Attachment 1743892 Details for Bug 1912026 – File: backtrace

File: backtrace

backtrace (text/plain), 13.63 KB, created by Štefan Gurský on 2021-01-02 20:37:14 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Štefan Gurský

Created: 2021-01-02 20:37:14 UTC

Size: 13.63 KB

patch

obsolete

>[New LWP 126450]
>[New LWP 126449]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `usbguard allow-device 11'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  __GI___libc_free (mem=0x7f55d5062010) at malloc.c:3122
>3122	  p = mem2chunk (mem);
>[Current thread is 1 (Thread 0x7f55d4a5b640 (LWP 126450))]
>
>Thread 1 (Thread 0x7f55d4a5b640 (LWP 126450)):
>#0  __GI___libc_free (mem=0x7f55d5062010) at malloc.c:3122
>        ar_ptr = <optimized out>
>        p = <optimized out>
>        hook = 0x0
>#1  0x00007f55d572dc29 in qb_ipcc_disconnect (c=0x557090542f50) at ipcc.c:412
>        ow = <optimized out>
>        __func__ = "qb_ipcc_disconnect"
>#2  0x00007f55d5b98dba in usbguard::IPCClientPrivate::disconnect (this=0x557090531070, exception_initiated=<optimized out>, exception=..., do_wait=<optimized out>) at src/Library/IPCClientPrivate.cpp:147
>        __func__ = {<optimized out> <repeats 11 times>}
>#3  0x00007f55d5b991ef in usbguard::IPCClientPrivate::disconnect (this=0x557090531070, do_wait=<optimized out>) at src/Library/IPCClientPrivate.cpp:163
>        empty_exception = {<usbguard::Exception> = {<std::exception> = {_vptr.exception = 0x7f55d5c45720 <vtable for usbguard::IPCException+16>}, _context = "", _object = "", _reason = ""}, _message_id = 0}
>        __func__ = {<optimized out> <repeats 11 times>}
>#4  0x00007f55d5b99bd4 in usbguard::IPCClientPrivate::receive[abi:cxx11]() (this=0x557090531070) at src/Library/IPCClientPrivate.cpp:309
>        buffer_size_max = 1048576
>        buffer = Python Exception <class 'gdb.error'> value has been optimized out: 
>
>        recv_size = -107
>        __func__ = {<optimized out>, <optimized out>, <optimized out>, <optimized out>, <optimized out>, <optimized out>, <optimized out>, <optimized out>}
>        buffer_size_max = <optimized out>
>        buffer = Python Exception <class 'gdb.error'> value has been optimized out: 
>
>        recv_size = <optimized out>
>#5  usbguard::IPCClientPrivate::processReceiveEvent (this=0x557090531070) at src/Library/IPCClientPrivate.cpp:280
>        buffer = '\000' <repeats 200 times>...
>        __func__ = {<optimized out> <repeats 20 times>}
>#6  usbguard::IPCClientPrivate::qbIPCMessageProcessFn (fd=<optimized out>, revents=-727341040, data=0x557090531070) at src/Library/IPCClientPrivate.cpp:62
>        client = 0x557090531070
>        __func__ = {<optimized out> <repeats 22 times>}
>#7  0x00007f55d57261ff in _poll_dispatch_and_take_back_ (item=0x5570905313d0, p=<optimized out>) at loop_poll.c:109
>        pe = 0x5570905313d0
>        res = <optimized out>
>        __PRETTY_FUNCTION__ = "_poll_dispatch_and_take_back_"
>#8  0x00007f55d572caac in qb_loop_run_level (level=<optimized out>) at loop.c:43
>        job = <optimized out>
>        processed = 0
>#9  qb_loop_run (lp=<optimized out>) at loop.c:211
>        p = <optimized out>
>        p_stop = 1
>        rc = <optimized out>
>        remaining_todo = <optimized out>
>        job_todo = <optimized out>
>        timer_todo = <optimized out>
>        ms_timeout = <optimized out>
>        l = 0x557090531150
>        __func__ = "qb_loop_run"
>#10 0x00007f55d5b96202 in usbguard::IPCClientPrivate::thread (this=0x557090531070) at src/Library/IPCClientPrivate.cpp:180
