Bug 1268482 - tracker-extract crashes with php-5.2.6RC4/ext/gd/tests/bug37360.gif
Summary: tracker-extract crashes with php-5.2.6RC4/ext/gd/tests/bug37360.gif
Keywords:
Status: CLOSED EOL
Alias: None
Product: Fedora
Classification: Fedora
Component: tracker
Version: 22
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Debarshi Ray
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:741a6852e189fc48b1ed2f72805...
: 1268924 1324186 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-10-02 21:36 UTC by David Strauss
Modified: 2016-08-10 14:02 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2016-07-19 18:05:51 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (55.71 KB, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: cgroup (190 bytes, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: core_backtrace (3.41 KB, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: dso_list (12.33 KB, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: environ (1.92 KB, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: limits (1.29 KB, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: maps (62.79 KB, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: mountinfo (3.80 KB, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: namespaces (85 bytes, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: open_fds (5.10 KB, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: proc_pid_status (1.00 KB, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File: var_log_messages (327 bytes, text/plain)
2015-10-02 21:36 UTC, David Strauss
no flags Details
File that causes the crash (64.11 KB, image/gif)
2015-10-06 10:14 UTC, Debarshi Ray
no flags Details

Description David Strauss 2015-10-02 21:36:32 UTC
Version-Release number of selected component:
tracker-1.4.1-1.fc22

Additional info:
reporter:       libreport-2.6.2
backtrace_rating: 4
cmdline:        /usr/libexec/tracker-extract
crash_function: _g_log_abort
executable:     /usr/libexec/tracker-extract
global_pid:     2735
kernel:         4.1.6-200.fc22.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (7 frames)
 #0 _g_log_abort at gmessages.c:315
 #3 g_malloc at gmem.c:102
 #4 read_metadata at tracker-extract-gif.c:152
 #5 tracker_extract_get_metadata at tracker-extract-gif.c:683
 #6 get_file_metadata at tracker-extract.c:327
 #7 get_metadata at tracker-extract.c:527
 #8 dispatch_task_cb at tracker-extract.c:646

Comment 1 David Strauss 2015-10-02 21:36:35 UTC
Created attachment 1079524 [details]
File: backtrace

Comment 2 David Strauss 2015-10-02 21:36:36 UTC
Created attachment 1079525 [details]
File: cgroup

Comment 3 David Strauss 2015-10-02 21:36:37 UTC
Created attachment 1079526 [details]
File: core_backtrace

Comment 4 David Strauss 2015-10-02 21:36:38 UTC
Created attachment 1079527 [details]
File: dso_list

Comment 5 David Strauss 2015-10-02 21:36:39 UTC
Created attachment 1079528 [details]
File: environ

Comment 6 David Strauss 2015-10-02 21:36:39 UTC
Created attachment 1079529 [details]
File: limits

Comment 7 David Strauss 2015-10-02 21:36:40 UTC
Created attachment 1079530 [details]
File: maps

Comment 8 David Strauss 2015-10-02 21:36:41 UTC
Created attachment 1079531 [details]
File: mountinfo

Comment 9 David Strauss 2015-10-02 21:36:42 UTC
Created attachment 1079532 [details]
File: namespaces

Comment 10 David Strauss 2015-10-02 21:36:43 UTC
Created attachment 1079533 [details]
File: open_fds

Comment 11 David Strauss 2015-10-02 21:36:44 UTC
Created attachment 1079534 [details]
File: proc_pid_status

Comment 12 David Strauss 2015-10-02 21:36:45 UTC
Created attachment 1079535 [details]
File: var_log_messages

Comment 13 Debarshi Ray 2015-10-06 09:56:50 UTC
*** Bug 1268924 has been marked as a duplicate of this bug. ***

Comment 14 Debarshi Ray 2015-10-06 10:05:02 UTC
Thread 1 (Thread 0x7f5f65d03880 (LWP 2735)):
#0  0x00007f5f6413bd3b in _g_log_abort (breakpoint=1) at gmessages.c:315
No locals.
#1  g_logv (log_domain=0x7f5f641a212e "GLib", log_level=G_LOG_LEVEL_ERROR, format=<optimized out>, args=args@entry=0x7ffdafe4d9a0) at gmessages.c:1041
        domain = 0x0
        data = 0x0
        depth = 1
        log_func = 0x7f5f65055d90 <tracker_log_handler>
        domain_fatal_mask = <optimized out>
        masquerade_fatal = 0
        test_level = <optimized out>
        was_fatal = <optimized out>
        was_recursion = <optimized out>
        msg = 0x7f5ef80008c0 "gmem.c:103: failed to allocate 18446744073709420545 bytes"
        msg_alloc = 0x7f5ef80008c0 "gmem.c:103: failed to allocate 18446744073709420545 bytes"
        i = 2

Wow: "gmem.c:103: failed to allocate 18446744073709420545 bytes" !

