Attachment 590814 Details for Bug 830640 – File: backtrace

File: backtrace

backtrace (text/plain), 16.89 KB, created by Owen Fitz on 2012-06-11 05:00:47 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Owen Fitz

Created: 2012-06-11 05:00:47 UTC

Size: 16.89 KB

patch

obsolete

>[New LWP 1654]
>Core was generated by `xpilot-ng-x11'.
>Program terminated with signal 6, Aborted.
>#0  0x00b11416 in __kernel_vsyscall ()
>
>Thread 1 (LWP 1654):
>#0  0x00b11416 in __kernel_vsyscall ()
>No symbol table info available.
>#1  0x454f795f in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
>        resultvar = <optimized out>
>        resultvar = <optimized out>
>        pid = 1164390388
>        selftid = 1654
>#2  0x454f92b3 in __GI_abort () at abort.c:91
>        save_stage = 2
>        act = {__sigaction_handler = {sa_handler = 0x4, sa_sigaction = 0x4}, sa_mask = {__val = {5, 1164128907, 0, 1162619128, 875575348, 962868834, 0, 895889457, 3220793971, 134512640, 0, 0, 3220793971, 13, 1164135592, 3, 3220782057, 7, 1164135596, 2, 3220782070, 2, 1164128859, 1, 1164135592, 3, 3220782056, 8, 1164135596, 2, 875641398, 1869494842}}, sa_flags = 1163720443, sa_restorer = 0x45672ff4}
>        sigs = {__val = {32, 0 <repeats 31 times>}}
>#3  0x455357b5 in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x45634d09 "*** %s ***: %s terminated\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:198
>        ap = 0x5 <Address 0x5 out of bounds>
>        ap_copy = 0x5 <Address 0x5 out of bounds>
>        fd = 2
>        on_2 = <optimized out>
>        list = <optimized out>
>        nlist = <optimized out>
>        cp = <optimized out>
>        written = <optimized out>
>#4  0x455d2d15 in __GI___fortify_fail (msg=msg@entry=0x45634caf "buffer overflow detected") at fortify_fail.c:32
>No locals.
>#5  0x455d0d6a in __GI___chk_fail () at chk_fail.c:29
>No locals.
>#6  0x455d0438 in _IO_str_chk_overflow (fp=0xbff948e0, c=48) at vsprintf_chk.c:35
>No locals.
>#7  0x455398ee in _IO_default_xsputn (f=0xbff948e0, data=0xbff9489b, n=5) at genops.c:485
>        s = 0xbff948a0 "\364\357\266E\210\213\\E\273\247PE\364/gE\344GT\t\340H\371\277\004"
>        more = 1
>#8  0x4550b7ba in _IO_vfprintf_internal (s=s@entry=0xbff948e0, format=<optimized out>, format@entry=0x809a7a7 "%4d", ap=0xbff949e4 "\001", ap@entry=0xbff949e0 "\020'") at vfprintf.c:1569
>        step0_jumps = {0, -3535, -3453, -3379, -3293, -3216, -3119, -2950, -2705, -2129, -1899, -1733, -1654, -1567, -1397, -1222, -498, -405, 1751, 1766, 2751, -393, 2442, 2623, 2693, 2943, 2126, -1478, -1442, -3027}
>        space = 0
>        is_short = 0
>        use_outdigits = -5
>        step1_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, -2129, -1899, -1733, -1654, -1567, -1397, -1222, -498, -405, 1751, 1766, 2751, -393, 2442, 2623, 2693, 2943, 2126, -1478, -1442, 0}
>        group = 0
>        prec = 0
>        step2_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, -1899, -1733, -1654, -1567, -1397, -1222, -498, -405, 1751, 1766, 2751, -393, 2442, 2623, 2693, 2943, 2126, -1478, -1442, 0}
>        string = 0xbff9489b "10000\364\357\266E\210\213\\E\273\247PE\364/gE\344GT\t\340H\371\277\004"
>        left = 0
>        is_long_double = 10000
>        width = 0
>        step3a_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, -1820, 0, 0, 0, -1397, -1222, -498, -405, 1751, 0, 0, 0, 0, 2623, 0, 0, 0, 0, 0, 0}
>        alt = 0
>        showsign = 0
>        is_long = 10