>        __func__ = {<optimized out>, <optimized out>, <optimized out>, <optimized out>, <optimized out>, <optimized out>, <optimized out>}
>#11 0x00007f55d5a435f4 in std::execute_native_thread_routine (__p=0x557090533160) at ../../../../../libstdc++-v3/src/c++11/thread.cc:80
>        __t = std::unique_ptr<std::thread::_State> = {get() = <optimized out>}
>#12 0x00007f55d54233f9 in start_thread (arg=0x7f55d4a5b640) at pthread_create.c:463
>        ret = <optimized out>
>        pd = 0x7f55d4a5b640
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140006616577600, 7630595332275723528, 140726643089102, 140726643089103, 0, 140006616577600, -7543816013611246328, -7543819085149348600}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = 0
>#13 0x00007f55d5888903 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
>No locals.
>
>Thread 2 (Thread 0x7f55d5165b80 (LWP 126449)):
>#0  __pthread_clockjoin_ex (threadid=140006616577600, thread_return=0x0, clockid=<optimized out>, abstime=<optimized out>, block=<optimized out>) at pthread_join_common.c:145
>        __oldtype = 0
>        __err = <optimized out>
>        tid = 126450
>        _buffer = {__routine = 0x7f55d5424790 <cleanup>, __arg = 0x7f55d4a5bc68, __canceltype = -1895710304, __prev = 0x0}
>        pd = 0x7f55d4a5b640
>        self = <optimized out>
>        result = 0
>        pd_result = <optimized out>
>#1  0x00007f55d5a43837 in __gthread_join (__value_ptr=0x0, __threadid=<optimized out>) at /usr/src/debug/gcc-10.2.1-9.fc33.x86_64/obj-x86_64-redhat-linux/x86_64-redhat-linux/libstdc++-v3/include/x86_64-redhat-linux/bits/gthr-default.h:669
>No locals.
>#2  std::thread::join (this=this@entry=0x557090531100) at ../../../../../libstdc++-v3/src/c++11/thread.cc:110
>        __e = 22
>#3  0x00007f55d5b973e7 in usbguard::Thread<usbguard::IPCClientPrivate>::wait (this=0x5570905310e8) at ./src/Common/Thread.hpp:87
>        __func__ = {<optimized out>, <optimized out>, <optimized out>, <optimized out>, <optimized out>}
>#4  0x00007f55d5b98dd6 in usbguard::IPCClientPrivate::disconnect (this=0x557090531070, exception_initiated=<optimized out>, exception=..., do_wait=<optimized out>) at src/Library/IPCClientPrivate.cpp:150
>        __func__ = {<optimized out> <repeats 11 times>}
>#5  0x00007f55d5b991ef in usbguard::IPCClientPrivate::disconnect (this=0x557090531070, do_wait=<optimized out>) at src/Library/IPCClientPrivate.cpp:163
>        empty_exception = {<usbguard::Exception> = {<std::exception> = {_vptr.exception = 0x7f55d5c45720 <vtable for usbguard::IPCException+16>}, _context = "", _object = "", _reason = ""}, _message_id = 0}
>        __func__ = {<optimized out> <repeats 11 times>}
>#6  0x00007f55d5bba7a3 in usbguard::IPCClientPrivate::~IPCClientPrivate (this=<optimized out>, this=<optimized out>) at src/Library/IPCClientPrivate.cpp:109
>No locals.
>#7  std::default_delete<usbguard::IPCClientPrivate>::operator() (this=<optimized out>, __ptr=0x557090531070) at /usr/include/c++/10/bits/unique_ptr.h:85
>No locals.
>#8  std::default_delete<usbguard::IPCClientPrivate>::operator() (__ptr=0x557090531070, this=<optimized out>) at /usr/include/c++/10/bits/unique_ptr.h:79
>No locals.
>#9  std::unique_ptr<usbguard::IPCClientPrivate, std::default_delete<usbguard::IPCClientPrivate> >::~unique_ptr (this=<optimized out>, this=<optimized out>) at /usr/include/c++/10/bits/unique_ptr.h:361
>        __ptr = <optimized out>
>        __ptr = <optimized out>
>#10 usbguard::IPCClient::~IPCClient (this=<optimized out>, this=<optimized out>) at src/Library/public/usbguard/IPCClient.cpp:33
>No locals.
