[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#961345: cups: daemon crashes with invalid free()



Package: cups
Version: 2.3.3-1~bpo10+1
Followup-For: Bug #961345

Dear Maintainer,

I'm running the Testing version of cups recompiled for Buster. I'm seeing the
same "invalid pointer" issue as the reporter.

Backtrace for a coredump is below. Please let me know if there's any other
information I can provide in order to help get a solution for this issue. It's
disrupting our printing significantly:

root@samba-prn-01:~# coredumpctl gdb 27338
           PID: 27338 (cupsd)
           UID: 0 (root)
           GID: 0 (root)
        Signal: 6 (ABRT)
     Timestamp: Mon 2020-07-06 17:01:15 BST (17h ago)
  Command Line: /usr/sbin/cupsd -l
    Executable: /usr/sbin/cupsd
 Control Group: /system.slice/cups.service
          Unit: cups.service
         Slice: system.slice
       Boot ID: 0fcad17ac3cd455b9f660e247188c9f5
    Machine ID: d5fab4a49a044739a79685e71c58019c
      Hostname: samba-prn-01.graysofwestminster.co.uk
       Storage: /var/lib/systemd/coredump/core.cupsd.0.0fcad17ac3cd455b9f660e247188c9f5.27338.1594051275000000.lz4
       Message: Process 27338 (cupsd) of user 0 dumped core.

                Stack trace of thread 27338:
                #0  0x00007f5c88cfb7bb __GI_raise (libc.so.6)
                #1  0x00007f5c88ce6535 __GI_abort (libc.so.6)
                #2  0x00007f5c88d3d508 __libc_message (libc.so.6)
                #3  0x00007f5c88d43c1a malloc_printerr (libc.so.6)
                #4  0x00007f5c88d4542c _int_free (libc.so.6)
                #5  0x00007f5c88ec143e n/a (libcups.so.2)
                #6  0x00007f5c88ec13a8 ippDelete (libcups.so.2)
                #7  0x000055c691e34ce4 cupsdWriteClient (cupsd)
                #8  0x000055c691e6ed37 cupsdDoSelect (cupsd)
                #9  0x000055c691e2c2f5 main (cupsd)
                #10 0x00007f5c88ce809b __libc_start_main (libc.so.6)
                #11 0x000055c691e2d5da _start (cupsd)

GNU gdb (Debian 8.2.1-2+b3) 8.2.1
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/sbin/cupsd...Reading symbols from /usr/lib/debug/.build-id/6d/c083ea4548b510e5e2e225f09345d3ef998629.debug...done.
done.
[New LWP 27338]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/sbin/cupsd -l'.
Program terminated with signal SIGABRT, Aborted.
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
50      ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007f5c88ce6535 in __GI_abort () at abort.c:79
#2  0x00007f5c88d3d508 in __libc_message (action=action@entry=do_abort,
    fmt=fmt@entry=0x7f5c88e4828d "%s\n") at ../sysdeps/posix/libc_fatal.c:181
#3  0x00007f5c88d43c1a in malloc_printerr (
    str=str@entry=0x7f5c88e4643b "free(): invalid pointer") at malloc.c:5341
#4  0x00007f5c88d4542c in _int_free (av=<optimized out>, p=<optimized out>,
    have_lock=<optimized out>) at malloc.c:4165
#5  0x00007f5c88ec143e in ?? () from /lib/x86_64-linux-gnu/libcups.so.2
#6  0x00007f5c88ec13a8 in ippDelete () from /lib/x86_64-linux-gnu/libcups.so.2
#7  0x000055c691e34ce4 in cupsdWriteClient (con=0x55c692502310)
    at client.c:2563
#8  0x000055c691e6ed37 in cupsdDoSelect (timeout=<optimized out>)
    at select.c:485
#9  0x000055c691e2c2f5 in main (argc=<optimized out>, argv=<optimized out>)
    at main.c:847
(gdb) quit


Thanks for your time.

Ronny


-- System Information:
Debian Release: 10.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cups depends on:
ii  cups-client            2.3.3-1~bpo10+1
ii  cups-common            2.3.3-1~bpo10+1
ii  cups-core-drivers      2.3.3-1~bpo10+1
ii  cups-daemon            2.3.3-1~bpo10+1
ii  cups-filters           1.27.4-1
ii  cups-ppdc              2.3.3-1~bpo10+1
ii  cups-server-common     2.3.3-1~bpo10+1
ii  debconf [debconf-2.0]  1.5.71
ii  ghostscript            9.27~dfsg-2+deb10u3
ii  libavahi-client3       0.7-4+b1
ii  libavahi-common3       0.7-4+b1
ii  libc6                  2.28-10
ii  libcups2               2.3.3-1~bpo10+1
ii  libgcc1                1:8.3.0-6
ii  libstdc++6             8.3.0-6
ii  libusb-1.0-0           2:1.0.22-2
ii  poppler-utils          0.71.0-5
ii  procps                 2:3.3.15-2

Versions of packages cups recommends:
ii  avahi-daemon  0.7-4+b1
ii  colord        1.4.3-4

Versions of packages cups suggests:
pn  cups-bsd                                   <none>
pn  cups-pdf                                   <none>
pn  foomatic-db-compressed-ppds | foomatic-db  <none>
pn  smbclient                                  <none>
ii  udev                                       241-7~deb10u4

-- debconf information:
  cupsys/backend: lpd, socket, usb, snmp, dnssd
  cupsys/raw-print: true


Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: