Bug 556686

Summary: [abrt] realloc aborts in pycups
Product: [Fedora] Fedora Reporter: jofilho <joflixo>
Component: system-config-printerAssignee: Tim Waugh <twaugh>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 12CC: jpopelka, twaugh
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard: abrt_hash:cd419b908b036d76a9e64767abfcf7993015042d
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-03-29 15:55:13 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace none

Description jofilho 2010-01-19 04:19:20 UTC 
abrt 1.0.3 detected a crash.

How to reproduce
-----
1. config one network printer
2.
3.

Comment: Im trying to config one network printer when the software crash
Attached file: backtrace
cmdline: python /usr/share/system-config-printer/system-config-printer.py
component: system-config-printer
executable: /usr/bin/python
kernel: 2.6.31.9-174.fc12.i686.PAE
package: system-config-printer-1.1.16-8.fc12
rating: 4
reason: Process was terminated by signal 6 (Aborted)
Comment 1 jofilho 2010-01-19 04:19:24 UTC 
Created attachment 385311 [details]
File: backtrace
Comment 2 Tim Waugh 2010-01-19 10:42:20 UTC 
This is crashing in the code that does the memory handling for the list of Connection objects.

#4  0x002be751 in malloc_printerr (action=<value optimized out>, 
    str=<value optimized out>, ptr=<value optimized out>) at malloc.c:6264
        buf = "08adb7c8"
        cp = <value optimized out>
...
#7  0x00dec0fd in Connection_init (self=<value optimized out>, 
    args=<value optimized out>, kwds=<value optimized out>)
    at cupsconnection.c:212
        old_array = 0x8adb7c8
        host = 0xb37d25d4 "/var/run/cups/cups.sock"
        port = 631
        encryption = 0
        kwlist = {0xdfb63f "host", 0xdfb644 "port", 0xdfb649 "encryption", 
          0x0}

So the malloc buffer in question is 'old_array' == 'Connections'.

Unfortunately we don't get to see the error message that realloc() wrote, but whatever it was it seems to be some sort of heap corruption.
Comment 3 Tim Waugh 2010-03-29 15:55:13 UTC 
More than likely a duplicate of bug #567386.

*** This bug has been marked as a duplicate of bug 567386 ***