Attachment 1593013 Details for Bug 1732645 – File: backtrace

File: backtrace

backtrace (text/plain), 13.99 KB, created by Joao Marcos Floriano on 2019-07-24 01:08:49 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joao Marcos Floriano

Created: 2019-07-24 01:08:49 UTC

Size: 13.99 KB

patch

obsolete

>[New LWP 25667]
>Core was generated by `wash'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  0x00007fa81942ceb2 in floor_ifunc_selector () at ../sysdeps/x86_64/fpu/multiarch/ifunc-sse4_1.h:29
>29	  if (CPU_FEATURES_CPU_P (cpu_features, SSE4_1))
>
>Thread 1 (LWP 25667):
>#0  0x00007fa81942ceb2 in floor_ifunc_selector () at ../sysdeps/x86_64/fpu/multiarch/ifunc-sse4_1.h:29
>        cpu_features = <optimized out>
>#1  __floor_ifunc () at ../sysdeps/x86_64/fpu/multiarch/s_floor.c:31
>        res = <optimized out>
>#2  0x00007fa81956ae2a in elf_machine_rela (skip_ifunc=<optimized out>, reloc_addr_arg=0x7fa8193b2f88 <floor@got.plt>, version=<optimized out>, sym=<optimized out>, reloc=0x7fa8193a9aa0, map=0x7fa8195429e0) at ../sysdeps/x86_64/dl-machine.h:330
>        refsym = 0x7fa8193a87a0
>        sym_map = <optimized out>
>        value = <optimized out>
>        reloc_addr = 0x7fa8193b2f88 <floor@got.plt>
>        r_type = 7
>        reloc_addr = <optimized out>
>        r_type = <optimized out>
>        refsym = <optimized out>
>        sym_map = <optimized out>
>        value = <optimized out>
>        _lr = <optimized out>
>        _tc = <optimized out>
>        v = <optimized out>
>        strtab = <optimized out>
>        fmt = <optimized out>
>        td = <optimized out>
>        strtab = <optimized out>
>#3  elf_dynamic_do_Rela (skip_ifunc=<optimized out>, lazy=<optimized out>, nrelative=<optimized out>, relsize=<optimized out>, reladdr=<optimized out>, map=0x7fa8195429e0) at do-rel.h:137
>        ndx = <optimized out>
>        version = <optimized out>
>        symtab = <optimized out>
>        relative = <optimized out>
>        end = <optimized out>
>        l_addr = <optimized out>
>        r2 = 0x0
>        r = 0x7fa8193a9aa0
>        end2 = 0x0
>        r = <optimized out>
>        end = <optimized out>
>        l_addr = <optimized out>
>        r2 = <optimized out>
>        end2 = <optimized out>
>        symtab = <optimized out>
>        relative = <optimized out>
>        version = <optimized out>
>        ndx = <optimized out>
>        ndx = <optimized out>
>#4  _dl_relocate_object (l=l@entry=0x7fa8195429e0, scope=<optimized out>, reloc_mode=<optimized out>, consider_profiling=<optimized out>, consider_profiling@entry=0) at dl-reloc.c:254
>        ranges_index = <optimized out>
>        ranges = {{start = 0, size = 0, nrelative = 0, lazy = 0}, {start = 0, size = 0, nrelative = 0, lazy = 0}}
>        edr_lazy = <optimized out>
>        strtab = <optimized out>
>        textrels = <optimized out>
>        errstring = 0x0
>        lazy = <optimized out>
>        skip_ifunc = <optimized out>
>#5  0x00007fa8195626c2 in dl_main (phdr=<optimized out>, phnum=<optimized out>, user_entry=<optimized out>, auxv=<optimized out>) at rtld.c:2193
>        l = 0x7fa8195429e0
>        lnp = <optimized out>
>        consider_profiling = 0
>        start = 48542899852424
>        stop = <optimized out>
>        i = <optimized out>
>        ph = <optimized out>
>        mode = <optimized out>
>        main_map = <optimized out>
>        file_size = 140723883059480
>        file = <optimized out>
>        has_interp = <optimized out>
>        i = <optimized out>
>        prelinked = <optimized out>
>        rtld_is_main = <optimized out>
>        start = <optimized out>
>        stop = <optimized out>
>        diff = <optimized out>
