[haiku-bugs] [Haiku] #15099: Crash in FuseSMB when scanning for shares.

  • From: "Haiku" <trac@xxxxxxxxxxxx>
  • To: undisclosed-recipients: ;
  • Date: Sun, 02 Jun 2019 15:08:30 -0000

#15099: Crash in FuseSMB when scanning for shares.
--------------------------+------------------------------
 Reporter:  bga           |        Owner:  nobody
     Type:  bug           |       Status:  new
 Priority:  normal        |    Milestone:  Unscheduled
Component:  Applications  |      Version:  R1/Development
 Keywords:                |   Blocked By:
 Blocking:                |  Has a Patch:  0
 Platform:  All           |
--------------------------+------------------------------
 This happens after I disable SMAP as, otherwise, it would crash with a
 SMAP violation before that.

 {{{
 Debug information for team /boot/system/bin/fusesmb-scan (2742):
 CPU(s): 8x Intel Core™ i7-8809G
 Memory: 31.92 GiB total, 982.23 MiB used
 Haiku revision: hrev53176 Jun  1 2019 17:49:42 (x86_64)

 Active Threads:
         thread 2743: team 2742 debug task
         thread 2742: fusesmb-scan (main)
                 state: Exception (General protection fault)

                 Frame           IP                      Function Name
                 -----------------------------------------------
                 0x7f65f2596d30  0x163fff97d90   /boot/system/lib/libbe.so
 + 0x12ed90
                         Unable to retrieve disassembly for IP
 0x163fff97d90: address does not point to a function.
                         Frame memory:
                                 [0x7f65f2596d18]  .P..c...@mY.e...   1a 50
 fc ff 63 01 00 00 40 6d 59 f2 65 7f 00 00
                                 [0x7f65f2596d28]  `.......           60 00
 85 0c 00 00 00 00
                 0x7f65f2596d50  0x163fffbe6f4   initialize_forked_child()
 + 0x4
                 0x7f65f2596d70  0x1f5bf6a89b0   fork + 0xb0
                 0x7f65f2596dc0  0x1f5bf6589f6   _IO_proc_open + 0x66
                 0x7f65f2596df0  0x1f5bf658bcc   _IO_popen + 0x6c
                 0x7f65f2599680  0x221f55e3579
 fusesmb_cache_auth_fn.part.0 + 0x89
                 0x7f65f25999e0  0x71a9cf2883    SMBC_call_auth_fn + 0x149
                 0x7f65f2599a40  0x71a9cf2a6f    SMBC_find_server + 0xe6
                 0x7f65f2599dd0  0x71a9cf2c15    SMBC_server_internal +
 0x10f
                 0x7f65f2599e40  0x71a9cf3d05    SMBC_server + 0x57
                 0x7f65f259a130  0x71a9ceb465    SMBC_opendir_ctx + 0xaa1
                 0x7f65f259a9a0  0x221f55e2391   cache_servers + 0x31
                 0x7f65f259b270  0x221f55e10c6   main + 0xe6
                 0x7f65f259b2a0  0x221f55e196c   _start + 0x4c
                 0x7f65f259b2d0  0x8a4df12573    runtime_loader + 0x103
                 00000000        0x7feaf683f260  commpage_thread_exit + 0

