Attachment 499496 Details for Bug 705659 – File: backtrace

File: backtrace

backtrace (text/plain), 14.77 KB, created by rec7788 on 2011-05-18 01:04:00 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: rec7788

Created: 2011-05-18 01:04:00 UTC

Size: 14.77 KB

patch

obsolete

>[New Thread 3001]
>[New Thread 3012]
>[New Thread 3013]
>[Thread debugging using libthread_db enabled]
>Core was generated by `supertuxkart --log=file'.
>Program terminated with signal 6, Aborted.
>#0  0x0000003a9d0330c5 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
>64	../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
>	in ../nptl/sysdeps/unix/sysv/linux/raise.c
>
>Thread 3 (Thread 0x7fe3afa42700 (LWP 3013)):
>#0  0x0000003a9d40e6ed in nanosleep () at ../sysdeps/unix/syscall-template.S:82
>No locals.
>#1  0x00000035e6458db9 in SDL_Delay (ms=<value optimized out>) at src/timer/unix/SDL_systimer.c:118
>        was_error = <value optimized out>
>        elapsed = {tv_sec = 0, tv_nsec = 520086}
>        tv = {tv_sec = 0, tv_nsec = 1000000}
>#2  0x00000035e6458df2 in RunTimer (unused=<value optimized out>) at src/timer/unix/SDL_systimer.c:203
>No locals.
>#3  0x00000035e6411265 in SDL_RunThread (data=0xcee310) at src/thread/SDL_thread.c:204
>        args = 0xcee310
>        userfunc = 0x35e6458dd0 <RunTimer>
>        userdata = 0x0
>        statusloc = 0xce6960
>#4  0x00000035e64569c9 in RunThread (data=<value optimized out>) at src/thread/pthread/SDL_systhread.c:47
>No locals.
>#5  0x0000003a9d406ccb in start_thread (arg=0x7fe3afa42700) at pthread_create.c:301
>        pd = 0x7fe3afa42700
>        now = <value optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140615881074432, 2206808735012133578, 140734342115776, 140615881075136, 0, 3, -2204662023415883062, 2221702172834437834}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <value optimized out>
>        pagesize_m1 = <value optimized out>
>        sp = <value optimized out>
>        freesize = <value optimized out>
>#6  0x0000003a9d0e0c2d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
>No locals.
>
>Thread 2 (Thread 0x7fe3b47ad700 (LWP 3012)):
>#0  0x0000003a9d0d7283 in __poll (fds=<value optimized out>, nfds=<value optimized out>, timeout=<value optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
>        resultvar = 18446744073709551100
>        oldtype = 0
>        result = <value optimized out>
>#1  0x00000035e442c3bf in poll_func (ufds=0x7fe3a8001460, nfds=2, timeout=-1, userdata=0x9cf1c0) at pulse/thread-mainloop.c:75
>        mutex = 0x9cf1c0
>        r = <value optimized out>
>        __func__ = "poll_func"
>        __PRETTY_FUNCTION__ = "poll_func"
>#2  0x00000035e441e166 in pa_mainloop_poll (m=0x9cc0d0) at pulse/mainloop.c:879
>        __func__ = "pa_mainloop_poll"
>        __PRETTY_FUNCTION__ = "pa_mainloop_poll"
>#3  0x00000035e441e799 in pa_mainloop_iterate (m=0x9cc0d0, block=<value optimized out>, retval=0x0) at pulse/mainloop.c:961
>        r = <value optimized out>
>        __func__ = "pa_mainloop_iterate"