>        tcbp = <optimized out>
>        __PRETTY_FUNCTION__ = "dl_main"
>        first_preload = <optimized out>
>        r = <optimized out>
>        rtld_ehdr = <optimized out>
>        rtld_phdr = <optimized out>
>        cnt = <optimized out>
>        need_security_init = <optimized out>
>        count_modids = <optimized out>
>        preloads = <optimized out>
>        npreloads = <optimized out>
>        preload_file = "/etc/ld.so.preload"
>        rtld_multiple_ref = <optimized out>
>        was_tls_init_tp_called = <optimized out>
>#6  0x00007fa819577efb in _dl_sysdep_start (start_argptr=start_argptr@entry=0x7ffcd50fa900, dl_main=dl_main@entry=0x7fa819560660 <dl_main>) at ../elf/dl-sysdep.c:253
>        phdr = <optimized out>
>        phnum = <optimized out>
>        user_entry = 93826927369744
>        av = <optimized out>
>#7  0x00007fa8195601f6 in _dl_start_final (arg=0x7ffcd50fa900) at rtld.c:413
>        start_addr = <optimized out>
>        rtld_total_time = 0
>        start_addr = <optimized out>
>        rtld_total_time = <optimized out>
>        end_time = <optimized out>
>#8  _dl_start (arg=0x7ffcd50fa900) at rtld.c:520
>        entry = <optimized out>
>#9  0x00007fa81955f118 in _start () from /lib64/ld-linux-x86-64.so.2
>        tls_init_tp_called = true
>        version_info = 0
>        relocate_time = 0
>        load_time = 8728104
>        audit_list = 0x0
>        _dl_rtld_libname2 = {name = 0x0, next = 0x0, dont_free = 0}
>        library_path = 0x0
>        start_time = 48542890870168
>        preloadlist = 0x0
>        any_debug = 0
>        _dl_rtld_libname = {name = 0x5555c8a8e2e0 "/lib64/ld-linux-x86-64.so.2", next = 0x7fa819589fb0 <newname>, dont_free = 0}
>        _dl_skip_args = 0
>        audit_list_string = 0x0
>        __GI__dl_starting_up = 1
>        _rtld_global = {_dl_ns = {{_ns_loaded = 0x7fa81958a150, _ns_nloaded = 7, _ns_main_searchlist = 0x7fa81958a410, _ns_global_scope_alloc = 0, _ns_unique_sym_table = {lock = {mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 1, __spins = 0, __elision = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 16 times>, "\001", '\000' <repeats 22 times>, __align = 0}}, entries = 0x0, size = 0, n_elements = 0, free = 0x0}, _ns_debug = {r_version = 0, r_map = 0x0, r_brk = 0, r_state = RT_CONSISTENT, r_ldbase = 0}}, {_ns_loaded = 0x0, _ns_nloaded = 0, _ns_main_searchlist = 0x0, _ns_global_scope_alloc = 0, _ns_unique_sym_table = {lock = {mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __elision = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0}}, entries = 0x0, size = 0, n_elements = 0, free = 0x0}, _ns_debug = {r_version = 0, r_map = 0x0, r_brk = 0, r_state = RT_CONSISTENT, r_ldbase = 0}} <repeats 15 times>}, _dl_nns = 1, _dl_load_lock = {mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 1, __spins = 0, __elision = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 16 times>, "\001", '\000' <repeats 22 times>, __align = 0}}, _dl_load_write_lock = {mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 1, __spins = 0, __elision = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 16 times>, "\001", '\000' <repeats 22 times>, __align = 0}}, _dl_load_adds = 7, _dl_initfirst = 0x0, _dl_cpuclock_offset = 48542890890656, _dl_profile_map = 0x0, _dl_num_relocations = 142, _dl_num_cache_relocations = 3, _dl_all_dirs = 0x7fa81958ac60, _dl_rtld_map = {l_addr = 140359956291584, l_name = 0x5555c8a8e2e0 "/lib64/ld-linux-x86-64.so.2", l_ld = 0x7fa819588df0, l_next = 0x0, l_prev = 0x7fa819542ed0, l_real = 0x7fa819589990 <_rtld_local+2448>, l_ns = 0, l_libname = 0x7fa81958a000 <_dl_rtld_libname>, l_info = {0x0, 0x0, 0x7fa819588e70, 0x7fa819588e60, 0x7fa819588e00, 0x7fa819588e20, 0x7fa819588e30, 0x7fa819588ea0, 0x7fa819588eb0, 0x7fa819588ec0, 0x7fa819588e40, 0x7fa819588e50, 0x0, 0x0, 0x7fa819588df0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fa819588e80, 0x0, 0x0, 0x7fa819588e90, 0x7fa819588ef0, 0x0 <repeats 12 times>, 0x7fa819588ee0, 0x7fa819588ed0, 0x7fa819588f00, 0x0, 0x7fa819588f20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fa819588f10, 0x0 <repeats 25 times>, 0x7fa819588e10}, l_phdr = 0x7fa81955e040, l_entry = 0, l_phnum = 10, l_ldnum = 0, l_searchlist = {r_list = 0x0, r_nlist = 0}, l_symbolic_searchlist = {r_list = 0x0, r_nlist = 0}, l_loader = 0x0, l_versions = 0x7fa819543c90, l_nversions = 6, l_nbuckets = 17, l_gnu_bitmask_idxbits = 3, l_gnu_shift = 8, l_gnu_bitmask = 0x7fa81955e380, {l_gnu_buckets = 0x7fa81955e3a0, l_chain = 0x7fa81955e3a0}, {l_gnu_chain_zero = 0x7fa81955e3e0, l_buckets = 0x7fa81955e3e0}, l_direct_opencount = 0, l_type = lt_library, l_relocated = 1, l_init_called = 0, l_global = 1, l_reserved = 0, l_phdr_allocated = 0, l_soname_added = 0, l_faked = 0, l_need_tls_init = 0, l_auditing = 0, l_audit_any_plt = 0, l_removed = 0, l_contiguous = 0, l_symbolic_in_local_scope = 0, l_free_initfini = 0, l_cet = lc_unknown, l_rpath_dirs = {dirs = 0x0, malloced = 0}, l_reloc_result = 0x0, l_versyms = 0x7fa81955e9ec, l_origin = 0x0, l_map_start = 140359956291584, l_map_end = 140359956472144, l_text_end = 140359956424516, l_scope_mem = {0x0, 0x0, 0x0, 0x0}, l_scope_max = 0, l_scope = 0x0, l_local_scope = {0x0, 0x0}, l_file_id = {dev = 0, ino = 0}, l_runpath_dirs = {dirs = 0x0, malloced = 0}, l_initfini = 0x0, l_reldeps = 0x0, l_reldepsmax = 0, l_used = 1, l_feature_1 = 0, l_flags_1 = 0, l_flags = 0, l_idx = 0, l_mach = {plt = 0, gotplt = 0, tlsdesc_table = 0x0}, l_lookup_cache = {sym = 0x0, type_class = 0, value = 0x0, ret = 0x0}, l_tls_initimage = 0x0, l_tls_initimage_size = 0, l_tls_blocksize = 0, l_tls_align = 0, l_tls_firstbyte_offset = 0, l_tls_offset = 0, l_tls_modid = 0, l_tls_dtor_count = 0, l_relro_addr = 173376, l_relro_size = 2752, l_serial = 0, l_audit = 0x7fa819589e08 <_rtld_local+3592>}, audit_data = {{cookie = 0, bindflags = 0} <repeats 16 times>}, _dl_rtld_lock_recursive = 0x7fa81955f160 <rtld_lock_default_lock_recursive>, _dl_rtld_unlock_recursive = 0x7fa81955f170 <rtld_lock_default_unlock_recursive>, _dl_x86_feature_1 = {0, 0}, _dl_x86_legacy_bitmap = {0, 0}, _dl_make_stack_executable_hook = 0x7fa819571450 <__GI__dl_make_stack_executable>, _dl_stack_flags = 6, _dl_tls_dtv_gaps = false, _dl_tls_max_dtv_idx = 1, _dl_tls_dtv_slotinfo_list = 0x7fa8191e0000, _dl_tls_static_nelem = 1, _dl_tls_static_size = 4160, _dl_tls_static_used = 144, _dl_tls_static_align = 64, _dl_initial_dtv = 0x7fa8191e14b0, _dl_tls_generation = 0, _dl_init_static_tls = 0x7fa81956a160 <_dl_nothread_init_static_tls>, _dl_wait_lookup_done = 0x0, _dl_scope_free_list = 0x0}
>        __GI__dl_argv = 0x7ffcd50fa908
>        __pointer_chk_guard_local = 5682597610444292165
>        _rtld_global_ro = {_dl_debug_mask = 0, _dl_osversion = 327947, _dl_platform = 0x7fa819580ecc "haswell", _dl_platformlen = 7, _dl_pagesize = 4096, _dl_inhibit_cache = 0, _dl_initial_searchlist = {r_list = 0x7fa8195434a8, r_nlist = 6}, _dl_clktck = 100, _dl_verbose = 0, _dl_debug_fd = 2, _dl_lazy = 1, _dl_bind_not = 0, _dl_dynamic_weak = 0, _dl_fpu_control = 895, _dl_correct_cache_id = 771, _dl_hwcap = 2, _dl_auxv = 0x7ffcd50faa10, _dl_x86_cpu_features = {cpuid = {{eax = 263761, ebx = 1050624, ecx = 2145057727, edx = 3219913727}, {eax = 0, ebx = 10155, ecx = 0, edx = 2617246720}, {eax = 0, ebx = 0, ecx = 33, edx = 739248128}, {eax = 1, ebx = 0, ecx = 0, edx = 0}, {eax = 0, ebx = 