Attachment 1519170 Details for Bug 1664322 – File: backtrace

File: backtrace

backtrace (text/plain), 21.55 KB, created by deadrat on 2019-01-08 13:02:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: deadrat

Created: 2019-01-08 13:02:56 UTC

Size: 21.55 KB

patch

obsolete

>[New LWP 8828]
>[New LWP 8826]
>[New LWP 8825]
>[New LWP 8829]
>[New LWP 8823]
>[New LWP 8822]
>[New LWP 8830]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `adb -L tcp:5037 fork-server server --reply-fd 4'.
>Program terminated with signal SIGABRT, Aborted.
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>50	  return ret;
>[Current thread is 1 (Thread 0x7ff7edf73700 (LWP 8828))]
>
>Thread 1 (Thread 0x7ff7edf73700 (LWP 8828)):
>#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
>        set = {__val = {0, 0, 0, 0, 140702862950016, 0, 386183668047020927, 4032090224, 1506881000, 281470681751456, 0, 0, 0, 0, 0, 0}}
>        pid = <optimized out>
>        tid = <optimized out>
>        ret = <optimized out>
>#1  0x00007ff7f0146895 in __GI_abort () at abort.c:79
>        save_stage = 1
>        act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 0, 0, 0, 0, 0, 140702861944784, 0, 0, 0, 515314959464822784, 0, 32, 32, 140730405302158, 140730405302159}}, sa_flags = -302568088, sa_restorer = 0x7ff7f02e56a0 <_IO_2_1_stderr_>}
>        sigs = {__val = {32, 0 <repeats 15 times>}}
>#2  0x000000000041708b in fatal_errno (fmt=<optimized out>) at core/adb/adb.cpp:103
>        ap = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7ff7edf72d50, reg_save_area = 0x7ff7edf72880}}
>        buf = "error writing ACK to fd 4\000\367\355\367\177\000\000\240\331\b\360\367\177\000\000P\321\232\360\367\177\000\000\000\000\000\000\000\000\000\000\017\274\230\360\367\177\000\000\003\000\000\000\000\000\000\000\240\331\b\360\367\177\000\000\005", '\000' <repeats 15 times>, "\001\000\000\000\000\000\000\000P\321\232\360\367\177\000\000\000\000\000\000\000\000\000\000G,@\000\000\000\000\000\340)\367\355\367\177\000\000\360)\367\355\367\177\000\000\260\324\232\360\367\177\000\000\000\000\000\000\000\000\000\000\001", '\000' <repeats 15 times>, "\377\377\377\377", '\000' <repeats 12 times>, "h\rd\360\367\177\000\000"...
>        err = 32
>#3  0x000000000045fced in adb_server_main(int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, int)::$_1::operator()() const (this=0x1edfa18) at core/adb/client/main.cpp:181
>No locals.
>#4  std::__invoke_impl<void, adb_server_main(int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, int)::$_1>(std::__invoke_other, adb_server_main(int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, int)::$_1&&) (__f=...) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/bits/invoke.h:60
>No locals.
>#5  std::__invoke<adb_server_main(int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, int)::$_1>(adb_server_main(int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, int)::$_1&&) (__fn=...) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/bits/invoke.h:95
>No locals.
>#6  std::thread::_Invoker<std::tuple<adb_server_main(int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, int)::$_1> >::_M_invoke<0ul> (this=0x1edfa18) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/thread:234
>No locals.
>#7  std::thread::_Invoker<std::tuple<adb_server_main(int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, int)::$_1> >::operator()() (this=0x1edfa18) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/thread:243
>No locals.
>#8  std::thread::_State_impl<std::thread::_Invoker<std::tuple<adb_server_main(int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, int)::$_1> > >::_M_run() (this=0x1edfa10) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/thread:186
>No locals.
>#9  0x00007ff7f054e943 in ?? () from /lib64/libstdc++.so.6
>No symbol table info available.
>#10 0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 2 (Thread 0x7ff7ee774700 (LWP 8826)):
>#0  0x00007ff7f064d77c in __pthread_cond_wait_common (abstime=0x0, mutex=0x1ede150, cond=0x1ede180) at pthread_cond_wait.c:418
>        err = -512
>        g = 0
>        flags = <optimized out>
>        g1_start = <optimized out>
>        signals = <optimized out>
>        result = 0
>        wseq = 0
>        seq = 0
>        private = 0
>        maxspin = <optimized out>
>        err = <optimized out>
>        result = <optimized out>
>        wseq = <optimized out>
>        g = <optimized out>
>        seq = <optimized out>
>        flags = <optimized out>
>        private = <optimized out>
>        signals = <optimized out>
>        g1_start = <optimized out>
>        spin = <optimized out>
>        buffer = <optimized out>
>        cbuffer = <optimized out>
>        rt = <optimized out>
>        s = <optimized out>
>#1  __pthread_cond_wait (cond=0x1ede180, mutex=0x1ede150) at pthread_cond_wait.c:655
>No locals.
>#2  0x00007ff7f0548690 in ?? () from /lib64/libstdc++.so.6
>No symbol table info available.
>#3  0x00007ff7ee773d10 in ?? ()
>No symbol table info available.
>#4  0x0000000000435f4f in client_socket_thread () at core/adb/transport_local.cpp:208
>        lock = {_M_device = 0x1ede150, _M_owns = true}
>        ports = <optimized out>
>        next_ports = <optimized out>
>#5  0x00007ff7f054e943 in ?? () from /lib64/libstdc++.so.6
>No symbol table info available.
>#6  0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 3 (Thread 0x7ff7eef75700 (LWP 8825)):
>#0  0x00007ff7f0651500 in __GI___nanosleep (requested_time=0x7ff7eef73d60, remaining=0x7ff7eef73d60) at ../sysdeps/unix/sysv/linux/nanosleep.c:28
>        resultvar = 18446744073709551615
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x0000000000462e2b in std::this_thread::sleep_for<long, std::ratio<1l, 1l> > (__rtime=...) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/thread:369
>        __s = <optimized out>
>        __ns = <optimized out>
>        __ts = <optimized out>
>#2  native::device_poll_thread () at core/adb/client/usb_linux.cpp:588
>No locals.
>#3  0x00007ff7f054e943 in ?? () from /lib64/libstdc++.so.6
>No symbol table info available.
>#4  0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 4 (Thread 0x7ff7ed772700 (LWP 8829)):
>#0  0x00007ff7f021809b in ioctl () at ../sysdeps/unix/syscall-template.S:78
>No locals.
>#1  0x00000000004608a0 in native::usb_bulk_read (h=<optimized out>, data=<optimized out>, len=<optimized out>) at core/adb/client/usb_linux.cpp:372
>        out = 0x0
>        saved_errno = <optimized out>
>        res = <optimized out>
>        fd = 12
>        urb = <optimized out>
>        lock = <optimized out>
>        out = <optimized out>
>        saved_errno = <optimized out>
>        res = <optimized out>
>        fd = <optimized out>
>        __result = <optimized out>
>#2  native::usb_read (h=0x7ff7e0010c20, _data=0x7ff7ed770d00, len=512) at core/adb/client/usb_linux.cpp:440
>        xfer = <optimized out>
>        data = 0x7ff7ed770d00 "AUTH\001"
>        orig_len = 512
>        n = <optimized out>
>#3  0x0000000000437a98 in UsbReadMessage (h=0x7ff7e0010c20, msg=0x7ff7d80011a0) at core/adb/transport_usb.cpp:48
>        buffer = "AUTH\001\000\000\000\000\000\000\000\024\000\000\000\345\b\000\000\276\252\253\267", '\000' <repeats 976 times>...
>        usb_packet_size = 512
>        n = <optimized out>
>        _values = <optimized out>
>        _values = <optimized out>
>#4  remote_read (p=0x7ff7d80011a0, usb=0x7ff7e0010c20) at core/adb/transport_usb.cpp:96
>        n = <optimized out>
>#5  UsbConnection::Read (this=<optimized out>, packet=0x7ff7d80011a0) at core/adb/transport_usb.cpp:153
>        rc = <optimized out>
>#6  0x00000000004314f1 in BlockingConnectionAdapter::Start()::$_4::operator()() const (this=<optimized out>) at core/adb/transport.cpp:256
>        packet = <optimized out>
>        packet = <optimized out>
>#7  std::__invoke_impl<void, BlockingConnectionAdapter::Start()::$_4>(std::__invoke_other, BlockingConnectionAdapter::Start()::$_4&&) (__f=...) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/bits/invoke.h:60
>No locals.