>        __PRETTY_FUNCTION__ = "pa_mainloop_iterate"
>#4  0x00000035e441e850 in pa_mainloop_run (m=0x9cc0d0, retval=0x0) at pulse/mainloop.c:979
>        r = <value optimized out>
>#5  0x00000035e442c35b in thread (userdata=<value optimized out>) at pulse/thread-mainloop.c:94
>        m = 0x9cd580
>        mask = {__val = {18446744067267100671, 18446744073709551615 <repeats 15 times>}}
>#6  0x00000035e3438888 in internal_thread_func (userdata=0x9cd5c0) at pulsecore/thread-posix.c:72
>        t = 0x9cd5c0
>        __func__ = "internal_thread_func"
>        __PRETTY_FUNCTION__ = "internal_thread_func"
>#7  0x0000003a9d406ccb in start_thread (arg=0x7fe3b47ad700) at pthread_create.c:301
>        pd = 0x7fe3b47ad700
>        now = <value optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140615962253056, 2206808735012133578, 251746388992, 140615962253760, 0, 3, -2204722919072818486, 2221702172834437834}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = <value optimized out>
>        pagesize_m1 = <value optimized out>
>        sp = <value optimized out>
>        freesize = <value optimized out>
>#8  0x0000003a9d0e0c2d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
>No locals.
>
>Thread 1 (Thread 0x7fe3ba707760 (LWP 3001)):
>#0  0x0000003a9d0330c5 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
>        resultvar = 0
>        pid = <value optimized out>
>        selftid = <value optimized out>
>#1  0x0000003a9d034a76 in abort () at abort.c:92
>        save_stage = 2
>        act = {__sigaction_handler = {sa_handler = 0x7fff44782650, sa_sigaction = 0x7fff44782650}, sa_mask = {__val = {140734342112832, 140734342117974, 12, 251743557716, 3, 140734342112842, 6, 251743557720, 2, 140734342112830, 2, 251743550977, 1, 251743557716, 3, 140734342112838}}, sa_flags = 10, sa_restorer = 0x3a9d15d858}
>        sigs = {__val = {32, 0 <repeats 15 times>}}
>#2  0x0000003a9d06fcfb in __libc_message (do_abort=2, fmt=0x3a9d15d8b5 "*** %s ***: %s terminated\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:186
>        ap = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff44782f40, reg_save_area = 0x7fff44782e50}}
>        ap_copy = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fff44782f40, reg_save_area = 0x7fff44782e50}}
>        fd = 2
>        on_2 = <value optimized out>
>        list = <value optimized out>
>        nlist = <value optimized out>
>        cp = <value optimized out>
>        written = <value optimized out>
>#3  0x0000003a9d0fa127 in __fortify_fail (msg=0x3a9d15d85b "buffer overflow detected") at fortify_fail.c:32
>No locals.
>#4  0x0000003a9d0f8100 in __chk_fail () at chk_fail.c:29
>No locals.
>#5  0x0000003a9d0f77eb in ___vsnprintf_chk (s=0xbb9 <Address 0xbb9 out of bounds>, maxlen=3001, flags=6, slen=18446744073709551615, format=0x0, args=0x4007f0) at vsnprintf_chk.c:39
>        sf = {f = {_sbf = {_f = {_flags = 1148727392, _IO_read_ptr = 0x7fff44783040 "C", _IO_read_end = 0x9a7d00 "", _IO_read_base = 0x3a9d02e015 "\351z\377\377\377f\017\037D", _IO_write_base = 0x7fff44783170 "", _IO_write_ptr = 0x9a7d00 "", _IO_write_end = 0x1 <Address 0x1 out of bounds>, _IO_buf_base = 0x9cd7c0 "p\327\234", _IO_buf_end = 0x0, _IO_save_base = 0x4f9570 "Confirm Resolution Within %d Seconds", _IO_backup_base = 0x0, _IO_save_end = 0x0, _markers = 0x0, _chain = 0x0, _fileno = 0, _flags2 = 0, _old_offset = 0, _cur_column = 0, _vtable_offset = 0 '\000', _shortbuf = "", _lock = 0x0, _offset = 0, _codecvt = 0x7fff44783170, _wide_data = 0x9a7d00, _freeres_list = 0x4f9570, _freeres_buf = 0x2, _freeres_size = 10278544, _mode = 1148727728, _unused2 = "\377\177\000\000\342\333\002\235:\000\000\000C\000_US.ut"}, vtable = 0x3a9d003866}, _s = {_allocate_buffer = 0, _free_buffer = 0x3a9d02d761 <__dcigettext+833>}}, overflow_buf = "LC_MESSAGES/supertuxkart.mo\000:\000\000\000\340\063xD\377\177\000\000\t\327\002\235:\000\000\000en_US.utf8\000\000\000\000\000"}
>        ret = <value optimized out>
>#6  0x0000003a9d0f76ba in ___snprintf_chk (s=<value optimized out>, maxlen=<value optimized out>, flags=<value optimized out>, slen=<value optimized out>, format=<value optimized out>) at snprintf_chk.c:36
>        arg = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff447831c0, reg_save_area = 0x7fff44783100}}
>        done = 0
>#7  0x0000000000477e07 in snprintf (this=<value optimized out>) at /usr/include/bits/stdio2.h:66
>No locals.
>#8  DisplayResConfirm::countdown (this=<value optimized out>) at gui/display_res_confirm.cpp:110
>No locals.
>#9  0x0000000000456cf1 in SDLDriver::input (this=0xc2e790) at sdldrv.cpp:619
>        ev = {type = 24 '\030', active = {type = 24 '\030', gain = 0 '\000', state = 0 '\000'}, key = {type = 24 '\030', which = 0 '\000', state = 0 '\000', keysym = {scancode = 0 '\000', sym = SDLK_UNKNOWN, mod = KMOD_NONE, unicode = 0}}, motion = {type = 24 '\030', which = 0 '\000', state = 0 '\000', x = 0, y = 0, xrel = 0, yrel = 0}, button = {type = 24 '\030', which = 0 '\000', button = 0 '\000', state = 0 '\000', x = 0, y = 0}, jaxis = {type = 24 '\030', which = 0 '\000', axis = 0 '\000', value = 0}, jball = {type = 24 '\030', which = 0 '\000', ball = 0 '\000', xrel = 0, yrel = 0}, jhat = {type = 24 '\030', which = 0 '\000', hat = 0 '\000', value = 0 '\000'}, jbutton = {type = 24 '\030', which = 0 '\000', button = 0 '\000', state = 0 '\000'}, resize = {type = 24 '\030', w = 0, h = 0}, expose = {type = 24 '\030'}, quit = {type = 24 '\030'}, user = {type = 24 '\030', code = 0, data1 = 0x0, data2 = 0x0}, syswm = {type = 24 '\030', msg = 0x0}}
>        stickIndex = <value optimized out>
>#10 0x00000000004563ed in MainLoop::run (this=0xcdd580) at main_loop.cpp:73
>        music_on = true
>        dt = <value optimized out>
>#11 0x000000000040db75 in main (argc=2, argv=<value optimized out>) at main.cpp:620
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x000000397b004710  0x000000397b045f38  Yes         /usr/lib64/libGLU.so.1
>0x0000003c85400b50  0x0000003c85401308  Yes         /usr/lib64/libplibjs.so.1.8.5
>0x0000003c85004f70  0x0000003c8500c8b8  Yes         /usr/lib64/libplibsl.so.1.8.5