0, ecx = 0, edx = 256}, {eax = 12327, ebx = 0, ecx = 0, edx = 0}}, feature = {131075, 17719}, basic = {kind = arch_kind_intel, max_cpuid = 13, family = 6, model = 69, stepping = 1}, xsave_state_size = 896, xsave_state_full_size = 896, data_cache_size = 0, shared_cache_size = 0, non_temporal_threshold = 0}, _dl_x86_hwcap_flags = {"sse2\000\000\000\000", "x86_64\000\000", "avx512_1"}, _dl_x86_platforms = {"i586\000\000\000\000", "i686\000\000\000\000", "haswell\000", "xeon_phi"}, _dl_inhibit_rpath = 0x0, _dl_origin_path = 0x0, _dl_use_load_bias = 0, _dl_profile = 0x0, _dl_profile_output = 0x7fa81957f000 "/var/tmp", _dl_trace_prelink = 0x0, _dl_trace_prelink_map = 0x0, _dl_init_all_dirs = 0x7fa81958ac60, _dl_sysinfo_dso = 0x7ffcd5116000, _dl_sysinfo_map = 0x7fa81958a6f0, _dl_hwcap2 = 0, _dl_debug_printf = 0x7fa81956ecf0 <_dl_debug_printf>, _dl_mcount = 0x7fa819570120 <__GI__dl_mcount>, _dl_lookup_symbol_x = 0x7fa819568be0 <_dl_lookup_symbol_x>, _dl_open = 0x7fa8195717a0 <_dl_open>, _dl_close = 0x7fa819573660 <_dl_close>, _dl_tls_get_addr_soft = 0x7fa819571070 <_dl_tls_get_addr_soft>, _dl_discover_osversion = 0x7fa819578490 <_dl_discover_osversion>, _dl_audit = 0x0, _dl_naudit = 0}
>        _dl_argc = 1
>#10 0x0000000000000001 in ?? ()
>No symbol table info available.
>#11 0x00007ffcd50fae09 in ?? ()
>No symbol table info available.
>#12 0x0000000000000000 in ?? ()
>No symbol table info available.
>From                To                  Syms Read   Shared Object Library
>0x00007fa819409390  0x00007fa8194a4f88  Yes         /lib64/libm.so.6
>0x00007fa8193baf70  0x00007fa8193dd8f2  Yes         /lib64/libpcap.so.1
>0x00007fa8193aa770  0x00007fa8193ae20a  Yes         /lib64/libiw.so.29
>0x00007fa819204670  0x00007fa81934f69f  Yes         /lib64/libc.so.6
>0x00007fa81955f110  0x00007fa81957e744  Yes         /lib64/ld-linux-x86-64.so.2
>$1 = 0x0
>rax            0x0                 0
>rbx            0x7fa8193a9aa0      140359954504352
>rcx            0x7fa81956e6e7      140359956358887
>rdx            0x7fa819473be0      140359955332064
>rsi            0x7ffcd50f9fb0      140723883057072
>rdi            0x2                 2
>rbp            0x7ffcd50fa5d0      0x7ffcd50fa5d0
>rsp            0x7ffcd50fa4c8      0x7ffcd50fa4c8
>r8             0x7ffcd50f9fa4      140723883057060
>r9             0x7ffcd50fa3f8      140723883058168
>r10            0x7fa81942cea0      140359955041952
>r11            0x7fa819542000      140359956176896
>r12            0x7                 7
>r13            0x2600000007        163208757255
>r14            0x7fa8193a87a0      140359954499488
>r15            0x7fa8195429e0      140359956179424
>rip            0x7fa81942ceb2      0x7fa81942ceb2 <__floor_ifunc+18>
>eflags         0x10202             [ IF RF ]
>cs             0x33                51
>ss             0x2b                43
>ds             0x0                 0
>es             0x0                 0
>fs             0x0                 0
>gs             0x0                 0
>Dump of assembler code for function __floor_ifunc:
>   0x00007fa81942cea0 <+0>:	endbr64 
>   0x00007fa81942cea4 <+4>:	mov    0x114125(%rip),%rax        # 0x7fa819540fd0
>   0x00007fa81942ceab <+11>:	lea    0x46d2e(%rip),%rdx        # 0x7fa819473be0 <__floor_sse41>
>=> 0x00007fa81942ceb2 <+18>:	testb  $0x8,0x72(%rax)
>   0x00007fa81942ceb6 <+22>:	lea    0x466f3(%rip),%rax        # 0x7fa8194735b0 <__floor_c>
>   0x00007fa81942cebd <+29>:	cmovne %rdx,%rax
>   0x00007fa81942cec1 <+33>:	retq   
>End of assembler dump.
>== EXPLOITABLE ==

Actions: View

Attachments on bug 1732645: 1593013 | 1593014 | 1593015 | 1593016 | 1593017 | 1593018 | 1593019 | 1593020 | 1593021 | 1593022 | 1593023 | 1593024