>#8  std::__invoke<BlockingConnectionAdapter::Start()::$_4>(BlockingConnectionAdapter::Start()::$_4&&) (__fn=...) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/bits/invoke.h:95
>No locals.
>#9  std::thread::_Invoker<std::tuple<BlockingConnectionAdapter::Start()::$_4> >::_M_invoke<0ul> (this=<optimized out>) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/thread:234
>No locals.
>#10 std::thread::_Invoker<std::tuple<BlockingConnectionAdapter::Start()::$_4> >::operator()() (this=<optimized out>) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/thread:243
>No locals.
>#11 std::thread::_State_impl<std::thread::_Invoker<std::tuple<BlockingConnectionAdapter::Start()::$_4> > >::_M_run() (this=<optimized out>) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/thread:186
>No locals.
>#12 0x00007ff7f054e943 in ?? () from /lib64/libstdc++.so.6
>No symbol table info available.
>#13 0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 5 (Thread 0x7ff7eff77700 (LWP 8823)):
>#0  0x00007ff7f064d77c in __pthread_cond_wait_common (abstime=0x0, mutex=0x1ede030, cond=0x1ede068) at pthread_cond_wait.c:418
>        err = -512
>        g = 0
>        flags = <optimized out>
>        g1_start = <optimized out>
>        signals = <optimized out>
>        result = 0
>        wseq = 0
>        seq = 0
>        private = 0
>        maxspin = <optimized out>
>        err = <optimized out>
>        result = <optimized out>
>        wseq = <optimized out>
>        g = <optimized out>
>        seq = <optimized out>
>        flags = <optimized out>
>        private = <optimized out>
>        signals = <optimized out>
>        g1_start = <optimized out>
>        spin = <optimized out>
>        buffer = <optimized out>
>        cbuffer = <optimized out>
>        rt = <optimized out>
>        s = <optimized out>
>#1  __pthread_cond_wait (cond=0x1ede068, mutex=0x1ede030) at pthread_cond_wait.c:655
>No locals.
>#2  0x00007ff7f0548690 in ?? () from /lib64/libstdc++.so.6
>No symbol table info available.
>#3  0x00000000000000fc in ?? ()
>No symbol table info available.
>#4  0x000000000042fbdb in (anonymous namespace)::ReconnectHandler::Run (this=0x1ede030) at core/adb/transport.cpp:181
>        lock = {_M_device = 0x1ede030, _M_owns = true}
>        assume_lock = <optimized out>
>        now = <optimized out>
>        attempt = <optimized out>
>#5  0x00007ff7f054e943 in ?? () from /lib64/libstdc++.so.6
>No symbol table info available.
>#6  0x0000000000000000 in ?? ()
>No symbol table info available.
>
>Thread 6 (Thread 0x7ff7eff7ad00 (LWP 8822)):
>#0  0x00007ff7f0216421 in __GI___poll (fds=0x1ee2730, nfds=4, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
>        resultvar = 18446744073709551100
>        sc_cancel_oldtype = 0
>        sc_ret = <optimized out>
>#1  0x0000000000439ed0 in adb_poll (fds=<optimized out>, nfds=<optimized out>, timeout=-1) at core/adb/sysdeps.h:586
>        __result = <optimized out>
>#2  fdevent_process () at core/adb/fdevent.cpp:240
>        pollfds = <optimized out>
>        ret = <optimized out>
>        __range1 = <optimized out>
>        __begin1 = <optimized out>
>        __end1 = <optimized out>
>        pair = <optimized out>
>        _values = <optimized out>
>        __range1 = <optimized out>
>        __begin1 = <optimized out>
>        __end1 = <optimized out>
>        pollfd = <optimized out>
>        events = <optimized out>
>        fde = <optimized out>
>        it = <optimized out>
>        _values = <optimized out>
>#3  fdevent_loop () at core/adb/fdevent.cpp:371
>No locals.
