Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 613087 Details for
Bug 857599
[abrt] at-spi2-core-2.4.2-1.fc17: standard_free: Process /usr/libexec/at-spi2-registryd was killed by signal 11 (SIGSEGV)
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
File: backtrace
backtrace (text/plain), 30.54 KB, created by
JW Hall
on 2012-09-15 04:09:34 UTC
(
hide
)
Description:
File: backtrace
Filename:
MIME Type:
Creator:
JW Hall
Created:
2012-09-15 04:09:34 UTC
Size:
30.54 KB
patch
obsolete
>warning: core file may not match specified executable file. >[New LWP 1573] >[New LWP 1574] >[Thread debugging using libthread_db enabled] >Using host libthread_db library "/lib/libthread_db.so.1". >Core was generated by `/usr/libexec/at-spi2-registryd --use-gnome-session'. >Program terminated with signal 11, Segmentation fault. >#0 malloc_consolidate (av=av@entry=0x44ac4420) at malloc.c:4258 >4258 nextsize = chunksize(nextchunk); > >Thread 2 (Thread 0xb7738b40 (LWP 1574)): >#0 0xb775e424 in __kernel_vsyscall () >No symbol table info available. >#1 0x449ffeb4 in __GI___poll (fds=fds@entry=0xb6e023b8, nfds=nfds@entry=3, timeout=timeout@entry=-1) at ../sysdeps/unix/sysv/linux/poll.c:87 > resultvar = <optimized out> > oldtype = -516 > result = <optimized out> >#2 0x44d1ae5c in g_poll (fds=0xb6e023b8, nfds=3, timeout=-1) at gpoll.c:132 >No locals. >#3 0x44d0c2e0 in g_main_context_poll (n_fds=3, fds=0xb6e023b8, timeout=<optimized out>, context=0x8fed8b8, priority=<optimized out>) at gmain.c:3440 > poll_func = <optimized out> >#4 g_main_context_iterate (context=0x8fed8b8, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3141 > max_priority = 2147483647 > timeout = -1 > some_ready = <optimized out> > nfds = 3 > allocated_nfds = <optimized out> > fds = 0xb6e023b8 >#5 0x44d0c7c3 in g_main_loop_run (loop=0x8fed890) at gmain.c:3340 > __PRETTY_FUNCTION__ = "g_main_loop_run" >#6 0x45254c1b in gdbus_shared_thread_func (user_data=0x8fed8a0) at gdbusprivate.c:277 > data = 0x8fed8a0 >#7 0x44d312c4 in g_thread_proxy (data=0x8fcf890) at gthread.c:801 > thread = 0x8fcf890 >#8 0x44ad7adf in start_thread (arg=0xb7738b40) at pthread_create.c:309 > __res = <optimized out> > pd = 0xb7738b40 > now = <optimized out> > unwind_buf = {cancel_jmp_buf = {{jmp_buf = {1152286708, 0, 4001536, -1217166360, -486527394, 1593014713}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} > not_first_call = 0 > pagesize_m1 = <optimized out> > sp = <optimized out> > freesize = <optimized out> >#9 0x44a0a3ce in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133 >No locals. > >Thread 1 (Thread 0xb7739740 (LWP 1573)): >#0 malloc_consolidate (av=av@entry=0x44ac4420) at malloc.c:4258 > fb = 0x44ac4428 > maxfb = 0x44ac444c > p = 0x44ac4450 > nextp = 0x8ff8d60 > unsorted_bin = 0x44ac4450 > first_unsorted = <optimized out> > nextchunk = 0x4dab48e0 > size = 150930576 > nextsize = <optimized out> > prevsize = <optimized out> > nextinuse = <optimized out> > bck = <optimized out> > fwd = <optimized out> >#1 0x4498beb4 in _int_malloc (av=0x44ac4420, bytes=bytes@entry=630) at malloc.c:3544 > nb = 640 > idx = 66 > bin = <optimized out> > victim = <optimized out> > size = <optimized out> > victim_index = <optimized out> > remainder = <optimized out> > remainder_size = <optimized out> > block = <optimized out> > bit = <optimized out> > map = <optimized out> > fwd = <optimized out> > bck = <optimized out> > errstr = 0x0 >#2 0x4498fedb in __libc_calloc (n=630, elem_size=elem_size@entry=1) at malloc.c:3284 > av = <optimized out> > oldtop = 0x8ff9f00 > p = <optimized out> > bytes = 630 > sz = 630 > csz = <optimized out> > oldtopsize = 131328 > mem = <optimized out> > clearsize = <optimized out> > nclears = <optimized out> > d = <optimized out> > hook = <optimized out> >#3 0x448fe131 in _dl_new_object (realname=realname@entry=0x8fef470 "/lib/libgcc_s.so.1", libname=libname@entry=0x44a82b89 "libgcc_s.so.1", type=type@entry=2, loader=loader@entry=0x0, mode=mode@entry=-1879048191, nsid=nsid@entry=0) at dl-object.c:77 > libname_len = 14 > new = <optimized out> > newname = <optimized out> > naudit = 0 > audit_space = <optimized out> > idx = <optimized out> >#4 0x448f94af in _dl_map_object_from_fd (name=name@entry=0x44a82b89 "libgcc_s.so.1", fd=9, fbp=fbp@entry=0xbfd624fc, realname=0x8fef470 "/lib/libgcc_s.so.1", loader=loader@entry=0x0, l_type=l_type@entry=2, mode=mode@entry=-1879048191, stack_endp=stack_endp@entry=0xbfd624f8, nsid=nsid@entry=0) at dl-load.c:1052 > l = <optimized out> > header = 0xbfd62500 > phdr = <optimized out> > ph = <optimized out> > maplength = <optimized out> > type = <optimized out> > st = {st_dev = 64769, __pad1 = 0, __st_ino = 182093, st_mode = 33261, st_nlink = 1, st_uid = 0, st_gid = 0, st_rdev = 0, __pad2 = 0, st_size = 116148, st_blksize = 4096, st_blocks = 232, st_atim = {tv_sec = 1345757510, tv_nsec = 424000005}, st_mtim = {tv_sec = 1336402301, tv_nsec = 0}, st_ctim = {tv_sec = 1345549386, tv_nsec = 588439501}, st_ino = 182093} > errstring = 0x0 > errval = 0 > r = 0x449138e4 > make_consistent = true > stack_flags = <optimized out> >#5 0x448fb3a4 in _dl_map_object (loader=0x0, loader@entry=0xb773d538, name=name@entry=0x44a82b89 "libgcc_s.so.1", type=type@entry=2, trace_mode=trace_mode@entry=0, mode=mode@entry=-1879048191, nsid=nsid@entry=0) at dl-load.c:2355 > fd = <optimized out> > realname = 0x8fef470 "/lib/libgcc_s.so.1" > name_copy = 0x44913000 "\370\070\221D\031" > l = <optimized out> > fb = {len = 512, buf = "\177ELF\001\001\001\000\000\000\000\000\000\000\000\000\003\000\003\000\001\000\000\000 P\342D4\000\000\000\214\300\001\000\000\000\000\000\064\000 \000\006\000(\000!\000 \000\001\000\000\000\000\000\000\000\000\060\342D\000\060\342D$\267\001\000$\267\001\000\005\000\000\000\000\020\000\000\001\000\000\000$\267\001\000$\367\343D$\367\343D\354\001\000\000L\003\000\000\006\000\000\000\000\020\000\000\002\000\000\000\064\267\001\000\064\367\343D4\367\343D\370\000\000\000\370\000\000\000\006\000\000\000\004\000\000\000\004\000\000\000\364\000\000\000\364\060\342D\364\060\342D$\000\000\000$\000\000\000\004\000\000\000\004\000\000\000P\345td\244\223\001\000\244\303\343D\244\303\343D\004\005\000\000\004\005\000\000\004\000\000\000\004\000\000\000Q\345td", '\000' <repeats 20 times>, "\006\000\000\000\004\000\000\000\004"...} > found_other_class = false > stack_end = 0xbfd63520 >#6 0x44906596 in dl_open_worker (a=a@entry=0xbfd628ac) at dl-open.c:226 > args = 0xbfd628ac > file = 0x44a82b89 "libgcc_s.so.1" > mode = -2147483647 > call_map = 0xb773d538 > dst = <optimized out> > new = <optimized out> > r = <optimized out> > reloc_mode = <optimized out> > nmaps = <optimized out> > l = <optimized out> > maps = <optimized out> > relocation_in_progress = <optimized out> > any_tls = <optimized out> > first_static_tls = <optimized out> >#7 0x4490248e in _dl_catch_error (objname=objname@entry=0xbfd628a4, errstring=errstring@entry=0xbfd628a8, mallocedp=mallocedp@entry=0xbfd628a0, operate=operate@entry=0x44906450 <dl_open_worker>, args=args@entry=0xbfd628ac) at dl-error.c:178 > errcode = 0 > old = 0xbfd62948 > c = {objname = 0x0, errstring = 0x0, malloced = false, env = {{__jmpbuf = {1150365636, -2, 1150366916, -1076483864, -1076484192, 1150297195}, __mask_was_saved = 0, __saved_mask = {__val = {0 <repeats 23 times>, 1152227295, 0, 0, 0, 0, 0, 0, 0, 1150365636}}}}} > catchp = 0xb773973c >#8 0x449060b4 in _dl_open (file=0x44a82b89 "libgcc_s.so.1", mode=-2147483647, caller_dlopen=0x44a1f408, nsid=-2, argc=2, argv=0xbfd63524, env=0xbfd63530) at dl-open.c:652 > args = {file = 0x44a82b89 "libgcc_s.so.1", mode = -2147483647, caller_dlopen = 0x44a1f408, caller_dl_open = 0x44a473a1, map = 0x0, nsid = 0, argc = 2, argv = 0xbfd63524, env = 0xbfd63530} > objname = <optimized out> > errstring = <optimized out> > malloced = <optimized out> > errcode = <optimized out> >#9 0x44a473a1 in do_dlopen (ptr=ptr@entry=0xbfd62a20) at dl-libc.c:89 > args = 0xbfd62a20 >#10 0x4490248e in _dl_catch_error (objname=0xbfd62a18, errstring=0xbfd62a1c, mallocedp=0xbfd62a14, operate=0x44a47340 <do_dlopen>, args=0xbfd62a20) at dl-error.c:178 > errcode = 0 > old = 0x0 > c = {objname = 0x0, errstring = 0x0, malloced = false, env = {{__jmpbuf = {1150365636, 1150364800, -1076482960, -1076483496, -1076483808, 1150297195}, __mask_was_saved = 0, __saved_mask = {__val = {0 <repeats 32 times>}}}}} > catchp = 0xb773973c >#11 0x44a474c3 in dlerror_run (args=0xbfd62a18, operate=0x44a47340 <do_dlopen>) at dl-libc.c:48 > objname = 0x0 > last_errstring = 0x0 > malloced = <optimized out> > result = <optimized out> >#12 __GI___libc_dlopen_mode (name=0x0, mode=1151464456) at dl-libc.c:165 > args = {name = 0x0, mode = 0, caller_dlopen = 0x44a82b89, map = 0x80000001} >#13 0x44ac3ff4 in ?? () from /lib/libc.so.6 >No symbol table info available. >#14 0x44adc74e in pthread_once () at ../nptl/sysdeps/unix/sysv/linux/i386/pthread_once.S:122 >No locals. >#15 0x44a1f675 in __GI___backtrace (array=array@entry=0xbfd62c70, size=size@entry=64) at ../sysdeps/i386/backtrace.c:121 > __p = <optimized out> > arg = {array = 0xbfd62c70, cnt = -1, size = 64, lastebp = 0x0, lastesp = 0x0} > once = 1 >#16 0x44983f81 in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x44a85f54 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:178 > addrs = {0xbfd62df4, 0x7a, 0xbfd62c94, 0x45139a4b, 0x4515ad3c, 0xbfd62dfc, 0x8fcfe84, 0x72, 0x1, 0x16c, 0x4516cca8, 0xb, 0x8fcfe84, 0x45138e4c, 0xbfd62df4, 0x4498bd2f, 0xbfd62df4, 0x7, 0xffffffff, 0x4516cff4, 0xbfd62df4, 0x45138e4c, 0xbfd62df4, 0x45139480, 0xbfd62df4, 0x72, 0x4513a56b, 0x4516cff4, 0x4516cff4, 0x0, 0x44ac4428, 0x4513a7c0, 0x10, 0xbfd62d60, 0x4514f35e, 0x4514f3d9, 0x72, 0xc, 0x6c, 0xbfd62d1c, 0x4515ad3c, 0x44a55e65, 0x4516cff4, 0x10, 0xbfd62ef4, 0x6c, 0xbfd62ef4, 0x451398b0, 0x4515ad3c, 0xbfd62efc, 0x6c, 0xbfd62f04, 0x0, 0x16c, 0x4516cca8, 0x44ac3ff4, 0x44ac4420, 0x1, 0xbfd62ef4, 0x45139496, 0x4516cca8, 0xb, 0xbfd62ef4, 0x4516cff4} > n = <optimized out> > ap = 0x7 <Address 0x7 out of bounds> > ap_copy = 0x7 <Address 0x7 out of bounds> > fd = 2 > on_2 = <optimized out> > list = <optimized out> > nlist = <optimized out> > cp = <optimized out> > written = <optimized out> >#17 0x4498b8e9 in malloc_printerr (ptr=0x8ff7398, str=0x44a85f80 "double free or corruption (fasttop)", action=<optimized out>) at malloc.c:5027 > buf = "08ff7398" > cp = <optimized out> >#18 _int_free (av=0x44ac4420, p=0x8ff7390, have_lock=0) at malloc.c:3948 > size = <optimized out> > fb = <optimized out> > nextchunk = <optimized out> > nextsize = <optimized out> > nextinuse = <optimized out> > prevsize = <optimized out> > bck = <optimized out> > fwd = <optimized out> > errstr = <optimized out> > locked = <optimized out> >#19 0x44d1222c in standard_free (mem=0x8ff7398) at gmem.c:98 >No locals. >#20 0x44d123e8 in g_free (mem=mem@entry=0x8ff7398) at gmem.c:252 >No locals. >#21 0x0804dfdf in reset_hung_process_from_ping (pending=0x8fef4b0, data=0x8ff7398) at deviceeventcontroller.c:1196 > bus_name = 0x8ff7398 " ]\377\b\340\221\377\b\020" > l = 0x8febfa8 >#22 0x45144112 in _dbus_pending_call_complete (pending=pending@entry=0x8fef4b0) at dbus-pending-call.c:197 > user_data = <optimized out> >#23 0x4512f1d8 in complete_pending_call_and_unlock (connection=connection@entry=0x8fc4d68, pending=0x8fef4b0, message=message@entry=0x8fef258) at dbus-connection.c:2308 >No locals. >#24 0x451329d8 in dbus_connection_dispatch (connection=connection@entry=0x8fc4d68) at dbus-connection.c:4593 > message = 0x8fef258 > link = <optimized out> > filter_list_copy = <optimized out> > message_link = 0x8fcdfd0 > result = DBUS_HANDLER_RESULT_NOT_YET_HANDLED > pending = <optimized out> > reply_serial = <optimized out> > status = <optimized out> > __FUNCTION__ = "dbus_connection_dispatch" >#25 0x4100884e in message_queue_dispatch (source=source@entry=0x8fc5418, callback=0, user_data=0x0) at atspi-gmain.c:97 > connection = 0x8fc4d68 >#26 0x44d0bfbb in g_main_dispatch (context=0x8fcd3c8) at gmain.c:2539 > dispatch = 0x41008820 <message_queue_dispatch> > was_in_call = 0 > user_data = 0x0 > callback = 0 > cb_funcs = 0x0 > cb_data = 0x0 > current_source_link = {data = 0x8fc5418, next = 0x0} > need_destroy = <optimized out> > source = 0x8fc5418 > current = 0x8febf98 > i = <optimized out> >#27 g_main_context_dispatch (context=context@entry=0x8fcd3c8) at gmain.c:3075 >No locals. >#28 0x44d0c360 in g_main_context_iterate (context=0x8fcd3c8, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3146 > max_priority = 0 > timeout = 0 > some_ready = 1 > nfds = 3 > allocated_nfds = <optimized out> > fds = <optimized out> >#29 0x44d0c7c3 in g_main_loop_run (loop=0x8fcff08) at gmain.c:3340 > __PRETTY_FUNCTION__ = "g_main_loop_run" >#30 0x0804afac in main (argc=1, argv=0xbfd63524) at registry-main.c:247 > registry = <optimized out> > bus = <optimized out> > opt = <optimized out> > err = 0x0 > error = {name = 0x0, message = 0x0, dummy1 = 1, dummy2 = 1, dummy3 = 0, dummy4 = 1, dummy5 = 0, padding1 = 0x44ac3ff4} > ret = <optimized out> >From To Syms Read Shared Object Library >0x41008490 0x41019448 Yes /lib/libatspi.so.0 >0x451a7710 0x4527ae64 Yes /lib/libgio-2.0.so.0 >0x44e53b10 0x44e85124 Yes /lib/libgobject-2.0.so.0 >0x44cd9b50 0x44d79864 Yes /lib/libglib-2.0.so.0 >0x45129710 0x45158958 Yes /lib/libdbus-1.so.3 >0x44ad56a0 0x44ae0e60 Yes /lib/libpthread.so.0 >0x44b1b920 0x44b1f45c Yes /lib/librt.so.1 >0x44b7b410 0x44c0a984 Yes /lib/libX11.so.6 >0x45d6ef40 0x45d71934 Yes /lib/libXtst.so.6 >0x44e0c880 0x44e17154 Yes /lib/libXext.so.6 >0x4c10a660 0x4c10ac94 Yes /lib/libXevie.so.1 >0x44acaad0 0x44acbaec Yes /lib/libdl.so.2 >0x4492cf20 0x44a6d02c Yes /lib/libc.so.6 >0x44e1e4b0 0x44e1e698 Yes /lib/libgthread-2.0.so.0 >0x44e43090 0x44e46794 Yes /lib/libffi.so.5 >0x4517dc80 0x4517ed7c Yes /lib/libgmodule-2.0.so.0 >0x44b266e0 0x44b339cc Yes /lib/libz.so.1 >0x44b418e0 0x44b53d94 Yes /lib/libselinux.so.1 >0x44df16b0 0x44dffe94 Yes /lib/libresolv.so.2 >0x448f3850 0x4490bec7 Yes /lib/ld-linux.so.2 >0x44ca8f70 0x44cb94a4 Yes /lib/libxcb.so.1 >0x450d68f0 0x450e0f24 Yes /lib/libXi.so.6 >0x44b61a60 0x44b6292c Yes /lib/libXau.so.6 >$1 = 0xb7754000 "" >$2 = 0x0 >eax 0x8ff0490 150930576 >ecx 0x51 81 >edx 0x44ac4450 1152140368 >ebx 0x44ac3ff4 1152139252 >esp 0xbfd621a0 0xbfd621a0 >ebp 0x44ac4420 0x44ac4420 >esi 0x8ff0490 150930576 >edi 0x4dab48e0 1303070944 >eip 0x4498aeb6 0x4498aeb6 <malloc_consolidate+246> >eflags 0x210206 [ PF IF RF ID ] >cs 0x73 115 >ss 0x7b 123 >ds 0x7b 123 >es 0x7b 123 >fs 0x0 0 >gs 0x33 51 >Dump of assembler code for function malloc_consolidate: > 0x4498adc0 <+0>: push %ebp > 0x4498adc1 <+1>: push %edi > 0x4498adc2 <+2>: push %esi > 0x4498adc3 <+3>: push %ebx > 0x4498adc4 <+4>: call 0x44a4ac33 <__x86.get_pc_thunk.bx> > 0x4498adc9 <+9>: add $0x13922b,%ebx > 0x4498adcf <+15>: sub $0x6c,%esp > 0x4498add2 <+18>: mov %eax,0x34(%esp) > 0x4498add6 <+22>: mov 0x18d4(%ebx),%edx > 0x4498addc <+28>: test %edx,%edx > 0x4498adde <+30>: je 0x4498af52 <malloc_consolidate+402> > 0x4498ade4 <+36>: mov %eax,%edx > 0x4498ade6 <+38>: cmpl $0x0,%gs:0xc > 0x4498adee <+46>: je 0x4498adf1 <malloc_consolidate+49> > 0x4498adf0 <+48>: lock orl $0x1,0x4(%eax) > 0x4498adf5 <+53>: add $0x30,%eax > 0x4498adf8 <+56>: add $0x8,%edx > 0x4498adfb <+59>: mov %eax,0x40(%esp) > 0x4498adff <+63>: mov 0x34(%esp),%eax > 0x4498ae03 <+67>: lea -0x4028c(%ebx),%edi > 0x4498ae09 <+73>: mov %edx,0x3c(%esp) > 0x4498ae0d <+77>: mov %edi,0x48(%esp) > 0x4498ae11 <+81>: add $0x2c,%eax > 0x4498ae14 <+84>: mov %eax,0x44(%esp) > 0x4498ae18 <+88>: xor %edx,%edx > 0x4498ae1a <+90>: mov 0x3c(%esp),%ebp > 0x4498ae1e <+94>: xchg %edx,0x0(%ebp) > 0x4498ae21 <+97>: test %edx,%edx > 0x4498ae23 <+99>: jne 0x4498aea4 <malloc_consolidate+228> > 0x4498ae25 <+101>: jmp 0x4498af20 <malloc_consolidate+352> > 0x4498ae2a <+106>: lea 0x0(%esi),%esi > 0x4498ae30 <+112>: mov 0x8(%edi),%eax > 0x4498ae33 <+115>: add %ecx,%esi > 0x4498ae35 <+117>: mov 0xc(%edi),%ecx > 0x4498ae38 <+120>: cmp 0xc(%eax),%edi > 0x4498ae3b <+123>: jne 0x4498b034 <malloc_consolidate+628> > 0x4498ae41 <+129>: cmp 0x8(%ecx),%edi > 0x4498ae44 <+132>: jne 0x4498b034 <malloc_consolidate+628> > 0x4498ae4a <+138>: cmpl $0x1ff,0x4(%edi) > 0x4498ae51 <+145>: mov %ecx,0xc(%eax) > 0x4498ae54 <+148>: mov %eax,0x8(%ecx) > 0x4498ae57 <+151>: jbe 0x4498ae64 <malloc_consolidate+164> > 0x4498ae59 <+153>: mov 0x10(%edi),%ecx > 0x4498ae5c <+156>: test %ecx,%ecx > 0x4498ae5e <+158>: jne 0x4498b150 <malloc_consolidate+912> > 0x4498ae64 <+164>: mov 0x34(%esp),%ebp > 0x4498ae68 <+168>: cmp $0x1ff,%esi > 0x4498ae6e <+174>: mov 0x38(%ebp),%eax > 0x4498ae71 <+177>: mov %edx,0x38(%ebp) > 0x4498ae74 <+180>: mov %edx,0xc(%eax) > 0x4498ae77 <+183>: jbe 0x4498ae87 <malloc_consolidate+199> > 0x4498ae79 <+185>: movl $0x0,0x10(%edx) > 0x4498ae80 <+192>: movl $0x0,0x14(%edx) > 0x4498ae87 <+199>: mov 0x40(%esp),%edi > 0x4498ae8b <+203>: mov %esi,%ecx > 0x4498ae8d <+205>: or $0x1,%ecx > 0x4498ae90 <+208>: mov %ecx,0x4(%edx) > 0x4498ae93 <+211>: mov %eax,0x8(%edx) > 0x4498ae96 <+214>: mov %edi,0xc(%edx) > 0x4498ae99 <+217>: mov %esi,(%edx,%esi,1) > 0x4498ae9c <+220>: mov 0x38(%esp),%edx > 0x4498aea0 <+224>: test %edx,%edx > 0x4498aea2 <+226>: je 0x4498af20 <malloc_consolidate+352> > 0x4498aea4 <+228>: mov 0x4(%edx),%eax > 0x4498aea7 <+231>: mov 0x8(%edx),%edi > 0x4498aeaa <+234>: mov %eax,%esi > 0x4498aeac <+236>: and $0xfffffffa,%esi > 0x4498aeaf <+239>: mov %edi,0x38(%esp) > 0x4498aeb3 <+243>: lea (%edx,%esi,1),%edi >=> 0x4498aeb6 <+246>: mov 0x4(%edi),%ebp > 0x4498aeb9 <+249>: and $0xfffffff8,%ebp > 0x4498aebc <+252>: test $0x1,%al > 0x4498aebe <+254>: mov %ebp,0x24(%esp) > 0x4498aec2 <+258>: jne 0x4498aefc <malloc_consolidate+316> > 0x4498aec4 <+260>: mov (%edx),%eax > 0x4498aec6 <+262>: sub %eax,%edx > 0x4498aec8 <+264>: add %eax,%esi > 0x4498aeca <+266>: mov 0x8(%edx),%eax > 0x4498aecd <+269>: mov 0xc(%edx),%ecx > 0x4498aed0 <+272>: cmp 0xc(%eax),%edx > 0x4498aed3 <+275>: jne 0x4498afb9 <malloc_consolidate+505> > 0x4498aed9 <+281>: cmp 0x8(%ecx),%edx > 0x4498aedc <+284>: jne 0x4498afb9 <malloc_consolidate+505> > 0x4498aee2 <+290>: cmpl $0x1ff,0x4(%edx) > 0x4498aee9 <+297>: mov %ecx,0xc(%eax) > 0x4498aeec <+300>: mov %eax,0x8(%ecx) > 0x4498aeef <+303>: jbe 0x4498aefc <malloc_consolidate+316> > 0x4498aef1 <+305>: mov 0x10(%edx),%ecx > 0x4498aef4 <+308>: test %ecx,%ecx > 0x4498aef6 <+310>: jne 0x4498b134 <malloc_consolidate+884> > 0x4498aefc <+316>: mov 0x34(%esp),%eax > 0x4498af00 <+320>: cmp %edi,0x30(%eax) > 0x4498af03 <+323>: je 0x4498af40 <malloc_consolidate+384> > 0x4498af05 <+325>: mov 0x24(%esp),%ecx > 0x4498af09 <+329>: testb $0x1,0x4(%edi,%ecx,1) > 0x4498af0e <+334>: je 0x4498ae30 <malloc_consolidate+112> > 0x4498af14 <+340>: andl $0xfffffffe,0x4(%edi) > 0x4498af18 <+344>: jmp 0x4498ae64 <malloc_consolidate+164> > 0x4498af1d <+349>: lea 0x0(%esi),%esi > 0x4498af20 <+352>: addl $0x4,0x3c(%esp) > 0x4498af25 <+357>: mov 0x3c(%esp),%eax > 0x4498af29 <+361>: sub $0x4,%eax > 0x4498af2c <+364>: cmp %eax,0x44(%esp) > 0x4498af30 <+368>: jne 0x4498ae18 <malloc_consolidate+88> > 0x4498af36 <+374>: add $0x6c,%esp > 0x4498af39 <+377>: pop %ebx > 0x4498af3a <+378>: pop %esi > 0x4498af3b <+379>: pop %edi > 0x4498af3c <+380>: pop %ebp > 0x4498af3d <+381>: ret > 0x4498af3e <+382>: xchg %ax,%ax > 0x4498af40 <+384>: add 0x24(%esp),%esi > 0x4498af44 <+388>: or $0x1,%esi > 0x4498af47 <+391>: mov %esi,0x4(%edx) > 0x4498af4a <+394>: mov %edx,0x30(%eax) > 0x4498af4d <+397>: jmp 0x4498ae9c <malloc_consolidate+220> > 0x4498af52 <+402>: mov %eax,%ecx > 0x4498af54 <+404>: mov $0xfffffffe,%edx > 0x4498af59 <+409>: lea 0x0(%esi,%eiz,1),%esi > 0x4498af60 <+416>: lea 0x38(%ecx,%edx,4),%eax > 0x4498af64 <+420>: add $0x2,%edx > 0x4498af67 <+423>: cmp $0xfc,%edx > 0x4498af6d <+429>: mov %eax,0xc(%eax) > 0x4498af70 <+432>: mov %eax,0x8(%eax) > 0x4498af73 <+435>: jne 0x4498af60 <malloc_consolidate+416> > 0x4498af75 <+437>: lea 0x42c(%ebx),%eax > 0x4498af7b <+443>: cmp %eax,0x34(%esp) > 0x4498af7f <+447>: je 0x4498afa3 <malloc_consolidate+483> > 0x4498af81 <+449>: mov 0x34(%esp),%edx > 0x4498af85 <+453>: mov 0x4(%edx),%eax > 0x4498af88 <+456>: mov %edx,%ecx > 0x4498af8a <+458>: or $0x2,%eax > 0x4498af8d <+461>: or $0x1,%eax > 0x4498af90 <+464>: mov %eax,0x4(%ecx) > 0x4498af93 <+467>: mov %ecx,%eax > 0x4498af95 <+469>: add $0x30,%eax > 0x4498af98 <+472>: mov %eax,0x30(%ecx) > 0x4498af9b <+475>: add $0x6c,%esp > 0x4498af9e <+478>: pop %ebx > 0x4498af9f <+479>: pop %esi > 0x4498afa0 <+480>: pop %edi > 0x4498afa1 <+481>: pop %ebp > 0x4498afa2 <+482>: ret > 0x4498afa3 <+483>: movl $0x40,0x18d4(%ebx) > 0x4498afad <+493>: mov 0x430(%ebx),%eax > 0x4498afb3 <+499>: mov 0x34(%esp),%ecx > 0x4498afb7 <+503>: jmp 0x4498af8d <malloc_consolidate+461> > 0x4498afb9 <+505>: mov 0x34(%esp),%ecx > 0x4498afbd <+509>: cmpl $0x0,%gs:0xc > 0x4498afc5 <+517>: je 0x4498afc8 <malloc_consolidate+520> > 0x4498afc7 <+519>: lock subl $0x1,(%ecx) > 0x4498afcb <+523>: jne 0x4499089a <_L_unlock_3045> > 0x4498afd1 <+529>: mov 0x160(%ebx),%ebp > 0x4498afd7 <+535>: mov %ebp,%eax > 0x4498afd9 <+537>: and $0x5,%eax > 0x4498afdc <+540>: cmp $0x5,%eax > 0x4498afdf <+543>: mov %ebp,0x4c(%esp) > 0x4498afe3 <+547>: je 0x4498b26b <malloc_consolidate+1195> > 0x4498afe9 <+553>: testb $0x1,0x4c(%esp) > 0x4498afee <+558>: jne 0x4498b09a <malloc_consolidate+730> > 0x4498aff4 <+564>: testb $0x2,0x4c(%esp) > 0x4498aff9 <+569>: jne 0x4498b21c <malloc_consolidate+1116> > 0x4498afff <+575>: movl $0x0,0x4c(%esp) > 0x4498b007 <+583>: xor %eax,%eax > 0x4498b009 <+585>: mov $0x1,%ecx > 0x4498b00e <+590>: movl $0x1,0x28(%esp) > 0x4498b016 <+598>: mov 0x34(%esp),%ebp > 0x4498b01a <+602>: cmpl $0x0,%gs:0xc > 0x4498b022 <+610>: je 0x4498b025 <malloc_consolidate+613> > 0x4498b024 <+612>: lock cmpxchg %ecx,0x0(%ebp) > 0x4498b029 <+617>: jne 0x449908a6 <_L_lock_3090> > 0x4498b02f <+623>: jmp 0x4498aefc <malloc_consolidate+316> > 0x4498b034 <+628>: mov 0x34(%esp),%ebp > 0x4498b038 <+632>: cmpl $0x0,%gs:0xc > 0x4498b040 <+640>: je 0x4498b043 <malloc_consolidate+643> > 0x4498b042 <+642>: lock subl $0x1,0x0(%ebp) > 0x4498b047 <+647>: jne 0x449908b3 <_L_unlock_3113> > 0x4498b04d <+653>: mov 0x160(%ebx),%ebp > 0x4498b053 <+659>: mov %ebp,%eax > 0x4498b055 <+661>: and $0x5,%eax > 0x4498b058 <+664>: cmp $0x5,%eax > 0x4498b05b <+667>: je 0x4498b221 <malloc_consolidate+1121> > 0x4498b061 <+673>: test $0x1,%ebp > 0x4498b067 <+679>: jne 0x4498b16c <malloc_consolidate+940> > 0x4498b06d <+685>: and $0x2,%ebp > 0x4498b070 <+688>: jne 0x4498b21c <malloc_consolidate+1116> > 0x4498b076 <+694>: xor %eax,%eax > 0x4498b078 <+696>: mov $0x1,%ecx > 0x4498b07d <+701>: mov 0x34(%esp),%edi > 0x4498b081 <+705>: cmpl $0x0,%gs:0xc > 0x4498b089 <+713>: je 0x4498b08c <malloc_consolidate+716> > 0x4498b08b <+715>: lock cmpxchg %ecx,(%edi) > 0x4498b08f <+719>: jne 0x449908c0 <_L_lock_3152> > 0x4498b095 <+725>: jmp 0x4498ae64 <malloc_consolidate+164> > 0x4498b09a <+730>: lea 0x5f(%esp),%eax > 0x4498b09e <+734>: lea 0x57(%esp),%ecx > 0x4498b0a2 <+738>: mov %edx,(%esp) > 0x4498b0a5 <+741>: movl $0x0,0xc(%esp) > 0x4498b0ad <+749>: movl $0x10,0x8(%esp) > 0x4498b0b5 <+757>: mov %eax,0x4(%esp) > 0x4498b0b9 <+761>: mov %edx,0x2c(%esp) > 0x4498b0bd <+765>: mov %ecx,0x30(%esp) > 0x4498b0c1 <+769>: movb $0x0,0x5f(%esp) > 0x4498b0c6 <+774>: call 0x44958670 <_itoa_word> > 0x4498b0cb <+779>: mov 0x30(%esp),%ecx > 0x4498b0cf <+783>: mov 0x2c(%esp),%edx > 0x4498b0d3 <+787>: cmp %ecx,%eax > 0x4498b0d5 <+789>: jbe 0x4498b0ed <malloc_consolidate+813> > 0x4498b0d7 <+791>: mov 0x24(%esp),%ebp > 0x4498b0db <+795>: sub $0x1,%eax > 0x4498b0de <+798>: cmp %ecx,%eax > 0x4498b0e0 <+800>: movb $0x30,(%eax) > 0x4498b0e3 <+803>: jne 0x4498b0db <malloc_consolidate+795> > 0x4498b0e5 <+805>: mov %ebp,0x24(%esp) > 0x4498b0e9 <+809>: lea 0x57(%esp),%eax > 0x4498b0ed <+813>: mov 0x364c(%ebx),%ecx > 0x4498b0f3 <+819>: mov (%ecx),%ecx > 0x4498b0f5 <+821>: mov %eax,0x10(%esp) > 0x4498b0f9 <+825>: lea -0x40265(%ebx),%eax > 0x4498b0ff <+831>: mov %eax,0xc(%esp) > 0x4498b103 <+835>: lea -0x3e0a0(%ebx),%eax > 0x4498b109 <+841>: mov %eax,0x4(%esp) > 0x4498b10d <+845>: mov 0x4c(%esp),%eax > 0x4498b111 <+849>: test %ecx,%ecx > 0x4498b113 <+851>: cmove 0x48(%esp),%ecx > 0x4498b118 <+856>: mov %edx,0x2c(%esp) > 0x4498b11c <+860>: and $0x2,%eax > 0x4498b11f <+863>: mov %ecx,0x8(%esp) > 0x4498b123 <+867>: mov %eax,(%esp) > 0x4498b126 <+870>: call 0x44983c20 <__libc_message> > 0x4498b12b <+875>: mov 0x2c(%esp),%edx > 0x4498b12f <+879>: jmp 0x4498afff <malloc_consolidate+575> > 0x4498b134 <+884>: mov 0x10(%eax),%ebp > 0x4498b137 <+887>: test %ebp,%ebp > 0x4498b139 <+889>: je 0x4498b1fa <malloc_consolidate+1082> > 0x4498b13f <+895>: mov 0x14(%edx),%eax > 0x4498b142 <+898>: mov %eax,0x14(%ecx) > 0x4498b145 <+901>: mov 0x14(%edx),%eax > 0x4498b148 <+904>: mov %ecx,0x10(%eax) > 0x4498b14b <+907>: jmp 0x4498aefc <malloc_consolidate+316> > 0x4498b150 <+912>: mov 0x10(%eax),%ebp > 0x4498b153 <+915>: test %ebp,%ebp > 0x4498b155 <+917>: je 0x4498b24d <malloc_consolidate+1165> > 0x4498b15b <+923>: mov 0x14(%edi),%eax > 0x4498b15e <+926>: mov %eax,0x14(%ecx) > 0x4498b161 <+929>: mov 0x14(%edi),%eax > 0x4498b164 <+932>: mov %ecx,0x10(%eax) > 0x4498b167 <+935>: jmp 0x4498ae64 <malloc_consolidate+164> > 0x4498b16c <+940>: lea 0x5f(%esp),%eax > 0x4498b170 <+944>: lea 0x57(%esp),%ecx > 0x4498b174 <+948>: movl $0x0,0xc(%esp) > 0x4498b17c <+956>: movl $0x10,0x8(%esp) > 0x4498b184 <+964>: mov %eax,0x4(%esp) > 0x4498b188 <+968>: mov %edi,(%esp) > 0x4498b18b <+971>: mov %edx,0x2c(%esp) > 