Attachment 1498660 Details for Bug 1644045 – File: backtrace

File: backtrace

backtrace (text/plain), 16.96 KB, created by Juan Orti on 2018-10-29 20:28:54 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Juan Orti

Created: 2018-10-29 20:28:54 UTC

Size: 16.96 KB

patch

obsolete

>[New LWP 3441]
>[New LWP 3443]
>[New LWP 3442]
>[New LWP 3458]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/xdg-desktop-portal'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  0x0000562de64760c2 in export_portal_implementation (connection=0x562de7c56030, skeleton=0x0) at src/xdg-desktop-portal.c:352
>[Current thread is 1 (Thread 0x7f5900cba640 (LWP 3441))]
>
>Thread 1 (Thread 0x7f5900cba640 (LWP 3441)):
>#0  0x0000562de64760c2 in export_portal_implementation (connection=0x562de7c56030, skeleton=0x0) at src/xdg-desktop-portal.c:352
>        error = 0x0
>#1  0x0000562de6476165 in on_bus_acquired (connection=0x562de7c56030, name=<optimized out>, user_data=<optimized out>) at src/xdg-desktop-portal.c:384
>        implementation = <optimized out>
>#2  0x00007f5901372be8 in connection_get_cb (source_object=<optimized out>, res=0x562de7c74110, user_data=0x562de7c72d60) at gdbusnameowning.c:487
>        client = 0x562de7c72d60
>#3  0x00007f5901336f74 in g_task_return_now (task=0x562de7c74110) at gtask.c:1148
>No locals.
>#4  0x00007f59013378d6 in g_task_return (task=0x562de7c74110, type=<optimized out>) at gtask.c:1206
>        source = 0x7f58e8001be0
>#5  0x00007f5901365482 in bus_get_async_initable_cb (source_object=0x562de7c56030, res=<optimized out>, user_data=0x562de7c74110) at gdbusconnection.c:7314
>        task = 0x562de7c74110
>        error = 0x0
>        __func__ = "bus_get_async_initable_cb"
>        _g_boolean_var_ = <optimized out>
>#6  0x00007f5901336f74 in g_task_return_now (task=0x562de7c741e0) at gtask.c:1148
>No locals.
>#7  0x00007f5901336fad in complete_in_idle_cb (task=task@entry=0x562de7c741e0) at gtask.c:1162
>No locals.
>#8  0x00007f590117cb7b in g_idle_dispatch (source=0x7f58e8001be0, callback=0x7f5901336fa0 <complete_in_idle_cb>, user_data=0x562de7c741e0) at gmain.c:5620
>        again = <optimized out>
>#9  0x00007f590118026d in g_main_dispatch (context=0x562de7c5f4c0) at gmain.c:3182
>        dispatch = 0x7f590117cb60 <g_idle_dispatch>
>        prev_source = 0x0
>        was_in_call = 0
>        user_data = 0x562de7c741e0
>        callback = 0x7f5901336fa0 <complete_in_idle_cb>
>        cb_funcs = 0x7f590124f280 <g_source_callback_funcs>
>        cb_data = 0x7f58e8001c80
>        need_destroy = <optimized out>
>        source = 0x7f58e8001be0
>        current = 0x562de7c57b40
>        i = 0
>        current = <optimized out>
>        i = <optimized out>
>        __func__ = "g_main_dispatch"
>        source = <optimized out>
>        _g_boolean_var_ = <optimized out>
>        was_in_call = <optimized out>
>        user_data = <optimized out>
>        callback = <optimized out>
>        cb_funcs = <optimized out>
>        cb_data = <optimized out>
>        need_destroy = <optimized out>
>        dispatch = <optimized out>
>        prev_source = <optimized out>
>        _g_boolean_var_ = <optimized out>
>#10 g_main_context_dispatch (context=context@entry=0x562de7c5f4c0) at gmain.c:3847
>No locals.
