Attachment 885479 Details for Bug 1086851 – File: backtrace

File: backtrace

backtrace (text/plain), 16.53 KB, created by kianby on 2014-04-11 16:38:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: kianby

Created: 2014-04-11 16:38:28 UTC

Size: 16.53 KB

patch

obsolete

>[New LWP 12388]
>[Thread debugging using libthread_db enabled]
>Using host libthread_db library "/lib64/libthread_db.so.1".
>Core was generated by `tmux'.
>Program terminated with signal SIGSEGV, Segmentation fault.
>#0  evbuffer_chain_insert (buf=buf@entry=0x27ca7f0, chain=chain@entry=0x7f1daecff010) at buffer.c:295
>295			while ((*ch) && ((*ch)->off != 0 || CHAIN_PINNED(*ch)))
>
>Thread 1 (Thread 0x7f1db9435740 (LWP 12388)):
>#0  evbuffer_chain_insert (buf=buf@entry=0x27ca7f0, chain=chain@entry=0x7f1daecff010) at buffer.c:295
>        ch = 0x2c36110
>        __func__ = "evbuffer_chain_insert"
>#1  0x00000038714171da in evbuffer_add (buf=0x27ca7f0, data_in=data_in@entry=0x27d7820, datlen=4) at buffer.c:1608
>        chain = 0x3870bb87b8 <main_arena+88>
>        tmp = 0x7f1daecff010
>        data = 0x27d7820 "\240\261|\002"
>        remain = 0
>        to_alloc = <optimized out>
>        result = -1
>#2  0x0000003871419b90 in bufferevent_write (bufev=<optimized out>, data=data@entry=0x27d7820, size=<optimized out>) at bufferevent.c:379
>No locals.
>#3  0x00000000004358c3 in tty_puts (tty=0x27c90d0, s=0x27d7820 "\240\261|\002") at tty.c:402
>No locals.
>#4  0x0000000000435fb4 in tty_puts (s=<optimized out>, tty=<optimized out>) at tty.c:365
>No locals.
>#5  tty_putcode (tty=<optimized out>, code=<optimized out>) at tty.c:364
>No locals.
>#6  0x00000000004362a1 in tty_start_tty (tty=tty@entry=0x27c90d0) at tty.c:208
>No locals.
>#7  0x000000000042abb1 in server_client_msg_dispatch (c=c@entry=0x27b8fb0) at server-client.c:881
>        imsg = {hdr = {type = 216, len = 16, flags = 0, peerid = 8, pid = 4294967295}, fd = -1, data = 0x27cd490}
>        stdindata = {size = 44959792, data = "@\345g\000\000\000\000\000\001\000\000\000\000\000\000\000x\273B", '\000' <repeats 7973 times>...}
>        data = 0x27cd490 "Px}\002"
>        n = <optimized out>
>        datalen = 0
>        __func__ = "server_client_msg_dispatch"
>#8  0x000000000042adad in server_client_callback (fd=<optimized out>, events=<optimized out>, data=0x27b8fb0) at server-client.c:235
>        c = 0x27b8fb0
>#9  0x0000003871410a44 in event_process_active_single_queue (activeq=0x27b01d0, base=0x27b0480) at event.c:1350
>        ev = 0x27c8ff8
>        count = 1
>#10 event_process_active (base=<optimized out>) at event.c:1420
>        activeq = 0x27b01d0
>        i = 0
>        c = 0
>#11 event_base_loop (base=0x27b0480, flags=flags@entry=1) at event.c:1621
>        evsel = 0x3871645ba0 <pollops>
>        tv = {tv_sec = 0, tv_usec = 999985}
>        tv_p = <optimized out>
>        res = <optimized out>
>        done = 0
>        retval = 0
>        __func__ = "event_base_loop"
>#12 0x00000038714117f1 in event_loop (flags=flags@entry=1) at event.c:1533
>No locals.
>#13 0x000000000042c7da in server_loop () at server.c:210
>No locals.