>        is_char = 10000
>        pad = 32 ' '
>        step3b_jumps = {0 <repeats 11 times>, -1654, 0, 0, -1397, -1222, -498, -405, 1751, 1766, 2751, -393, 2442, 2623, 2693, 2943, 2126, 0, 0, 0}
>        step4_jumps = {0 <repeats 14 times>, -1397, -1222, -498, -405, 1751, 1766, 2751, -393, 2442, 2623, 2693, 2943, 2126, 0, 0, 0}
>        is_negative = 0
>        number = {longlong = 42949672970000, word = 10000}
>        base = 10
>        the_arg = {pa_wchar = 842152555 L'\x32323a6b', pa_int = 842152555, pa_long_int = 842152555, pa_long_long_int = 4194031279008791147, pa_u_int = 842152555, pa_u_long_int = 842152555, pa_u_long_long_int = 4194031279008791147, pa_double = 2.548625843500672e-28, pa_long_double = <invalid float value>, pa_string = 0x32323a6b <Address 0x32323a6b out of bounds>, pa_wstring = 0x32323a6b <Address 0x32323a6b out of bounds>, pa_pointer = 0x32323a6b, pa_user = 0x32323a6b}
>        spec = 100 'd'
>        _buffer = {__routine = 0x36313a30, __arg = 0x33392e30, __canceltype = 808661550, __prev = 0x3431312e}
>        _avail = <optimized out>
>        thousands_sep = 0x0
>        grouping = 0xffffffff <Address 0xffffffff out of bounds>
>        done = 0
>        f = 0x809a7a9 "d"
>        lead_str_end = 0x809a7a7 "%4d"
>        end_of_spec = <optimized out>
>        work_buffer = "\220E\371\277\177\325SE\000\000\000\000\000\000\000\000\350D\371\277\000\000\000\000\060\233Q\t\000\000\000\000\000\000\000\000\030\032\253E\377\377\377\377\000\000\000\000 * F0\233Q\t\000\000\000\000\210\273S\t\020'\000\000\364/gE`9gE\001\000\000\000xJ\371\277\r\253PE", '\000' <repeats 20 times>, "\002\000\000\000\070\000\000\000[\000\000\000n\000\000\000w\000\000\000|\000\000\000\210>cE\260\071Q\t\320\071Q\t\000\000\000\000\002", '\000' <repeats 15 times>"\364, /gE 4gE\000\000\000\000X9Q\t!\004TE\030\032\253E0\233Q\t\000\240n\267\025\313SE\364\357\266Eh\273S\t\000\000\000\000g\210\265E\b\000\000\000h\273S\t \000\000\000\000\000\000\000x\231n\267\064\277JE 4gE\000\000\000\000&\000\000\000\000\000\000\000"...
>        workstart = 0x0
>        workend = <optimized out>
>        ap_save = 0xbff949e0 "\020'"
>        nspecs_done = 0
>        save_errno = 115
>        readonly_format = 0
>        args_malloced = 0x0
>        jump_table = "\001\000\000\004\000\016\000\006\000\000\a\002\000\003\t\000\005\b\b\b\b\b\b\b\b\b\000\000\000\000\000\000\000\032\000\031\000\023\023\023\000\035\000\000\f\000\000\000\000\000\000\025\000\000\000\000\022\000\r\000\000\000\000\000\000\032\000\024\017\023\023\023\n\017\034\000\v\030\027\021\026\f\000\025\033\020\000\000\022\000\r"
>#9  0x455d050c in ___vsprintf_chk (s=s@entry=0x95447e4 "1000", flags=flags@entry=1, slen=slen@entry=5, format=format@entry=0x809a7a7 "%4d", args=args@entry=0xbff949e0 "\020'") at vsprintf_chk.c:87
>        f = {_sbf = {_f = {_flags = -72515583, _IO_read_ptr = 0x95447e4 "1000", _IO_read_end = 0x95447e4 "1000", _IO_read_base = 0x95447e4 "1000", _IO_write_base = 0x95447e4 "1000", _IO_write_ptr = 0x95447e8 "", _IO_write_end = 0x95447e8 "", _IO_buf_base = 0x95447e4 "1000", _IO_buf_end = 0x95447e8 "", _IO_save_base = 0x0, _IO_backup_base = 0x0, _IO_save_end = 0x0, _markers = 0x0, _chain = 0x0, _fileno = 31457374, _flags2 = 4, _old_offset = 156526608, _cur_column = 0, _vtable_offset = 0 '\000', _shortbuf = "", _lock = 0x0, _offset = 473614826289, _codecvt = 0x45b42ff4, _wide_data = 0x9512ed8, _freeres_list = 0x0, _freeres_buf = 0x80, _freeres_size = 156454840, _mode = -1, _unused2 = "\204\320\006\b\030hT\t\200\000\000\000\020\312R\t\364/\264E\330.Q\t\031\000\000\000\270kT\t\002\000\000\000\330.Q\t"}, vtable = 0x45672d00}, _s = {_allocate_buffer = 0, _free_buffer = 0x19}}
