x7f1738699e48 "0\202\001\"0\r\006\t*\206H\206\367\r\001\001\001\005"
>        oclass = 145 '\221'
>        seq_eoc = 0 '\000'
>        seq_nolen = 0 '\000'
>        cst = 32 ' '
>        isopt = <optimized out>
>        tmplen = <optimized out>
>        i = 6
>        otag = 32535
>        ret = <optimized out>
>        pchptr = <optimized out>
>#23 0x00007f175dd06d61 in asn1_template_noexp_d2i (val=0x7f1758068de0, in=0x7f1758068f20, len=<optimized out>, tt=tt@entry=0x7f175e0f0500 <X509_seq_tt>, opt=<optimized out>, ctx=0x7f1758068fe0, depth=1) at crypto/asn1/tasn_dec.c:623
>        flags = <optimized out>
>        aclass = <optimized out>
>        ret = <optimized out>
>        tval = 0x7f17536ec5c0
>        p = 0x7f1738699cf4 "0\202\003\030\240\003\002\001\002\002\020P\224l\354\030\352\325\234M\325\227\357u\217\240\255\060\r\006\t*\206H\206\367\r\001\001\005\005"
>        q = <optimized out>
>#24 0x00007f175dd06ff9 in asn1_template_ex_d2i (val=val@entry=0x7f17536ec5c0, in=in@entry=0x7f1758068f20, inlen=<optimized out>, tt=tt@entry=0x7f175e0f0500 <X509_seq_tt>, opt=<optimized out>, ctx=ctx@entry=0x7f1758068fe0, depth=1) at crypto/asn1/tasn_dec.c:498
>        flags = <optimized out>
>        aclass = <optimized out>
>        ret = <optimized out>
>        len = 139738339018104
>        p = <optimized out>
>        q = <optimized out>
>        exp_eoc = 0 '\000'
>#25 0x00007f175dd066a2 in asn1_item_embed_d2i (pval=pval@entry=0x7f17536ecea0, in=0x7f17580690a0, len=<optimized out>, it=it@entry=0x7f175e0e9320 <X509_it>, tag=<optimized out>, tag@entry=-1, aclass=<optimized out>, aclass@entry=0, opt=0 '\000', ctx=0x7f1758068fe0, depth=1) at crypto/asn1/tasn_dec.c:362
>        seqtt = 0x7f175e0f0500 <X509_seq_tt>
>        pseqval = 0x7f17536ec5c0
>        tt = 0x7f175e0f0500 <X509_seq_tt>
>        errtt = 0x0
>        ef = <optimized out>
>        aux = <optimized out>
>        asn1_cb = <optimized out>
>        p = 0x7f1738699cf4 "0\202\003\030\240\003\002\001\002\002\020P\224l\354\030\352\325\234M\325\227\357u\217\240\255\060\r\006\t*\206H\206\367\r\001\001\005\005"
>        q = 0x7f1738699cf4 "0\202\003\030\240\003\002\001\002\002\020P\224l\354\030\352\325\234M\325\227\357u\217\240\255\060\r\006\t*\206H\206\367\r\001\001\005\005"
>        oclass = 0 '\000'
>        seq_eoc = 0 '\000'
>        seq_nolen = 0 '\000'
>        cst = 32 ' '
>        isopt = <optimized out>
>        tmplen = <optimized out>
>        i = 0
>        otag = 0
>        ret = <optimized out>
>        pchptr = <optimized out>
>#26 0x00007f175dd07101 in ASN1_item_ex_d2i (pval=pval@entry=0x7f17536ecea0, in=<optimized out>, len=<optimized out>, it=0x7f175e0e9320 <X509_it>, tag=tag@entry=-1, aclass=aclass@entry=0, opt=0 '\000', ctx=0x7f1758068fe0) at crypto/asn1/tasn_dec.c:123
>        rv = <optimized out>
>#27 0x00007f175dd0717f in ASN1_item_d2i (pval=0x7f17536ecea0, in=<optimized out>, len=<optimized out>, it=<optimized out>) at crypto/asn1/tasn_dec.c:113
>        c = {valid = 0 '\000', ret = 0, plen = 271, ptag = 3, pclass = 0, hdrlen = 4}
>        ptmpval = 0x0
