Bug 556686 - [abrt] realloc aborts in pycups
Summary: [abrt] realloc aborts in pycups
Keywords:
Status: CLOSED DUPLICATE of bug 567386
Alias: None
Product: Fedora
Classification: Fedora
Component: system-config-printer
Version: 12
Hardware: i686
OS: Linux
low
medium
Target Milestone: ---
Assignee: Tim Waugh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:cd419b908b036d76a9e64767abf...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-01-19 04:19 UTC by jofilho
Modified: 2010-03-29 15:55 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-03-29 15:55:13 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (58.87 KB, text/plain)
2010-01-19 04:19 UTC, jofilho
no flags Details

Description jofilho 2010-01-19 04:19:20 UTC
abrt 1.0.3 detected a crash.

How to reproduce
-----
1. config one network printer
2.
3.

Comment: Im trying to config one network printer when the software crash
Attached file: backtrace
cmdline: python /usr/share/system-config-printer/system-config-printer.py
component: system-config-printer
executable: /usr/bin/python
kernel: 2.6.31.9-174.fc12.i686.PAE
package: system-config-printer-1.1.16-8.fc12
rating: 4
reason: Process was terminated by signal 6 (Aborted)

Comment 1 jofilho 2010-01-19 04:19:24 UTC
Created attachment 385311 [details]
File: backtrace

Comment 2 Tim Waugh 2010-01-19 10:42:20 UTC
This is crashing in the code that does the memory handling for the list of Connection objects.

#4  0x002be751 in malloc_printerr (action=<value optimized out>, 
    str=<value optimized out>, ptr=<value optimized out>) at malloc.c:6264
        buf = "08adb7c8"
        cp = <value optimized out>
...
#7  0x00dec0fd in Connection_init (self=<value optimized out>, 
    args=<value optimized out>, kwds=<value optimized out>)
    at cupsconnection.c:212
        old_array = 0x8adb7c8
        host = 0xb37d25d4 "/var/run/cups/cups.sock"
        port = 631
        encryption = 0
        kwlist = {0xdfb63f "host", 0xdfb644 "port", 0xdfb649 "encryption", 
          0x0}

So the malloc buffer in question is 'old_array' == 'Connections'.

Unfortunately we don't get to see the error message that realloc() wrote, but whatever it was it seems to be some sort of heap corruption.

Comment 3 Tim Waugh 2010-03-29 15:55:13 UTC
More than likely a duplicate of bug #567386.

*** This bug has been marked as a duplicate of bug 567386 ***


Note You need to log in before you can comment on or make changes to this bug.