>#14 0x000000000042cf05 in server_start (lockfd=lockfd@entry=5, lockfile=<optimized out>) at server.c:201
>        pair = {6, 7}
>        tv = {tv_sec = 1, tv_usec = 0}
>        cause = 0x0
>        __func__ = "server_start"
>#15 0x00000000004058ea in client_connect (path=0x67ea20 <socket_path> "/tmp/tmux-1000/default", start_server=1) at client.c:130
>        sa = {sun_family = 1, sun_path = "/tmp/tmux-1000/default", '\000' <repeats 85 times>}
>        size = <optimized out>
>        fd = 5
>        lockfd = <optimized out>
>        lockfile = 0x27b0740 "/usr/lib64/qt-3.3/include"
>        __func__ = "client_connect"
>#16 0x0000000000405cdf in client_main (argc=argc@entry=0, argv=argv@entry=0x7fff8ad5e250, flags=flags@entry=65536) at client.c:238
>        cmd = <optimized out>
>        cmdlist = <optimized out>
>        data = <optimized out>
>        cmdflags = <optimized out>
>        fd = <optimized out>
>        i = <optimized out>
>        ppid = <optimized out>
>        msg = <optimized out>
>        cause = 0x27b0480 "\240[dq8"
>        tio = {c_iflag = 1902402400, c_oflag = 56, c_cflag = 1900097525, c_lflag = 56, c_line = 224 '\340', c_cc = "\317\325\212\001\000\000\000`\317\325\212\377\177\000\000\213\023\000\000\000\000\000\000\023\027_;\000\000\000\000E", c_ispeed = 1330536276, c_ospeed = 1280069456}
>        saved_tio = {c_iflag = 1313166917, c_oflag = 1330536276, c_cflag = 1280266309, c_lflag = 3226956, c_line = 224 '\340', c_cc = "\317\325\212\377\177\000\000@\215\203p8\000\000\000\n_D\000\000\000\000\000\002\000\000\000\000\000\000\000\001", c_ispeed = 0, c_ospeed = 2382895104}
>        size = <optimized out>
>#17 0x0000000000403bd5 in main (argc=0, argv=0x7fff8ad5e250) at tmux.c:389
>        pw = <optimized out>
>        s = <optimized out>
>        path = 0x27b01f0 "EVENT_NOEPOLL=1"
>        label = 0x27b01d0 ""
>        var = 0x7fff8ad5e480
>        tmp = "/home/yannic", '\000' <repeats 732 times>...
>        in = '\000' <repeats 255 times>
>        home = <optimized out>
>        pid = 0
>        opt = <optimized out>
>        flags = 65536
>        quiet = <optimized out>
>        keys = <optimized out>
>        session = 0
>From                To                  Syms Read   Shared Object Library
>0x0000003889000f10  0x0000003889001804  Yes         /lib64/libutil.so.1
>0x0000003889c06d50  0x0000003889c20454  Yes         /lib64/libncurses.so.5
>0x0000003885c0ce40  0x0000003885c18ba8  Yes         /lib64/libtinfo.so.5
>0x000000387140c840  0x0000003871436350  Yes         /lib64/libevent-2.0.so.5
>0x0000003873403a40  0x00000038734127dc  Yes         /lib64/libresolv.so.2
>0x000000387081f560  0x0000003870960bb4  Yes         /lib64/libc.so.6
>0x0000003870c00ed0  0x0000003870c019d0  Yes         /lib64/libdl.so.2
>0x00000038710059f0  0x0000003871011614  Yes         /lib64/libpthread.so.0
>0x0000003870400b10  0x0000003870419c70  Yes         /lib64/ld-linux-x86-64.so.2
>0x00007f1db2d02240  0x00007f1db2d08ee4  Yes         /lib64/libnss_files.so.2
>$1 = 0x0
>No symbol "__glib_assert_msg" in current context.