>0x0000003c84425310  0x0000003c84487c18  Yes         /usr/lib64/libplibssg.so.1.8.5
>0x0000003c8580b6a0  0x0000003c85817228  Yes         /usr/lib64/libplibpu.so.1.8.5
>0x0000003c85c0cba0  0x0000003c85c0e808  Yes         /usr/lib64/libplibfnt.so.1.8.5
>0x0000003c83c03a90  0x0000003c83c108b8  Yes         /usr/lib64/libplibsg.so.1.8.5
>0x0000003c84c01ce0  0x0000003c84c03428  Yes         /usr/lib64/libplibul.so.1.8.5
>0x0000003c8400bdf0  0x0000003c84025e28  Yes         /usr/lib64/libplibssgaux.so.1.8.5
>0x00000035ec016dd0  0x00000035ec027018  Yes         /usr/lib64/libglut.so.3
>0x0000003984c496d0  0x0000003984ca18a4  Yes (*)     /usr/lib64/nvidia/libGL.so.1
>0x00000035e6407e80  0x00000035e6458f38  Yes         /usr/lib64/libSDL-1.2.so.0
>0x0000003c83806bf0  0x0000003c8383b3d8  Yes         /usr/lib64/libopenal.so.1
>0x0000003ab0401fa0  0x0000003ab0405f88  Yes         /usr/lib64/libvorbisfile.so.3
>0x0000003aa8857d40  0x0000003aa88c3336  Yes         /usr/lib64/libstdc++.so.6
>0x0000003a9e003ea0  0x0000003a9e044748  Yes         /lib64/libm.so.6
>0x0000003a9e8028f0  0x0000003a9e8122b8  Yes         /lib64/libgcc_s.so.1
>0x0000003a9d01eba0  0x0000003a9d145f5c  Yes         /lib64/libc.so.6
>0x0000003a9d405630  0x0000003a9d4108b8  Yes         /lib64/libpthread.so.0
>0x0000003aa2403460  0x0000003aa240e488  Yes         /usr/lib64/libXext.so.6
>0x0000003aa101df20  0x0000003aa10abf58  Yes         /usr/lib64/libX11.so.6
>0x0000003aae400e30  0x0000003aae403d08  Yes         /usr/lib64/libXxf86vm.so.1
>0x0000003aa2c01ee0  0x0000003aa2c0c9e8  Yes         /usr/lib64/libXi.so.6
>0x0000003987a00550  0x0000003987a00b13  Yes (*)     /usr/lib64/nvidia/tls/libnvidia-tls.so.260.19.36
>0x0000003988463140  0x0000003988fe9388  Yes (*)     /usr/lib64/nvidia/libnvidia-glcore.so.260.19.36
>0x0000003a9d800de0  0x0000003a9d801988  Yes         /lib64/libdl.so.2
>0x0000003a9dc02140  0x0000003a9dc05568  Yes         /lib64/librt.so.1
>0x0000003aae803700  0x0000003aae81a158  Yes         /usr/lib64/libvorbis.so.0
>0x0000003aad0018a0  0x0000003aad003bb8  Yes         /usr/lib64/libogg.so.0
>0x0000003a9cc00b20  0x0000003a9cc18c46  Yes         /lib64/ld-linux-x86-64.so.2
>0x0000003aa0c08660  0x0000003aa0c13df8  Yes         /usr/lib64/libxcb.so.1
>0x0000003aa1400dd0  0x0000003aa1401b68  Yes         /usr/lib64/libXau.so.6
>0x00000035e440ae50  0x00000035e44324b8  Yes         /usr/lib64/libpulse.so.0
>0x00000035e340f460  0x00000035e343a6b8  Yes         /usr/lib64/libpulsecommon-0.9.21.so
>0x0000003aa94019f0  0x0000003aa94062a8  Yes         /usr/lib64/libSM.so.6
>0x0000003aa9804d70  0x0000003aa9813778  Yes         /usr/lib64/libICE.so.6
>0x00000035e2c013b0  0x00000035e2c043b8  Yes         /usr/lib64/libXtst.so.6
>0x0000003982202ee0  0x0000003982206a88  Yes         /lib64/libwrap.so.0
>0x0000003981e05fe0  0x0000003981e48738  Yes         /usr/lib64/libsndfile.so.1
>0x0000003aa8c011c0  0x0000003aa8c037e8  Yes         /usr/lib64/libasyncns.so.0
>0x0000003aa04076d0  0x0000003aa0430e68  Yes         /lib64/libdbus-1.so.3
>0x0000003aa78014a0  0x0000003aa7802b98  Yes         /lib64/libuuid.so.1
