[Bug 915626] Re: usb-creator-gtk crashed with SIGSEGV

Dmitrijs Ledkovs launchpad at surgut.co.uk
Fri Jan 11 13:23:42 UTC 2013


** Description changed:

- 1) lsb_release -rd
- Description: Ubuntu 12.10
- Release: 12.10
+ To reproduce:
+ Run usb-creator-gtk under python3-dbg with debug symbols of glib, gtk3, dbus, glib-dbus, gobjectinterspection installed.
  
- 2) apt-cache policy usb-creator-gtk
- usb-creator-gtk:
-   Installed: 0.2.40ubuntu1
-   Candidate: 0.2.40ubuntu1
-   Version table:
-  *** 0.2.40ubuntu1 0
-         500 http://archive.ubuntu.com/ubuntu/ quantal/main i386 Packages
-         100 /var/lib/dpkg/status
+ Traceback:
+ Program received signal SIGSEGV, Segmentation fault.
+ _dbus_watch_invalidate (watch=0x0) at ../../dbus/dbus-watch.c:171
+ 171     ../../dbus/dbus-watch.c: No such file or directory.
  
- 3) What is expected to happen via USB disk formatted FAT32 by gparted, is when one types at a terminal:
- usb-creator-gtk
+ #0  _dbus_watch_invalidate (watch=0x0) at ../../dbus/dbus-watch.c:171
+ No locals.
+ #1  0x00007ffff5dec93d in free_watches (transport=transport at entry=0xf12590) at ../../dbus/dbus-transport-socket.c:83
+         socket_transport = 0xf12590
+ #2  0x00007ffff5dec9a9 in socket_disconnect (transport=0xf12590) at ../../dbus/dbus-transport-socket.c:987
+         socket_transport = 0xf12590
+ #3  0x00007ffff5debd67 in _dbus_transport_disconnect (transport=0xf12590) at ../../dbus/dbus-transport.c:509
+ No locals.
+ #4  _dbus_transport_disconnect (transport=0xf12590) at ../../dbus/dbus-transport.c:500
+ No locals.
+ #5  0x00007ffff5dec595 in _dbus_transport_queue_messages (transport=0xf12590) at ../../dbus/dbus-transport.c:1165
+         status = <optimised out>
+ #6  0x00007ffff5dd48e4 in _dbus_connection_get_dispatch_status_unlocked (connection=0xf152b0) at ../../dbus/dbus-connection.c:4211
+ No locals.
  
- Under Source disk image (.iso) or CD:
- xubuntu-12.04.1-alternate-i386.iso
+ It seems to be that NULL is passed to _dbus_watch_invalidate. And that
+ function does not assert it's input. In the past this caused to crash
+ tomboy (bug #1043887), evalution-data-server (bug #852342) and possible
+ other software (e.g. https://bugzilla.redhat.com/show_bug.cgi?id=553601
+ ).
  
- Under Disk to use:
- SanDisk Cruzer Blade (/dev/sdb1)
+ I'd like to open dbus bug and fix that function in dbus to be more
+ resilient.
  