>rax            0x7f1daecff040	139765463642176
>rbx            0x3220776f	840988527
>rcx            0x8	8
>rdx            0x4	4
>rsi            0x7f1daecff010	139765463642128
>rdi            0x0	0
>rbp            0x3870bb87b8	0x3870bb87b8 <main_arena+88>
>rsp            0x7fff8ad5abc0	0x7fff8ad5abc0
>r8             0xffffffff	4294967295
>r9             0x0	0
>r10            0x1	1
>r11            0x246	582
>r12            0x27ca7f0	41723888
>r13            0x7f1daecff010	139765463642128
>r14            0x2c36110	46358800
>r15            0x7f1daecff010	139765463642128
>rip            0x3871414e10	0x3871414e10 <evbuffer_chain_insert+64>
>eflags         0x10206	[ PF IF RF ]
>cs             0x33	51
>ss             0x2b	43
>ds             0x0	0
>es             0x0	0
>fs             0x0	0
>gs             0x0	0
>st0            *value not available*
>st1            *value not available*
>st2            *value not available*
>st3            *value not available*
>st4            *value not available*
>st5            *value not available*
>st6            *value not available*
>st7            *value not available*
>fctrl          *value not available*
>fstat          *value not available*
>ftag           *value not available*
>fiseg          *value not available*
>fioff          *value not available*
>foseg          *value not available*
>fooff          *value not available*
>fop            *value not available*
>xmm0           *value not available*
>xmm1           *value not available*
>xmm2           *value not available*
>xmm3           *value not available*
>xmm4           *value not available*
>xmm5           *value not available*
>xmm6           *value not available*
>xmm7           *value not available*
>xmm8           *value not available*
>xmm9           *value not available*
>xmm10          *value not available*
>xmm11          *value not available*
>xmm12          *value not available*
>xmm13          *value not available*
>xmm14          *value not available*
>xmm15          *value not available*
>mxcsr          *value not available*
>Dump of assembler code for function evbuffer_chain_insert:
>   0x0000003871414dd0 <+0>:	push   %r14
>   0x0000003871414dd2 <+2>:	push   %r13
>   0x0000003871414dd4 <+4>:	mov    %rsi,%r13
>   0x0000003871414dd7 <+7>:	push   %r12
>   0x0000003871414dd9 <+9>:	mov    %rdi,%r12
>   0x0000003871414ddc <+12>:	push   %rbp
>   0x0000003871414ddd <+13>:	push   %rbx
>   0x0000003871414dde <+14>:	mov    0x30(%rdi),%rdi
>   0x0000003871414de2 <+18>:	test   %rdi,%rdi
>   0x0000003871414de5 <+21>:	je     0x3871414df8 <evbuffer_chain_insert+40>
>   0x0000003871414de7 <+23>:	mov    0x2311e2(%rip),%rax        # 0x3871645fd0
>   0x0000003871414dee <+30>:	mov    (%rax),%eax
>   0x0000003871414df0 <+32>:	test   %eax,%eax
>   0x0000003871414df2 <+34>:	jne    0x3871414f60 <evbuffer_chain_insert+400>