#2  0x00007f5f6413beaf in g_log (log_domain=log_domain@entry=0x7f5f641a212e "GLib", log_level=log_level@entry=G_LOG_LEVEL_ERROR, format=format@entry=0x7f5f641ab6f0 "%s: failed to allocate %lu bytes") at gmessages.c:1079
        args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffdafe4da80, reg_save_area = 0x7ffdafe4d9c0}}
#3  0x00007f5f6413a6ac in g_malloc (n_bytes=n_bytes@entry=18446744073709420545) at gmem.c:102
        mem = <optimized out>
#4  0x00007f5f2712a617 in read_metadata (graph=0x2027ea0 "urn:uuid:472ed0cc-40ff-4e37-9c0c-062d78656540", uri=0x26f8e90 "file:///home/straussd/Downloads/php-5.5.29/ext/gd/tests/bug37360.gif", gifFile=0x40db240, where=0x2060660, metadata=0x7f5f1c001460, preupdate=0x7f5f0c001f20) at tracker-extract-gif.c:152
        ExtData = 0x0
        ExtCode = 249
        extBlock = {byteCount = 0, bytes = 0x0}
        frameheight = 65535
        framewidth = 65535
        xd = 0x0
        keywords = <optimized out>
        status = <optimized out>
        RecordType = IMAGE_DESC_RECORD_TYPE
        framedata = <optimized out>
        i = <optimized out>
        gd = {width = 0xfffe0001 <error: Cannot access memory at address 0xfffe0001>, height = <optimized out>, comment = 0x0}
#5  tracker_extract_get_metadata (info=0x40f34f0) at tracker-extract-gif.c:683
        preupdate = 0x7f5f0c001f20
        metadata = 0x7f5f1c001460
        size = <optimized out>
        gifFile = 0x40db240
        where = 0x2060660
        graph = 0x2027ea0 "urn:uuid:472ed0cc-40ff-4e37-9c0c-062d78656540"
        filename = <optimized out>
        uri = 0x26f8e90 "file:///home/straussd/Downloads/php-5.5.29/ext/gd/tests/bug37360.gif"
        file = <optimized out>
        fd = <optimized out>
#6  0x000000000040b274 in get_file_metadata (task=task@entry=0x433d000, info_out=info_out@entry=0x7ffdafe4dba0) at tracker-extract.c:327
        statements = <optimized out>
        info = 0x40f34f0
        file = <optimized out>
        mime_used = 0x39e6010 "image/gif"
        items = 0
#7  0x000000000040b3b3 in get_metadata (task=task@entry=0x433d000) at tracker-extract.c:527
        info = 0x0
#8  0x000000000040b6c8 in dispatch_task_cb (task=0x433d000) at tracker-extract.c:646
        thread_awareness = TRACKER_MODULE_MAIN_THREAD
        priv = 0x1cc6810
        error = 0x0
        module = 0x1f541d0
#9  0x00007f5f64134a8a in g_main_dispatch (context=0x1cc7d80) at gmain.c:3122
        dispatch = 0x7f5f64131530 <g_idle_dispatch>
        prev_source = 0x0
        was_in_call = 0
        user_data = 0x433d000
        callback = 0x40b420 <dispatch_task_cb>
        cb_funcs = 0x7f5f644238a0 <g_source_callback_funcs>
        cb_data = 0x2e745f0
        need_destroy = <optimized out>
        source = 0x1fc1d90
        current = 0x1cdb630
        i = 0
#10 g_main_context_dispatch (context=context@entry=0x1cc7d80) at gmain.c:3737
No locals.
#11 0x00007f5f64134e20 in g_main_context_iterate (context=0x1cc7d80, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3808
        max_priority = 200
        timeout = 0
        some_ready = 1
        nfds = <optimized out>
        allocated_nfds = 1
        fds = 0x1e45900
#12 0x00007f5f64135142 in g_main_loop_run (loop=0x1e46ca0) at gmain.c:4002
        __func__ = "g_main_loop_run"
#13 0x0000000000409c94 in main (argc=1, argv=0x7ffdafe4de78) at tracker-main.c:388
        context = <optimized out>
        error = 0x0
        decorator = 0x1d00150
        controller = 0x7f5f50015260
        log_filename = 0x0
        my_main_loop = <optimized out>

Comment 15 Debarshi Ray 2015-10-06 10:07:54 UTC
Looking at the URIs in the backtrace, the file causing this should be easy to obtain:
file:///home/straussd/Downloads/php-5.5.29/ext/gd/tests/bug37360.gif
file:///home/pawel/Documents/Software/Programming_Lang/php/php-5.2.6RC4/ext/gd/tests/bug37360.gif

Comment 16 Debarshi Ray 2015-10-06 10:14:51 UTC
Created attachment 1080196 [details]
File that causes the crash

Comment 17 lejeczek 2015-12-25 16:47:12 UTC
Another user experienced a similar problem:

that I think was VLC when in gnome@Wayland session.

reporter:       libreport-2.6.3
backtrace_rating: 4
cmdline:        /usr/libexec/tracker-extract
crash_function: _g_log_abort
executable:     /usr/libexec/tracker-extract
global_pid:     32500
kernel:         4.4.0-0.rc5.git0.1.fc24.x86_64
package:        tracker-1.6.1-1.fc23
reason:         tracker-extract killed by SIGTRAP
runlevel:       N 5
type:           CCpp
uid:            1000

Comment 18 Debarshi Ray 2016-06-15 14:56:44 UTC
*** Bug 1324186 has been marked as a duplicate of this bug. ***

Comment 19 Fedora End Of Life 2016-07-19 18:05:51 UTC
Fedora 22 changed to end-of-life (EOL) status on 2016-07-19. Fedora 22 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.

Comment 20 lejeczek 2016-08-10 14:02:37 UTC
Similar problem has been detected:

Wayland? maybe

reporter:       libreport-2.7.2
backtrace_rating: 4
cmdline:        /usr/libexec/tracker-extract
crash_function: _g_log_abort
executable:     /usr/libexec/tracker-extract
global_pid:     2068
kernel:         4.8.0-0.rc0.git3.1.fc26.x86_64
package:        tracker-1.8.0-1.fc24
pkg_fingerprint: 73BD E983 81B4 6521
pkg_vendor:     Fedora Project
reason:         tracker-extract killed by SIGTRAP
runlevel:       N 5
type:           CCpp
uid:            1000


Note You need to log in before you can comment on or make changes to this bug.