Attachment 635763 Details for Bug 871601 – File: backtrace

File: backtrace

backtrace (text/plain), 18.28 KB, created by Aleksander Morgado on 2012-10-30 20:01:58 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Aleksander Morgado

Created: 2012-10-30 20:01:58 UTC

Size: 18.28 KB

patch

obsolete

>[New LWP 21706]
>[New LWP 21703]
>[New LWP 21704]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `/usr/libexec/gvfsd-obexftp --spawner :1.3 /org/gtk/gvfs/exec_spaw/4'.
>Program terminated with signal 11, Segmentation fault.
>#0  remove_entry (table=0x2254ed0, bucket=0x2254ee0, entry=0x2255650) at dbus-hash.c:473
>473	      while (prev->next != entry)
>
>Thread 3 (Thread 0x7fc6ab96b700 (LWP 21704)):
>#0  0x00000037404e97ed in poll () at ../sysdeps/unix/syscall-template.S:81
>No locals.
>#1  0x0000003742847d64 in g_main_context_poll (n_fds=3, fds=0x7fc6a40010e0, timeout=-1, context=0x22426d0, priority=<optimized out>) at gmain.c:3584
>        poll_func = 0x3742855e30 <g_poll>
>#2  g_main_context_iterate (context=0x22426d0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3285
>        max_priority = 2147483647
>        timeout = -1
>        some_ready = <optimized out>
>        nfds = 3
>        allocated_nfds = <optimized out>
>        fds = 0x7fc6a40010e0
>#3  0x00000037428481c2 in g_main_loop_run (loop=0x2242660) at gmain.c:3484
>        __PRETTY_FUNCTION__ = "g_main_loop_run"
>#4  0x0000003a658cc526 in gdbus_shared_thread_func (user_data=0x22426a0) at gdbusprivate.c:277
>        data = 0x22426a0
>#5  0x000000374286b615 in g_thread_proxy (data=0x223ea80) at gthread.c:797
>        thread = 0x223ea80
>#6  0x0000003741007d15 in start_thread (arg=0x7fc6ab96b700) at pthread_create.c:308
>        __res = <optimized out>
>        pd = 0x7fc6ab96b700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140491259033344, 5364762999602183115, 0, 237299175424, 140491259033344, 35923616, -5332788988286436405, 5340694692342037451}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = 0
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>#7  0x00000037404f22cd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:114
>No locals.
>
>Thread 2 (Thread 0x7fc6b1d5c7c0 (LWP 21703)):
>#0  writer_recurse_struct_or_dict_entry (sub=0x7fff762d1870, writer=<optimized out>, begin_char=<optimized out>, contained_type=<optimized out>, contained_type_start=<optimized out>, contained_type_len=<optimized out>) at dbus-marshal-recursive.c:1797
>No locals.
>#1  writer_recurse_struct_or_dict_entry (writer=writer@entry=0x7fff762d1970, begin_char=begin_char@entry=40, sub=sub@entry=0x7fff762d1870, contained_type_len=<optimized out>, contained_type_start=<optimized out>, contained_type=<optimized out>) at dbus-marshal-recursive.c:1771
>No locals.
>#2  0x0000003745815a98 in _dbus_type_writer_recurse_contained_len (writer=0x7fff762d1970, container_type=114, contained_type=0x0, contained_type_start=0, contained_type_len=0, sub=0x7fff762d1870, is_array_append=0) at dbus-marshal-recursive.c:2065
>No locals.
