Bug 437047

Summary: Crash on manual driver select and load (double free or corruption)
Product: [Fedora] Fedora Reporter: Dr. Tilmann Bubeck <tilmann>
Component: anacondaAssignee: Anaconda Maintenance Team <anaconda-maint-list>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: 8   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-03-12 22:25:17 EDT Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Bug Depends On:    
Bug Blocks: 235706    

Description Dr. Tilmann Bubeck 2008-03-11 17:16:44 EDT
Description of problem:
Whenever you manually select a driver to load then anaconda crashes. This is
regardless of the selected driver and happens with every driver with:
*** glibc detected *** /sbin/loader: double free or corruption (!prev):
0x09bc7388 ***
======= Backtrace: ========
[...deleted...]


Version-Release number of selected component (if applicable):


How reproducible:
Every time

Steps to Reproduce:
1. Boot from DVD with kernel option "noprobe" to force a driver selection.
2. Select NFS installation
3. You will be prompted for a driver to select and load
4. Select an arbitrary driver (e.g. 8139too, or e1000 or ppp_generic)
5. Crash occurs
  
Actual results:
Above crash

Expected results:
Load driver

Additional info:
Comment 1 Jeremy Katz 2008-03-11 23:06:41 EDT
Can you provide the full traceback you received?
Comment 2 Dr. Tilmann Bubeck 2008-03-12 04:41:26 EDT
This traceback is from selecting "ppp_generic" driver:
*** glibc detected *** /sbin/loader: double free or corruption (!prev): 
0x09617700 ***
======= Backtrace: ========
[0x819fba2]
[0x81a3f6b]
[0x8070bfd]
[0x806e5cc]
[0x80590e5]
[0x804c93e]
[0x8175004]
[0x8048151]
======= Memory Map: ======
00110000-00111000 r-xp 00110000 00:00 0   [vdso]
08048000-0828e000 r-xp 00000000 00:01 36  /sbin/loader
0828e000-08299000 rw-p 00245000 00:01 36  /sbin/loader
08299000-082d3000 rw-p 08299000 00:00 0
095a4000-0964c000 rw-p 095a4000 00:00 0
b7e00000-b7e26000 rw-p b7e00000 00:00 0
b7e26000-b7f00000 ---p b7e26000 00:00 0
b7f2d000-b7f30000 rw-p b7f2d000 00:00 0
bfc09000-bfc1e000 rw-p bffea000 00:00 0   [stack]
Comment 3 Chris Lumens 2008-03-12 16:22:34 EDT
is this better in F9-Alpha?  A quick test here didn't show a segfault, and I
know we've made some changes to this code since F8.
Comment 4 Dr. Tilmann Bubeck 2008-03-12 18:09:35 EDT
I can confirm, that there is no backtrace in F9-Alpha. Well done!
Comment 5 Chris Lumens 2008-03-12 22:25:17 EDT
Hooray, something works!