>        ret = <optimized out>
>#10 0x455d041f in ___sprintf_chk (s=s@entry=0x95447e4 "1000", flags=flags@entry=1, slen=slen@entry=5, format=format@entry=0x809a7a7 "%4d") at sprintf_chk.c:33
>        arg = 0xbff949e0 "\020'"
>        done = 0
>#11 0x0806ab1a in sprintf (__fmt=0x809a7a7 "%4d", __s=0x95447e4 "1000") at /usr/include/bits/stdio2.h:34
>No locals.
>#12 Welcome_show_server_list (conpar=conpar@entry=0x80dd440) at welcome.c:1035
>        player_width = 18
>        queue_width = 18
>        bases_width = 78
>        team_width = 192
>        fps_width = 60
>        status_width = 204
>        version_width = 390
>        map_width = 186
>        server_width = 222
>        ping_width = 30
>        stat_width = 54
>        yoff = 29
>        text_height = <optimized out>
>        button_height = <optimized out>
>        label_height = 21
>        queue_offset = 18
>        bases_offset = 36
>        team_offset = 114
>        fps_offset = 306
>        status_offset = 366
>        version_offset = 126
>        map_offset = 198
>        server_offset = 384
>        ping_offset = 608
>        stat_offset = 638
>        w = <optimized out>
>        all_offset = 1452
>        sip = 0x95447a0
>        start_server_it = 0x953cd50
>        next_width = <optimized out>
>        first_width = <optimized out>
>        pingw_width = <optimized out>
>        next_height = 29
>        first_height = 29
>#13 0x0806c854 in Internet_cb (widget=9, user_data=0x80dd440, text=0x953c544) at welcome.c:1147
>        conpar = 0x80dd440
>#14 0x0806ec6b in Widget_button (event=event@entry=0xbff94c4c, widget_desc=widget_desc@entry=9, pressed=pressed@entry=0 '\000') at widget.c:985
>        widget = <optimized out>
>        entry_widget = <optimized out>
>        pulldown_widget = <optimized out>
>        sub_widget = <optimized out>
>        boolw = <optimized out>
>        menuw = <optimized out>
>        pullw = <optimized out>
>        activw = <optimized out>
>        intw = <optimized out>
>        colorw = <optimized out>
>        doublew = <optimized out>
>        arroww = <optimized out>
>        entryw = <optimized out>
>        i = <optimized out>
>        ival = <optimized out>
>        cval = <optimized out>
>        sub_widget_desc = <optimized out>
>        dval = <optimized out>
>        delta = <optimized out>
>        dmin = <optimized out>
>        offset = <optimized out>
>        newoffset = <optimized out>
>#15 0x0806f13e in Widget_event (event=event@entry=0xbff94c4c) at widget.c:1283
>        i = <optimized out>
>        count = 1
>        widget = <optimized out>
>        sliderw = <optimized out>
>#16 0x0806b1d7 in Welcome_process_one_event (event=event@entry=0xbff94c4c, conpar=conpar@entry=0x80dd440) at welcome.c:1491
>        cmev = <optimized out>
>        conf = <optimized out>
>#17 0x0806cad3 in Welcome_input_loop (conpar=0x80dd440) at welcome.c:1536
>        result = <optimized out>