>0x0000003aac003f40  0x0000003aac011b28  Yes         /lib64/libnsl.so.1
>0x000000398120be70  0x0000003981230e08  Yes         /usr/lib64/libFLAC.so.8
>0x00000039826139c0  0x0000003982615db8  Yes         /usr/lib64/libvorbisenc.so.2
>0x0000003a9f403870  0x0000003a9f413168  Yes         /lib64/libresolv.so.2
>0x0000003aa30018c0  0x0000003aa3007f48  Yes         /usr/lib64/libXrender.so.1
>0x0000003aa4001720  0x0000003aa4006828  Yes         /usr/lib64/libXrandr.so.2
>0x0000003aa3402880  0x0000003aa3407688  Yes         /usr/lib64/libXcursor.so.1
>0x0000003aa3801370  0x0000003aa3804188  Yes         /usr/lib64/libXfixes.so.3
>(*): Shared library is missing debugging information.
>$1 = 0x5fdefd0 "*** buffer overflow detected ***: supertuxkart terminated\n"
>No symbol "__glib_assert_msg" in current context.
>rax            0x0	0
>rbx            0x0	0
>rcx            0xffffffffffffffff	-1
>rdx            0x6	6
>rsi            0xbb9	3001
>rdi            0xbb9	3001
>rbp            0x7fff44782f30	0x7fff44782f30
>rsp            0x7fff44782568	0x7fff44782568
>r8             0x0	0
>r9             0x4007f0	4196336
>r10            0x8	8
>r11            0x202	514
>r12            0x10	16
>r13            0x7fff44782810	140734342113296
>r14            0x3a	58
>r15            0x5	5
>rip            0x3a9d0330c5	0x3a9d0330c5 <raise+53>
>eflags         0x202	[ IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function raise:
>   0x0000003a9d033090 <+0>:	mov    %fs:0x2d4,%eax
>   0x0000003a9d033098 <+8>:	mov    %fs:0x2d0,%esi
>   0x0000003a9d0330a0 <+16>:	test   %esi,%esi
>   0x0000003a9d0330a2 <+18>:	jne    0x3a9d0330d0 <raise+64>
>   0x0000003a9d0330a4 <+20>:	mov    $0xba,%eax
>   0x0000003a9d0330a9 <+25>:	syscall 
>   0x0000003a9d0330ab <+27>:	mov    %eax,%esi
>   0x0000003a9d0330ad <+29>:	mov    %eax,%fs:0x2d0
>   0x0000003a9d0330b5 <+37>:	movslq %edi,%rdx
>   0x0000003a9d0330b8 <+40>:	movslq %esi,%rsi
>   0x0000003a9d0330bb <+43>:	movslq %eax,%rdi
>   0x0000003a9d0330be <+46>:	mov    $0xea,%eax
>   0x0000003a9d0330c3 <+51>:	syscall 
>=> 0x0000003a9d0330c5 <+53>:	cmp    $0xfffffffffffff000,%rax
>   0x0000003a9d0330cb <+59>:	ja     0x3a9d0330df <raise+79>
>   0x0000003a9d0330cd <+61>:	repz retq 
>   0x0000003a9d0330cf <+63>:	nop
>   0x0000003a9d0330d0 <+64>:	test   %eax,%eax
>   0x0000003a9d0330d2 <+66>:	jg     0x3a9d0330b5 <raise+37>
>   0x0000003a9d0330d4 <+68>:	test   $0x7fffffff,%eax
>   0x0000003a9d0330d9 <+73>:	je     0x3a9d0330f0 <raise+96>
>   0x0000003a9d0330db <+75>:	neg    %eax
>   0x0000003a9d0330dd <+77>:	jmp    0x3a9d0330b5 <raise+37>
>   0x0000003a9d0330df <+79>:	mov    0x361eba(%rip),%rdx        # 0x3a9d394fa0
>   0x0000003a9d0330e6 <+86>:	neg    %eax
>   0x0000003a9d0330e8 <+88>:	mov    %eax,%fs:(%rdx)
>   0x0000003a9d0330eb <+91>:	or     $0xffffffffffffffff,%rax
>   0x0000003a9d0330ef <+95>:	retq   
>   0x0000003a9d0330f0 <+96>:	mov    %esi,%eax
>   0x0000003a9d0330f2 <+98>:	jmp    0x3a9d0330b5 <raise+37>
>End of assembler dump.

Actions: View

Attachments on bug 705659: 499496