>   0x0000003871414df8 <+40>:	mov    0x10(%r12),%r14
>   0x0000003871414dfd <+45>:	mov    (%r14),%rbx
>   0x0000003871414e00 <+48>:	test   %rbx,%rbx
>   0x0000003871414e03 <+51>:	je     0x3871414fb0 <evbuffer_chain_insert+480>
>   0x0000003871414e09 <+57>:	nopl   0x0(%rax)
>=> 0x0000003871414e10 <+64>:	cmpq   $0x0,0x18(%rbx)
>   0x0000003871414e15 <+69>:	jne    0x3871414e1e <evbuffer_chain_insert+78>
>   0x0000003871414e17 <+71>:	mov    0x20(%rbx),%eax
>   0x0000003871414e1a <+74>:	test   $0x30,%al
>   0x0000003871414e1c <+76>:	je     0x3871414e58 <evbuffer_chain_insert+136>
>   0x0000003871414e1e <+78>:	mov    %rbx,%r14
>   0x0000003871414e21 <+81>:	mov    (%rbx),%rbx
>   0x0000003871414e24 <+84>:	test   %rbx,%rbx
>   0x0000003871414e27 <+87>:	jne    0x3871414e10 <evbuffer_chain_insert+64>
>   0x0000003871414e29 <+89>:	mov    0x8(%r12),%rax
>   0x0000003871414e2e <+94>:	mov    %r13,(%rax)
>   0x0000003871414e31 <+97>:	cmpq   $0x0,0x18(%r13)
>   0x0000003871414e36 <+102>:	jne    0x3871414fa0 <evbuffer_chain_insert+464>
>   0x0000003871414e3c <+108>:	mov    %r13,0x8(%r12)
>   0x0000003871414e41 <+113>:	pop    %rbx
>   0x0000003871414e42 <+114>:	pop    %rbp
>   0x0000003871414e43 <+115>:	mov    0x18(%r13),%rax
>   0x0000003871414e47 <+119>:	add    %rax,0x18(%r12)
>   0x0000003871414e4c <+124>:	pop    %r12
>   0x0000003871414e4e <+126>:	pop    %r13
>   0x0000003871414e50 <+128>:	pop    %r14
>   0x0000003871414e52 <+130>:	retq   
>   0x0000003871414e53 <+131>:	nopl   0x0(%rax,%rax,1)
>   0x0000003871414e58 <+136>:	mov    %rbx,%rdx
>   0x0000003871414e5b <+139>:	jmp    0x3871414e6b <evbuffer_chain_insert+155>
>   0x0000003871414e5d <+141>:	nopl   (%rax)
>   0x0000003871414e60 <+144>:	cmpq   $0x0,0x18(%rdx)
>   0x0000003871414e65 <+149>:	jne    0x3871414f30 <evbuffer_chain_insert+352>
>   0x0000003871414e6b <+155>:	mov    (%rdx),%rdx
>   0x0000003871414e6e <+158>:	test   %rdx,%rdx
>   0x0000003871414e71 <+161>:	jne    0x3871414e60 <evbuffer_chain_insert+144>
>   0x0000003871414e73 <+163>:	jmp    0x3871414eb7 <evbuffer_chain_insert+231>
>   0x0000003871414e75 <+165>:	nopl   (%rax)
>   0x0000003871414e78 <+168>:	test   $0x7,%al
>   0x0000003871414e7a <+170>:	je     0x3871414ea4 <evbuffer_chain_insert+212>
>   0x0000003871414e7c <+172>:	test   $0x4,%al
>   0x0000003871414e7e <+174>:	xchg   %ax,%ax
>   0x0000003871414e80 <+176>:	je     0x3871414e9c <evbuffer_chain_insert+204>
>   0x0000003871414e82 <+178>:	mov    0x30(%rbx),%rcx
>   0x0000003871414e86 <+182>:	test   %rcx,%rcx
>   0x0000003871414e89 <+185>:	je     0x3871414e9c <evbuffer_chain_insert+204>
>   0x0000003871414e8b <+187>:	mov    0x38(%rbx),%rdx
>   0x0000003871414e8f <+191>:	mov    0x8(%rbx),%rsi
>   0x0000003871414e93 <+195>:	mov    0x28(%rbx),%rdi
>   0x0000003871414e97 <+199>:	callq  *%rcx
>   0x0000003871414e99 <+201>:	mov    0x20(%rbx),%eax
>   0x0000003871414e9c <+204>:	test   $0x1,%al