>#11 0x000055708f00f842 in usbguard::usbguard_allow_device (argc=<optimized out>, argv=<optimized out>) at src/CLI/usbguard-allow-device.cpp:79
>        id = <optimized out>
>        permanent = <optimized out>
>        opt = <optimized out>
>        ipc = {<usbguard::Interface> = {_vptr.Interface = 0x7f55d5c45ec8 <vtable for usbguard::IPCClient+16>}, d_pointer = std::unique_ptr<usbguard::IPCClientPrivate> = {get() = 0x557090531070}}
>#12 0x000055708f005b7f in usbguard::usbguard_cli (argv=0x7ffd799267b8, argc=3) at src/CLI/usbguard.cpp:119
>        subcommand_key = <optimized out>
>        iterator = Python Exception <class 'gdb.error'> value has been optimized out: 
>
>        subcommand = <optimized out>
>        subcommand_key = <optimized out>
>        iterator = Python Exception <class 'gdb.error'> value has been optimized out: 
>
>        subcommand = <optimized out>
>#13 main (argc=3, argv=0x7ffd799267b8) at src/CLI/usbguard.cpp:126
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x00007f55d5b70c40  0x00007f55d5c15cb0  Yes         /lib64/libusbguard.so.0
>0x00007f55d5a0b170  0x00007f55d5af25f2  Yes         /lib64/libstdc++.so.6
>0x00007f55d59555f0  0x00007f55d5966195  Yes         /lib64/libgcc_s.so.1
>0x00007f55d57ad690  0x00007f55d58fa69d  Yes         /lib64/libc.so.6
>0x00007f55d5726080  0x00007f55d573a3eb  Yes         /lib64/libqb.so.100
>0x00007f55d54df160  0x00007f55d568258f  Yes         /lib64/libprotobuf.so.23
>0x00007f55d5421a90  0x00007f55d5430125  Yes         /lib64/libpthread.so.0
>0x00007f55d5301b40  0x00007f55d53d8a50  Yes         /lib64/libgcrypt.so.20
>0x00007f55d52f0270  0x00007f55d52f11c9  Yes         /lib64/libdl.so.2
>0x00007f55d52cda50  0x00007f55d52e1d02  Yes         /lib64/libgpg-error.so.0
>0x00007f55d51923d0  0x00007f55d522d718  Yes         /lib64/libm.so.6
>0x00007f55d5c64090  0x00007f55d5c84f96  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f55d516c5f0  0x00007f55d5179b2b  Yes         /lib64/libz.so.1
>$1 = 0x0
>rax            0x0                 0
>rbx            0x7f55d5c45720      140006635362080
>rcx            0x7f55d00008d0      140006538610896
>rdx            0x1                 1
>rsi            0x557090542070      93941946130544
>rdi            0x7f55d5062010      140006622896144
>rbp            0x557090542f50      0x557090542f50
>rsp            0x7f55d4a5a260      0x7f55d4a5a260
>r8             0x156               342
>r9             0x0                 0
>r10            0x7f55d4a5a070      140006616572016
>r11            0x246               582
>r12            0x7f55d4a5a5a0      140006616573344
>r13            0x55708f01c1a0      93941923955104
>r14            0x7f55d4a5a5b0      140006616573360
>r15            0x7f55d5c45d58      140006635363672
>rip            0x7f55d5813cb0      0x7f55d5813cb0 <__GI___libc_free+32>
>eflags         0x10202             [ IF RF ]
>cs             0x33                51
>ss             0x2b                43
>ds             0x0                 0
>es             0x0                 0
>fs             0x0                 0
>gs             0x0                 0
>Dump of assembler code for function __GI___libc_free:
>   0x00007f55d5813c90 <+0>:	endbr64 
>   0x00007f55d5813c94 <+4>:	sub    $0x18,%rsp
>   0x00007f55d5813c98 <+8>:	mov    0x137249(%rip),%rax        # 0x7f55d594aee8
>   0x00007f55d5813c9f <+15>:	mov    (%rax),%rax
>   0x00007f55d5813ca2 <+18>:	test   %rax,%rax
>   0x00007f55d5813ca5 <+21>:	jne    0x7f55d5813d28 <__GI___libc_free+152>
>   0x00007f55d5813cab <+27>:	test   %rdi,%rdi
>   0x00007f55d5813cae <+30>:	je     0x7f55d5813d20 <__GI___libc_free+144>
>=> 0x00007f55d5813cb0 <+32>:	mov    -0x8(%rdi),%rax
>   0x00007f55d5813cb4 <+36>:	lea    -0x10(%rdi),%rsi
>   0x00007f55d5813cb8 <+40>:	test   $0x2,%al
>   0x00007f55d5813cba <+42>:	jne    0x7f55d5813cf0 <__GI___libc_free+96>
>   0x00007f55d5813cbc <+44>:	mov    0x13708d(%rip),%rdx        # 0x7f55d594ad50
>   0x00007f55d5813cc3 <+51>:	cmpq   $0x0,%fs:(%rdx)
>   0x00007f55d5813cc8 <+56>:	je     0x7f55d5813d68 <__GI___libc_free+216>
>   0x00007f55d5813cce <+62>:	lea    0x137d2b(%rip),%rdi        # 0x7f55d594ba00 <main_arena>
>   0x00007f55d5813cd5 <+69>:	test   $0x4,%al
>   0x00007f55d5813cd7 <+71>:	je     0x7f55d5813ce5 <__GI___libc_free+85>
>   0x00007f55d5813cd9 <+73>:	mov    %rsi,%rax
>   0x00007f55d5813cdc <+76>:	and    $0xfffffffffc000000,%rax
>   0x00007f55d5813ce2 <+82>:	mov    (%rax),%rdi
>   0x00007f55d5813ce5 <+85>:	xor    %edx,%edx
>   0x00007f55d5813ce7 <+87>:	add    $0x18,%rsp
>   0x00007f55d5813ceb <+91>:	jmp    0x7f55d580fce0 <_int_free>
>   0x00007f55d5813cf0 <+96>:	mov    0x13741e(%rip),%edx        # 0x7f55d594b114 <mp_+52>
>   0x00007f55d5813cf6 <+102>:	test   %edx,%edx
>   0x00007f55d5813cf8 <+104>:	jne    0x7f55d5813d0b <__GI___libc_free+123>
>   0x00007f55d5813cfa <+106>:	cmp    0x1373ef(%rip),%rax        # 0x7f55d594b0f0 <mp_+16>
>   0x00007f55d5813d01 <+113>:	jbe    0x7f55d5813d0b <__GI___libc_free+123>
>   0x00007f55d5813d03 <+115>:	cmp    $0x2000000,%rax
>   0x00007f55d5813d09 <+121>:	jbe    0x7f55d5813d38 <__GI___libc_free+168>
>   0x00007f55d5813d0b <+123>:	mov    %rsi,%rdi
>   0x00007f55d5813d0e <+126>:	add    $0x18,%rsp
>   0x00007f55d5813d12 <+130>:	jmp    0x7f55d580efb0 <munmap_chunk>
>   0x00007f55d5813d17 <+135>:	nopw   0x0(%rax,%rax,1)
>   0x00007f55d5813d20 <+144>:	add    $0x18,%rsp
>   0x00007f55d5813d24 <+148>:	ret    
>   0x00007f55d5813d25 <+149>:	nopl   (%rax)
>   0x00007f55d5813d28 <+152>:	mov    0x18(%rsp),%rsi
>   0x00007f55d5813d2d <+157>:	add    $0x18,%rsp
>   0x00007f55d5813d31 <+161>:	jmp    *%rax
>   0x00007f55d5813d33 <+163>:	nopl   0x0(%rax,%rax,1)
>   0x00007f55d5813d38 <+168>:	cmp    %rsi,0x13afb1(%rip)        # 0x7f55d594ecf0 <dumped_main_arena_start>
>   0x00007f55d5813d3f <+175>:	ja     0x7f55d5813d4a <__GI___libc_free+186>
>   0x00007f55d5813d41 <+177>:	cmp    %rsi,0x13afa0(%rip)        # 0x7f55d594ece8 <dumped_main_arena_end>
>   0x00007f55d5813d48 <+184>:	ja     0x7f55d5813d0b <__GI___libc_free+123>
>   0x00007f55d5813d4a <+186>:	and    $0xfffffffffffffff8,%rax
>   0x00007f55d5813d4e <+190>:	lea    (%rax,%rax,1),%rdx
>   0x00007f55d5813d52 <+194>:	mov    %rax,0x137397(%rip)        # 0x7f55d594b0f0 <mp_+16>
>   0x00007f55d5813d59 <+201>:	mov    %rdx,0x137380(%rip)        # 0x7f55d594b0e0 <mp_>
>   0x00007f55d5813d60 <+208>:	nop
>   0x00007f55d5813d61 <+209>:	jmp    0x7f55d5813d0b <__GI___libc_free+123>
>   0x00007f55d5813d63 <+211>:	nopl   0x0(%rax,%rax,1)
>   0x00007f55d5813d68 <+216>:	mov    0x136fe9(%rip),%rdx        # 0x7f55d594ad58
>   0x00007f55d5813d6f <+223>:	mov    %rdi,(%rsp)
>   0x00007f55d5813d73 <+227>:	cmpb   $0x0,%fs:(%rdx)
>   0x00007f55d5813d77 <+231>:	jne    0x7f55d5813cce <__GI___libc_free+62>
>   0x00007f55d5813d7d <+237>:	mov    %rsi,0x8(%rsp)
>   0x00007f55d5813d82 <+242>:	call   0x7f55d5813260 <tcache_init>
>   0x00007f55d5813d87 <+247>:	mov    (%rsp),%rdi
>   0x00007f55d5813d8b <+251>:	mov    0x8(%rsp),%rsi
>   0x00007f55d5813d90 <+256>:	mov    -0x8(%rdi),%rax
>   0x00007f55d5813d94 <+260>:	jmp    0x7f55d5813cce <__GI___libc_free+62>
>End of assembler dump.

Actions: View

Attachments on bug 1912026: 1743892 | 1743893 | 1743894 | 1743895 | 1743896 | 1743897 | 1743898 | 1743899 | 1743900 | 1743901 | 1743902