                 Registers:
                           rip:  0x00000163fff97d90
                           rsp:  0x00007f65f2596d18
                           rbp:  0x00007f65f2596d30
                           rax:  0x0000000000000000
                           rbx:  0x000000000c850060
                           rcx:  0x000001f5bf604ea1
                           rdx:  0x0000000000000000
                           rsi:  0x0000016400108639
                           rdi:  0x0000000000000001
                            r8:  0x00000000000007fd
                            r9:  0x00000000000006da
                           r10:  0x000001f5bf952460
                           r11:  0x0000000000003246
                           r12:  0x0000000000000000
                           r13:  0x00000221f55e91e2
                           r14:  0x0000000000000001
                           r15:  0x000000000c9f0040
                            cs:  0x002b
                            ds:  0x0000
                            es:  0x0000
                            fs:  0x0000
                            gs:  0x0000
                            ss:  0x0023
                           st0:  0
                           st1:  0
                           st2:  0
                           st3:  0
                           st4:  0
                           st5:  0
                           st6:  0
                           st7:  0
                           mm0:  {0, 0, 0, 0}
                           mm1:  {0, 0, 0, 0}
                           mm2:  {0, 0, 0, 0}
                           mm3:  {0, 0, 0, 0}
                           mm4:  {0, 0, 0, 0}
                           mm5:  {0, 0, 0, 0}
                           mm6:  {0, 0, 0, 0}
                           mm7:  {0, 0, 0, 0}
                          xmm0:  {0, 0, 0, 0, 0x2c, 0, 0, 0}
                          xmm1:  {0x63, 0, 0, 0, 0, 0, 0, 0}
                          xmm2:  {0x4ea1, 0xbf60, 0x1f5, 0, 0x2b, 0, 0, 0}
                          xmm3:  {0x3246, 0, 0, 0, 0x6d48, 0xf259, 0x7f65,
 0}
                          xmm4:  {0x6da, 0, 0, 0, 0x7fd, 0, 0, 0}
                          xmm5:  {0x6d60, 0xf259, 0x7f65, 0, 0x1, 0, 0, 0}
                          xmm6:  {0x1, 0, 0, 0, 0, 0, 0, 0}
                          xmm7:  {0x4ea1, 0xbf60, 0x1f5, 0, 0, 0, 0, 0}
                          xmm8:  {0, 0, 0, 0, 0, 0, 0, 0}
                          xmm9:  {0, 0, 0, 0, 0, 0, 0, 0}
                         xmm10:  {0, 0, 0, 0, 0, 0, 0, 0}
                         xmm11:  {0, 0, 0, 0, 0, 0, 0, 0}
                         xmm12:  {0, 0, 0, 0, 0, 0, 0, 0}
                         xmm13:  {0, 0, 0, 0, 0, 0, 0, 0}
                         xmm14:  {0, 0, 0, 0, 0, 0, 0, 0}
                         xmm15:  {0, 0, 0, 0, 0, 0, 0, 0}

 Loaded Images:
         ID              Text Base       Text End        Data Base
 Data End        Type    Name
 