>#11 0x00007f5901180638 in g_main_context_iterate (context=0x562de7c5f4c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3920
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = 1
>        nfds = <optimized out>
>        allocated_nfds = 1
>        fds = 0x562de7c6afc0
>#12 0x00007f5901180962 in g_main_loop_run (loop=0x562de7c5c800) at gmain.c:4116
>        self = <optimized out>
>        __func__ = "g_main_loop_run"
>#13 0x0000562de6475936 in main (argc=<optimized out>, argv=<optimized out>) at src/xdg-desktop-portal.c:521
>        owner_id = 1
>        error = 0x0
>        session_bus = 0x562de7c56030
>        context = 0x562de7c435b0
>
>Thread 2 (Thread 0x7f58f286c700 (LWP 3443)):
>#0  0x00007f5900fe4301 in __GI___poll (fds=0x7f58e4009810, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f59011805a6 in g_main_context_poll (priority=<optimized out>, n_fds=3, fds=0x7f58e4009810, timeout=<optimized out>, context=0x562de7c72180) at gmain.c:4221
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f59011900f0 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=0x562de7c72180, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3915
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 3
>        allocated_nfds = 3
>        fds = 0x7f58e4009810
>#3  0x00007f5901180962 in g_main_loop_run (loop=0x562de7c722c0) at gmain.c:4116
>        self = <optimized out>
>        __func__ = "g_main_loop_run"
>#4  0x00007f590137879a in gdbus_shared_thread_func (user_data=0x562de7c72150) at gdbusprivate.c:275
>        data = 0x562de7c72150
>#5  0x00007f59011a948a in g_thread_proxy (data=0x562de7c674a0) at gthread.c:784
>        thread = 0x562de7c674a0
>        __func__ = "g_thread_proxy"
>#6  0x00007f59010c258e in start_thread (arg=<optimized out>) at pthread_create.c:486
>        ret = <optimized out>
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140020002768640, -500095860553249118, 140726543633502, 140726543633503, 140726543633632, 140020002766464, 558068652718722722, 557689265619635874}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f5900fef513 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 3 (Thread 0x7f58f3f07700 (LWP 3442)):
>#0  0x00007f5900fe4301 in __GI___poll (fds=0x562de7c68160, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f59011805a6 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x562de7c68160, timeout=<optimized out>, context=0x562de7c66ef0) at gmain.c:4221
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f59011900f0 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=context@entry=0x562de7c66ef0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3915
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x562de7c68160
>#3  0x00007f59011806d0 in g_main_context_iteration (context=0x562de7c66ef0, may_block=may_block@entry=1) at gmain.c:3981
>        retval = <optimized out>
>#4  0x00007f5901180721 in glib_worker_main (data=<optimized out>) at gmain.c:5861
>No locals.
>#5  0x00007f59011a948a in g_thread_proxy (data=0x562de7c67400) at gthread.c:784
>        thread = 0x562de7c67400
>        __func__ = "g_thread_proxy"
>#6  0x00007f59010c258e in start_thread (arg=<optimized out>) at pthread_create.c:486
>        ret = <optimized out>