>#3  0x0000003745815dc6 in _dbus_type_writer_recurse (writer=writer@entry=0x7fff762d1970, container_type=container_type@entry=114, contained_type=contained_type@entry=0x0, contained_type_start=contained_type_start@entry=0, sub=sub@entry=0x7fff762d1870) at dbus-marshal-recursive.c:2119
>        contained_type_len = <optimized out>
>#4  0x000000374581367f in write_basic_field (writer=writer@entry=0x7fff762d1970, field=field@entry=1, type=type@entry=111, value=value@entry=0x7fff762d1920) at dbus-marshal-header.c:300
>        sub = {byte_order = 108, container_type = 114, type_pos_is_expectation = 1, enabled = 1, type_str = 0x3745a439b0 <_dbus_header_signature_str>, type_pos = 8, value_str = 0x2254448, value_pos = 16, u = {array = {start_pos = 0, len_pos = 1982667072, element_type_pos = 32767}}}
>        variant = {byte_order = 97, container_type = 0, type_pos_is_expectation = 0, enabled = 0, type_str = 0x7fff762d1970, type_pos = 36010560, value_str = 0x3745815dc6 <_dbus_type_writer_recurse+102>, value_pos = 0, u = {array = {start_pos = 32767, len_pos = 117, element_type_pos = 0}}}
>        start = 16
>        padding = <optimized out>
>        field_byte = 0 '\000'
>        contained_type = {dummy1 = 0x1, dummy2 = 1166187323, dummy3 = 8, dummy_bit1 = 0, dummy_bit2 = 0, dummy_bit3 = 0, dummy_bits = 1}
>        buf = "\260\071"
>#5  0x0000003745813ca2 in _dbus_header_create (header=header@entry=0x2254448, byte_order=byte_order@entry=108, message_type=message_type@entry=1, destination=destination@entry=0x3745831b81 "org.freedesktop.DBus", path=path@entry=0x3745831b96 "/org/freedesktop/DBus", interface=interface@entry=0x3745831b81 "org.freedesktop.DBus", member=member@entry=0x3745831cd2 "RemoveMatch", error_name=error_name@entry=0x0) at dbus-marshal-header.c:595
>        v_BYTE = 1 '\001'
>        v_UINT32 = 0
>        writer = {byte_order = 108, container_type = 0, type_pos_is_expectation = 1, enabled = 1, type_str = 0x3745a439b0 <_dbus_header_signature_str>, type_pos = 12, value_str = 0x2254448, value_pos = 12, u = {array = {start_pos = 32767, len_pos = 1166186892, element_type_pos = 55}}}
>        array = {byte_order = 108, container_type = 97, type_pos_is_expectation = 1, enabled = 1, type_str = 0x3745a439b0 <_dbus_header_signature_str>, type_pos = 7, value_str = 0x2254448, value_pos = 16, u = {array = {start_pos = 16, len_pos = 12, element_type_pos = 7}}}
>#6  0x00000037458188d4 in dbus_message_new_method_call (destination=destination@entry=0x3745831b81 "org.freedesktop.DBus", path=path@entry=0x3745831b96 "/org/freedesktop/DBus", interface=interface@entry=0x3745831b81 "org.freedesktop.DBus", method=method@entry=0x3745831cd2 "RemoveMatch") at dbus-message.c:1275
>        message = 0x2254440
>        __FUNCTION__ = "dbus_message_new_method_call"
>#7  0x000000374580c214 in dbus_bus_remove_match (connection=0x2254f80, rule=0x28 <Address 0x28 out of bounds>, rule@entry=0x225e8e0 "type='signal',sender='org.openobex',path='/org/openobex',interface='org.openobex.Manager'", error=error@entry=0x0) at dbus-bus.c:1572
>        msg = <optimized out>
>        __FUNCTION__ = "dbus_bus_remove_match"
>#8  0x0000003a6ec14415 in dbus_g_proxy_manager_unregister (manager=0x2258540, proxy=proxy@entry=0x224d090) at dbus-gproxy.c:1115
>        rule = 0x225e8e0 "type='signal',sender='org.openobex',path='/org/openobex',interface='org.openobex.Manager'"
>        list = <optimized out>
>        priv = 0x224d0b0
>        tri = 0x2258b50 "org.openobex"
>#9  0x0000003a6ec146ec in dbus_g_proxy_dispose (object=0x224d090) at dbus-gproxy.c:1545
>        proxy = 0x224d090
>        priv = 0x224d0b0
>#10 0x0000003743815961 in g_object_run_dispose (object=0x224d090) at gobject.c:1061
>        __PRETTY_FUNCTION__ = "g_object_run_dispose"
>#11 0x0000003a6ec11149 in dbus_g_proxy_destroy (proxy=0x224d090) at dbus-gproxy.c:1578
>No locals.