--------------------------------------------------------------------------------
         7435    0x1175411000    0x1175427000    0x1175626000
 0x1175627000    lib     /boot/system/lib/libgcc_s.so.1
         7452    0x6f1da50000    0x6f1dc5b000    0x6f1de5b000
 0x6f1de84000    lib     /boot/system/lib/libcrypto.so.1.0.0
         7433    0x71a9c9f000    0x71aa419000    0x71aa618000
 0x71aa64b000    lib     /boot/system/lib/libsmbclient.so.0
         7438    0x810ab75000    0x810adf2000    0x810aff1000
 0x810b006000    lib     /boot/system/lib/libicui18n.so.57.1
         7431    0x8a4defe000    0x8a4df1f000    0x8a4e11e000
 0x8a4e121000    lib     /boot/system/runtime_loader
         7448    0xe3b69ca000    0xe3b69d5000    0xe3b6bd4000
 0xe3b6bd6000    lib     /boot/system/lib/libtalloc.so.2.0.5
         7446    0xe3f47de000    0xe3f481f000    0xe3f4a1e000
 0xe3f4a27000    lib     /boot/system/lib/libnetwork.so
         7443    0xfe09612000    0xfe097aa000    0xfe099a9000
 0xfe099be000    lib     /boot/system/lib/libicuuc.so.57.1
         7441    0x103c73b8000   0x103c73c3000   0x103c75c3000
 0x103c75c4000   lib     /boot/system/lib/libiculx.so.57.1
         7449    0x13208877000   0x13208884000   0x13208a84000
 0x13208a86000   lib     /boot/system/lib/libtevent.so.0.9.11
         7444    0x132e6d4b000   0x132e6d67000   0x132e6f66000
 0x132e6f67000   lib     /boot/system/lib/libz.so.1.2.11
         7440    0x1330e984000   0x1330e9d9000   0x1330ebd9000
 0x1330ebdc000   lib     /boot/system/lib/libicule.so.57.1
         7453    0x139df85f000   0x139df8ca000   0x139dfac9000
 0x139dfad4000   lib     /boot/system/lib/libssl.so.1.0.0
         7434    0x13fcbcd1000   0x13fcbe33000   0x13fcc033000
 0x13fcc047000   lib     /boot/system/lib/libstdc++.so.6.0.25
         7445    0x1586c212000   0x1586c2e5000   0x1586c4e5000
 0x1586c4e6000   lib     /boot/system/lib/libzstd.so.1.3.8
         7432    0x163ffe69000   0x16400182000   0x16400381000
 0x164003af000   lib     /boot/system/lib/libbe.so
         7451    0x1857248a000   0x18572491000   0x18572690000
 0x18572691000   lib     /boot/system/lib/libbsd.so
         7437    0x19a3c5bc000   0x19a3de3a000   0x19a3e039000
 0x19a3e03a000   lib     /boot/system/lib/libicudata.so.57.1
         7450    0x1b3f19e5000   0x1b3f19fb000   0x1b3f1bfa000
 0x1b3f1bfc000   lib     /boot/system/lib/libtdb.so.1.2.9
         7447    0x1be73763000   0x1be737c9000   0x1be739c9000
 0x1be739ce000   lib     /boot/system/lib/libbnetapi.so
         7442    0x1ce3f3b3000   0x1ce3f3e2000   0x1ce3f5e2000
 0x1ce3f616000   lib     /boot/system/lib/libicutu.so.57.1
         7439    0x1ef0b277000   0x1ef0b283000   0x1ef0b482000
 0x1ef0b484000   lib     /boot/system/lib/libicuio.so.57.1
         7436    0x1f5bf5c4000   0x1f5bf721000   0x1f5bf920000
 0x1f5bf973000   lib     /boot/system/lib/libroot.so
         7429    0x221f55da000   0x221f55ec000   0x221f57eb000
 0x221f57ed000   app     /boot/system/bin/fusesmb-scan
         7430    0x7feaf683f000  0x7feaf6847000  0x00000000      0x00000000
 system  commpage

 Areas:
         ID              Base            End                     Size (KiB)
 Protection      Locking                 Name
 