>   0x0000003871414e9e <+206>:	jne    0x3871414f00 <evbuffer_chain_insert+304>
>   0x0000003871414ea0 <+208>:	test   $0x2,%al
>   0x0000003871414ea2 <+210>:	jne    0x3871414ed8 <evbuffer_chain_insert+264>
>   0x0000003871414ea4 <+212>:	mov    %rbx,%rdi
>   0x0000003871414ea7 <+215>:	callq  0x387140bef0 <event_mm_free_@plt>
>   0x0000003871414eac <+220>:	test   %rbp,%rbp
>   0x0000003871414eaf <+223>:	je     0x3871414ec9 <evbuffer_chain_insert+249>
>   0x0000003871414eb1 <+225>:	mov    0x20(%rbp),%eax
>   0x0000003871414eb4 <+228>:	mov    %rbp,%rbx
>   0x0000003871414eb7 <+231>:	test   $0x30,%al
>   0x0000003871414eb9 <+233>:	mov    (%rbx),%rbp
>   0x0000003871414ebc <+236>:	je     0x3871414e78 <evbuffer_chain_insert+168>
>   0x0000003871414ebe <+238>:	or     $0x40,%eax
>   0x0000003871414ec1 <+241>:	test   %rbp,%rbp
>   0x0000003871414ec4 <+244>:	mov    %eax,0x20(%rbx)
>   0x0000003871414ec7 <+247>:	jne    0x3871414eb1 <evbuffer_chain_insert+225>
>   0x0000003871414ec9 <+249>:	mov    %r13,(%r14)
>   0x0000003871414ecc <+252>:	jmpq   0x3871414e3c <evbuffer_chain_insert+108>
>   0x0000003871414ed1 <+257>:	nopl   0x0(%rax)
>   0x0000003871414ed8 <+264>:	mov    0x30(%rbx),%edi
>   0x0000003871414edb <+267>:	callq  0x387140b9d0 <close@plt>
>   0x0000003871414ee0 <+272>:	cmp    $0xffffffff,%eax
>   0x0000003871414ee3 <+275>:	jne    0x3871414ea4 <evbuffer_chain_insert+212>
>   0x0000003871414ee5 <+277>:	mov    0x30(%rbx),%edx
>   0x0000003871414ee8 <+280>:	lea    0x22a31(%rip),%rsi        # 0x3871437920 <__func__.6845>
>   0x0000003871414eef <+287>:	lea    0x226a9(%rip),%rdi        # 0x387143759f
>   0x0000003871414ef6 <+294>:	xor    %eax,%eax
>   0x0000003871414ef8 <+296>:	callq  0x387140c5c0 <event_warn@plt>
>   0x0000003871414efd <+301>:	jmp    0x3871414ea4 <evbuffer_chain_insert+212>
>   0x0000003871414eff <+303>:	nop
>   0x0000003871414f00 <+304>:	mov    0x8(%rbx),%rsi
>   0x0000003871414f04 <+308>:	mov    0x28(%rbx),%rdi
>   0x0000003871414f08 <+312>:	callq  0x387140c1f0 <munmap@plt>
>   0x0000003871414f0d <+317>:	cmp    $0xffffffff,%eax
>   0x0000003871414f10 <+320>:	je     0x3871414fc3 <evbuffer_chain_insert+499>
>   0x0000003871414f16 <+326>:	mov    0x30(%rbx),%edi
>   0x0000003871414f19 <+329>:	callq  0x387140b9d0 <close@plt>
>   0x0000003871414f1e <+334>:	cmp    $0xffffffff,%eax
>   0x0000003871414f21 <+337>:	je     0x3871414fdd <evbuffer_chain_insert+525>
>   0x0000003871414f27 <+343>:	mov    0x20(%rbx),%eax
>   0x0000003871414f2a <+346>:	jmpq   0x3871414ea0 <evbuffer_chain_insert+208>
>   0x0000003871414f2f <+351>:	nop
>   0x0000003871414f30 <+352>:	lea    0x22929(%rip),%r9        # 0x3871437860 <__func__.6872>
>   0x0000003871414f37 <+359>:	lea    0x22562(%rip),%r8        # 0x38714374a0
>   0x0000003871414f3e <+366>:	mov    $0x130,%ecx
>   0x0000003871414f43 <+371>:	lea    0x2260f(%rip),%rdx        # 0x3871437559
