Attachment 574080 Details for Bug 808592 – File: backtrace

File: backtrace

backtrace (text/plain), 10.59 KB, created by eric on 2012-03-30 19:24:00 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: eric

Created: 2012-03-30 19:24:00 UTC

Size: 10.59 KB

patch

obsolete

>[New LWP 19696]
>Core was generated by `citydecoder co37_d00a.dat'.
>Program terminated with signal 6, Aborted.
>#0  0x0000003d12436285 in __GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
>64	../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
>	in ../nptl/sysdeps/unix/sysv/linux/raise.c
>
>Thread 1 (LWP 19696):
>#0  0x0000003d12436285 in __GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
>        resultvar = 0
>        pid = <optimized out>
>        selftid = 19696
>#1  0x0000003d12437b9b in __GI_abort () at abort.c:91
>        save_stage = 2
>        act = {__sigaction_handler = {sa_handler = 0x4, sa_sigaction = 0x4}, sa_mask = {__val = {5, 140734314468228, 11, 262300715851, 3, 140734314455114, 6, 262300715855, 2, 140734314455134, 2, 262300707018, 1, 262300715851, 3, 140734314455110}}, sa_flags = 10, sa_restorer = 0x3d12574b4f}
>        sigs = {__val = {32, 0 <repeats 15 times>}}
>#2  0x0000003d12477a7e in __libc_message (do_abort=2, fmt=0x3d12574bbb "*** %s ***: %s terminated\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:198
>        ap = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff42d22940, reg_save_area = 0x7fff42d22850}}
>        ap_copy = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fff42d22940, reg_save_area = 0x7fff42d22850}}
>        fd = 3
>        on_2 = <optimized out>
>        list = <optimized out>
>        nlist = <optimized out>
>        cp = <optimized out>
>        written = <optimized out>
>#3  0x0000003d12508af7 in __GI___fortify_fail (msg=0x3d12574b52 "buffer overflow detected") at fortify_fail.c:32
>No locals.
>#4  0x0000003d12506a70 in __GI___chk_fail () at chk_fail.c:29
>No locals.
>#5  0x0000003d12505ed9 in _IO_str_chk_overflow (fp=<optimized out>, c=<optimized out>) at vsprintf_chk.c:35
>No locals.
>#6  0x0000003d1247b35d in _IO_default_xsputn (f=0x7fff42d22fe0, data=<optimized out>, n=9) at genops.c:485
>        s = 0x400de4 "00a.dat"
>        more = 8
>#7  0x0000003d12449801 in _IO_vfprintf_internal (s=<optimized out>, format=<optimized out>, ap=<optimized out>) at vfprintf.c:1601
>        step0_jumps = {0, -19228, -14487, -14392, -14290, -14193, -14080, -13786, -13337, -13030, -12225, -12320, -12532, -11972, -11897, -20181, -6234, -6154, -6052, -6037, -1254, -2676, -5144, -2932, 47, -1008, -5699, -12119, -12012, -13899}
>        space = 0
>        is_short = 0
>        use_outdigits = 0
>        step1_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, -13030, -12225, -12320, -12532, -11972, -11897, -20181, -6234, -6154, -6052, -6037, -1254, -2676, -5144, -2932, 47, -1008, -5699, -12119, -12012, 0}
>        group = 0
>        prec = -1
>        step2_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, -12225, -12320, -12532, -11972, -11897, -20181, -6234, -6154, -6052, -6037, -1254, -2676, -5144, -2932, 47, -1008, -5699, -12119, -12012, 0}
>        string = <optimized out>
>        left = 0
>        is_long_double = 0
>        width = <optimized out>
>        step3a_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, -12427, 0, 0, 0, -11897, -20181, -6234, -6154, -6052, 0, 0, 0, 0, -2932, 0, 0, 0, 0, 0, 0}
>        alt = 0
>        showsign = 0
>        is_long = 0
>        is_char = 0
>        pad = <optimized out>
>        step3b_jumps = {0 <repeats 11 times>, -12532, 0, 0, -11897, -20181, -6234, -6154, -6052, -6037, -1254, -2676, -5144, -2932, 47, -1008, -5699, 0, 0, 0}