>#28 0x00007f175dde99fd in PEM_X509_INFO_read_bio (bp=bp@entry=0x7f1751706cc0, sk=sk@entry=0x0, cb=cb@entry=0x0, u=u@entry=0x7f175de8b3ff) at crypto/pem/pem_info.c:195
>        cipher = {cipher = 0x0, iv = "\000\212\322\377F\371\017\025\021\000\000\000\000\000\000"}
>        xi = 0x7f17536ecea0
>        name = 0x7f17536ecda0 "CERTIFICATE"
>        header = 0x7f17386da630 ""
>        pp = <optimized out>
>        data = 0x7f1738699cf0 "0\202\004\060\060\202\003\030\240\003\002\001\002\002\020P\224l\354\030\352\325\234M\325\227\357u\217\240\255\060\r\006\t*\206H\206\367\r\001\001\005\005"
>        p = 0x7f1738699cf0 "0\202\004\060\060\202\003\030\240\003\002\001\002\002\020P\224l\354\030\352\325\234M\325\227\357u\217\240\255\060\r\006\t*\206H\206\367\r\001\001\005\005"
>        len = 1076
>        error = 0
>        ok = 0
>        ret = 0x7f1750063ec0
>        i = <optimized out>
>        raw = 0
>        ptype = <optimized out>
>        d2i = <optimized out>
>#29 0x00007f175de38bac in X509_load_cert_crl_file (ctx=0x7f1750185ee0, file=<optimized out>, type=<optimized out>) at crypto/x509/by_file.c:204
>        inf = <optimized out>
>        itmp = <optimized out>
>        i = <optimized out>
>        count = <optimized out>
>        in = 0x7f1751706cc0
>        file = <optimized out>
>        ctx = 0x7f1750185ee0
>        inf = <optimized out>
>        itmp = <optimized out>
>        i = <optimized out>
>        count = <optimized out>
>        in = <optimized out>
>        inf = <optimized out>
>        itmp = <optimized out>
>        in = <optimized out>
>        i = <optimized out>
>#30 0x00007f175de38cda in by_file_ctrl (ctx=0x7f1750185ee0, cmd=<optimized out>, argp=<optimized out>, argl=<optimized out>, ret=<optimized out>) at crypto/x509/by_file.c:67
>        ok = 0
>        file = <optimized out>
>#31 0x00007f175de3b9e3 in X509_STORE_load_locations (ctx=0x7f17500f8ee0, file=0x7f1750187a50 "/etc/pki/tls/certs/ca-bundle.crt", path=0x0) at crypto/x509/x509_d2.c:44
>        lookup = <optimized out>
>#32 0x00007f175e166d4a in ossl_send () from /lib64/libcurl.so.4
>No symbol table info available.
>#33 0x00007f177dc21a16 in __GI___clock_gettime (clock_id=1, tp=0x7f1751712c60) at ../sysdeps/unix/clock_gettime.c:115
>        sc_ret = <optimized out>
>        vdsop = <optimized out>
>        resultvar = <optimized out>
>        __arg2 = <optimized out>
>        __arg1 = <optimized out>
>        _a2 = <optimized out>
>        _a1 = <optimized out>
>        sc_ret = <optimized out>
>        vdsop = <optimized out>
>        resultvar = <optimized out>
>        __arg2 = <optimized out>
>        __arg1 = <optimized out>
>        _a2 = <optimized out>
>        _a1 = <optimized out>
>#34 0x00007f175e110627 in ?? () from /lib64/libcurl.so.4
>No symbol table info available.
>#35 0x0000000000000001 in ?? ()
>No symbol table info available.
>#36 0x0000000000000001 in ?? ()
>No symbol table info available.
>#37 0x000000000000018d in ?? ()
>No symbol table info available.
>#38 0x000000000739144c in ?? ()
>No symbol table info available.
