Bug 513871
Summary: | stack smashing detected: /usr/bin/w_scan terminated | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Stephen <sdeasey> |
Component: | w_scan | Assignee: | Felix Kaechele <felix> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | high | Docs Contact: | |
Priority: | low | ||
Version: | 11 | CC: | felix |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | 20090808-1.fc10 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2009-08-27 02:15:07 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Stephen
2009-07-26 19:09:37 UTC
Contacted upstram about this. Let's see what happens :) Okay. Got an answer from upstream today. He asks for the following info: - dmesg output on loading the DVB drivers (i.e. loading messages from the DVB drivers) - dmesg output right after the crash of the program - is it a 32-bit or 64-bit version of Fedora? (As far as I can see it looks like i586 ;-) - A compilation log on this specific system (Note: you can use nohup with rpmbuild --rebuild on the SRPM to generate the log) - The output file (log.txt) of this command: w_scan -c GB -ft -O1 -E0 -X -F -t3 -v -v -v -v 2>&1 | tee log.txt Initialising DVB card: usb 1-3: new high speed USB device using ehci_hcd and address 3 usb 1-3: New USB device found, idVendor=07ca, idProduct=a800 usb 1-3: New USB device strings: Mfr=0, Product=0, SerialNumber=0 usb 1-3: configuration #1 chosen from 1 choice dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in cold state, will try to load a firmware usb 1-3: firmware: requesting dvb-usb-avertv-a800-02.fw dvb-usb: downloading firmware from file 'dvb-usb-avertv-a800-02.fw' usbcore: registered new interface driver dvb_usb_a800 usb 1-3: USB disconnect, address 3 dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. usb 1-3: new high speed USB device using ehci_hcd and address 4 usb 1-3: New USB device found, idVendor=07ca, idProduct=a801 usb 1-3: New USB device strings: Mfr=1, Product=2, SerialNumber=0 usb 1-3: Product: A801 usb 1-3: Manufacturer: AVerTV usb 1-3: configuration #1 chosen from 1 choice dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) DVB: registering adapter 0 frontend 0 (DiBcom 3000MC/P)... input: IR-receiver inside an USB DVB receiver as /devices/pci0000:00/0000:00:1d.7/usb1/1-3/input/input10 dvb-usb: schedule remote query interval to 150 msecs. dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. After crash: (nothing in dmesg) $ gdb /usr/bin/w_scan GNU gdb (GDB) Fedora (6.8.50.20090302-33.fc11) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i586-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... (gdb) set args -c GB -ft -O1 -E0 -X -F -t3 -v -v -v -v (gdb) run Starting program: /usr/bin/w_scan -c GB -ft -O1 -E0 -X -F -t3 -v -v -v -v w_scan version 20090528 (compiled for DVB API 5.0) GB atsc1 dvb2 frontend2 using settings for UNITED KINGDOM DVB aerial DVB-T GB frontend_type DVB-T, channellist 6 output format czap/tzap/szap/xine Info: using DVB adapter auto detection. /dev/dvb/adapter0/frontend0 -> DVB-T "DiBcom 3000MC/P": good :-) Using DVB-T frontend (adapter /dev/dvb/adapter0/frontend0) -_-_-_-_ Getting frontend capabilities-_-_-_-_ Using DVB API 5.0 frontend DiBcom 3000MC/P supports INVERSION_AUTO QAM_AUTO TRANSMISSION_MODE_AUTO GUARD_INTERVAL_AUTO HIERARCHY_AUTO FEC_AUTO -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ channellist=6, base_offset=-1, channel=0, step=8000000 channellist=6, base_offset=-1, channel=0, step=8000000 channellist=6, base_offset=-1, channel=0, step=8000000 channellist=6, base_offset=-1, channel=1, step=8000000 channellist=6, base_offset=-1, channel=1, step=8000000 channellist=6, base_offset=-1, channel=1, step=8000000 channellist=6, base_offset=-1, channel=2, step=8000000 channellist=6, base_offset=-1, channel=2, step=8000000 channellist=6, base_offset=-1, channel=2, step=8000000 channellist=6, base_offset=-1, channel=3, step=8000000 channellist=6, base_offset=-1, channel=3, step=8000000 channellist=6, base_offset=-1, channel=3, step=8000000 channellist=6, base_offset=-1, channel=4, step=8000000 channellist=6, base_offset=-1, channel=4, step=8000000 channellist=6, base_offset=-1, channel=4, step=8000000 channellist=6, base_offset=142500000, channel=5, step=7000000 Scanning 7MHz frequencies... 177500: (time: 00:00) set_frontend: using DVB API 5.0 channellist=6, base_offset=142500000, channel=5, step=7000000 channellist=6, base_offset=142500000, channel=5, step=7000000 channellist=6, base_offset=142500000, channel=6, step=7000000 184500: (time: 00:03) set_frontend: using DVB API 5.0 channellist=6, base_offset=142500000, channel=6, step=7000000 channellist=6, base_offset=142500000, channel=6, step=7000000 channellist=6, base_offset=142500000, channel=7, step=7000000 191500: (time: 00:07) set_frontend: using DVB API 5.0 channellist=6, base_offset=142500000, channel=7, step=7000000 channellist=6, base_offset=142500000, channel=7, step=7000000 channellist=6, base_offset=142500000, channel=8, step=7000000 198500: (time: 00:10) set_frontend: using DVB API 5.0 channellist=6, base_offset=142500000, channel=8, step=7000000 channellist=6, base_offset=142500000, channel=8, step=7000000 channellist=6, base_offset=142500000, channel=9, step=7000000 205500: (time: 00:13) set_frontend: using DVB API 5.0 channellist=6, base_offset=142500000, channel=9, step=7000000 channellist=6, base_offset=142500000, channel=9, step=7000000 channellist=6, base_offset=142500000, channel=10, step=7000000 212500: (time: 00:16) set_frontend: using DVB API 5.0 channellist=6, base_offset=142500000, channel=10, step=7000000 channellist=6, base_offset=142500000, channel=10, step=7000000 channellist=6, base_offset=142500000, channel=11, step=7000000 219500: (time: 00:19) set_frontend: using DVB API 5.0 channellist=6, base_offset=142500000, channel=11, step=7000000 channellist=6, base_offset=142500000, channel=11, step=7000000 channellist=6, base_offset=142500000, channel=12, step=7000000 226500: (time: 00:23) set_frontend: using DVB API 5.0 channellist=6, base_offset=142500000, channel=12, step=7000000 channellist=6, base_offset=142500000, channel=12, step=7000000 channellist=6, base_offset=-1, channel=13, step=8000000 channellist=6, base_offset=-1, channel=13, step=8000000 channellist=6, base_offset=-1, channel=13, step=8000000 channellist=6, base_offset=-1, channel=14, step=8000000 channellist=6, base_offset=-1, channel=14, step=8000000 channellist=6, base_offset=-1, channel=14, step=8000000 channellist=6, base_offset=-1, channel=15, step=8000000 channellist=6, base_offset=-1, channel=15, step=8000000 channellist=6, base_offset=-1, channel=15, step=8000000 channellist=6, base_offset=-1, channel=16, step=8000000 channellist=6, base_offset=-1, channel=16, step=8000000 channellist=6, base_offset=-1, channel=16, step=8000000 channellist=6, base_offset=-1, channel=17, step=8000000 channellist=6, base_offset=-1, channel=17, step=8000000 channellist=6, base_offset=-1, channel=17, step=8000000 channellist=6, base_offset=-1, channel=18, step=8000000 channellist=6, base_offset=-1, channel=18, step=8000000 channellist=6, base_offset=-1, channel=18, step=8000000 channellist=6, base_offset=-1, channel=19, step=8000000 channellist=6, base_offset=-1, channel=19, step=8000000 channellist=6, base_offset=-1, channel=19, step=8000000 channellist=6, base_offset=-1, channel=20, step=8000000 channellist=6, base_offset=-1, channel=20, step=8000000 channellist=6, base_offset=-1, channel=20, step=8000000 channellist=6, base_offset=306000000, channel=21, step=8000000 Scanning 8MHz frequencies... 474000: (time: 00:26) set_frontend: using DVB API 5.0 channellist=6, base_offset=306000000, channel=21, step=8000000 474167: (time: 00:29) set_frontend: using DVB API 5.0 channellist=6, base_offset=306000000, channel=21, step=8000000 473833: (time: 00:32) set_frontend: using DVB API 5.0 channellist=6, base_offset=306000000, channel=22, step=8000000 482000: (time: 00:35) set_frontend: using DVB API 5.0 (time: 00:37) set_frontend: using DVB API 5.0 signal ok: QAM_AUTO f = 482000 kHz I999B8C999D999T999G999Y999 add_filter:1394: add filter pid 0x0010 start_filter:1340: start filter pid 0x0010 table_id 0x40 update_poll_fds:1320: poll fd 10 add_filter:1394: add filter pid 0x0010 start_filter:1340: start filter pid 0x0010 table_id 0x41 update_poll_fds:1320: poll fd 11 update_poll_fds:1320: poll fd 10 parse_section:1187: pid 0x10 tid 0x40 table_id_ext 0x302e, 1/1 (version 1) NIT (actual TS) ===================== parse_nit ======================================== len = 481 0x00: F0 00 F1 DF 30 06 23 3A F0 B8 41 45 33 40 01 3A : 0 #: AE3@ : 0x10: 80 01 39 C0 0C 37 C0 01 39 00 02 3B 80 01 3C C0 : 9 7 9 ; < 0x20: 01 3D C0 01 3F 60 01 3F 80 01 3F A0 01 32 C0 01 : = ?` ? ? 2 0x30: 32 80 01 3F 00 0C 3E E0 01 3E A0 01 39 E0 0C 38 : 2 ? > > 9 8 0x40: A2 01 38 E0 01 3D 20 01 38 60 01 38 20 01 37 E0 : 8 = 8` 8 7 0x50: 01 5A 0B 02 EB 6D 04 1F 81 03 FF FF FF FF 5F 04 : Z m _ 0x60: 00 00 23 3A 83 5C 32 C0 FC 1F 38 A2 FC 2F 37 C0 : #: \2 8 /7 0x70: FC 17 3F 00 FC 67 3F 80 FC 27 38 60 FC 31 3C C0 : ? g? '8` 1< 0x80: FC 11 3B 80 FC 61 39 C0 FC 65 3F 60 FC 26 32 80 : ; a9 e?