>#4  0x000000000045f6d4 in adb_server_main (is_daemon=1, socket_spec=..., ack_reply_fd=<optimized out>) at core/adb/client/main.cpp:190
>        leak = <optimized out>
>        error = <optimized out>
>        start = <optimized out>
>#5  0x0000000000448794 in adb_commandline (argc=<optimized out>, argv=<optimized out>) at core/adb/client/commandline.cpp:1480
>        ack_reply_fd = <optimized out>
>        transport_type = <optimized out>
>        is_server = <optimized out>
>        is_daemon = <optimized out>
>        no_daemon = <optimized out>
>        transport_id = <optimized out>
>        serial = <optimized out>
>        server_socket_str = 0x7ffe59d25264 "tcp:5037"
>        server_port_str = <optimized out>
>        server_host_str = <optimized out>
>        r = <optimized out>
>#6  0x00007ff7f0148413 in __libc_start_main (main=0x45fa10 <main(int, char**)>, argc=7, argv=0x7ffe59d233c8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffe59d233b8) at ../csu/libc-start.c:308
>        self = <optimized out>
>        result = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, -257899233545886633, 4231232, 140730405368768, 0, 0, 258799921279722583, 253365572675888215}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x7ffe59d23408, 0x7ff7f09ad150}, data = {prev = 0x0, cleanup = 0x0, canceltype = 1506948104}}}
>        not_first_call = <optimized out>
>#7  0x000000000040906e in _start () at core/adb/adb.cpp:1233
>No symbol table info available.
>
>Thread 7 (Thread 0x7ff7ecf71700 (LWP 8830)):
>#0  0x00007ff7f064d77c in __pthread_cond_wait_common (abstime=0x0, mutex=0x7ff7e0012398, cond=0x7ff7e00123c0) at pthread_cond_wait.c:418
>        err = -512
>        g = 0
>        flags = <optimized out>
>        g1_start = <optimized out>
>        signals = <optimized out>
>        result = 0
>        wseq = 4
>        seq = 2
>        private = 0
>        maxspin = <optimized out>
>        err = <optimized out>
>        result = <optimized out>
>        wseq = <optimized out>
>        g = <optimized out>
>        seq = <optimized out>
>        flags = <optimized out>
>        private = <optimized out>
>        signals = <optimized out>
>        g1_start = <optimized out>
>        spin = <optimized out>
>        buffer = <optimized out>
>        cbuffer = <optimized out>
>        rt = <optimized out>
>        s = <optimized out>
>#1  __pthread_cond_wait (cond=0x7ff7e00123c0, mutex=0x7ff7e0012398) at pthread_cond_wait.c:655
>No locals.
>#2  0x00007ff7f0548690 in ?? () from /lib64/libstdc++.so.6
>No symbol table info available.
>#3  0x00007ff7e0012398 in ?? ()
>No symbol table info available.
>#4  0x000000000043196b in std::condition_variable::wait<BlockingConnectionAdapter::Start()::$_5::operator()() const::{lambda()#3}>(std::unique_lock<std::mutex>&, BlockingConnectionAdapter::Start()::$_5::operator()() const::{lambda()#3}) (this=<optimized out>, __p=..., __lock=...) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/condition_variable:99
>No locals.
>#5  BlockingConnectionAdapter::Start()::$_5::operator()() const (this=<optimized out>) at core/adb/transport.cpp:270
>        packet = <optimized out>
>        packet = <optimized out>
>        lock = <optimized out>
>        assume_locked = <optimized out>
>#6  std::__invoke_impl<void, BlockingConnectionAdapter::Start()::$_5>(std::__invoke_other, BlockingConnectionAdapter::Start()::$_5&&) (__f=...) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/bits/invoke.h:60
>No locals.
>#7  std::__invoke<BlockingConnectionAdapter::Start()::$_5>(BlockingConnectionAdapter::Start()::$_5&&) (__fn=...) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/bits/invoke.h:95
>No locals.
>#8  std::thread::_Invoker<std::tuple<BlockingConnectionAdapter::Start()::$_5> >::_M_invoke<0ul> (this=<optimized out>) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/thread:234
>No locals.
>#9  std::thread::_Invoker<std::tuple<BlockingConnectionAdapter::Start()::$_5> >::operator()() (this=<optimized out>) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/thread:243
>No locals.
>#10 std::thread::_State_impl<std::thread::_Invoker<std::tuple<BlockingConnectionAdapter::Start()::$_5> > >::_M_run() (this=<optimized out>) at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/thread:186
>No locals.
>#11 0x00007ff7f054e943 in ?? () from /lib64/libstdc++.so.6
>No symbol table info available.