>#39 0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 2 (Thread 0x7f176ec26700 (LWP 1609)):
>#0  0x00007f177dc093e9 in __GI___poll (fds=0x5586850194a0, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f177e5f9be6 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x5586850194a0, timeout=<optimized out>, context=0x558685018190) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f177e609520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=context@entry=0x558685018190, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 2
>        allocated_nfds = 2
>        fds = 0x5586850194a0
>#3  0x00007f177e5f9d10 in g_main_context_iteration (context=0x558685018190, may_block=may_block@entry=1) at gmain.c:3964
>        retval = <optimized out>
>#4  0x00007f177e5f9d61 in glib_worker_main (data=<optimized out>) at gmain.c:5773
>No locals.
>#5  0x00007f177e621f2a in g_thread_proxy (data=0x558685018400) at gthread.c:784
>        thread = 0x558685018400
>        __func__ = "g_thread_proxy"
>#6  0x00007f177dee0594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139738619209472, -8238602185846734974, 140735224861054, 140735224861055, 140735224861184, 140735224861184, 8323856570405961602, 8323884845519290242}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f177dc13e6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 3 (Thread 0x7f176e425700 (LWP 1610)):
>#0  0x00007f177dc093e9 in __GI___poll (fds=0x55868500ff20, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f177e5f9be6 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x55868500ff20, timeout=<optimized out>, context=0x558685010440) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f177e609520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=0x558685010440, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 2
>        allocated_nfds = 2
>        fds = 0x55868500ff20
>#3  0x00007f177e5f9fa2 in g_main_loop_run (loop=0x558685010580) at gmain.c:4099
>        self = <optimized out>
>        __func__ = "g_main_loop_run"
>#4  0x00007f177ebea6ba in gdbus_shared_thread_func (user_data=0x558685010410) at gdbusprivate.c:275
>        data = 0x558685010410
>#5  0x00007f177e621f2a in g_thread_proxy (data=0x5586850184a0) at gthread.c:784
>        thread = 0x5586850184a0
>        __func__ = "g_thread_proxy"
>#6  0x00007f177dee0594 in start_thread (arg=<optimized out>) at pthread_create.c:463
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139738610816768, -8238602185846734974, 140735224861006, 140735224861007, 140735224861136, 140735224861136, 8323855470357462914, 8323884845519290242}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f177dc13e6f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 4 (Thread 0x7f177fa30fc0 (LWP 1597)):
>#0  0x00007f177dc093e9 in __GI___poll (fds=0x55868530dfe0, nfds=3, timeout=9231) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f177e5f9be6 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x55868530dfe0, timeout=<optimized out>, context=0x558684ffc4b0) at gmain.c:4204
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f177e609520 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=0x558684ffc4b0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3898
>        max_priority = 2147483647
>        timeout = 9231
>        some_ready = <optimized out>
>        nfds = 3
>        allocated_nfds = 3