- click radio button Discard on shutdown, unless you save them elsewhere
- -> click button Make Startup Disk and it does so successfully.
- 
- 4) What happens instead is after a while, a window pops up requesting
- one to type in their credentials. Once complete, it immediately crashes.
- This happens consistently and prevents one from creating a startup disk
- successfully.
- 
- Successfully installed this iso by formatting drive in Windows 7, and
- creating bootable USB disk via unetbootin in Windows 7, hence hardware
- is not faulty.
- 
- sudo lsusb -v
- [CUT]
- Bus 002 Device 005: ID 0781:5567 SanDisk Corp. Cruzer Blade
- Device Descriptor:
-   bLength 18
-   bDescriptorType 1
-   bcdUSB 2.00
-   bDeviceClass 0 (Defined at Interface level)
-   bDeviceSubClass 0
-   bDeviceProtocol 0
-   bMaxPacketSize0 64
-   idVendor 0x0781 SanDisk Corp.
-   idProduct 0x5567 Cruzer Blade
-   bcdDevice 1.00
-   iManufacturer 1 SanDisk
-   iProduct 2 Cruzer Blade
-   iSerial 3 2005355082076CB031B6
-   bNumConfigurations 1
-   Configuration Descriptor:
-     bLength 9
-     bDescriptorType 2
-     wTotalLength 32
-     bNumInterfaces 1
-     bConfigurationValue 1
-     iConfiguration 0
-     bmAttributes 0x80
-       (Bus Powered)
-     MaxPower 200mA
-     Interface Descriptor:
-       bLength 9
-       bDescriptorType 4
-       bInterfaceNumber 0
-       bAlternateSetting 0
-       bNumEndpoints 2
-       bInterfaceClass 8 Mass Storage
-       bInterfaceSubClass 6 SCSI
-       bInterfaceProtocol 80 Bulk-Only
-       iInterface 0
-       Endpoint Descriptor:
-         bLength 7
-         bDescriptorType 5
-         bEndpointAddress 0x81 EP 1 IN
-         bmAttributes 2
-           Transfer Type Bulk
-           Synch Type None
-           Usage Type Data
-         wMaxPacketSize 0x0200 1x 512 bytes
-         bInterval 0
-       Endpoint Descriptor:
-         bLength 7
-         bDescriptorType 5
-         bEndpointAddress 0x02 EP 2 OUT
-         bmAttributes 2
-           Transfer Type Bulk
-           Synch Type None
-           Usage Type Data
-         wMaxPacketSize 0x0200 1x 512 bytes
-         bInterval 1
- Device Qualifier (for other device speed):
-   bLength 10
-   bDescriptorType 6
-   bcdUSB 2.00
-   bDeviceClass 0 (Defined at Interface level)
-   bDeviceSubClass 0
-   bDeviceProtocol 0
-   bMaxPacketSize0 64
-   bNumConfigurations 1
- Device Status: 0x0000
-   (Bus Powered)
- 
- ProblemType: Crash
- DistroRelease: Ubuntu 12.04
- Package: usb-creator-gtk 0.2.35.1
- ProcVersionSignature: Ubuntu 3.2.0-8.15-generic 3.2.0
- Uname: Linux 3.2.0-8-generic x86_64
- ApportVersion: 1.90-0ubuntu1
- Architecture: amd64
- Date: Thu Jan 12 12:05:13 2012
- ExecutablePath: /usr/bin/usb-creator-gtk
- InstallationMedia: Xubuntu 12.04 "Precise Pangolin" - Alpha amd64 (20120109)
- InterpreterPath: /usr/bin/python2.7
- ProcCmdline: /usr/bin/python /usr/bin/usb-creator-gtk
- ProcEnviron:
-  PATH=(custom, no user)
-  LANG=en_US.UTF-8
-  SHELL=/bin/bash
- SegvAnalysis:
-  Segfault happened at: 0x7f4b135fe6c0:	movl   $0xffffffff,0x4(%rdi)
-  PC (0x7f4b135fe6c0) ok
-  source "$0xffffffff" ok
-  destination "0x4(%rdi)" (0x00000004) not located in a known VMA region (needed writable region)!
- SegvReason: writing NULL VMA
- Signal: 11
- SourcePackage: usb-creator
- StacktraceTop:
-  ?? () from /lib/x86_64-linux-gnu/libdbus-1.so.3
-  ?? () from /lib/x86_64-linux-gnu/libdbus-1.so.3
-  ?? () from /lib/x86_64-linux-gnu/libdbus-1.so.3
-  ?? () from /lib/x86_64-linux-gnu/libdbus-1.so.3
-  ?? () from /lib/x86_64-linux-gnu/libdbus-1.so.3
- Title: usb-creator-gtk crashed with SIGSEGV
- UpgradeStatus: No upgrade log present (probably fresh install)
- UserGroups:
+ Attaching full gdb tracelog.

** Also affects: dbus (Ubuntu)
   Importance: Undecided
       Status: New

** Summary changed:

- usb-creator-gtk crashed with SIGSEGV
+ usb-creator-gtk crashed with SIGSEGV in _dbus_watch_invalidate

** Changed in: dbus (Ubuntu)
       Status: New => Confirmed

** Changed in: dbus (Ubuntu Quantal)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to udisks in Ubuntu.
https://bugs.launchpad.net/bugs/915626

Title:
  usb-creator-gtk crashed with SIGSEGV in _dbus_watch_invalidate

Status in “dbus” package in Ubuntu:
  Confirmed
Status in “udisks” package in Ubuntu:
  Confirmed
Status in “usb-creator” package in Ubuntu:
  In Progress
Status in “dbus” source package in Quantal:
  Confirmed
Status in “udisks” source package in Quantal:
  Confirmed
Status in “usb-creator” source package in Quantal:
  Triaged

Bug description:
  To reproduce:
  Run usb-creator-gtk under python3-dbg with debug symbols of glib, gtk3, dbus, glib-dbus, gobjectinterspection installed.

  Traceback:
  Program received signal SIGSEGV, Segmentation fault.
  _dbus_watch_invalidate (watch=0x0) at ../../dbus/dbus-watch.c:171
  171     ../../dbus/dbus-watch.c: No such file or directory.

  #0  _dbus_watch_invalidate (watch=0x0) at ../../dbus/dbus-watch.c:171
  No locals.
  #1  0x00007ffff5dec93d in free_watches (transport=transport at entry=0xf12590) at ../../dbus/dbus-transport-socket.c:83
          socket_transport = 0xf12590
  #2  0x00007ffff5dec9a9 in socket_disconnect (transport=0xf12590) at ../../dbus/dbus-transport-socket.c:987
          socket_transport = 0xf12590
  #3  0x00007ffff5debd67 in _dbus_transport_disconnect (transport=0xf12590) at ../../dbus/dbus-transport.c:509
  No locals.
  #4  _dbus_transport_disconnect (transport=0xf12590) at ../../dbus/dbus-transport.c:500
  No locals.
  #5  0x00007ffff5dec595 in _dbus_transport_queue_messages (transport=0xf12590) at ../../dbus/dbus-transport.c:1165
          status = <optimised out>
  #6  0x00007ffff5dd48e4 in _dbus_connection_get_dispatch_status_unlocked (connection=0xf152b0) at ../../dbus/dbus-connection.c:4211
  No locals.

  It seems to be that NULL is passed to _dbus_watch_invalidate. And that
  function does not assert it's input. In the past this caused to crash
  tomboy (bug #1043887), evalution-data-server (bug #852342) and
  possible other software (e.g.
  https://bugzilla.redhat.com/show_bug.cgi?id=553601 ).

  I'd like to open dbus bug and fix that function in dbus to be more
  resilient.

  Attaching full gdb tracelog.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dbus/+bug/915626/+subscriptions




More information about the foundations-bugs mailing list