>#12 0x0000000000000000 in ?? ()
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>0x00007ff7f093e5f0  0x00007ff7f094b7b7  Yes         /lib64/libz.so.1
>0x00007ff7f06db000  0x00007ff7f087acd0  Yes         /lib64/libcrypto.so.1.1
>0x00007ff7f0645b50  0x00007ff7f0654025  Yes         /lib64/libpthread.so.0
>0x00007ff7f0627eb0  0x00007ff7f063449c  Yes         /lib64/libusb-1.0.so.0
>0x00007ff7f051b990  0x00007ff7f05d1d22  No          /lib64/libstdc++.so.6
>0x00007ff7f0314490  0x00007ff7f03b35fa  Yes         /lib64/libm.so.6
>0x00007ff7f02ed590  0x00007ff7f02fe1b5  No          /lib64/libgcc_s.so.1
>0x00007ff7f0146670  0x00007ff7f0291c3f  Yes         /lib64/libc.so.6
>0x00007ff7f011f270  0x00007ff7f0120039  Yes         /lib64/libdl.so.2
>0x00007ff7f0982110  0x00007ff7f09a12b4  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007ff7f00f9e10  0x00007ff7f0111254  No          /lib64/libudev.so.1
>0x00007ff7f00ed710  0x00007ff7f00f0a80  Yes         /lib64/librt.so.1
>0x00007ff7f009ba80  0x00007ff7f00d3092  No          /lib64/libmount.so.1
>0x00007ff7f0043f60  0x00007ff7f0074d62  No          /lib64/libblkid.so.1
>0x00007ff7f0032320  0x00007ff7f0035d51  No          /lib64/libuuid.so.1
>0x00007ff7f000b830  0x00007ff7f002337f  Yes         /lib64/libselinux.so.1
>0x00007ff7eff80490  0x00007ff7effdb943  Yes         /lib64/libpcre2-8.so.0
>$1 = 0x0
>rax            0x0                 0
>rbx            0x6                 6
>rcx            0x7ff7f015c53f      140702861608255
>rdx            0x0                 0
>rsi            0x7ff7edf72610      140702826046992
>rdi            0x2                 2
>rbp            0x20                0x20
>rsp            0x7ff7edf72610      0x7ff7edf72610
>r8             0x0                 0
>r9             0x7ff7edf72610      140702826046992
>r10            0x8                 8
>r11            0x246               582
>r12            0x7ffe59d12f8e      140730405302158
>r13            0x7ffe59d12f8f      140730405302159
>r14            0x7ff7edf72d68      140702826048872
>r15            0x7ff7edf72e80      140702826049152
>rip            0x7ff7f015c53f      0x7ff7f015c53f <__GI_raise+271>
>eflags         0x246               [ PF ZF IF ]
>cs             0x33                51
>ss             0x2b                43
>ds             0x0                 0
>es             0x0                 0
>fs             0x0                 0
>gs             0x0                 0
>Dump of assembler code for function __GI_raise:
>   0x00007ff7f015c430 <+0>:	endbr64 
>   0x00007ff7f015c434 <+4>:	push   %rbx
>   0x00007ff7f015c435 <+5>:	mov    $0xffffffffffffffff,%r8
>   0x00007ff7f015c43c <+12>:	mov    %edi,%ebx
>   0x00007ff7f015c43e <+14>:	mov    $0x8,%r10d
>   0x00007ff7f015c444 <+20>:	xor    %edi,%edi
>   0x00007ff7f015c446 <+22>:	sub    $0x110,%rsp
>   0x00007ff7f015c44d <+29>:	mov    %fs:0x28,%rax
>   0x00007ff7f015c456 <+38>:	mov    %rax,0x108(%rsp)
>   0x00007ff7f015c45e <+46>:	xor    %eax,%eax