>        fds = 0x55868530dfe0
>#3  0x00007f177e5f9fa2 in g_main_loop_run (loop=0x558684ffc5f0) at gmain.c:4099
>        self = <optimized out>
>        __func__ = "g_main_loop_run"
>#4  0x0000558684457ea6 in main () at pk-main.c:256
>        loop = 0x558684ffc5f0
>        context = <optimized out>
>        ret = <optimized out>
>        disable_timer = 0
>        version = 0
>        timed_exit = 0
>        immediate_exit = 0
>        keep_environment = 0
>        exit_idle_time = 0
>        timer_id = 0
>        error = 0x0
>        backend_name = 0x0
>        conf_filename = 0x558684ffa0b0 "/etc/PackageKit/PackageKit.conf"
>        conf = 0x558684ff9400
>        engine = 0x558684ffe1a0
>        options = {{long_name = 0x558684481576 "backend", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_STRING, arg_data = 0x7fff7915daf8, description = 0x55868447a810 "Packaging backend to use, e.g. dummy", arg_description = 0x0}, {long_name = 0x55868447a6ab "disable-timer", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7fff7915dadc, description = 0x55868447a6b9 "Disable the idle timer", arg_description = 0x0}, {long_name = 0x55868447a6d0 "version", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7fff7915dae0, description = 0x55868447a6d8 "Show version and exit", arg_description = 0x0}, {long_name = 0x55868447a6ee "timed-exit", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7fff7915dae4, description = 0x55868447a6f9 "Exit after a small delay", arg_description = 0x0}, {long_name = 0x55868447a712 "immediate-exit", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7fff7915dae8, description = 0x55868447a838 "Exit after the engine has loaded", arg_description = 0x0}, {long_name = 0x55868447a721 "keep-environment", short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7fff7915daec, description = 0x55868447a860 "Don't clear environment on startup", arg_description = 0x0}, {long_name = 0x0, short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x0, description = 0x0, arg_description = 0x0}}
>        __func__ = "main"
>#5  0x00007f177db3d11b in __libc_start_main (main=0x558684457a40 <main>, argc=1, argv=0x7fff7915dd98, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff7915dd88) at ../csu/libc-start.c:308
>        self = <optimized out>
>        result = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 2785355943189757826, 94036233126208, 140735224864144, 0, 0, 8238324920981471106, 8323885290502438786}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x7fff7915dda8, 0x7f177fa6c130}, data = {prev = 0x0, cleanup = 0x0, canceltype = 2031476136}}}
>        not_first_call = <optimized out>
>#6  0x000055868445816a in _start () at pk-main.c:260
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>0x00007f177f641140  0x00007f177f642066  Yes         /lib64/libgmodule-2.0.so.0
>0x00007f177f3f0930  0x00007f177f4212bb  Yes         /lib64/libpackagekit-glib2.so.18
>0x00007f177f0e65d0  0x00007f177f1aa3d0  No          /lib64/libsqlite3.so.0
>0x00007f177eec2b50  0x00007f177eecebc6  No          /lib64/libpolkit-gobject-1.so.0
>0x00007f177eb4f4b0  0x00007f177ec370f2  Yes         /lib64/libgio-2.0.so.0
>0x00007f177e8cf7a0  0x00007f177e900660  Yes         /lib64/libgobject-2.0.so.0
>0x00007f177e5c80d0  0x00007f177e64334e  Yes         /lib64/libglib-2.0.so.0
>0x00007f177e31f150  0x00007f177e3839d9  No          /lib64/libsystemd.so.0