--------------------------------------------------------------------------------
         20027   0x0043f000      0x0045f000             128      r--S
 full            libsmbclient.so.0 mmap area
         20028   0x0129a000      0x012ba000             128      r--S
 full            libsmbclient.so.0 mmap area
         20029   0x02174000      0x02384000            2112      rw-
 full            heap area
         20030   0x08eba000      0x08eda000             128      r--S
 full            libsmbclient.so.0 mmap area
         20031   0x0b94b000      0x0b96b000             128      r--S
 full            libsmbclient.so.0 mmap area
         20032   0x0c843000      0x0ca53000            2112      rw-
 full            heap area
         20033   0x3dea6000      0x3dea7000               4      rw-
 full            heap area
         20034   0x52e8a000      0x52ea2000              96      rw-
 full            rld heap
         20035   0x889c3000      0x889db000              96      rw-
 full            rld heap
         20036   0xa28e4000      0xa28f4000              64      rw-
 full            rld heap
         20037   0xe9fd5000      0xe9fe5000              64      rw-
 full            rld heap
         20038   0x273ecf000     0x273ed7000             32      rw-
 full            rld heap
         20039   0x2e942e000     0x2e9436000             32      rw-
 full            rld heap
         20040   0x1175411000    0x1175427000            88      r-x
 full            libgcc_s.so.1_seg0ro
         20041   0x1175626000    0x1175627000             4      rw-
 full            libgcc_s.so.1_seg1rw
         20042   0x265dabe000    0x265dabf000             4      rw-S
 full            _rld_debug_
         20043   0x2d55cdb000    0x2d55ceb000            64      rw-
 full            rld heap
         20044   0x6f1da50000    0x6f1dc5b000          2092      r-x
 full            libcrypto.so.1.0.0_seg0ro
         20045   0x6f1de5b000    0x6f1de82000           156      rw-
 full            libcrypto.so.1.0.0_seg1rw
         20046   0x6f1de82000    0x6f1de84000             8      rw-
 full            libcrypto.so.1.0.0_seg2rw
         20047   0x71a9c9f000    0x71aa419000          7656      r-x
 full            libsmbclient.so.0_seg0ro
         20048   0x71aa618000    0x71aa648000           192      rw-
 full            libsmbclient.so.0_seg1rw
         20049   0x71aa648000    0x71aa64b000            12      rw-
 full            libsmbclient.so.0_seg2rw
         20050   0x810ab75000    0x810adf2000          2548      r-x
 full            libicui18n.so.57.1_seg0ro
         20051   0x810aff1000    0x810b006000            84      rw-
 full            libicui18n.so.57.1_seg1rw
         20052   0x8a4defe000    0x8a4df1f000           132      r-x
 full            runtime_loader_seg0ro
         20053   0x8a4e11e000    0x8a4e120000             8      rw-
 full            runtime_loader_seg1rw
         20054   0x8a4e120000    0x8a4e121000             4      rw-
 full            runtime_loader_bss1
         20055   0xe3b69ca000    0xe3b69d5000            44      r-x
 full            libtalloc.so.2.0.5_seg0ro
         20056   0xe3b6bd4000    0xe3b6bd6000             8      rw-
 full            libtalloc.so.2.0.5_seg1rw
         20057   0xe3f47de000    0xe3f481f000           260      r-x
 full            libnetwork.so_seg0ro
         20058   0xe3f4a1e000    0xe3f4a21000            12      rw-
 full            libnetwork.so_seg1rw
         20059   0xe3f4a21000    0xe3f4a27000            24      rw-
 full            libnetwork.so_seg2rw
         20060   0xfe09612000    0xfe097aa000          1632      r-x
 full            libicuuc.so.57.1_seg0ro
         20061   0xfe099a9000    0xfe099be000            84      rw-
 full            libicuuc.so.57.1_seg1rw
         20062   0x103c73b8000   0x103c73c3000           44      r-x
 full            libiculx.so.57.1_seg0ro
         20063   0x103c75c3000   0x103c75c4000            4      rw-
 full            libiculx.so.57.1_seg1rw
         20064   0x13208877000   0x13208884000           52      r-x
 full            libtevent.so.0.9.11_seg0ro
         20065   0x13208a84000   0x13208a86000            8      rw-
 full            libtevent.so.0.9.11_seg1rw
         20066   0x132e6d4b000   0x132e6d67000          112      r-x