>   0x00007ff7f015c460 <+48>:	mov    %rsp,%r9
>   0x00007ff7f015c463 <+51>:	movabs $0xfffffffe7fffffff,%rax
>   0x00007ff7f015c46d <+61>:	mov    %r8,0x88(%rsp)
>   0x00007ff7f015c475 <+69>:	mov    %rax,0x80(%rsp)
>   0x00007ff7f015c47d <+77>:	mov    %r9,%rdx
>   0x00007ff7f015c480 <+80>:	lea    0x80(%rsp),%rsi
>   0x00007ff7f015c488 <+88>:	mov    $0xe,%eax
>   0x00007ff7f015c48d <+93>:	mov    %r8,0x90(%rsp)
>   0x00007ff7f015c495 <+101>:	mov    %r8,0x98(%rsp)
>   0x00007ff7f015c49d <+109>:	mov    %r8,0xa0(%rsp)
>   0x00007ff7f015c4a5 <+117>:	mov    %r8,0xa8(%rsp)
>   0x00007ff7f015c4ad <+125>:	mov    %r8,0xb0(%rsp)
>   0x00007ff7f015c4b5 <+133>:	mov    %r8,0xb8(%rsp)
>   0x00007ff7f015c4bd <+141>:	mov    %r8,0xc0(%rsp)
>   0x00007ff7f015c4c5 <+149>:	mov    %r8,0xc8(%rsp)
>   0x00007ff7f015c4cd <+157>:	mov    %r8,0xd0(%rsp)
>   0x00007ff7f015c4d5 <+165>:	mov    %r8,0xd8(%rsp)
>   0x00007ff7f015c4dd <+173>:	mov    %r8,0xe0(%rsp)
>   0x00007ff7f015c4e5 <+181>:	mov    %r8,0xe8(%rsp)
>   0x00007ff7f015c4ed <+189>:	mov    %r8,0xf0(%rsp)
>   0x00007ff7f015c4f5 <+197>:	mov    %r8,0xf8(%rsp)
>   0x00007ff7f015c4fd <+205>:	syscall 
>   0x00007ff7f015c4ff <+207>:	mov    $0x27,%ecx
>   0x00007ff7f015c504 <+212>:	mov    %ecx,%eax
>   0x00007ff7f015c506 <+214>:	syscall 
>   0x00007ff7f015c508 <+216>:	mov    %rax,%rdi
>   0x00007ff7f015c50b <+219>:	mov    $0xba,%eax
>   0x00007ff7f015c510 <+224>:	syscall 
>   0x00007ff7f015c512 <+226>:	mov    %eax,%esi
>   0x00007ff7f015c514 <+228>:	mov    %ebx,%edx
>   0x00007ff7f015c516 <+230>:	mov    $0xea,%eax
>   0x00007ff7f015c51b <+235>:	syscall 
>   0x00007ff7f015c51d <+237>:	cmp    $0xfffffffffffff000,%rax
>   0x00007ff7f015c523 <+243>:	ja     0x7ff7f015c560 <__GI_raise+304>
>   0x00007ff7f015c525 <+245>:	mov    %eax,%r8d
>   0x00007ff7f015c528 <+248>:	mov    $0x8,%r10d
>   0x00007ff7f015c52e <+254>:	xor    %edx,%edx
>   0x00007ff7f015c530 <+256>:	mov    %r9,%rsi
>   0x00007ff7f015c533 <+259>:	mov    $0x2,%edi
>   0x00007ff7f015c538 <+264>:	mov    $0xe,%eax
>   0x00007ff7f015c53d <+269>:	syscall 
>=> 0x00007ff7f015c53f <+271>:	mov    0x108(%rsp),%rcx
>   0x00007ff7f015c547 <+279>:	xor    %fs:0x28,%rcx
>   0x00007ff7f015c550 <+288>:	mov    %r8d,%eax
>   0x00007ff7f015c553 <+291>:	jne    0x7ff7f015c56e <__GI_raise+318>
>   0x00007ff7f015c555 <+293>:	add    $0x110,%rsp
>   0x00007ff7f015c55c <+300>:	pop    %rbx
>   0x00007ff7f015c55d <+301>:	retq   
>   0x00007ff7f015c55e <+302>:	xchg   %ax,%ax
>   0x00007ff7f015c560 <+304>:	mov    0x187901(%rip),%rdx        # 0x7ff7f02e3e68
>   0x00007ff7f015c567 <+311>:	neg    %eax
>   0x00007ff7f015c569 <+313>:	mov    %eax,%fs:(%rdx)
>   0x00007ff7f015c56c <+316>:	jmp    0x7ff7f015c528 <__GI_raise+248>
>   0x00007ff7f015c56e <+318>:	callq  0x7ff7f0233090 <__stack_chk_fail>
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1664322: 1519170 | 1519171 | 1519172 | 1519173 | 1519174 | 1519175 | 1519176 | 1519177 | 1519178 | 1519179 | 1519180