>0x00007f177e0faad0  0x00007f177e10b715  No          /lib64/libgcc_s.so.1
>0x00007f177dedebe0  0x00007f177deec7f1  Yes         /lib64/libpthread.so.0
>0x00007f177db3b3a0  0x00007f177dc8203f  Yes         /lib64/libc.so.6
>0x00007f177d916ee0  0x00007f177d917bbe  Yes         /lib64/libdl.so.2
>0x00007f177d6a6660  0x00007f177d6f6c66  Yes (*)     /lib64/libpcre.so.1
>0x00007f177d31c9f0  0x00007f177d3cee6a  Yes         /lib64/libm.so.6
>0x00007f177d0fc420  0x00007f177d1095f7  Yes         /lib64/libz.so.1
>0x00007f177cef2810  0x00007f177cef729a  Yes         /lib64/libffi.so.6
>0x00007f177cccedf0  0x00007f177cce693f  Yes         /lib64/libselinux.so.1
>0x00007f177cab4840  0x00007f177cac060e  Yes         /lib64/libresolv.so.2
>0x00007f177c863f30  0x00007f177c89b53e  No          /lib64/libmount.so.1
>0x00007f177c651210  0x00007f177c65446c  Yes         /lib64/librt.so.1
>0x00007f177c42b0b0  0x00007f177c441f66  Yes         /lib64/liblzma.so.5
>0x00007f177c212fd0  0x00007f177c2243db  No          /lib64/liblz4.so.1
>0x00007f177c00d5b0  0x00007f177c00ee8f  Yes         /lib64/libcap.so.2
>0x00007f177bcfc5c0  0x00007f177bdca53c  Yes         /lib64/libgcrypt.so.20
>0x00007f177f844f60  0x00007f177f863060  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f177ba6f160  0x00007f177baca593  Yes (*)     /lib64/libpcre2-8.so.0
>0x00007f177b82a740  0x00007f177b85b59e  No          /lib64/libblkid.so.1
>0x00007f177b61a740  0x00007f177b61e171  No          /lib64/libuuid.so.1
>0x00007f177b3fd1e0  0x00007f177b40e7ee  Yes         /lib64/libgpg-error.so.0
>0x00007f176d3a6530  0x00007f176d3ab3b0  No          /lib64/libnss_sss.so.2
>0x00007f176c990340  0x00007f176c9965c8  Yes         /lib64/libnss_files.so.2
>0x00007f176da15180  0x00007f176da1efa1  Yes         /usr/lib64/packagekit-backend/libpk_backend_dnf.so
>0x00007f176d7b9f40  0x00007f176d7eeb17  Yes         /lib64/libappstream-glib.so.8
>0x00007f175fddf5f0  0x00007f175fdf5b4d  Yes         /lib64/libgdk_pixbuf-2.0.so.0
>0x00007f175fba5950  0x00007f175fbc5d60  Yes         /lib64/libdnf.so.1
>0x00007f175f9712e0  0x00007f175f985efd  Yes         /lib64/librepo.so.0
>0x00007f175f704f60  0x00007f175f748e3e  No          /lib64/librpm.so.8
>0x00007f175f4cb3a0  0x00007f175f4e2de0  No          /lib64/librpmio.so.8
>0x00007f175f21d530  0x00007f175f294a1f  Yes         /lib64/libarchive.so.13
>0x00007f175ef5f430  0x00007f175efa8d09  Yes         /lib64/libsoup-2.4.so.1
>0x00007f175ecd6cb0  0x00007f175eceb25c  Yes         /lib64/libstemmer.so.0
>0x00007f175ea8e5a0  0x00007f175eab0a75  Yes         /lib64/libpng16.so.16
>0x00007f175e808e50  0x00007f175e877145  Yes         /lib64/libsolv.so.0
>0x00007f175e5ce330  0x00007f175e5f3796  Yes         /lib64/libsolvext.so.0
>0x00007f175e38db50  0x00007f175e3ade87  Yes         /lib64/libexpat.so.1
>0x00007f175e1152c0  0x00007f175e16d06b  Yes (*)     /lib64/libcurl.so.4
>0x00007f175dce1000  0x00007f175de5b6be  Yes         /lib64/libcrypto.so.1.1
>0x00007f175da35290  0x00007f175da62872  Yes         /lib64/libgpgme.so.11
>0x00007f175d81e700  0x00007f175d82b3e6  No          /lib64/libbz2.so.1
>0x00007f175d607f50  0x00007f175d6174f1  No          /lib64/libelf.so.1
>0x00007f175d370a60  0x00007f175d3f307a  No          /lib64/libzstd.so.1
>0x00007f175d1614e0  0x00007f175d168576  Yes         /lib64/libpopt.so.0