` &2 0x90: FC 1E 3A 80 FC 1A 38 20 FC 32 3E E0 FC 22 33 40 : : 8 2> "3@ 0xA0: FC 10 38 E0 FC 30 3D C0 FC 58 39 00 FE C8 3E A0 : 8 0= X9 > 0xB0: FC 48 39 E0 FC 68 3F A0 FC 28 37 E0 FC 14 3D 20 : H9 h? (7 = 0xC0: FC 54 50 40 23 3A F0 64 41 21 57 40 01 56 80 01 : TP@#: dA!W@ V 0xD0: 58 40 02 5C 80 0C 57 00 01 57 80 01 59 C0 02 5A : X@ \ W W Y Z 0xE0: 40 02 56 40 01 56 C0 01 5C C0 0C 5A 0B 02 DF 79 : @ V@ V \ Z y 0xF0: 40 1F 81 03 FF FF FF FF 5F 04 00 00 23 3A 83 2C : @ _ #: , 0x100: 5A 40 FE D7 56 80 FC 53 57 00 FC 13 58 40 FE D3 : Z@ V SW X@ 0x110: 56 C0 FC 0B 57 40 FC 1D 59 C0 FE D5 56 40 FC 52 : V W@ Y V@ R 0x120: 5C C0 FD 32 57 80 FC 20 5C 80 FC 6C 60 40 23 3A : \ 2W \ l`@#: 0x130: F0 B1 41 42 64 40 01 64 80 01 64 C0 01 65 00 01 : ABd@ d d e 0x140: 65 40 01 66 40 02 66 C0 02 67 00 02 67 C0 02 68 : e@ f@ f g g h 0x150: 00 02 68 40 02 69 80 0C 69 C0 01 6A 00 01 66 80 : h@ i i j f 0x160: 02 6A 80 01 6A C0 01 6B 00 01 6B 40 01 6B 80 01 : j j k k@ k 0x170: 6C 80 01 6C 00 01 5A 0B 03 34 AB 04 1F 82 03 FF : l l Z 4 0x180: FF FF FF 5F 04 00 00 23 3A 83 58 6A 00 FC 0F 67 : _ #: Xj g 0x190: C0 FE C7 65 00 FC 23 68 00 FE CB 69 C0 FC 1B 66 : e #h i f 0x1A0: 40 FE C9 6A C0 FC 29 6B 00 FC 19 6B 80 FC 21 6A : @ j )k k !j 0x1B0: 80 FC 2D 6C 00 FC 25 64 80 FC 15 6B 40 FC 55 65 : -l %d k@ Ue 0x1C0: 40 FC 16 67 00 FE CE 66 80 FE CA 64 40 FC 12 66 : @ g f d@ f 0x1D0: C0 FE D2 6C 80 FC 24 69 80 FD 2C 64 C0 FC 0C 68 : l $i ,d h 0x1E0: 40 : @ ======================================================================== parse_nit:914: transport_stream_id 0x3006 ===================== parse_terrestrial_delivery_system_descriptor ===== len = 11 0x00: 02 EB 6D 04 1F 81 03 FF FF FF FF : m ======================================================================== new transponder: (QAM_64 f = 489833 kHz I999B8C23D0T8G32Y0) parse_nit:914: transport_stream_id 0x5040 ===================== parse_terrestrial_delivery_system_descriptor ===== len = 11 0x00: 02 DF 79 40 1F 81 03 FF FF FF FF : y@ ======================================================================== updating transponder: (QAM_AUTO f = 482000 kHz I999B8C999D999T999G999Y999) to (QAM_64 f = 482000 kHz I999B8C23D0T8G32Y0) parse_nit:914: transport_stream_id 0x6040 ===================== parse_terrestrial_delivery_system_descriptor ===== len = 11 0x00: 03 34 AB 04 1F 82 03 FF FF FF FF : 4 ======================================================================== new transponder: (QAM_64 f = 537833 kHz I999B8C34D0T8G32Y0) *** stack smashing detected ***: /usr/bin/w_scan terminated ======= Backtrace: ========= /lib/libc.so.6(__fortify_fail+0x48)[0xa2ebd8] /lib/libc.so.6(__fortify_fail+0x0)[0xa2eb90] /usr/bin/w_scan[0x8054f98] /usr/bin/w_scan[0x8055015] /usr/bin/w_scan[0x8057208] /lib/libc.so.6(__libc_start_main+0xe6)[0x94da66] /usr/bin/w_scan[0x8048ad1] ======= Memory map: ======== 00913000-00933000 r-xp 00000000 fd:00 135073 /lib/ld-2.10.1.so 00933000-00934000 r--p 0001f000 fd:00 135073 /lib/ld-2.10.1.so 00934000-00935000 rw-p 00020000 fd:00 135073 /lib/ld-2.10.1.so 00937000-00aa2000 r-xp 00000000 fd:00 135074 /lib/libc-2.10.1.so 00aa2000-00aa3000 ---p 0016b000 fd:00 135074 /lib/libc-2.10.1.so 00aa3000-00aa5000 r--p 0016b000 fd:00 135074 /lib/libc-2.10.1.so 00aa5000-00aa6000 rw-p 0016d000 fd:00 135074 /lib/libc-2.10.1.so 00aa6000-00aa9000 