[Pkg-utopia-maintainers] Bug#574697: dbus-x11: dbus segfaults when closing ppp connections using network-manager

Paul Collins paul at ondioline.org
Sun Mar 21 04:29:37 UTC 2010


Hi,

Since upgrading from dbus 1.2.20-2 to 1.2.22-1 I've also had
problems with the system dbus-daemon crashing.  In my case I can
trigger it easily by toggling Bluetooth on and off with the
Bluetooth applet's menu.  Here's the backtrace I gathered:

(gdb) bt full
#0  0x00007f4eeacb9411 in _IO_vfprintf_internal (s=0x7f4eedcb4aa0, format=<value optimized out>, ap=0x7fff367bf8a0) at vfprintf.c:1601
        len = <value optimized out>
        string_malloced = <value optimized out>
        step0_jumps = {0, 3429, 3508, 6312, 6398, 2688, 2781, 5665, 3688, 3864, 4093, 1453, 1532, 1621, 1851, 1898, 3673, 3038, 5571, 4996, 6074, -557, 4172, 
          4261, 6033, -2786, 5293, 1710, 1779, 5586}
        space = 0
        is_short = 0
        use_outdigits = 0
        step1_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, 3864, 4093, 1453, 1532, 1621, 1851, 1898, 3673, 3038, 5571, 4996, 6074, -557, 4172, 4261, 6033, -2786, 5293, 
          1710, 1779, 0}
        group = 0
        prec = <value optimized out>
        step2_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 4093, 1453, 1532, 1621, 1851, 1898, 3673, 3038, 5571, 4996, 6074, -557, 4172, 4261, 6033, -2786, 5293, 
          1710, 1779, 0}
        string = 0x7fc07ffffff7 <Address 0x7fc07ffffff7 out of bounds>
        left = 0
        is_long_double = 0
        width = <value optimized out>
        step3a_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 5944, 0, 0, 0, 1851, 1898, 3673, 3038, 5571, 0, 0, 0, 0, 4261, 0, 0, 0, 0, 0, 0}
        alt = 0
        showsign = 0
        is_long = 0
        is_char = 0
        pad = <value optimized out>
        step3b_jumps = {0 <repeats 11 times>, 1532, 0, 0, 1851, 1898, 3673, 3038, 5571, 4996, 6074, -557, 4172, 4261, 6033, -2786, 5293, 0, 0, 0}
        step4_jumps = {0 <repeats 14 times>, 1851, 1898, 3673, 3038, 5571, 4996, 6074, -557, 4172, 4261, 6033, -2786, 5293, 0, 0, 0}
        is_negative = <value optimized out>
        base = 0
        the_arg = {pa_wchar = 8 L'\b', pa_int = 8, pa_long_int = 8, pa_long_long_int = 8, pa_u_int = 8, pa_u_long_int = 8, pa_u_long_long_int = 8, 
          pa_double = 3.9525251667299724e-323, pa_long_double = <invalid float value>, pa_string = 0x8 <Address 0x8 out of bounds>, 
          pa_wstring = 0x8 <Address 0x8 out of bounds>, pa_pointer = 0x8, pa_user = 0x8}
        spec = 115 's'
        _buffer = {__routine = 0, __arg = 0x0, __canceltype = 3, __prev = 0x2}
        _avail = 0
        thousands_sep = 0x0
        grouping = 0xffffffffffffffff <Address 0xffffffffffffffff out of bounds>
        done = 0
        f = 0x7f4eeba9d9ec "s"
        lead_str_end = 0x7f4eeba9d9eb "%s"
        work_buffer = "\377\377\377\377\377\377\377\377", '\000' <repeats 12 times>"\355, \020\000\000\000\000\000\000\000\000\000\000\377\377\377\377\377\177\000\000 \366{6\377\177\000\000\217۩\353", '\000' <repeats 20 times>, " \366{6\377\177\000\000\217۩\353\t", '\000' <repeats 19 times>"\240, \363{6\000\000\000\000\000\000\000\000\377\177\000\000\000\000\000\000\000\000\000\000\300\362{6\377\177\000\000l\000\000\000\000\000\000\000\377\377\377\377\377\177\000\000\270\366{6\377\177\000\000\217۩\353N\177\000\000XR\247\353\000\000\000\000\377\377\377\377\377\177\000\000\330\366{6\377\177\000\000\217۩\353N\177\000\000\000\005|6\000\000\000\000 \363{6\377\177\000\000\\X\247\353N\177\000\000\000U\247\353N\177\000\000@\365{6\377\177\000\000 \364{6\377\177\000\000l\000\000\000\000\000\000\000\000\365{6\377\177\000\000u\201\247\353N\177\000\000 \365{6\377\177\000\000(\365{6\377\177\000\000\335\060\307\355N\177\000\000\207\060\307"...