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140020026472192, -500095860553249118, 140726543632782, 140726543632783, 140726543632912, 140020026470016, 558070966095482530, 557689265619635874}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f5900fef513 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 4 (Thread 0x7f58f14e3700 (LWP 3458)):
>#0  0x00007f5900fe4301 in __GI___poll (fds=0x562de7ca39a0, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x00007f59011805a6 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x562de7ca39a0, timeout=<optimized out>, context=0x562de7ca3a70) at gmain.c:4221
>        ret = <optimized out>
>        errsv = <optimized out>
>        poll_func = 0x7f59011900f0 <g_poll>
>        poll_func = <optimized out>
>        ret = <optimized out>
>        errsv = <optimized out>
>#2  g_main_context_iterate (context=context@entry=0x562de7ca3a70, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3915
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 1
>        allocated_nfds = 1
>        fds = 0x562de7ca39a0
>#3  0x00007f59011806d0 in g_main_context_iteration (context=context@entry=0x562de7ca3a70, may_block=may_block@entry=1) at gmain.c:3981
>        retval = <optimized out>
>#4  0x00007f58f36dcc6d in dconf_gdbus_worker_thread (user_data=0x562de7ca3a70) at ../gdbus/dconf-gdbus-thread.c:82
>        context = 0x562de7ca3a70
>#5  0x00007f59011a948a in g_thread_proxy (data=0x7f58e40065e0) at gthread.c:784
>        thread = 0x7f58e40065e0
>        __func__ = "g_thread_proxy"
>#6  0x00007f59010c258e in start_thread (arg=<optimized out>) at pthread_create.c:486
>        ret = <optimized out>
>        pd = <optimized out>
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140019982284544, -500095860553249118, 140726543630206, 140726543630207, 140726543630336, 140019982282368, 558076826578357922, 557689265619635874}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <optimized out>
>#7  0x00007f5900fef513 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x00007f59012de850  0x00007f59013c7032  Yes         /lib64/libgio-2.0.so.0
>0x00007f590125c770  0x00007f590128d945  Yes         /lib64/libgobject-2.0.so.0
>0x00007f590114ddc0  0x00007f59011cb732  Yes         /lib64/libglib-2.0.so.0
>0x00007f59010fe810  0x00007f59011215f5  Yes         /lib64/libpipewire-0.2.so.1
>0x00007f59010de590  0x00007f59010ef1b5  No          /lib64/libgcc_s.so.1
>0x00007f59010c0b50  0x00007f59010cef75  Yes         /lib64/libpthread.so.0
>0x00007f5900f14670  0x00007f590105fa9f  Yes         /lib64/libc.so.6
>0x00007f5900eed450  0x00007f5900eee376  Yes         /lib64/libgmodule-2.0.so.0
>0x00007f5900ee7270  0x00007f5900ee8029  Yes         /lib64/libdl.so.2
>0x00007f5900e75390  0x00007f5900ec5996  Yes         /lib64/libpcre.so.1
>0x00007f5900e6a2c0  0x00007f5900e6ed2a  Yes         /lib64/libffi.so.6
>0x00007f5900e515f0  0x00007f5900e5e7b7  Yes         /lib64/libz.so.1
>0x00007f5900e27830  0x00007f5900e3f37f  Yes         /lib64/libselinux.so.1
>0x00007f5900e09710  0x00007f5900e1566e  Yes         /lib64/libresolv.so.2
>0x00007f5900db5a80  0x00007f5900ded092  No          /lib64/libmount.so.1
>0x00007f5901484110  0x00007f59014a31a4  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f5900d25490  0x00007f5900d808c3  Yes         /lib64/libpcre2-8.so.0