>        event = {type = 5, xany = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349}, xkey = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, root = 876, subwindow = 0, time = 960299, x = 42, y = 31, x_root = 192, y_root = 192, state = 256, keycode = 1, same_screen = 1}, xbutton = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, root = 876, subwindow = 0, time = 960299, x = 42, y = 31, x_root = 192, y_root = 192, state = 256, button = 1, same_screen = 1}, xmotion = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, root = 876, subwindow = 0, time = 960299, x = 42, y = 31, x_root = 192, y_root = 192, state = 256, is_hint = 1 '\001', same_screen = 1}, xcrossing = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, root = 876, subwindow = 0, time = 960299, x = 42, y = 31, x_root = 192, y_root = 192, mode = 256, detail = 1, same_screen = 1, focus = 0, state = 327681}, xfocus = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, mode = 876, detail = 0}, xexpose = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, x = 876, y = 0, width = 960299, height = 42, count = 31}, xgraphicsexpose = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, drawable = 31457349, x = 876, y = 0, width = 960299, height = 42, count = 31, major_code = 192, minor_code = 192}, xnoexpose = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, drawable = 31457349, major_code = 876, minor_code = 0}, xvisibility = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, state = 876}, xcreatewindow = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, parent = 31457349, window = 876, x = 0, y = 960299, width = 42, height = 31, border_width = 192, override_redirect = 192}, xdestroywindow = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, event = 31457349, window = 876}, xunmap = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, event = 31457349, window = 876, from_configure = 0}, xmap = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, event = 31457349, window = 876, override_redirect = 0}, xmaprequest = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, parent = 31457349, window = 876}, xreparent = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, event = 31457349, window = 876, parent = 0, x = 960299, y = 42, override_redirect = 31}, xconfigure = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, event = 31457349, window = 876, x = 0, y = 960299, width = 42, height = 31, border_width = 192, above = 192, override_redirect = 256}, xgravity = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, event = 31457349, window = 876, x = 0, y = 960299}, xresizerequest = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, width = 876, height = 0}, xconfigurerequest = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, parent = 31457349, window = 876, x = 0, y = 960299, width = 42, height = 31, border_width = 192, above = 192, detail = 256, value_mask = 1}, xcirculate = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, event = 31457349, window = 876, place = 0}, xcirculaterequest = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, parent = 31457349, window = 876, place = 0}, xproperty = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, atom = 876, time = 0, state = 960299}, xselectionclear = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, selection = 876, time = 0}, xselectionrequest = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, owner = 31457349, requestor = 876, selection = 0, target = 960299, property = 42, time = 31}, xselection = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, requestor = 31457349, selection = 876, target = 0, property = 960299, time = 42}, xcolormap = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, colormap = 876, new = 0, state = 960299}, xclient = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, message_type = 876, format = 0, data = {b = "+\247\016\000*\000\000\000\037\000\000\000\300\000\000\000\300\000\000", s = {-22741, 14, 42, 0, 31, 0, 192, 0, 192, 0}, l = {960299, 42, 31, 192, 192}}}, xmapping = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, request = 876, first_keycode = 0, count = 960299}, xerror = {type = 5, display = 0xef, resourceid = 0, serial = 156315352, error_code = 69 'E', request_code = 0 '\000', minor_code = 224 '\340'}, xkeymap = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, window = 31457349, key_vector = "l\003\000\000\000\000\000\000+\247\016\000*\000\000\000\037\000\000\000\300\000\000\000\300\000\000\000\000\001\000"}, xgeneric = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, extension = 31457349, evtype = 876}, xcookie = {type = 5, serial = 239, send_event = 0, display = 0x9512ed8, extension = 31457349, evtype = 876, cookie = 0, data = 0xea72b}, pad = {5, 239, 0, 156315352, 31457349, 876, 0, 960299, 42, 31, 192, 192, 256, 1, 1, 0, 327681, 655366, 0, 262145, 655366, 0, 327680, 589830}}
>#18 Welcome_doit (conpar=0x80dd440) at welcome.c:1572
>        result = <optimized out>
>#19 Welcome_screen (conpar=0x80dd440) at welcome.c:1586
>        result = <optimized out>
>#20 0x0804b649 in main (argc=1, argv=0xbff94da4) at xpilot.c:136
>        result = <optimized out>
>        retval = 1
>        auto_shutdown = 0 '\000'
>From        To          Syms Read   Shared Object Library
>0x461b14a0  0x461b5ce4  Yes         /lib/libSM.so.6
>0x461e95f0  0x461f8574  Yes         /lib/libICE.so.6
>0x45e6b910  0x45e6cb6c  Yes         /lib/libXxf86misc.so.1
>0x45b83880  0x45b8e154  Yes         /lib/libXext.so.6
>0x45a22410  0x45ab1984  Yes         /lib/libX11.so.6
>0x460ae1b0  0x460c7434  Yes         /lib/libexpat.so.1
>0x456d56e0  0x456e29cc  Yes         /lib/libz.so.1
>0x456ab470  0x456c5678  Yes         /lib/libm.so.6
>0x454dff20  0x4561d14c  Yes         /lib/libc.so.6
>0x45b73080  0x45b74d34  Yes         /lib/libuuid.so.1
>0x45b55f70  0x45b664a4  Yes         /lib/libxcb.so.1
>0x45695ad0  0x45696aec  Yes         /lib/libdl.so.2
>0x454a2850  0x454baec7  Yes         /lib/ld-linux.so.2
>0x45b48a60  0x45b4992c  Yes         /lib/libXau.so.6
>0x0072da40  0x00734e7c  Yes         /lib/libnss_files.so.2
>0x00f53c40  0x00f572b8  Yes         /lib/libnss_dns.so.2
>0x4585b6b0  0x45869e94  Yes         /lib/libresolv.so.2
>0x00a60920  0x00a61dd4  Yes         /lib/libnss_myhostname.so.2
>                        No          /lib/libXcursor.so.1
>                        No          /lib/libXrender.so.1
>0x461d8f70  0x461db3cc  Yes         /lib/libXfixes.so.3
>0x4583c020  0x45852b54  Yes         /lib/libgcc_s.so.1
>$1 = 0xb76e6000 ""
>No symbol "__glib_assert_msg" in current context.
>eax            0x0	0
>ecx            0x676	1654
>edx            0x6	6
>ebx            0x676	1654
>esp            0xbff93b30	0xbff93b30
>ebp            0xbff942a8	0xbff942a8
>esi            0x4	4
>edi            0x45672ff4	1164390388
>eip            0xb11416	0xb11416 <__kernel_vsyscall+2>
>eflags         0x200246	[ PF ZF IF ID ]
>cs             0x73	115
>ss             0x7b	123
>ds             0x7b	123
>es             0x7b	123
>fs             0x0	0
>gs             0x33	51
>Dump of assembler code for function __kernel_vsyscall:
>   0x00b11414 <+0>:	int    $0x80
>=> 0x00b11416 <+2>:	ret    
>End of assembler dump.

Actions: View

Attachments on bug 830640: 590814 | 590815 | 590816