>#12 dbus_g_proxy_manager_filter (user_data=0x2258540, message=<optimized out>, connection=<optimized out>) at dbus-gproxy.c:1231
>        proxy = 0x224d090
>        tmp = 0x224d520
>        manager = 0x2258540
>#13 dbus_g_proxy_manager_filter (connection=<optimized out>, message=<optimized out>, user_data=0x2258540) at dbus-gproxy.c:1196
>No locals.
>#14 0x000000374580fbce in dbus_connection_dispatch (connection=connection@entry=0x2254f80) at dbus-connection.c:4631
>        filter = <optimized out>
>        next = 0x0
>        message = 0x2251ed0
>        link = <optimized out>
>        filter_list_copy = 0x224fde0
>        message_link = 0x2255118
>        result = DBUS_HANDLER_RESULT_NOT_YET_HANDLED
>        pending = <optimized out>
>        reply_serial = <optimized out>
>        status = <optimized out>
>        found_object = <optimized out>
>        __FUNCTION__ = "dbus_connection_dispatch"
>#15 0x0000003a6ec0ac55 in message_queue_dispatch (source=source@entry=0x2257a40, callback=<optimized out>, user_data=<optimized out>) at dbus-gmain.c:90
>        connection = 0x2254f80
>#16 0x0000003742847a95 in g_main_dispatch (context=0x223a1d0) at gmain.c:2715
>        dispatch = 0x3a6ec0ac40 <message_queue_dispatch>
>        was_in_call = 0
>        user_data = 0x0
>        callback = 0x0
>        cb_funcs = 0x0
>        cb_data = 0x0
>        current_source_link = {data = 0x2257a40, next = 0x0}
>        need_destroy = <optimized out>
>        source = 0x2257a40
>        current = 0x2241a60
>        i = <optimized out>
>#17 g_main_context_dispatch (context=context@entry=0x223a1d0) at gmain.c:3219
>No locals.
>#18 0x0000003742847dc8 in g_main_context_iterate (context=0x223a1d0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3290
>        max_priority = 0
>        timeout = 0
>        some_ready = 1
>        nfds = <optimized out>
>        allocated_nfds = <optimized out>
>        fds = 0x2242c20
>#19 0x00000037428481c2 in g_main_loop_run (loop=0x22368c0) at gmain.c:3484
>        __PRETTY_FUNCTION__ = "g_main_loop_run"
>#20 0x000000000040e857 in daemon_main (argc=argc@entry=4, argv=argv@entry=0x7fff762d1ee8, max_job_threads=max_job_threads@entry=1, default_type=default_type@entry=0x41eccc "obex", mountable_name=mountable_name@entry=0x0, first_type_name=first_type_name@entry=0x41eccc "obex") at daemon-main.c:396
>        var_args = {{gp_offset = 48, fp_offset = 55, overflow_arg_area = 0x7fff762d1df0, reg_save_area = 0x7fff762d1d70}}
>        type = <optimized out>
>        name_owner_id = 0
>        data = 0x2243f20
>#21 0x0000000000409064 in main (argc=4, argv=0x7fff762d1ee8) at daemon-main-generic.c:39
>No locals.