>0x00007f5900cdaf60  0x00007f5900d0bd62  No          /lib64/libblkid.so.1
>0x00007f5900cc7320  0x00007f5900ccad51  No          /lib64/libuuid.so.1
>0x00007f5900cbd710  0x00007f5900cc0a80  Yes         /lib64/librt.so.1
>0x00007f58f3f59fb0  0x00007f58f3f752e1  No          /usr/lib64/gio/modules/libgvfsdbus.so
>0x00007f58f3f1def0  0x00007f58f3f3598d  No          /usr/lib64/gvfs/libgvfscommon.so
>0x00007f58f36a6550  0x00007f58f36ab3d0  No          /lib64/libnss_sss.so.2
>0x00007f58f2e8d5f0  0x00007f58f2e93c2c  Yes         /lib64/libnss_files.so.2
>0x00007f58f18501b0  0x00007f58f1862b5e  Yes         /lib64/libproxy.so.1
>0x00007f58f183e390  0x00007f58f184264b  Yes         /lib64/libmodman.so.1
>0x00007f58f1734990  0x00007f58f17eaac2  No          /lib64/libstdc++.so.6
>0x00007f58f152d490  0x00007f58f15cc5fa  Yes         /lib64/libm.so.6
>0x00007f59014567d0  0x00007f590145789e  Yes         /usr/lib64/gio/modules/libgiognomeproxy.so
>0x00007f58f36d75d0  0x00007f58f36dcef5  Yes         /usr/lib64/gio/modules/libdconfsettings.so
>0x00007f58f0cdf530  0x00007f58f0cdfd5e  Yes         /usr/lib64/gio/modules/libgiolibproxy.so
>0x00007f58f0cd6670  0x00007f58f0cd799b  Yes         /usr/lib64/libproxy/0.4.15/modules/pacrunner_mozjs.so
>0x00007f58e2a88690  0x00007f58e330acc9  Yes         /lib64/libmozjs-52.so.0
>$1 = 0x0
>$2 = 0x0
>rax            0x0                 0
>rbx            0x0                 0
>rcx            0x562de7c36010      94755161858064
>rdx            0x562de64c708c      94755137286284
>rsi            0x10                16
>rdi            0x0                 0
>rbp            0x562de7c56030      0x562de7c56030
>rsp            0x7ffd73a4cc60      0x7ffd73a4cc60
>r8             0x2                 2
>r9             0x1                 1
>r10            0x0                 0
>r11            0x0                 0
>r12            0x562de7c741e0      94755162112480
>r13            0x0                 0
>r14            0x7f590117cb60      140020247153504
>r15            0x7f58e8001be0      140019826170848
>rip            0x562de64760c2      0x562de64760c2 <export_portal_implementation+194>
>eflags         0x10246             [ PF ZF IF RF ]
>cs             0x33                51
>ss             0x2b                43
>ds             0x0                 0
>es             0x0                 0
>fs             0x0                 0
>gs             0x0                 0
>Dump of assembler code for function export_portal_implementation:
>Address range 0x562de6476000 to 0x562de64760e0:
>   0x0000562de6476000 <+0>:	push   %rbp
>   0x0000562de6476001 <+1>:	mov    %rdi,%rbp
>   0x0000562de6476004 <+4>:	push   %rbx
>   0x0000562de6476005 <+5>:	mov    %rsi,%rbx
>   0x0000562de6476008 <+8>:	mov    $0x1,%esi
>   0x0000562de647600d <+13>:	mov    %rbx,%rdi
>   0x0000562de6476010 <+16>:	sub    $0x18,%rsp
>   0x0000562de6476014 <+20>:	mov    %fs:0x28,%rax
>   0x0000562de647601d <+29>:	mov    %rax,0x8(%rsp)
>   0x0000562de6476022 <+34>:	xor    %eax,%eax
>   0x0000562de6476024 <+36>:	movq   $0x0,(%rsp)
>   0x0000562de647602c <+44>:	callq  0x562de6472a00 <g_dbus_interface_skeleton_set_flags@plt>
>   0x0000562de6476031 <+49>:	xor    %r9d,%r9d
>   0x0000562de6476034 <+52>:	xor    %r8d,%r8d
>   0x0000562de6476037 <+55>:	xor    %ecx,%ecx
>   0x0000562de6476039 <+57>:	mov    %rbx,%rdi
>   0x0000562de647603c <+60>:	lea    0x2bd(%rip),%rdx        # 0x562de6476300 <authorize_callback>
>   0x0000562de6476043 <+67>:	lea    0x5102f(%rip),%rsi        # 0x562de64c7079
>   0x0000562de647604a <+74>:	callq  0x562de6472650 <g_signal_connect_data@plt>
>   0x0000562de647604f <+79>:	mov    %rsp,%rcx
>   0x0000562de6476052 <+82>:	lea    0x511cf(%rip),%rdx        # 0x562de64c7228
>   0x0000562de6476059 <+89>:	mov    %rbp,%rsi
>   0x0000562de647605c <+92>:	mov    %rbx,%rdi
>   0x0000562de647605f <+95>:	callq  0x562de6472870 <g_dbus_interface_skeleton_export@plt>
>   0x0000562de6476064 <+100>:	test   %eax,%eax
>   0x0000562de6476066 <+102>:	je     0x562de64760b0 <export_portal_implementation+176>
>   0x0000562de6476068 <+104>:	mov    %rbx,%rdi
>   0x0000562de647606b <+107>:	callq  0x562de6472470 <g_dbus_interface_skeleton_get_info@plt>
>   0x0000562de6476070 <+112>:	mov    0x8(%rax),%rcx
>   0x0000562de6476074 <+116>:	lea    0x5101b(%rip),%rdx        # 0x562de64c7096
>   0x0000562de647607b <+123>:	mov    $0x80,%esi
>   0x0000562de6476080 <+128>:	xor    %edi,%edi
>   0x0000562de6476082 <+130>:	xor    %eax,%eax
>   0x0000562de6476084 <+132>:	callq  0x562de6472db0 <g_log@plt>
>   0x0000562de6476089 <+137>:	mov    (%rsp),%rdi
>   0x0000562de647608d <+141>:	test   %rdi,%rdi
>   0x0000562de6476090 <+144>:	je     0x562de6476097 <export_portal_implementation+151>
>   0x0000562de6476092 <+146>:	callq  0x562de6472b40 <g_error_free@plt>
>   0x0000562de6476097 <+151>:	mov    0x8(%rsp),%rax
>   0x0000562de647609c <+156>:	xor    %fs:0x28,%rax
>   0x0000562de64760a5 <+165>:	jne    0x562de64760cf <export_portal_implementation+207>
>   0x0000562de64760a7 <+167>:	add    $0x18,%rsp
>   0x0000562de64760ab <+171>:	pop    %rbx
>   0x0000562de64760ac <+172>:	pop    %rbp
>   0x0000562de64760ad <+173>:	retq   
>   0x0000562de64760ae <+174>:	xchg   %ax,%ax
>   0x0000562de64760b0 <+176>:	mov    (%rsp),%rax
>   0x0000562de64760b4 <+180>:	lea    0x50fd1(%rip),%rdx        # 0x562de64c708c
>   0x0000562de64760bb <+187>:	mov    $0x10,%esi
>   0x0000562de64760c0 <+192>:	xor    %edi,%edi
>=> 0x0000562de64760c2 <+194>:	mov    0x8(%rax),%rcx
>   0x0000562de64760c6 <+198>:	xor    %eax,%eax
>   0x0000562de64760c8 <+200>:	callq  0x562de6472db0 <g_log@plt>
>   0x0000562de64760cd <+205>:	jmp    0x562de6476089 <export_portal_implementation+137>
>   0x0000562de64760cf <+207>:	callq  0x562de6472720 <__stack_chk_fail@plt>
>   0x0000562de64760d4 <+212>:	endbr64 
>   0x0000562de64760d8 <+216>:	mov    %rax,%rbx
>   0x0000562de64760db <+219>:	jmpq   0x562de6472ee2 <export_portal_implementation+4294954722>
>Address range 0x562de6472ee2 to 0x562de6472ef8:
>   0x0000562de6472ee2 <+-12574>:	mov    (%rsp),%rdi
>   0x0000562de6472ee6 <+-12570>:	test   %rdi,%rdi
>   0x0000562de6472ee9 <+-12567>:	je     0x562de6472ef0 <export_portal_implementation+4294954736>
>   0x0000562de6472eeb <+-12565>:	callq  0x562de6472b40 <g_error_free@plt>
>   0x0000562de6472ef0 <+-12560>:	mov    %rbx,%rdi
>   0x0000562de6472ef3 <+-12557>:	callq  0x562de6472d60 <_Unwind_Resume@plt>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1644045: 1498660 | 1498661 | 1498662 | 1498663 | 1498664 | 1498665 | 1498666 | 1498667 | 1498668 | 1498669 | 1498670 | 1498671