        workstart = 0x0
        workend = 0x7fff367bf608 ""
        ap_save = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fff367bf980, reg_save_area = 0x7fff367bf8c0}}
        nspecs_done = <value optimized out>
        save_errno = <value optimized out>
        readonly_format = 0
        jump_table = "\001\000\000\004\000\016\000\006\000\000\a\002\000\003\t\000\005\b\b\b\b\b\b\b\b\b\000\000\000\000\000\000\000\032\000\031\000\023\023\023\000\035\000\000\f\000\000\000\000\000\000\025\000\000\000\000\022\000\r\000\000\000\000\000\000\032\000\024\017\023\023\023\n\017\034\000\v\030\027\021\026\f\000\025\033\020\000\000\022\000\r"
        __PRETTY_FUNCTION__ = "_IO_vfprintf_internal"
#1  0x00007f4eead3bac0 in *__GI___vsyslog_chk (pri=<value optimized out>, flag=-1, fmt=<value optimized out>, ap=0x7fff367bf8a0) at ../misc/syslog.c:222
        now_tm = {tm_sec = 20, tm_min = 22, tm_hour = 17, tm_mday = 21, tm_mon = 2, tm_year = 110, tm_wday = 0, tm_yday = 79, tm_isdst = 1, tm_gmtoff = 46800, 
          tm_zone = 0x7f4eedcb1520 "NZDT"}
        now = 1269145340
        fd = <value optimized out>
        f = 0x7f4eedcb4aa0
        buf = 0x0
        bufsize = 0
        msgoff = <value optimized out>
        saved_errno = 11
        failbuf = "\001\000\000\000N\177\000\000\000\000\000\000\000\000\000\000x۩\353N\177\000\000\200\354\307\352N"
        clarg = {buf = 0x7f4eedcb1948, oldaction = 0x7f4eedc72620}
#2  0x00007f4eeba931b8 in _dbus_system_logv (severity=DBUS_SYSTEM_LOG_SECURITY, msg=0x7f4eeba9d9eb "%s", args=0x7fff367bf8a0) at dbus-sysdeps-util-unix.c:421
        flags = 37
#3  0x00007f4eeba9315f in _dbus_system_log (severity=DBUS_SYSTEM_LOG_SECURITY, msg=0x7f4eeba9d9eb "%s") at dbus-sysdeps-util-unix.c:388
        args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff367bf980, reg_save_area = 0x7fff367bf8c0}}
#4  0x00007f4eeba59103 in bus_context_log (context=0x7f4eedc1c0a0, severity=DBUS_SYSTEM_LOG_SECURITY, 
    msg=0x7f4eeba9db78 "Rejected send message, %d matched rules; type=\"%s\", sender=\"%s\" (%s) interface=\"%s\" member=\"%s\" error name=\"%s\" requested_reply=%d destination=\"%s\" (%s))") at bus.c:1199
        full_msg = {dummy1 = 0x7f4eedcb2f90, dummy2 = 295, dummy3 = 303, dummy4 = 2147483639, dummy5 = 0, dummy6 = 0, dummy7 = 0, dummy8 = 0}
        args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fff367bfaf8, reg_save_area = 0x7fff367bfa00}}
#5  0x00007f4eeba59894 in bus_context_check_security_policy (context=0x7f4eedc1c0a0, transaction=0x7f4eedcb1380, sender=0x7f4eedc6ed70, 
    addressed_recipient=0x7f4eedc22ca0, proposed_recipient=0x7f4eedc22ca0, message=0x7f4eedcb13f0, error=0x7fff367bfc30) at bus.c:1450
        msg = 0x7f4eeba9db78 "Rejected send message, %d matched rules; type=\"%s\", sender=\"%s\" (%s) interface=\"%s\" member=\"%s\" error name=\"%s\" requested_reply=%d destination=\"%s\" (%s))"
        dest = 0x7f4eedcb1948 ":1.1"