rw-p 00aa6000 00:00 0 00f0f000-00f10000 r-xp 00f0f000 00:00 0 [vdso] 057ee000-05818000 r-xp 00000000 fd:00 135808 /lib/libgcc_s-4.4.0-20090506.so.1 05818000-05819000 rw-p 00029000 fd:00 135808 /lib/libgcc_s-4.4.0-20090506.so.1 08048000-0806f000 r-xp 00000000 fd:00 168544 /usr/bin/w_scan 0806f000-08071000 rw-p 00027000 fd:00 168544 /usr/bin/w_scan 08071000-08092000 rw-p 08071000 00:00 0 [heap] b7fea000-b7fec000 rw-p b7fea000 00:00 0 bffeb000-c0000000 rw-p bffeb000 00:00 0 [stack] Program received signal SIGABRT, Aborted. 0x00f0f424 in __kernel_vsyscall () Missing separate debuginfos, use: debuginfo-install libgcc-4.4.0-4.i586 (gdb) bt #0 0x00f0f424 in __kernel_vsyscall () #1 0x009627c1 in *__GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 #2 0x00964092 in *__GI_abort () at abort.c:88 #3 0x009a0dad in __libc_message (do_abort=2, fmt=0xa73ba7 "*** %s ***: %s terminated\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:170 #4 0x00a2ebd8 in *__GI___fortify_fail (msg=0xa73b8f "stack smashing detected") at fortify_fail.c:32 #5 0x00a2eb90 in __stack_chk_fail () at stack_chk_fail.c:29 #6 0x08054f98 in read_filters () at scan.c:1464 #7 0x08055015 in scan_for_other_transponders () at scan.c:1866 #8 0x08057208 in initial_tune (tuning_data=<value optimized out>, frontend_fd=<value optimized out>) at scan.c:2085 #9 network_scan (tuning_data=<value optimized out>, frontend_fd=<value optimized out>) at scan.c:2223 #10 main (tuning_data=<value optimized out>, frontend_fd=<value optimized out>) at scan.c:3042 (gdb) up 6 #6 0x08054f98 in read_filters () at scan.c:1464 1464 } (gdb) info locals s = <value optimized out> i = 2 n = <value optimized out> done = 6 __FUNCTION__ = "read_filters" Yes, this is a 32bit machine. Here are the build logs: http://kojipkgs.fedoraproject.org/packages/w_scan/20090528/2.fc11/data/logs/i586/ Thank you very much for this detailed report. I have forwarded it to the author of w_scan. He thinks he has identified the bug as being a string that is to large for it's buffer. Please test the packages in this koji build and report: http://koji.fedoraproject.org/koji/taskinfo?taskID=1591933 Tested the above package and this now works fine for me. Thanks for looking into this, Felix. w_scan-20090808-1.fc11 has been submitted as an update for Fedora 11. http://admin.fedoraproject.org/updates/w_scan-20090808-1.fc11 w_scan-20090808-1.fc10 has been submitted as an update for Fedora 10. http://admin.fedoraproject.org/updates/w_scan-20090808-1.fc10 w_scan-20090808-1.fc11 has been pushed to the Fedora 11 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update w_scan'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F11/FEDORA-2009-8438 w_scan-20090808-1.fc10 has been pushed to the Fedora 10 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update w_scan'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F10/FEDORA-2009-8446 w_scan-20090808-1.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report. w_scan-20090808-1.fc10 has been pushed to the Fedora 10 stable repository. If problems still persist, please make note of it in this bug report. |