>   0x0000003871414f4a <+378>:	lea    0x21697(%rip),%rsi        # 0x38714365e8
>   0x0000003871414f51 <+385>:	mov    $0xdeaddead,%edi
>   0x0000003871414f56 <+390>:	xor    %eax,%eax
>   0x0000003871414f58 <+392>:	callq  0x387140b960 <event_errx@plt>
>   0x0000003871414f5d <+397>:	nopl   (%rax)
>   0x0000003871414f60 <+400>:	callq  0x387140b380 <_evthread_is_debug_lock_held@plt>
>   0x0000003871414f65 <+405>:	test   %eax,%eax
>   0x0000003871414f67 <+407>:	jne    0x3871414df8 <evbuffer_chain_insert+40>
>   0x0000003871414f6d <+413>:	lea    0x228ec(%rip),%r9        # 0x3871437860 <__func__.6872>
>   0x0000003871414f74 <+420>:	lea    0x2244d(%rip),%r8        # 0x38714373c8
>   0x0000003871414f7b <+427>:	lea    0x225d7(%rip),%rdx        # 0x3871437559
>   0x0000003871414f82 <+434>:	lea    0x2165f(%rip),%rsi        # 0x38714365e8
>   0x0000003871414f89 <+441>:	mov    $0x11e,%ecx
>   0x0000003871414f8e <+446>:	mov    $0xdeaddead,%edi
>   0x0000003871414f93 <+451>:	callq  0x387140b960 <event_errx@plt>
>   0x0000003871414f98 <+456>:	nopl   0x0(%rax,%rax,1)
>   0x0000003871414fa0 <+464>:	mov    0x8(%r12),%rax
>   0x0000003871414fa5 <+469>:	mov    %rax,0x10(%r12)
>   0x0000003871414faa <+474>:	jmpq   0x3871414e3c <evbuffer_chain_insert+108>
>   0x0000003871414faf <+479>:	nop
>   0x0000003871414fb0 <+480>:	cmp    %r12,%r14
>   0x0000003871414fb3 <+483>:	jne    0x3871414ffa <evbuffer_chain_insert+554>
>   0x0000003871414fb5 <+485>:	mov    %r13,0x8(%r12)
>   0x0000003871414fba <+490>:	mov    %r13,(%r12)
>   0x0000003871414fbe <+494>:	jmpq   0x3871414e41 <evbuffer_chain_insert+113>
>   0x0000003871414fc3 <+499>:	lea    0x22956(%rip),%rsi        # 0x3871437920 <__func__.6845>
>   0x0000003871414fca <+506>:	lea    0x225bc(%rip),%rdi        # 0x387143758d
>   0x0000003871414fd1 <+513>:	xor    %eax,%eax
>   0x0000003871414fd3 <+515>:	callq  0x387140c5c0 <event_warn@plt>
>   0x0000003871414fd8 <+520>:	jmpq   0x3871414f16 <evbuffer_chain_insert+326>
>   0x0000003871414fdd <+525>:	mov    0x30(%rbx),%edx
>   0x0000003871414fe0 <+528>:	lea    0x22939(%rip),%rsi        # 0x3871437920 <__func__.6845>
>   0x0000003871414fe7 <+535>:	lea    0x225b1(%rip),%rdi        # 0x387143759f
>   0x0000003871414fee <+542>:	xor    %eax,%eax
>   0x0000003871414ff0 <+544>:	callq  0x387140c5c0 <event_warn@plt>
>   0x0000003871414ff5 <+549>:	jmpq   0x3871414f27 <evbuffer_chain_insert+343>
>   0x0000003871414ffa <+554>:	lea    0x2285f(%rip),%r9        # 0x3871437860 <__func__.6872>
>   0x0000003871415001 <+561>:	lea    0x22470(%rip),%r8        # 0x3871437478
>   0x0000003871415008 <+568>:	mov    $0x121,%ecx
>   0x000000387141500d <+573>:	jmpq   0x3871414f43 <evbuffer_chain_insert+371>
>End of assembler dump.

Actions: View

Attachments on bug 1086851: 885479 | 885480 | 885481 | 885482 | 885483 | 885484 | 885485 | 885486 | 885487 | 885488 | 885489