>
>Thread 1 (Thread 0x7fc6ab16a700 (LWP 21706)):
>#0  remove_entry (table=0x2254ed0, bucket=0x2254ee0, entry=0x2255650) at dbus-hash.c:473
>        prev = 0x0
>#1  0x0000003745826a84 in _dbus_hash_iter_remove_entry (iter=iter@entry=0x7fc6ab169900) at dbus-hash.c:602
>        real = 0x7fc6ab169900
>#2  0x000000374580c942 in connection_timeout_and_complete_all_pending_calls_unlocked (connection=<optimized out>) at dbus-connection.c:2296
>        pending = 0x7fc69c0012d0
>        iter = {dummy1 = 0x2254ed0, dummy2 = 0x2254ee0, dummy3 = 0x2255650, dummy4 = 0x0, dummy5 = 1, dummy6 = 1}
>#3  notify_disconnected_and_dispatch_complete_unlocked (connection=0x2254f80) at dbus-connection.c:4189
>No locals.
>#4  _dbus_connection_get_dispatch_status_unlocked (connection=0x2254f80) at dbus-connection.c:4240
>        status = <optimized out>
>        is_connected = <optimized out>
>#5  _dbus_connection_get_dispatch_status_unlocked (connection=0x2254f80) at dbus-connection.c:4205
>No locals.
>#6  0x0000003745810348 in _dbus_connection_block_pending_call (pending=pending@entry=0x7fc69c0012d0) at dbus-connection.c:2429
>        start_tv_sec = 93327
>        start_tv_usec = 590190
>        tv_sec = 4294967295
>        tv_usec = 140491250637688
>        status = <optimized out>
>        connection = 0x2254f80
>        client_serial = 5
>        timeout = 0x7fc69c001320
>        timeout_milliseconds = 25000
>        elapsed_milliseconds = <optimized out>
>#7  0x000000374581e31a in dbus_pending_call_block (pending=pending@entry=0x7fc69c0012d0) at dbus-pending-call.c:748
>        __FUNCTION__ = "dbus_pending_call_block"
>#8  0x0000003a6ec108a3 in dbus_g_proxy_end_call_internal (proxy=proxy@entry=0x224d090, call_id=call_id@entry=1, error=error@entry=0x7fc6ab169d58, first_arg_type=35972752, args=args@entry=0x7fc6ab169b78) at dbus-gproxy.c:2398
>        reply = 0x0
>        msgiter = {dummy1 = 0x1, dummy2 = 0x224d090, dummy3 = 0, dummy4 = 0, dummy5 = 0, dummy6 = 0, dummy7 = 35883712, dummy8 = 0, dummy9 = 24, dummy10 = 0, dummy11 = 1, pad1 = 0, pad2 = 1116230009, pad3 = 0x2238ac0}
>        derror = {name = 0x9c0012d0 <Address 0x9c0012d0 out of bounds>, message = 0x2254440 "\001", dummy1 = 0, dummy2 = 0, dummy3 = 0, dummy4 = 0, dummy5 = 0, padding1 = 0x224d0b0}
>        args_unwind = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fc6ab169ce8, reg_save_area = 0x7fc6ab169bd0}}
>        over = 0
>        n_retvals_processed = 0
>        ret = 0
>        valtype = <optimized out>
>        pending = 0x7fc69c0012d0
>        priv = <optimized out>
>#9  0x0000003a6ec137a9 in dbus_g_proxy_call (proxy=0x224d090, method=method@entry=0x41ef99 "CreateBluetoothSession", error=error@entry=0x7fc6ab169d58, first_arg_type=<optimized out>, first_arg_type@entry=64) at dbus-gproxy.c:2763
>        ret = <optimized out>
>        call_id = 1
>        args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fc6ab169ce8, reg_save_area = 0x7fc6ab169bd0}}
>        in_args = <optimized out>
>        priv = 0x224d0b0
>        __PRETTY_FUNCTION__ = "dbus_g_proxy_call"
>#10 0x000000000040be3f in do_mount (backend=0x22500e0, job=0x22489b0, mount_spec=<optimized out>, mount_source=<optimized out>, is_automount=<optimized out>) at gvfsbackendobexftp.c:932
>        op_backend = 0x22500e0
>        device = 0x224cd20 "[18:14:56:B2:84:90]"
>        error = 0x0
>        path = 0x0
>        obexftp_mount_spec = <optimized out>
>        count = <optimized out>
>#11 0x00000000004132a2 in g_vfs_job_run (job=0x22489b0) at gvfsjob.c:197
>        class = 0x225e2a0
>#12 0x000000374286be32 in g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:309
>        task = 0x22489b0
>        pool = 0x2246200
>#13 0x000000374286b615 in g_thread_proxy (data=0x223ef70) at gthread.c:797
>        thread = 0x223ef70
>#14 0x0000003741007d15 in start_thread (arg=0x7fc6ab16a700) at pthread_create.c:308
>        __res = <optimized out>
>        pd = 0x7fc6ab16a700
>        now = <optimized out>
>        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140491250640640, 5364762999602183115, 0, 237299175424, 140491250640640, 35938816, -5332787890385421365, 5340694692342037451}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
>        not_first_call = 0
>        pagesize_m1 = <optimized out>
>        sp = <optimized out>
>        freesize = <optimized out>
>#15 0x00000037404f22cd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:114
>No locals.