 full            libz.so.1.2.11_seg0ro
         20067   0x132e6f66000   0x132e6f67000            4      rw-
 full            libz.so.1.2.11_seg1rw
         20068   0x1330e984000   0x1330e9d9000          340      r-x
 full            libicule.so.57.1_seg0ro
         20069   0x1330ebd9000   0x1330ebdc000           12      rw-
 full            libicule.so.57.1_seg1rw
         20070   0x139df85f000   0x139df8ca000          428      r-x
 full            libssl.so.1.0.0_seg0ro
         20071   0x139dfac9000   0x139dfad4000           44      rw-
 full            libssl.so.1.0.0_seg1rw
         20072   0x13fcbcd1000   0x13fcbe33000         1416      r-x
 full            libstdc++.so.6.0.25_seg0ro
         20073   0x13fcc033000   0x13fcc03f000           48      rw-
 full            libstdc++.so.6.0.25_seg1rw
         20074   0x13fcc03f000   0x13fcc047000           32      rw-
 full            libstdc++.so.6.0.25_seg2rw
         20075   0x1586c212000   0x1586c2e5000          844      r-x
 full            libzstd.so.1.3.8_seg0ro
         20076   0x1586c4e5000   0x1586c4e6000            4      rw-
 full            libzstd.so.1.3.8_seg1rw
         20077   0x163ffe69000   0x16400182000         3172      r-x
 full            libbe.so_seg0ro
         20078   0x16400381000   0x164003af000          184      rw-
 full            libbe.so_seg1rw
         20079   0x1857248a000   0x18572491000           28      r-x
 full            libbsd.so_seg0ro
         20080   0x18572690000   0x18572691000            4      rw-
 full            libbsd.so_seg1rw
         20081   0x19a3c5bc000   0x19a3de3a000        25080      r-x
 full            libicudata.so.57.1_seg0ro
         20082   0x19a3e039000   0x19a3e03a000            4      rw-
 full            libicudata.so.57.1_seg1rw
         20083   0x1b3f19e5000   0x1b3f19fb000           88      r-x
 full            libtdb.so.1.2.9_seg0ro
         20084   0x1b3f1bfa000   0x1b3f1bfc000            8      rw-
 full            libtdb.so.1.2.9_seg1rw
         20085   0x1be73763000   0x1be737c9000          408      r-x
 full            libbnetapi.so_seg0ro
         20086   0x1be739c9000   0x1be739ce000           20      rw-
 full            libbnetapi.so_seg1rw
         20087   0x1ce3f3b3000   0x1ce3f3e2000          188      r-x
 full            libicutu.so.57.1_seg0ro
         20088   0x1ce3f5e2000   0x1ce3f5e4000            8      rw-
 full            libicutu.so.57.1_seg1rw
         20089   0x1ce3f5e4000   0x1ce3f616000          200      rw-
 full            libicutu.so.57.1_seg2rw
         20090   0x1ef0b277000   0x1ef0b283000           48      r-x
 full            libicuio.so.57.1_seg0ro
         20091   0x1ef0b482000   0x1ef0b484000            8      rw-
 full            libicuio.so.57.1_seg1rw
         20092   0x1f5bf5c4000   0x1f5bf721000         1396      r-x
 full            libroot.so_seg0ro
         20093   0x1f5bf920000   0x1f5bf92e000           56      rw-
 full            libroot.so_seg1rw
         20094   0x1f5bf92e000   0x1f5bf973000          276      rw-
 full            libroot.so_seg2rw
         20095   0x221f55da000   0x221f55ec000           72      r-x
 full            fusesmb-scan_seg0ro
         20096   0x221f57eb000   0x221f57ec000            4      rw-
 full            fusesmb-scan_seg1rw
         20097   0x221f57ec000   0x221f57ed000            4      rw-
 full            fusesmb-scan_seg2rw
         20098   0x7f65f1598000  0x7f65f259d000       16404      rw-s
 full            fusesmb-scan_2738_stack
         20099   0x7feaf683f000  0x7feaf6847000          32      r-xS
 full            commpage
         20100   0x7ff1ffef1000  0x7ff1ffef5000          16      rw-
 full            user area

 Protection Flags: r - read, w - write, x - execute, s - stack, o -
 overcommit, c - cloneable, S - shared, k - kernel

 Semaphores:
         ID              Count   Last Holder     Name
         ------------------------------------------------------------
 }}}

 Seems like some memory corruption is involved (maybe related to the SMAP
 violation if SMAP is on?). I did not have time to investigate further.

-- 
Ticket URL: <https://dev.haiku-os.org/ticket/15099>
Haiku <https://dev.haiku-os.org>
The Haiku operating system.

Other related posts: