Bug 1758850 - [abrt] python3: __memmove_avx_unaligned(): python3.8 killed by SIGSEGV
Summary: [abrt] python3: __memmove_avx_unaligned(): python3.8 killed by SIGSEGV
Keywords:
Status: CLOSED DUPLICATE of bug 1758737
Alias: None
Product: Fedora
Classification: Fedora
Component: libdnf
Version: rawhide
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lukáš Hrázký
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:612474e4a0575c70734596cdad7...
Depends On: 1758737
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-10-06 08:15 UTC by Mikhail
Modified: 2019-10-08 11:11 UTC (History)
18 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2019-10-08 11:11:11 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (38.10 KB, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
File: core_backtrace (1.93 KB, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
File: cpuinfo (2.29 KB, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
File: dso_list (13.19 KB, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
File: environ (4.61 KB, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
File: exploitable (82 bytes, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
File: limits (1.29 KB, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
File: maps (83.38 KB, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
File: mountinfo (2.60 KB, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
File: open_fds (4.09 KB, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
File: proc_pid_status (1.31 KB, text/plain)
2019-10-06 08:15 UTC, Mikhail
no flags Details
dnf.log (803.88 KB, text/plain)
2019-10-06 15:01 UTC, Mikhail
no flags Details

Description Mikhail 2019-10-06 08:15:07 UTC
Description of problem:
Pyhon crashed when I run command `dnf upgrade --refresh -v --exclude=mutter`

Version-Release number of selected component:
python3-3.8.0~rc1-1.fc32

Additional info:
reporter:       libreport-2.10.1
backtrace_rating: 4
cgroup:         0::/user.slice/user-1000.slice/user/gnome-terminal-server.service
cmdline:        /usr/bin/python3 /usr/bin/dnf upgrade --refresh -v --exclude=mutter
crash_function: __memmove_avx_unaligned
executable:     /usr/bin/python3.8
journald_cursor: s=af85196e12e64a24a411e7dfc5442bbf;i=2be210;b=c4022ea6add5498ea43c164d8284baec;m=6f61a4dfe0;t=59424982718ed;x=8d42724541835a37
kernel:         5.4.0-0.rc0.git6.1.fc32.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            0

Truncated backtrace:
Thread no. 1 (9 frames)
 #0 __memmove_avx_unaligned at ../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:144
 #3 _IO_new_file_xsputn at fileops.c:1269
 #5 _IO_fwrite at libioP.h:948
 #6 log_handler(gchar const*, GLogLevelFlags, gchar const*, gpointer) at /usr/src/debug/libdnf-0.35.5-2.fc32.x86_64/python/hawkey/sack-py.cpp:186
 #9 dnf_sack_set_arch(DnfSack*, gchar const*, GError**) at /usr/src/debug/libdnf-0.35.5-2.fc32.x86_64/libdnf/dnf-sack.cpp:824
 #10 sack_init(_SackObject*, PyObject*, PyObject*) at /usr/src/debug/libdnf-0.35.5-2.fc32.x86_64/python/hawkey/sack-py.cpp:265
 #11 stack_effect at /usr/src/debug/python3-3.8.0
 #13 chain_next at /usr/src/debug/python3-3.8.0
 #14 _PyIO_str_getstate

Comment 1 Mikhail 2019-10-06 08:15:11 UTC
Created attachment 1622898 [details]
File: backtrace

Comment 2 Mikhail 2019-10-06 08:15:12 UTC
Created attachment 1622899 [details]
File: core_backtrace

Comment 3 Mikhail 2019-10-06 08:15:14 UTC
Created attachment 1622900 [details]
File: cpuinfo

Comment 4 Mikhail 2019-10-06 08:15:16 UTC
Created attachment 1622901 [details]
File: dso_list

Comment 5 Mikhail 2019-10-06 08:15:17 UTC
Created attachment 1622902 [details]
File: environ

Comment 6 Mikhail 2019-10-06 08:15:18 UTC
Created attachment 1622903 [details]
File: exploitable

Comment 7 Mikhail 2019-10-06 08:15:20 UTC
Created attachment 1622904 [details]
File: limits

Comment 8 Mikhail 2019-10-06 08:15:22 UTC
Created attachment 1622905 [details]
File: maps

Comment 9 Mikhail 2019-10-06 08:15:24 UTC
Created attachment 1622906 [details]
File: mountinfo

Comment 10 Mikhail 2019-10-06 08:15:26 UTC
Created attachment 1622907 [details]
File: open_fds

Comment 11 Mikhail 2019-10-06 08:15:28 UTC
Created attachment 1622908 [details]
File: proc_pid_status

Comment 12 Miro Hrončok 2019-10-06 12:41:14 UTC
Do you already have the latest version of python3-hawkey?

Comment 13 Mikhail 2019-10-06 15:00:34 UTC
python3-hawkey had version 0.35.5-2.fc32.x86_64 at the time of the crash.

Comment 14 Mikhail 2019-10-06 15:01:03 UTC
Created attachment 1622929 [details]
dnf.log

Comment 15 Miro Hrončok 2019-10-06 18:53:14 UTC
Thanks. Does this happen every time or just once?

Comment 16 Mikhail 2019-10-06 22:23:04 UTC
(In reply to Miro Hrončok from comment #15)
> Thanks. Does this happen every time or just once?

This happened just once, but every time when I see a `Segmentation fault` message while dnf executing I'm afraid that I will have to reinstall the system.

Comment 17 Mikhail 2019-10-07 06:31:31 UTC
In a previous message, I wanted to say that such crashes, even single ones, are not permissible since they can completely break the system.

Comment 18 Miro Hrončok 2019-10-07 09:27:27 UTC
I agree that this is serious. Being unable to update to the fixed version fo packages would however be critical.

This seems like a bug in libdnf, but in case it is in fact related to Python, we are here to help.

Comment 19 Miro Hrončok 2019-10-07 17:33:14 UTC
*** Bug 1759204 has been marked as a duplicate of this bug. ***

Comment 20 Victor Stinner 2019-10-08 10:12:42 UTC
> I agree that this is serious. Being unable to update to the fixed version fo packages would however be critical.

I am not able to reproduce the bug neither on freshly updated Fedora Rawhide.

Versions:

* dnf-4.2.11-2.fc32.noarch
* libsolv-0.7.6-2.fc32.x86_64
* libdnf-0.35.5-2.fc32.x86_64
* python3-3.8.0~rc1-1.fc32.x86_64
* python3-hawkey-0.35.5-2.fc32.x86_64

I tried dnf commands:

  upgrade --refresh -v --exclude=mutter
  reinstall -y git vim
  search mutter

using the following shell commands:

# Regular dnf usage
sudo dnf upgrade --refresh -v --exclude=mutter
sudo dnf reinstall -y git vim
sudo dnf search mutter

# Python in release mode with develoment mode enabled (-X dev)
sudo /usr/bin/python3 -X dev /usr/bin/dnf-3 upgrade --refresh -v --exclude=mutter
sudo /usr/bin/python3 -X dev /usr/bin/dnf-3 reinstall -y git vim
sudo /usr/bin/python3 -X dev /usr/bin/dnf-3 search mutter

# Python in debug mode
sudo /usr/bin/python3-debug /usr/bin/dnf-3 upgrade --refresh -v --exclude=mutter
sudo /usr/bin/python3-debug /usr/bin/dnf-3 reinstall -y git vim
sudo /usr/bin/python3-debug /usr/bin/dnf-3 search mutter

--

It may be a buffer overflow somewhere in a C library. Try maybe the following command as root?

    PYTHONMALLOC=malloc valgrind /usr/bin/python3 /usr/bin/dnf-3 upgrade --refresh -v --exclude=mutter

Comment 21 Victor Stinner 2019-10-08 10:48:29 UTC
>     PYTHONMALLOC=malloc valgrind /usr/bin/python3 /usr/bin/dnf-3 upgrade --refresh -v --exclude=mutter

Valgrind detects the following error:

==1249== Conditional jump or move depends on uninitialised value(s)
==1249==    at 0x4B94073: PyUnicode_Decode (unicodeobject.c:3337)
==1249==    by 0x4B94350: PyUnicode_FromEncodedObject (unicodeobject.c:3220)
==1249==    by 0x4BA1894: unicode_new (unicodeobject.c:15048)
(...)

but this is a false alarm, see https://bugs.python.org/issue38118

It is very unlikely to explain this bug.

Comment 22 Lukáš Hrázký 2019-10-08 11:11:11 UTC
This is almost certainly a duplicate of https://bugzilla.redhat.com/show_bug.cgi?id=1758737. We know what the problem is and will fix it soon.

*** This bug has been marked as a duplicate of bug 1758737 ***


Note You need to log in before you can comment on or make changes to this bug.