>        step4_jumps = {0 <repeats 14 times>, -11897, -20181, -6234, -6154, -6052, -6037, -1254, -2676, -5144, -2932, 47, -1008, -5699, 0, 0, 0}
>        is_negative = <optimized out>
>        number = <optimized out>
>        base = <optimized out>
>        the_arg = {pa_wchar = 0 L'\000', pa_int = 0, pa_long_int = 0, pa_long_long_int = 0, pa_u_int = 0, pa_u_long_int = 0, pa_u_long_long_int = 0, pa_double = 0, pa_long_double = <invalid float value>, pa_string = 0x0, pa_wstring = 0x0, pa_pointer = 0x0, pa_user = 0x0}
>        spec = 0 '\000'
>        _buffer = {__routine = 0x7c9e7894, __arg = 0x3d1200a1c3, __canceltype = 1107362048, __prev = 0x14}
>        _avail = <optimized out>
>        thousands_sep = 0x0
>        grouping = 0xffffffffffffffff <Address 0xffffffffffffffff out of bounds>
>        done = 13
>        f = 0x400deb ""
>        lead_str_end = 0x400de0 "%s_d00a.dat"
>        end_of_spec = 0x400de2 "_d00a.dat"
>        work_buffer = "\000\000\000\000\000\000\000\000,\017@\000\000\000\000\000\210\062\"\022=\000\000\000\003\000\000\000\000\000\000\000\000 \"\022=\000\000\000\004Bp\354\020\177\000\000\000\000\000\000\000\000\000\000\274\206\000\022=", '\000' <repeats 11 times>"\320, .\322B\377\177", '\000' <repeats 26 times>, "\021", '\000' <repeats 11 times>, "\001\000\000\000\000\000\000\001\000\000\000\000\000\000\000\000=\000\000\000\n", '\000' <repeats 23 times>, "@\003\000\000\000\000\000\000\177ELF\002\001\001\003\000\000\000\000\000\000\000\000\003\000>\000\001\000\000\000\260\027B\022=\000\000\000@\000\000\000\000\000\000\000\300\245\037\000\000\000\000\000\000\000\000\000@\000\070\000\n\000@\000+\000*\000\006\000\000\000\005\000\000\000@"...
>        workstart = 0x0
>        workend = 0x7fff0000000d <Address 0x7fff0000000d out of bounds>
>        ap_save = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff42d231e0, reg_save_area = 0x7fff42d23120}}
>        nspecs_done = 1
>        save_errno = 0
>        readonly_format = 0
>        args_malloced = 0x0
>        jump_table = "\001\000\000\004\000\016\000\006\000\000\a\002\000\003\t\000\005\b\b\b\b\b\b\b\b\b\000\000\000\000\000\000\000\032\000\031\000\023\023\023\000\035\000\000\f\000\000\000\000\000\000\025\000\000\000\000\022\000\r\000\000\000\000\000\000\032\000\024\017\023\023\023\n\017\034\000\v\030\027\021\026\f\000\025\033\020\000\000\022\000\r"
>        __PRETTY_FUNCTION__ = "_IO_vfprintf_internal"
>#8  0x0000003d12505f77 in ___vsprintf_chk (s=0x7fff42d232c0 "co37_d00a.dat_", flags=1, slen=15, format=0x400de0 "%s_d00a.dat", args=0x7fff42d23108) at vsprintf_chk.c:87
>        f = {_sbf = {_f = {_flags = -72515583, _IO_read_ptr = 0x7fff42d232c0 "co37_d00a.dat_", _IO_read_end = 0x7fff42d232c0 "co37_d00a.dat_", _IO_read_base = 0x7fff42d232c0 "co37_d00a.dat_", _IO_write_base = 0x7fff42d232c0 "co37_d00a.dat_", _IO_write_ptr = 0x7fff42d232ce "", _IO_write_end = 0x7fff42d232ce "", _IO_buf_base = 0x7fff42d232c0 "co37_d00a.dat_", _IO_buf_end = 0x7fff42d232ce "", _IO_save_base = 0x0, _IO_backup_base = 0x0, _IO_save_end = 0x0, _markers = 0x0, _chain = 0x0, _fileno = 1121071392, _flags2 = 4, _old_offset = 262295062970, _cur_column = 0, _vtable_offset = 0 '\000', _shortbuf = "", _lock = 0x0, _offset = 140734315217416, _codecvt = 0x3d12223818, _wide_data = 0x0, _freeres_list = 0x0, _freeres_buf = 0x3d1241606e, _freeres_size = 262299284800, _mode = -1, _unused2 = "\000\000\000\000\060\006\000\022=\000\000\000\000\000\000\000\000\000\000"}, vtable = 0x3d127b0a20}, _s = {_allocate_buffer = 0, _free_buffer = 0}}
>        ret = <optimized out>
>#9  0x0000003d12505ebd in ___sprintf_chk (s=<optimized out>, flags=<optimized out>, slen=<optimized out>, format=<optimized out>) at sprintf_chk.c:33
>        arg = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff42d231e0, reg_save_area = 0x7fff42d23120}}