        sender_policy = 0x7f4eedc6e710
        recipient_policy = 0x7f4eedc24060
        toggles = 2
        log = 0
        type = 3
        requested_reply = 0
        sender_name = 0x7f4eedc6a1a0 ":1.19"
        sender_loginfo = 0x7f4eedc72620 "uid=1000 pid=12192 comm=\"bluetooth-applet"
        proposed_recipient_loginfo = 0x7f4eedc27180 "uid=0 pid=11794 comm=\"/usr/sbin/bluetoothd"
#6  0x00007f4eeba64166 in bus_dispatch (connection=0x7f4eedc6ed70, message=0x7f4eedcb13f0) at dispatch.c:293
        service_string = {dummy1 = 0x7f4eedcb1948, dummy2 = 4, dummy3 = 12, dummy4 = 5, dummy5 = 1, dummy6 = 1, dummy7 = 0, dummy8 = 0}
        service = 0x7f4eedc21670
        registry = 0x7f4eedc1c030
        sender = 0x7f4eedc6a1a0 ":1.19"
        service_name = 0x7f4eedcb1948 ":1.1"
        error = {name = 0x7f4eedcb2150 "org.freedesktop.DBus.Error.AccessDenied", 
          message = 0x7f4eedcb17c0 "Rejected send message, 2 matched rules; type=\"error\", sender=\":1.19\" (uid=1000 pid=12192 comm=\"bluetooth-applet) interface=\"(unset)\" member=\"(unset)\" error name=\"org.freedesktop.DBus.Error.UnknownMeth"..., dummy1 = 0, dummy2 = 0, dummy3 = 0, dummy4 = 0, dummy5 = 0, 
          padding1 = 0x0}
        transaction = 0x7f4eedcb1380
        context = 0x7f4eedc1c0a0
        result = DBUS_HANDLER_RESULT_HANDLED
        addressed_recipient = 0x7f4eedc22ca0
#7  0x00007f4eeba64309 in bus_dispatch_message_filter (connection=0x7f4eedc6ed70, message=0x7f4eedcb13f0, user_data=0x0) at dispatch.c:374
No locals.
#8  0x00007f4eeba720ce in dbus_connection_dispatch (connection=0x7f4eedc6ed70) at dbus-connection.c:4451
        filter = 0x7f4eedc6ef50
        next = 0x0
        message = 0x7f4eedcb13f0
        link = 0x7f4eedc82b70
        filter_list_copy = 0x7f4eedc82b70
        message_link = 0x7f4eedc81880
        result = DBUS_HANDLER_RESULT_NOT_YET_HANDLED
        pending = 0x0
        reply_serial = 44
        status = DBUS_DISPATCH_DATA_REMAINS
        __FUNCTION__ = "dbus_connection_dispatch"
#9  0x00007f4eeba8fe58 in _dbus_loop_dispatch (loop=0x7f4eedc1c1a0) at dbus-mainloop.c:482
        status = 32590
        connection = 0x7f4eedc6ed70
#10 0x00007f4eeba90738 in _dbus_loop_iterate (loop=0x7f4eedc1c1a0, block=1) at dbus-mainloop.c:848
        retval = 1
        fds = 0x7f4eedcb4aa0
        stack_fds = {{fd = 3, events = 1, revents = 1}, {fd = 5, events = 1, revents = 0}, {fd = 6, events = 1, revents = 0}, {fd = 8, events = 1, 
            revents = 0}, {fd = 9, events = 1, revents = 0}, {fd = 10, events = 1, revents = 0}, {fd = 11, events = 1, revents = 0}, {fd = 13, events = 1, 
            revents = 0}, {fd = 12, events = 1, revents = 0}, {fd = 15, events = 1, revents = 0}, {fd = 17, events = 1, revents = 0}, {fd = 14, events = 1, 
            revents = 0}, {fd = 18, events = 1, revents = 0}, {fd = 20, events = 1, revents = 0}, {fd = 16, events = 1, revents = 0}, {fd = 19, events = 1, 
            revents = 0}, {fd = 21, events = 1, revents = 0}, {fd = 23, events = 1, revents = 0}, {fd = 22, events = 1, revents = 0}, {fd = 25, events = 1, 
            revents = 0}, {fd = 27, events = 1, revents = 0}, {fd = 28, events = 1, revents = 0}, {fd = 24, events = 1, revents = 0}, {fd = 26, events = 1, 
            revents = 0}, {fd = 29, events = 1, revents = 0}, {fd = 30, events = 1, revents = 0}, {fd = 31, events = 1, revents = 0}, {fd = 32, events = 1, 