>From                To                  Syms Read   Shared Object Library
>0x0000003a6ec0a560  0x0000003a6ec1c6c4  Yes         /lib64/libdbus-glib-1.so.2
>0x0000003745807ab0  0x00000037458312e4  Yes         /lib64/libdbus-1.so.3
>0x0000003742407450  0x0000003742412d38  Yes         /lib64/libbluetooth.so.3
>0x0000003745c03e00  0x0000003745c1ccdc  Yes         /lib64/libexpat.so.1
>0x0000003a70412860  0x0000003a7042b8b8  Yes         /lib64/libgvfscommon.so.0
>0x0000003a6d003ef0  0x0000003a6d02320c  Yes         /lib64/libbluray.so.1
>0x0000003743c01130  0x0000003743c01ff8  Yes         /lib64/libgmodule-2.0.so.0
>0x00000037414022a0  0x000000374140557c  Yes         /lib64/librt.so.1
>0x0000003a7200e340  0x0000003a7203a278  Yes         /lib64/libsecret-1.so.0
>0x0000003a65830100  0x0000003a658eee34  Yes         /lib64/libgio-2.0.so.0
>0x000000374380aba0  0x000000374383831c  Yes         /lib64/libgobject-2.0.so.0
>0x000000374281a070  0x00000037428af23c  Yes         /lib64/libglib-2.0.so.0
>0x000000375c400f10  0x000000375c401824  Yes         /lib64/libutil.so.1
>0x0000003741005790  0x00000037410104b4  Yes         /lib64/libpthread.so.0
>0x000000374041f1a0  0x00000037405607a0  Yes         /lib64/libc.so.6
>0x0000003a67c2e870  0x0000003a67d174b0  Yes         /lib64/libxml2.so.2
>0x0000003740c00ed0  0x0000003740c019f0  Yes         /lib64/libdl.so.2
>0x0000003740000b20  0x000000374001a3f9  Yes         /lib64/ld-linux-x86-64.so.2
>0x0000003756807200  0x0000003756852e48  Yes         /lib64/libgcrypt.so.11
>0x0000003755000990  0x0000003755000ee8  Yes         /lib64/libgpg-error.so.0
>0x00000037434006b0  0x000000374340080c  Yes         /lib64/libgthread-2.0.so.0
>0x0000003743001990  0x0000003743006134  Yes         /lib64/libffi.so.5
>0x0000003741802190  0x000000374180e640  Yes         /lib64/libz.so.1
>0x0000003a65406130  0x0000003a654174d4  Yes         /lib64/libselinux.so.1
>0x0000003742c03a30  0x0000003742c1201c  Yes         /lib64/libresolv.so.2
>0x00000037460030f0  0x0000003746019340  Yes         /lib64/liblzma.so.5
>0x00000037408055b0  0x000000374086fd68  Yes         /lib64/libm.so.6
>0x0000003741c01db0  0x0000003741c45b28  Yes         /lib64/libpcre.so.1
>$1 = 0x0
>$2 = 0x0
>rax            0x0	0
>rbx            0x2255650	36001360
>rcx            0x0	0
>rdx            0x2255650	36001360
>rsi            0x2254ee0	35999456
>rdi            0x2254ed0	35999440
>rbp            0x2254ed0	0x2254ed0
>rsp            0x7fc6ab1698d0	0x7fc6ab1698d0
