Attachment 912640 Details for Bug 1113022 – Valgrind trace of slapd during sigsegv

Valgrind trace of slapd during sigsegv

slapd.11297.out (text/plain), 16.00 KB, created by William Brown on 2014-06-27 00:58:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: William Brown

Created: 2014-06-27 00:58:01 UTC

Size: 16.00 KB

patch

obsolete

>==11325== Memcheck, a memory error detector
>==11325== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
>==11325== Using Valgrind-3.9.0 and LibVEX; rerun with -h for copyright info
>==11325== Command: ./ns-slapd -D /etc/dirsrv/slapd-IPA-BLACKHATS-NET-AU -i /var/run/dirsrv/slapd-IPA-BLACKHATS-NET-AU.pid -w /var/run/dirsrv/slapd-IPA-BLACKHATS-NET-AU.startpid -d 0
>==11325== Parent PID: 11297
>==11325== 
>==11325== Conditional jump or move depends on uninitialised value(s)
>==11325==    at 0x7D621C3: NSSUTIL_MkSlotString (in /usr/lib64/libnssutil3.so)
>==11325==    by 0x5FA6EEB: ??? (in /usr/lib64/libnss3.so)
>==11325==    by 0x5FA8283: ??? (in /usr/lib64/libnss3.so)
>==11325==    by 0x5FB46F8: SECMOD_UpdateModule (in /usr/lib64/libnss3.so)
>==11325==    by 0x4CCC1EE: slapd_ssl_init2 (ssl.c:932)
>==11325==    by 0x12C2F9: slapd_do_all_nss_ssl_init (main.c:3130)
>==11325==    by 0x127B74: detach (detach.c:161)
>==11325==    by 0x118943: main (main.c:1062)
>==11325== 
>==11325== Conditional jump or move depends on uninitialised value(s)
>==11325==    at 0x7D621C3: NSSUTIL_MkSlotString (in /usr/lib64/libnssutil3.so)
>==11325==    by 0x5FA6EEB: ??? (in /usr/lib64/libnss3.so)
>==11325==    by 0x5FA8213: ??? (in /usr/lib64/libnss3.so)
>==11325==    by 0x4CCC1EE: slapd_ssl_init2 (ssl.c:932)
>==11325==    by 0x12C2F9: slapd_do_all_nss_ssl_init (main.c:3130)
>==11325==    by 0x127B74: detach (detach.c:161)
>==11325==    by 0x118943: main (main.c:1062)
>==11325== 
>==11325== Syscall param pwrite64(buf) points to uninitialised byte(s)
>==11325==    at 0x6F21123: __pwrite_nocancel (in /usr/lib64/libpthread-2.18.so)
>==11325==    by 0xCBBB8C8: __os_io (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA7198: ??? (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA75D5: __memp_bhwrite (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBB7D04: __memp_sync_int (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCB8AC09: __db_apprec (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCB86E18: __env_attach_regions (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCB8709F: __env_open (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0x133BF39B: dblayer_start (dblayer.c:1787)
>==11325==    by 0x13410E4C: ldbm_back_start (start.c:254)
>==11325==    by 0x4CAA094: plugin_call_func (plugin.c:1489)
>==11325==    by 0x4CAAC63: plugin_dependency_startall.isra.6.constprop.7 (plugin.c:1457)
>==11325==    by 0x119BCC: main (main.c:1187)
>==11325==  Address 0x180b50c2 is not stack'd, malloc'd or (recently) free'd
>==11325== 
>==11325== Thread 14:
>==11325== Conditional jump or move depends on uninitialised value(s)
>==11325==    at 0xCBA08AD: ??? (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA1FB7: __log_put (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA343D: ??? (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA428F: __log_put_record (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCB5C362: __db_pitem (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCA9F9A8: __bam_iitem (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCA9B5E4: ??? (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCB52B84: __dbc_iput (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCB618E0: __dbc_put_pp (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0x133EF744: _entryrdn_put_data (ldbm_entryrdn.c:1955)
>==11325==    by 0x133F2264: _entryrdn_insert_key (ldbm_entryrdn.c:2109)
>==11325==    by 0x133F3853: entryrdn_index_entry (ldbm_entryrdn.c:295)
>==11325==    by 0x133EDDA4: ldbm_back_delete (ldbm_delete.c:868)
>==11325==    by 0x4C6231F: op_shared_delete (delete.c:364)
>==11325==    by 0x4C624D1: delete_internal_pb (delete.c:242)
>==11325==    by 0x11739B32: dna_update_config_event (dna.c:1383)
>==11325==    by 0x4C75A29: eq_loop (eventq.c:312)
>==11325==    by 0x68D9E5A: ??? (in /usr/lib64/libnspr4.so)
>==11325==    by 0x6F19F32: start_thread (in /usr/lib64/libpthread-2.18.so)
>==11325==    by 0x7224DEC: clone (in /usr/lib64/libc-2.18.so)
>==11325== 
>==11325== Invalid read of size 4
>==11325==    at 0x15177FA4: backend_build_filter.isra.17 (string3.h:142)
>==11325==    by 0x15178424: backend_shr_update_references_cb (back-shr.c:1142)
>==11325==    by 0x1518617E: map_data_foreach_map (map.c:347)
>==11325==    by 0x15176A2A: backend_shr_update_references (back-shr.c:1655)
>==11325==    by 0x15177B85: backend_shr_add_cb.part.13 (back-shr.c:1778)
>==11325==    by 0x15177CE0: backend_shr_betxn_post_add_cb (back-shr.c:1713)
>==11325==    by 0x4CAA094: plugin_call_func (plugin.c:1489)
>==11325==    by 0x4CAA247: plugin_call_plugins (plugin.c:1451)
>==11325==    by 0x133E293F: ldbm_back_add (ldbm_add.c:1033)
>==11325==    by 0x4C55419: op_shared_add (add.c:735)
>==11325==    by 0x4C55C72: add_internal_pb (add.c:434)
>==11325==    by 0x14B5CC80: retrocl_postob (retrocl_po.c:371)
>==11325==    by 0x4CAA094: plugin_call_func (plugin.c:1489)
>==11325==    by 0x4CAA247: plugin_call_plugins (plugin.c:1451)
>==11325==    by 0x133EE25E: ldbm_back_delete (ldbm_delete.c:1091)
>==11325==    by 0x4C6231F: op_shared_delete (delete.c:364)
>==11325==    by 0x4C624D1: delete_internal_pb (delete.c:242)
>==11325==    by 0x11739B32: dna_update_config_event (dna.c:1383)
>==11325==    by 0x4C75A29: eq_loop (eventq.c:312)
>==11325==    by 0x68D9E5A: ??? (in /usr/lib64/libnspr4.so)
>==11325==    by 0x6F19F32: start_thread (in /usr/lib64/libpthread-2.18.so)
>==11325==    by 0x7224DEC: clone (in /usr/lib64/libc-2.18.so)
>==11325==  Address 0xe8c4278 is 120 bytes inside a block of size 123 alloc'd
>==11325==    at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
>==11325==    by 0x15177E84: backend_build_filter.isra.17 (back-shr.c:908)
>==11325==    by 0x15178424: backend_shr_update_references_cb (back-shr.c:1142)
>==11325==    by 0x1518617E: map_data_foreach_map (map.c:347)
>==11325==    by 0x15176A2A: backend_shr_update_references (back-shr.c:1655)
>==11325==    by 0x15177B85: backend_shr_add_cb.part.13 (back-shr.c:1778)
>==11325==    by 0x15177CE0: backend_shr_betxn_post_add_cb (back-shr.c:1713)
>==11325==    by 0x4CAA094: plugin_call_func (plugin.c:1489)
>==11325==    by 0x4CAA247: plugin_call_plugins (plugin.c:1451)
>==11325==    by 0x133E293F: ldbm_back_add (ldbm_add.c:1033)
>==11325==    by 0x4C55419: op_shared_add (add.c:735)
>==11325==    by 0x4C55C72: add_internal_pb (add.c:434)
>==11325==    by 0x14B5CC80: retrocl_postob (retrocl_po.c:371)
>==11325==    by 0x4CAA094: plugin_call_func (plugin.c:1489)
>==11325==    by 0x4CAA247: plugin_call_plugins (plugin.c:1451)
>==11325==    by 0x133EE25E: ldbm_back_delete (ldbm_delete.c:1091)
>==11325==    by 0x4C6231F: op_shared_delete (delete.c:364)
>==11325==    by 0x4C624D1: delete_internal_pb (delete.c:242)
>==11325==    by 0x11739B32: dna_update_config_event (dna.c:1383)
>==11325==    by 0x4C75A29: eq_loop (eventq.c:312)
>==11325==    by 0x68D9E5A: ??? (in /usr/lib64/libnspr4.so)
>==11325==    by 0x6F19F32: start_thread (in /usr/lib64/libpthread-2.18.so)
>==11325==    by 0x7224DEC: clone (in /usr/lib64/libc-2.18.so)
>==11325== 
>==11325== Syscall param pwrite64(buf) points to uninitialised byte(s)
>==11325==    at 0x6F21143: ??? (in /usr/lib64/libpthread-2.18.so)
>==11325==    by 0xCBBB8C8: __os_io (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA05B1: ??? (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA1417: __log_flush_int (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA358E: __log_flush (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA36FE: __log_flush_pp (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0x133C26EC: dblayer_txn_commit_ext (dblayer.c:3752)
>==11325==    by 0x133C2874: dblayer_txn_commit (dblayer.c:3791)
>==11325==    by 0x133E2B73: ldbm_back_add (ldbm_add.c:1055)
>==11325==    by 0x4C55419: op_shared_add (add.c:735)
>==11325==    by 0x4C55C72: add_internal_pb (add.c:434)
>==11325==    by 0x14B5CC80: retrocl_postob (retrocl_po.c:371)
>==11325==    by 0x4CAA094: plugin_call_func (plugin.c:1489)
>==11325==    by 0x4CAA247: plugin_call_plugins (plugin.c:1451)
>==11325==    by 0x133EE25E: ldbm_back_delete (ldbm_delete.c:1091)
>==11325==    by 0x4C6231F: op_shared_delete (delete.c:364)
>==11325==    by 0x4C624D1: delete_internal_pb (delete.c:242)
>==11325==    by 0x11739B32: dna_update_config_event (dna.c:1383)
>==11325==    by 0x4C75A29: eq_loop (eventq.c:312)
>==11325==    by 0x68D9E5A: ??? (in /usr/lib64/libnspr4.so)
>==11325==    by 0x6F19F32: start_thread (in /usr/lib64/libpthread-2.18.so)
>==11325==    by 0x7224DEC: clone (in /usr/lib64/libc-2.18.so)
>==11325==  Address 0x1759eb0f is not stack'd, malloc'd or (recently) free'd
>==11325== 
>==11325== Thread 3:
>==11325== Syscall param pwrite64(buf) points to uninitialised byte(s)
>==11325==    at 0x6F21143: ??? (in /usr/lib64/libpthread-2.18.so)
>==11325==    by 0xCBBB8C8: __os_io (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA7198: ??? (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBA75D5: __memp_bhwrite (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBB7D04: __memp_sync_int (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBC8041: __txn_checkpoint (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0xCBC846B: __txn_checkpoint_pp (in /usr/lib64/libdb-5.3.so)
>==11325==    by 0x133C3AE6: checkpoint_threadmain (dblayer.c:4729)
>==11325==    by 0x68D9E5A: ??? (in /usr/lib64/libnspr4.so)
>==11325==    by 0x6F19F32: start_thread (in /usr/lib64/libpthread-2.18.so)
>==11325==    by 0x7224DEC: clone (in /usr/lib64/libc-2.18.so)
>==11325==  Address 0x186cc315 is not stack'd, malloc'd or (recently) free'd
>==11325== 
>==11325== Thread 42:
>==11325== Invalid read of size 1
>==11325==    at 0x4A0A525: memcpy@@GLIBC_2.14 (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
>==11325==    by 0x4CD7A1D: ber_bvcpy.part.0 (string3.h:51)
>==11325==    by 0x4CD7C30: slapi_value_set_berval (value.c:359)
>==11325==    by 0x4CD7C85: value_init (value.c:207)
>==11325==    by 0x4CD7CE1: value_new (value.c:184)
>==11325==    by 0x4CD88F4: valuearray_init_bervalarray (valueset.c:251)
>==11325==    by 0x4C706F0: slapi_entry_add_values (entry.c:3660)
>==11325==    by 0x14B5CC47: retrocl_postob (retrocl_po.c:546)
>==11325==    by 0x4CAA094: plugin_call_func (plugin.c:1489)
>==11325==    by 0x4CAA247: plugin_call_plugins (plugin.c:1451)
>==11325==    by 0x133FDF4C: ldbm_back_modrdn (ldbm_modrdn.c:1117)
>==11325==    by 0x4C9C3E6: op_shared_rename.constprop.0 (modrdn.c:652)
>==11325==    by 0x4C9C5C4: rename_internal_pb (modrdn.c:392)
>==11325==    by 0x136947C8: urp_fixup_rename_entry (urp.c:843)
>==11325==    by 0x13694BB9: urp_annotate_dn (urp.c:1041)
>==11325==    by 0x136956FA: urp_add_operation (urp.c:253)
>==11325==    by 0x1367D8E7: multimaster_bepreop_add (repl5_plugins.c:755)
>==11325==    by 0x4CAA094: plugin_call_func (plugin.c:1489)
>==11325==    by 0x4CAA247: plugin_call_plugins (plugin.c:1451)
>==11325==    by 0x133E1AAE: ldbm_back_add (ldbm_add.c:336)
>==11325==    by 0x4C55419: op_shared_add (add.c:735)
>==11325==    by 0x4C5674F: do_add (add.c:258)
>==11325==    by 0x122CA3: connection_threadmain (connection.c:645)
>==11325==    by 0x68D9E5A: ??? (in /usr/lib64/libnspr4.so)
>==11325==    by 0x6F19F32: start_thread (in /usr/lib64/libpthread-2.18.so)
>==11325==    by 0x7224DEC: clone (in /usr/lib64/libc-2.18.so)
>==11325==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
>==11325== 
>==11325== 
>==11325== Process terminating with default action of signal 11 (SIGSEGV): dumping core
>==11325==  Access not within mapped region at address 0x0
>==11325==    at 0x4A0A525: memcpy@@GLIBC_2.14 (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
>==11325==    by 0x4CD7A1D: ber_bvcpy.part.0 (string3.h:51)
>==11325==    by 0x4CD7C30: slapi_value_set_berval (value.c:359)
>==11325==    by 0x4CD7C85: value_init (value.c:207)
>==11325==    by 0x4CD7CE1: value_new (value.c:184)
>==11325==    by 0x4CD88F4: valuearray_init_bervalarray (valueset.c:251)
>==11325==    by 0x4C706F0: slapi_entry_add_values (entry.c:3660)
>==11325==    by 0x14B5CC47: retrocl_postob (retrocl_po.c:546)
>==11325==    by 0x4CAA094: plugin_call_func (plugin.c:1489)
>==11325==    by 0x4CAA247: plugin_call_plugins (plugin.c:1451)
>==11325==    by 0x133FDF4C: ldbm_back_modrdn (ldbm_modrdn.c:1117)
>==11325==    by 0x4C9C3E6: op_shared_rename.constprop.0 (modrdn.c:652)
>==11325==    by 0x4C9C5C4: rename_internal_pb (modrdn.c:392)
>==11325==    by 0x136947C8: urp_fixup_rename_entry (urp.c:843)
>==11325==    by 0x13694BB9: urp_annotate_dn (urp.c:1041)
>==11325==    by 0x136956FA: urp_add_operation (urp.c:253)
>==11325==    by 0x1367D8E7: multimaster_bepreop_add (repl5_plugins.c:755)
>==11325==    by 0x4CAA094: plugin_call_func (plugin.c:1489)
>==11325==    by 0x4CAA247: plugin_call_plugins (plugin.c:1451)
>==11325==    by 0x133E1AAE: ldbm_back_add (ldbm_add.c:336)
>==11325==    by 0x4C55419: op_shared_add (add.c:735)
>==11325==    by 0x4C5674F: do_add (add.c:258)
>==11325==    by 0x122CA3: connection_threadmain (connection.c:645)
>==11325==    by 0x68D9E5A: ??? (in /usr/lib64/libnspr4.so)
>==11325==    by 0x6F19F32: start_thread (in /usr/lib64/libpthread-2.18.so)
>==11325==    by 0x7224DEC: clone (in /usr/lib64/libc-2.18.so)