            revents = 0}, {fd = 33, events = 1, revents = 0}, {fd = 34, events = 1, revents = 0}, {fd = 36, events = 1, revents = 0}, {fd = 38, events = 1, 
            revents = 0}, {fd = 35, events = 1, revents = 0}, {fd = 38, events = 1, revents = 1}, {fd = -341383259, events = 32590, revents = 0}, {
            fd = 67108864, events = 0, revents = 0}, {fd = -350361200, events = 32590, revents = 0}, {fd = 0, events = 0, revents = 0} <repeats 16 times>, {
            fd = -341524480, events = 32590, revents = 0}, {fd = 57, events = 0, revents = 0}, {fd = -341232933, events = 32590, revents = 0}, {
            fd = -341383259, events = 32590, revents = 0}, {fd = -341284272, events = 15, revents = 0}, {fd = 0, events = 0, revents = 0}, {fd = 0, 
            events = 0, revents = 0}, {fd = 0, events = 0, revents = 0}, {fd = 0, events = 0, revents = 0}, {fd = 0, events = 0, revents = 0}, {fd = 0, 
            events = 0, revents = 0}}
        n_fds = 34
        watches_for_fds = 0x7f4eedcb4cb0
        stack_watches_for_fds = {0x7f4eedc328a0, 0x7f4eedc2f190, 0x7f4eedc20090, 0x7f4eedc1d190, 0x7f4eedc22e60, 0x7f4eedc28130, 0x7f4eedc3a3a0, 
          0x7f4eedc3d9e0, 0x7f4eedc47c60, 0x7f4eedc47380, 0x7f4eedc457a0, 0x7f4eedc44600, 0x7f4eedc4eda0, 0x7f4eedc5c670, 0x7f4eedc5f370, 0x7f4eedc625a0, 
          0x7f4eedc65c20, 0x7f4eedc68590, 0x7f4eedc6ab60, 0x7f4eedc6d130, 0x7f4eedc6ef10, 0x7f4eedc6f800, 0x7f4eedc71010, 0x7f4eedc8d310, 0x7f4eedc905b0, 
          0x7f4eedc90f60, 0x7f4eedc923c0, 0x7f4eedc97460, 0x7f4eedc94180, 0x7f4eedc8fce0, 0x7f4eedcab970, 0x7f4eedcad920, 0x7f4eedcab470, 0x7f4eedcad920, 0x0, 
          0x7fff367bff80, 0x0, 0x7f4eeba31630, 0x7fff367c00d0, 0x8, 0x3, 0x7f4eeb83a07d, 0x6, 0x7fff367c00e8, 0x7f4eeb1d0a78, 0x0, 0x7fff367bff80, 
          0x7f4eeb1d0e10, 0x0, 0x7f4eeba316b8, 0x7f4eeba32000, 0x7f4eeba50e7c, 0x7f4eeb1d2b68, 0x7f4eeba50140, 0x100000000, 0x100000053, 0xffffffffffffffff, 
          0x7f4eeba4c358, 0x7fff367c0120, 0x7f4eeba316b8, 0x0, 0x7fff367c0148, 0xf375846, 0x7f4eeb83a3b9}
        i = 34
        link = 0x0
        n_ready = 1
        initial_serial = 113
        timeout = -1
        oom_watch_pending = 0
        orig_depth = 1
#11 0x00007f4eeba9079c in _dbus_loop_run (loop=0x7f4eedc1c1a0) at dbus-mainloop.c:874
        our_exit_depth = 0
#12 0x00007f4eeba6f4c0 in main (argc=2, argv=0x7fff367c0508) at main.c:476
        error = {name = 0x0, message = 0x0, dummy1 = 1, dummy2 = 0, dummy3 = 0, dummy4 = 0, dummy5 = 0, padding1 = 0x7f4eeba9d0c0}
        config_file = {dummy1 = 0x7f4eedc1c070, dummy2 = 23, dummy3 = 31, dummy4 = 2147483639, dummy5 = 0, dummy6 = 0, dummy7 = 1, dummy8 = 0}
        addr_fd = {dummy1 = 0x7f4eedc1c030, dummy2 = 0, dummy3 = 8, dummy4 = 2147483639, dummy5 = 0, dummy6 = 0, dummy7 = 1, dummy8 = 0}
        pid_fd = {dummy1 = 0x7f4eedc1c050, dummy2 = 0, dummy3 = 8, dummy4 = 2147483639, dummy5 = 0, dummy6 = 0, dummy7 = 1, dummy8 = 0}
        prev_arg = 0x7fff367c0ce0 "--system"
        print_addr_pipe = {fd_or_handle = -1}
        print_pid_pipe = {fd_or_handle = -1}
        i = 2
        print_address = 0
        print_pid = 0
        force_fork = 0


Regards,
-- 
Paul Collins
Wellington, New Zealand

Dag vijandelijk luchtschip de huismeester is dood





More information about the Pkg-utopia-maintainers mailing list