>0x00007f175cf57ba0  0x00007f175cf5be40  No          /lib64/libacl.so.1
>0x00007f175cd23dd0  0x00007f175cd46f91  No          /lib64/liblua-5.3.so
>0x00007f175c9896b0  0x00007f175cacc360  Yes         /lib64/libdb-5.3.so
>0x00007f175c621810  0x00007f175c705b9e  Yes         /lib64/libxml2.so.2
>0x00007f175c3b0860  0x00007f175c3e3acf  No          /lib64/libgssapi_krb5.so.2
>0x00007f175c182d20  0x00007f175c195325  No          /lib64/libnghttp2.so.14
>0x00007f175bf62750  0x00007f175bf662b7  Yes         /lib64/libidn2.so.0
>0x00007f175bcf57d0  0x00007f175bd2c5a0  Yes         /lib64/libssh.so.4
>0x00007f175bad8360  0x00007f175bad9dc6  Yes         /lib64/libpsl.so.5
>0x00007f175b882450  0x00007f175b8bafca  No          /lib64/libssl.so.1.1
>0x00007f175b5a33e0  0x00007f175b60eed1  Yes         /lib64/libkrb5.so.3
>0x00007f175b366590  0x00007f175b374ee4  No          /lib64/libk5crypto.so.3
>0x00007f175b15e4c0  0x00007f175b15f069  No          /lib64/libcom_err.so.2
>0x00007f175af18db0  0x00007f175af49a50  Yes         /lib64/libldap-2.4.so.2
>0x00007f175acfd680  0x00007f175ad049ca  Yes         /lib64/liblber-2.4.so.2
>0x00007f175aaea6e0  0x00007f175aaf4347  Yes         /lib64/libassuan.so.0
>0x00007f175a8e2440  0x00007f175a8e4519  No          /lib64/libattr.so.1
>0x00007f175a6d5bb0  0x00007f175a6dd1fb  No          /lib64/libkrb5support.so.0
>0x00007f175a4cf5f0  0x00007f175a4d0378  No          /lib64/libkeyutils.so.1
>0x00007f175a15ea70  0x00007f175a192e9e  Yes         /lib64/libunistring.so.2
>0x00007f1759f34af0  0x00007f1759f45d17  No          /lib64/libsasl2.so.3
>0x00007f1759ce8330  0x00007f1759d18a43  Yes (*)     /lib64/libssl3.so
>0x00007f1759abe330  0x00007f1759ad31b7  Yes (*)     /lib64/libsmime3.so
>0x00007f17597a3080  0x00007f1759877adb  Yes (*)     /lib64/libnss3.so
>0x00007f1759565ac0  0x00007f1759575fcc  Yes (*)     /lib64/libnssutil3.so
>0x00007f1759356ec0  0x00007f1759357c0c  Yes         /lib64/libplds4.so
>0x00007f17591524b0  0x00007f1759153c01  Yes         /lib64/libplc4.so
>0x00007f1758f1dc20  0x00007f1758f3f5bf  Yes         /lib64/libnspr4.so
>0x00007f1758ce91d0  0x00007f1758cf2ef0  Yes         /lib64/libcrypt.so.1
>0x00007f17584b4760  0x00007f17584c08aa  No          /usr/lib64/gio/modules/libgioremote-volume-monitor.so
>0x00007f1758281a70  0x00007f175829924a  No          /usr/lib64/gvfs/libgvfscommon.so
>0x00007f175806be80  0x00007f175806c7a8  Yes         /lib64/libutil.so.1
>0x00007f1756e65ed0  0x00007f1756e67324  Yes         /lib64/libnss_mdns4_minimal.so.2
>0x00007f1756c5ffe0  0x00007f1756c633cb  Yes         /lib64/libnss_dns.so.2
>(*): Shared library is missing debugging information.
>$1 = 0x7f177fa45000 ""
>$2 = 0x0
>rax            0x0	0
>rbx            0x6	6
>rcx            0x7f177db50eab	139738869993131
>rdx            0x0	0
>rsi            0x7f1758068490	139738237797520
>rdi            0x2	2
>rbp            0x7f17580687e0	0x7f17580687e0
>rsp            0x7f1758068490	0x7f1758068490
>r8             0x0	0
>r9             0x7f1758068490	139738237797520
>r10            0x8	8
>r11            0x246	582
>r12            0x1000	4096
>r13            0x7f1758068700	139738237798144
>r14            0x10	16
>r15            0x7f177fa45000	139738902450176
>rip            0x7f177db50eab	0x7f177db50eab <__GI_raise+267>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI_raise:
>   0x00007f177db50da0 <+0>:	push   %rbx