0x4498b18f <+975>: mov %ecx,0x30(%esp) > 0x4498b193 <+979>: movb $0x0,0x5f(%esp) > 0x4498b198 <+984>: call 0x44958670 <_itoa_word> > 0x4498b19d <+989>: mov 0x30(%esp),%ecx > 0x4498b1a1 <+993>: mov 0x2c(%esp),%edx > 0x4498b1a5 <+997>: cmp %ecx,%eax > 0x4498b1a7 <+999>: jbe 0x4498b1b7 <malloc_consolidate+1015> > 0x4498b1a9 <+1001>: sub $0x1,%eax > 0x4498b1ac <+1004>: cmp %ecx,%eax > 0x4498b1ae <+1006>: movb $0x30,(%eax) > 0x4498b1b1 <+1009>: jne 0x4498b1a9 <malloc_consolidate+1001> > 0x4498b1b3 <+1011>: lea 0x57(%esp),%eax > 0x4498b1b7 <+1015>: mov 0x364c(%ebx),%ecx > 0x4498b1bd <+1021>: mov (%ecx),%ecx > 0x4498b1bf <+1023>: mov %eax,0x10(%esp) > 0x4498b1c3 <+1027>: lea -0x40265(%ebx),%eax > 0x4498b1c9 <+1033>: mov %eax,0xc(%esp) > 0x4498b1cd <+1037>: lea -0x3e0a0(%ebx),%eax > 0x4498b1d3 <+1043>: mov %eax,0x4(%esp) > 0x4498b1d7 <+1047>: test %ecx,%ecx > 0x4498b1d9 <+1049>: cmove 0x48(%esp),%ecx > 0x4498b1de <+1054>: and $0x2,%ebp > 0x4498b1e1 <+1057>: mov %ebp,(%esp) > 0x4498b1e4 <+1060>: mov %edx,0x2c(%esp) > 0x4498b1e8 <+1064>: mov %ecx,0x8(%esp) > 0x4498b1ec <+1068>: call 0x44983c20 <__libc_message> > 0x4498b1f1 <+1073>: mov 0x2c(%esp),%edx > 0x4498b1f5 <+1077>: jmp 0x4498b076 <malloc_consolidate+694> > 0x4498b1fa <+1082>: cmp %ecx,%edx > 0x4498b1fc <+1084>: je 0x4498b299 <malloc_consolidate+1241> > 0x4498b202 <+1090>: mov %ecx,0x10(%eax) > 0x4498b205 <+1093>: mov 0x14(%edx),%ecx > 0x4498b208 <+1096>: mov %ecx,0x14(%eax) > 0x4498b20b <+1099>: mov 0x10(%edx),%ecx > 0x4498b20e <+1102>: mov %eax,0x14(%ecx) > 0x4498b211 <+1105>: mov 0x14(%edx),%ecx > 0x4498b214 <+1108>: mov %eax,0x10(%ecx) > 0x4498b217 <+1111>: jmp 0x4498aefc <malloc_consolidate+316> > 0x4498b21c <+1116>: call 0x44946150 <__GI_abort> > 0x4498b221 <+1121>: lea -0x40265(%ebx),%eax > 0x4498b227 <+1127>: and $0x2,%ebp > 0x4498b22a <+1130>: mov %eax,0x8(%esp) > 0x4498b22e <+1134>: lea -0x3f181(%ebx),%eax > 0x4498b234 <+1140>: mov %eax,0x4(%esp) > 0x4498b238 <+1144>: mov %ebp,(%esp) > 0x4498b23b <+1147>: mov %edx,0x2c(%esp) > 0x4498b23f <+1151>: call 0x44983c20 <__libc_message> > 0x4498b244 <+1156>: mov 0x2c(%esp),%edx > 0x4498b248 <+1160>: jmp 0x4498b076 <malloc_consolidate+694> > 0x4498b24d <+1165>: cmp %ecx,%edi > 0x4498b24f <+1167>: je 0x4498b2a4 <malloc_consolidate+1252> > 0x4498b251 <+1169>: mov %ecx,0x10(%eax) > 0x4498b254 <+1172>: mov 0x14(%edi),%ecx > 0x4498b257 <+1175>: mov %ecx,0x14(%eax) > 0x4498b25a <+1178>: mov 0x10(%edi),%ecx > 0x4498b25d <+1181>: mov %eax,0x14(%ecx) > 0x4498b260 <+1184>: mov 0x14(%edi),%ecx > 0x4498b263 <+1187>: mov %eax,0x10(%ecx) > 0x4498b266 <+1190>: jmp 0x4498ae64 <malloc_consolidate+164> > 0x4498b26b <+1195>: lea -0x40265(%ebx),%eax > 0x4498b271 <+1201>: mov %eax,0x8(%esp) > 0x4498b275 <+1205>: lea -0x3f181(%ebx),%eax > 0x4498b27b <+1211>: mov %eax,0x4(%esp) > 0x4498b27f <+1215>: mov %ebp,%eax > 0x4498b281 <+1217>: and $0x2,%eax > 0x4498b284 <+1220>: mov %eax,(%esp) > 0x4498b287 <+1223>: mov %edx,0x2c(%esp) > 0x4498b28b <+1227>: call 0x44983c20 <__libc_message> > 0x4498b290 <+1232>: mov 0x2c(%esp),%edx > 0x4498b294 <+1236>: jmp 0x4498afff <malloc_consolidate+575> > 0x4498b299 <+1241>: mov %eax,0x14(%eax) > 0x4498b29c <+1244>: mov %eax,0x10(%eax) > 0x4498b29f <+1247>: jmp 0x4498aefc <malloc_consolidate+316> > 0x4498b2a4 <+1252>: mov %eax,0x14(%eax) > 0x4498b2a7 <+1255>: mov %eax,0x10(%eax) > 0x4498b2aa <+1258>: jmp 0x4498ae64 <malloc_consolidate+164> >End of assembler dump.
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=613087">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 857599
:
613081
|
613082
|
613083
|
613084
|
613085
|
613086
| 613087 |
613088
|
613089