>        done = 0
>#10 0x000000000040081c in sprintf (__fmt=0x400de0 "%s_d00a.dat", __s=0x7fff42d232c0 "co37_d00a.dat_") at /usr/include/bits/stdio2.h:34
>No locals.
>#11 main (argc=<optimized out>, argv=0x7fff42d23408) at citydecoder.c:54
>        x = <optimized out>
>        y = <optimized out>
>        z = <optimized out>
>        attributefile_id = 1
>        coordinatefile_id = 4198172
>        string = "\000\000\000\000\000\000\000\000\240;\"\022=", '\000' <repeats 27 times>, "\024 W\022=", '\000' <repeats 34 times>
>        name = '\000' <repeats 24 times>"\222, }C\022=", '\000' <repeats 11 times>, "0\bJ\022=\000\000\000\001\000\000\000\000\000\000\000v\000\000\000\000\000\000\000\t\000\000\000\000\000\000\000\302\000\000\000\000\000\000"
>        attributefilename = "co37_d00a.dat_"
>        coordinatefilename = "\000\000\000\000\000\000\000\000\253\006@\000\000\000"
>        s = <optimized out>
>        lat = 0
>        lon = 0
>        attributefile = <optimized out>
>        coordinatefile = <optimized out>
>From                To                  Syms Read   Shared Object Library
>0x0000003d1241ef10  0x0000003d1255bb70  Yes         /lib64/libc.so.6
>0x0000003d12000b20  0x0000003d1201aaaa  Yes         /lib64/ld-linux-x86-64.so.2
>0x0000003be5e028a0  0x0000003be5e120b8  Yes         /lib64/libgcc_s.so.1
>$1 = 0x7f10ec707000 ""
>No symbol "__glib_assert_msg" in current context.
>rax            0x0	0
>rbx            0x0	0
>rcx            0xffffffffffffffff	-1
>rdx            0x6	6
>rsi            0x4cf0	19696
>rdi            0x4cf0	19696
>rbp            0x7fff42d22930	0x7fff42d22930
>rsp            0x7fff42d21f78	0x7fff42d21f78
>r8             0x3d1256bd40	262300679488
>r9             0x400288	4194952
>r10            0x8	8
>r11            0x246	582
>r12            0x4	4
>r13            0x39	57
>r14            0x7fff42d22100	140734314455296
>r15            0x3	3
>rip            0x3d12436285	0x3d12436285 <__GI_raise+53>
>eflags         0x246	[ PF ZF IF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function __GI_raise:
>   0x0000003d12436250 <+0>:	mov    %fs:0x2d4,%eax
>   0x0000003d12436258 <+8>:	mov    %fs:0x2d0,%esi
>   0x0000003d12436260 <+16>:	test   %esi,%esi
>   0x0000003d12436262 <+18>:	jne    0x3d12436290 <__GI_raise+64>
>   0x0000003d12436264 <+20>:	mov    $0xba,%eax
>   0x0000003d12436269 <+25>:	syscall 
>   0x0000003d1243626b <+27>:	mov    %eax,%esi
>   0x0000003d1243626d <+29>:	mov    %eax,%fs:0x2d0
>   0x0000003d12436275 <+37>:	movslq %edi,%rdx
>   0x0000003d12436278 <+40>:	movslq %esi,%rsi
>   0x0000003d1243627b <+43>:	movslq %eax,%rdi
>   0x0000003d1243627e <+46>:	mov    $0xea,%eax
>   0x0000003d12436283 <+51>:	syscall 
>=> 0x0000003d12436285 <+53>:	cmp    $0xfffffffffffff000,%rax
>   0x0000003d1243628b <+59>:	ja     0x3d1243629f <__GI_raise+79>
>   0x0000003d1243628d <+61>:	repz retq 
>   0x0000003d1243628f <+63>:	nop
>   0x0000003d12436290 <+64>:	test   %eax,%eax
>   0x0000003d12436292 <+66>:	jg     0x3d12436275 <__GI_raise+37>
>   0x0000003d12436294 <+68>:	test   $0x7fffffff,%eax
>   0x0000003d12436299 <+73>:	je     0x3d124362b0 <__GI_raise+96>
>   0x0000003d1243629b <+75>:	neg    %eax
>   0x0000003d1243629d <+77>:	jmp    0x3d12436275 <__GI_raise+37>
>   0x0000003d1243629f <+79>:	mov    0x37ab92(%rip),%rdx        # 0x3d127b0e38
>   0x0000003d124362a6 <+86>:	neg    %eax
>   0x0000003d124362a8 <+88>:	mov    %eax,%fs:(%rdx)
>   0x0000003d124362ab <+91>:	or     $0xffffffffffffffff,%rax
>   0x0000003d124362af <+95>:	retq   
>   0x0000003d124362b0 <+96>:	mov    %esi,%eax
>   0x0000003d124362b2 <+98>:	jmp    0x3d12436275 <__GI_raise+37>
>End of assembler dump.

Actions: View

Attachments on bug 808592: 574080