>   0x00007f177db50da1 <+1>:	mov    $0xffffffffffffffff,%r8
>   0x00007f177db50da8 <+8>:	mov    %edi,%ebx
>   0x00007f177db50daa <+10>:	mov    $0x8,%r10d
>   0x00007f177db50db0 <+16>:	xor    %edi,%edi
>   0x00007f177db50db2 <+18>:	sub    $0x110,%rsp
>   0x00007f177db50db9 <+25>:	mov    %fs:0x28,%rax
>   0x00007f177db50dc2 <+34>:	mov    %rax,0x108(%rsp)
>   0x00007f177db50dca <+42>:	xor    %eax,%eax
>   0x00007f177db50dcc <+44>:	mov    %rsp,%r9
>   0x00007f177db50dcf <+47>:	movabs $0xfffffffe7fffffff,%rax
>   0x00007f177db50dd9 <+57>:	mov    %r8,0x88(%rsp)
>   0x00007f177db50de1 <+65>:	mov    %rax,0x80(%rsp)
>   0x00007f177db50de9 <+73>:	mov    %r9,%rdx
>   0x00007f177db50dec <+76>:	lea    0x80(%rsp),%rsi
>   0x00007f177db50df4 <+84>:	mov    $0xe,%eax
>   0x00007f177db50df9 <+89>:	mov    %r8,0x90(%rsp)
>   0x00007f177db50e01 <+97>:	mov    %r8,0x98(%rsp)
>   0x00007f177db50e09 <+105>:	mov    %r8,0xa0(%rsp)
>   0x00007f177db50e11 <+113>:	mov    %r8,0xa8(%rsp)
>   0x00007f177db50e19 <+121>:	mov    %r8,0xb0(%rsp)
>   0x00007f177db50e21 <+129>:	mov    %r8,0xb8(%rsp)
>   0x00007f177db50e29 <+137>:	mov    %r8,0xc0(%rsp)
>   0x00007f177db50e31 <+145>:	mov    %r8,0xc8(%rsp)
>   0x00007f177db50e39 <+153>:	mov    %r8,0xd0(%rsp)
>   0x00007f177db50e41 <+161>:	mov    %r8,0xd8(%rsp)
>   0x00007f177db50e49 <+169>:	mov    %r8,0xe0(%rsp)
>   0x00007f177db50e51 <+177>:	mov    %r8,0xe8(%rsp)
>   0x00007f177db50e59 <+185>:	mov    %r8,0xf0(%rsp)
>   0x00007f177db50e61 <+193>:	mov    %r8,0xf8(%rsp)
>   0x00007f177db50e69 <+201>:	syscall 
>   0x00007f177db50e6b <+203>:	mov    $0x27,%ecx
>   0x00007f177db50e70 <+208>:	mov    %ecx,%eax
>   0x00007f177db50e72 <+210>:	syscall 
>   0x00007f177db50e74 <+212>:	mov    %rax,%rdi
>   0x00007f177db50e77 <+215>:	mov    $0xba,%eax
>   0x00007f177db50e7c <+220>:	syscall 
>   0x00007f177db50e7e <+222>:	mov    %eax,%esi
>   0x00007f177db50e80 <+224>:	mov    %ebx,%edx
>   0x00007f177db50e82 <+226>:	mov    $0xea,%eax
>   0x00007f177db50e87 <+231>:	syscall 
>   0x00007f177db50e89 <+233>:	cmp    $0xfffffffffffff000,%rax
>   0x00007f177db50e8f <+239>:	ja     0x7f177db50ed0 <__GI_raise+304>
>   0x00007f177db50e91 <+241>:	mov    %eax,%r8d
>   0x00007f177db50e94 <+244>:	mov    $0x8,%r10d
>   0x00007f177db50e9a <+250>:	xor    %edx,%edx
>   0x00007f177db50e9c <+252>:	mov    %r9,%rsi
>   0x00007f177db50e9f <+255>:	mov    $0x2,%edi
>   0x00007f177db50ea4 <+260>:	mov    $0xe,%eax
>   0x00007f177db50ea9 <+265>:	syscall 
>=> 0x00007f177db50eab <+267>:	mov    0x108(%rsp),%rcx
>   0x00007f177db50eb3 <+275>:	xor    %fs:0x28,%rcx
>   0x00007f177db50ebc <+284>:	mov    %r8d,%eax
>   0x00007f177db50ebf <+287>:	jne    0x7f177db50ede <__GI_raise+318>
>   0x00007f177db50ec1 <+289>:	add    $0x110,%rsp
>   0x00007f177db50ec8 <+296>:	pop    %rbx
>   0x00007f177db50ec9 <+297>:	retq   
>   0x00007f177db50eca <+298>:	nopw   0x0(%rax,%rax,1)
>   0x00007f177db50ed0 <+304>:	mov    0x381fa9(%rip),%rdx        # 0x7f177ded2e80
>   0x00007f177db50ed7 <+311>:	neg    %eax
>   0x00007f177db50ed9 <+313>:	mov    %eax,%fs:(%rdx)
>   0x00007f177db50edc <+316>:	jmp    0x7f177db50e94 <__GI_raise+244>
>   0x00007f177db50ede <+318>:	callq  0x7f177dc25280 <__stack_chk_fail>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1634836: 1489145 | 1489146 | 1489147 | 1489148 | 1489149 | 1489150 | 1489151 | 1489152 | 1489153 | 1489154 | 1489155 | 1489156