>==11325==  If you believe this happened as a result of a stack
>==11325==  overflow in your program's main thread (unlikely but
>==11325==  possible), you can try to increase the size of the
>==11325==  main thread stack using the --main-stacksize= flag.
>==11325==  The main thread stack size used in this run was 8388608.
>==11325== 
>==11325== HEAP SUMMARY:
>==11325==     in use at exit: 32,486,170 bytes in 104,328 blocks
>==11325==   total heap usage: 12,625,331 allocs, 12,521,003 frees, 491,733,396 bytes allocated
>==11325== 
>==11325== Thread 1:
>==11325== 1 bytes in 1 blocks are still reachable in loss record 1 of 8,093
>==11325==    at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
>==11325==    by 0x71B6369: strdup (in /usr/lib64/libc-2.18.so)
>==11325==    by 0x4C5E952: slapi_ch_strdup (ch_malloc.c:277)
>==11325==    by 0x4C887A5: FrontendConfig_init (libglobs.c:1410)
>==11325==    by 0x118478: main (main.c:690)
>==11325== 
>==11325== 1 bytes in 1 blocks are still reachable in loss record 2 of 8,093
>==11325==    at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
>==11325==    by 0x71B6369: strdup (in /usr/lib64/libc-2.18.so)
>==11325==    by 0x4C5E952: slapi_ch_strdup (ch_malloc.c:277)
>==11325==    by 0x4C887B8: FrontendConfig_init (libglobs.c:1411)
>==11325==    by 0x118478: main (main.c:690)
>==11325== 
>==11325== 1 bytes in 1 blocks are still reachable in loss record 3 of 8,093
>==11325==    at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
>==11325==    by 0x71B6369: strdup (in /usr/lib64/libc-2.18.so)
>==11325==    by 0x4C5E952: slapi_ch_strdup (ch_malloc.c:277)
>==11325==    by 0x133EAAB4: ldbm_config_db_home_directory_set (ldbm_config.c:1105)
>==11325==    by 0x133EBD3F: ldbm_config_set (ldbm_config.c:2005)
>==11325==    by 0x133EC06C: ldbm_config_setup_default (ldbm_config.c:1526)
>==11325==    by 0x133E006F: ldbm_back_init (init.c:124)
>==11325==    by 0x4CABCDE: plugin_setup (plugin.c:2358)
>==11325==    by 0x11F1DE: load_plugin_entry (configdse.c:356)
>==11325==    by 0x4C687DA: dse_call_callback.isra.1 (dse.c:2421)
>==11325==    by 0x4C69AC5: dse_read_one_file (dse.c:799)
>==11325==    by 0x4C69DCD: dse_read_file (dse.c:875)
>==11325==    by 0x1292E0: setup_internal_backends (fedse.c:1612)
>==11325==    by 0x1185A4: main (main.c:840)
>==11325== 
>==11325== 1 bytes in 1 blocks are still reachable in loss record 4 of 8,093
>==11325==    at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
>==11325==    by 0x71B6369: strdup (in /usr/lib64/libc-2.18.so)
>==11325==    by 0x4C5E952: slapi_ch_strdup (ch_malloc.c:277)
>==11325==    by 0x4C66E5C: slapi_sdn_set_normdn_byval (dn.c:2132)
>==11325==    by 0x4C66EBB: slapi_sdn_new_normdn_byval (dn.c:2051)
>==11325==    by 0x4C6BAD4: dse_register_callback (dse.c:237)
>==11325==    by 0x129429: setup_internal_backends (fedse.c:1806)
>==11325==    by 0x1185A4: main (main.c:840)
>==11325== 
>==11325== 1 bytes in 1 blocks are still reachable in loss record 5 of 8,093
>==11325==    at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
>==11325==    by 0x71B6369: strdup (in /usr/lib64/libc-2.18.so)
>==11325==    by 0x4C5E952: slapi_ch_strdup (ch_malloc.c:277)
>==11325==    by 0x4C66E5C: slapi_sdn_set_normdn_byval (dn.c:2132)
>==11325==    by 0x4C66EBB: slapi_sdn_new_normdn_byval (dn.c:2051)
>==11325==    by 0x4

Actions: View

Attachments on bug 1113022: 912004 | 912342 | 912640 | 914894