>r8             0x7fc69c000cc0	140490997501120
>r9             0x10	16
>r10            0x0	0
>r11            0x206	518
>r12            0x2254fb0	35999664
>r13            0x61a8	25000
>r14            0x7fc69c001320	140490997502752
>r15            0x3a6ec1ea08	250966305288
>rip            0x37458267d3	0x37458267d3 <remove_entry+35>
>eflags         0x10283	[ CF SF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>Dump of assembler code for function remove_entry:
>   0x00000037458267b0 <+0>:	push   %rbp
>   0x00000037458267b1 <+1>:	mov    %rdi,%rbp
>   0x00000037458267b4 <+4>:	push   %rbx
>   0x00000037458267b5 <+5>:	mov    %rdx,%rbx
>   0x00000037458267b8 <+8>:	sub    $0x8,%rsp
>   0x00000037458267bc <+12>:	mov    (%rsi),%rcx
>   0x00000037458267bf <+15>:	cmp    %rdx,%rcx
>   0x00000037458267c2 <+18>:	jne    0x37458267d3 <remove_entry+35>
>   0x00000037458267c4 <+20>:	jmp    0x3745826815 <remove_entry+101>
>   0x00000037458267c6 <+22>:	nopw   %cs:0x0(%rax,%rax,1)
>   0x00000037458267d0 <+32>:	mov    %rax,%rcx
>=> 0x00000037458267d3 <+35>:	mov    (%rcx),%rax
>   0x00000037458267d6 <+38>:	cmp    %rbx,%rax
>   0x00000037458267d9 <+41>:	jne    0x37458267d0 <remove_entry+32>
>   0x00000037458267db <+43>:	mov    (%rbx),%rax
>   0x00000037458267de <+46>:	mov    %rax,(%rcx)
>   0x00000037458267e1 <+49>:	mov    0x58(%rbp),%rax
>   0x00000037458267e5 <+53>:	subl   $0x1,0x34(%rbp)
>   0x00000037458267e9 <+57>:	test   %rax,%rax
>   0x00000037458267ec <+60>:	je     0x37458267f4 <remove_entry+68>
>   0x00000037458267ee <+62>:	mov    0x8(%rbx),%rdi
>   0x00000037458267f2 <+66>:	callq  *%rax
>   0x00000037458267f4 <+68>:	mov    0x60(%rbp),%rax
>   0x00000037458267f8 <+72>:	test   %rax,%rax
>   0x00000037458267fb <+75>:	je     0x3745826803 <remove_entry+83>
>   0x00000037458267fd <+77>:	mov    0x10(%rbx),%rdi
>   0x0000003745826801 <+81>:	callq  *%rax
>   0x0000003745826803 <+83>:	mov    0x68(%rbp),%rdi
>   0x0000003745826807 <+87>:	add    $0x8,%rsp
>   0x000000374582680b <+91>:	mov    %rbx,%rsi
>   0x000000374582680e <+94>:	pop    %rbx
>   0x000000374582680f <+95>:	pop    %rbp
>   0x0000003745826810 <+96>:	jmpq   0x37458294c0 <_dbus_mem_pool_dealloc>
>   0x0000003745826815 <+101>:	mov    (%rdx),%rax
>   0x0000003745826818 <+104>:	mov    %rax,(%rsi)
>   0x000000374582681b <+107>:	jmp    0x37458267e1 <remove_entry+49>
>End of assembler dump.

Actions: View

Attachments on bug 871601: 635760 | 635761 | 635762 | 635763 | 635764 | 635765 | 635766 | 635767 | 635768 | 635769 | 635770 | 635771