Bug 995611

Summary: [abrt] recutils-1.5-5.fc19: rec_db_size: Process /usr/bin/recsel was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: al morris <allinux4>
Component: recutilsAssignee: Daiki Ueno <dueno>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: allinux4, dueno
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:d79df65239f651cf8cf1cca8413cda19b1cf5e9d
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-09-17 02:54:02 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description al morris 2013-08-09 20:19:09 UTC
Version-Release number of selected component:
recutils-1.5-5.fc19

Additional info:
reporter:       libreport-2.1.6
backtrace_rating: 4
cmdline:        recsel -e 'Location = \'loaned\'' -P Title test.rec
crash_function: rec_db_size
executable:     /usr/bin/recsel
kernel:         3.10.4-300.fc19.x86_64
runlevel:       N 5
uid:            1000

Truncated backtrace:
[New LWP 2054]
Core was generated by `recsel -e Location = 'loaned' -P Title test.rec'.
Program terminated with signal 11, Segmentation fault.
#0  rec_db_size (db=db@entry=0x0) at rec-db.c:91
91	  return db->size;

Thread 1 (LWP 2054):
#0  rec_db_size (db=db@entry=0x0) at rec-db.c:91
No locals.
#1  0x0000000000404a27 in recsel_process_data (db=db@entry=0x0) at recsel.c:367
        rset_size = <optimized out>
        rset = <optimized out>
        record = 0x2414500
        n_rset = <optimized out>
        written = <optimized out>
        num_rec = <optimized out>
        writer = 0x2415960
        parse_status = false
        wrote_descriptor = <optimized out>
        iter = {mset = 0x0, list_iter = {vtable = 0x0, list = 0x6, count = 140734853600680, p = 0x0, q = 0x39c146ba9d <_IO_new_fclose+333>, i = 37831936, j = 140734853604277}}
#2  0x0000000000403129 in main (argc=<optimized out>, argv=<optimized out>) at recsel.c:555
        res = 1
        db = 0x0
From                To                  Syms Read   Shared Object Library
0x00007fdee572b210  0x00007fdee5743b3c  Yes         /lib64/librec.so.0
0x00000039c141f410  0x00000039c1561d30  Yes         /lib64/libc.so.6
0x00000039c1000ae0  0x00000039c101ac3a  Yes         /lib64/ld-linux-x86-64.so.2
$1 = 0x0
No symbol "__glib_assert_msg" in current context.
rax            0x2415960	37837152
rbx            0x0	0
rcx            0x0	0
rdx            0x2415960	37837152
rsi            0x39c17b9788	248059238280
rdi            0x0	0
rbp            0x1	0x1
rsp            0x7fff62f4d3c8	0x7fff62f4d3c8
r8             0x1	1
r9             0x3	3
r10            0x7fff62f4d190	140734853599632
r11            0x7fdee572f8b0	140595308984496
r12            0x403148	4206920
r13            0x7fff62f4d5a0	140734853600672
r14            0x0	0
r15            0x0	0
rip            0x7fdee572f8b0	0x7fdee572f8b0 <rec_db_size>
eflags         0x10202	[ IF RF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0
Dump of assembler code for function rec_db_size:
=> 0x00007fdee572f8b0 <+0>:	mov    (%rdi),%eax
   0x00007fdee572f8b2 <+2>:	retq   
End of assembler dump.

Comment 1 al morris 2013-08-09 20:19:12 UTC
Created attachment 784955 [details]
File: backtrace

Comment 2 al morris 2013-08-09 20:19:14 UTC
Created attachment 784956 [details]
File: cgroup

Comment 3 al morris 2013-08-09 20:19:17 UTC
Created attachment 784957 [details]
File: core_backtrace

Comment 4 al morris 2013-08-09 20:19:19 UTC
Created attachment 784958 [details]
File: dso_list

Comment 5 al morris 2013-08-09 20:19:21 UTC
Created attachment 784959 [details]
File: environ

Comment 6 al morris 2013-08-09 20:19:24 UTC
Created attachment 784960 [details]
File: exploitable

Comment 7 al morris 2013-08-09 20:19:26 UTC
Created attachment 784961 [details]
File: limits

Comment 8 al morris 2013-08-09 20:19:28 UTC
Created attachment 784962 [details]
File: maps

Comment 9 al morris 2013-08-09 20:19:30 UTC
Created attachment 784963 [details]
File: open_fds

Comment 10 al morris 2013-08-09 20:19:33 UTC
Created attachment 784964 [details]
File: proc_pid_status

Comment 11 al morris 2013-08-09 20:19:35 UTC
Created attachment 784965 [details]
File: var_log_messages

Comment 12 Daiki Ueno 2013-08-13 16:14:51 UTC
Are you able to provide the test.rec file, or more preferably a minimum subset of it, which can reproduce the problem?  That would be helpful.