Bug#559333: glibc: rsync to an afp mounted disk failed with double free or corruption

To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Bug#559333: glibc: rsync to an afp mounted disk failed with double free or corruption
From: Maelvon <maelvon.hawk@laposte.net>
Date: Thu, 03 Dec 2009 18:25:25 +0100
Message-id: <20091203172525.2995.59950.reportbug@olympe.aluma>
Reply-to: Maelvon <maelvon.hawk@laposte.net>, 559333@bugs.debian.org

Package: glibc
Severity: important



-- System Information:
Debian Release: 5.0.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Manually installed package : afpfs-ng_0.8.1-1_i386.deb

I'm doing a :
mount_afp 'afp://iuser:passwd@disk/DIR' /media/dir
rsync -rtlzv --delete --ignore-errors --exclude=".*" "/media/dir/" "/var/backup/"

And it crash with the following backtraces.

I've got some more severe crash with samba mount (kernel panic) and I've think that the 
afpfs-ng package can save my day, but it also crash, but with a trace.

My disk /var/backup/ is a LVM partionned disk.
The disk mounted in /media/dir/ is a USB Disk connected to an Airport Extreme.
  
Trace 1:

sent 12172700751 bytes  received 32768 bytes  1737100.75 bytes/sec
total size is 235787776891  speedup is 19.37
*** glibc detected *** <unknown>: double free or corruption (!prev): 0x093f3f58 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6[0xb7d51624]
/lib/i686/cmov/libc.so.6(cfree+0x96)[0xb7d53826]
/usr/lib/libafpclient.so.0(afp_free_server+0xaf)[0xb7f523ef]
/usr/lib/libafpclient.so.0(afp_server_remove+0x56)[0xb7f52486]
/usr/lib/libafpclient.so.0(afp_unmount_volume+0xb7)[0xb7f52597]
/usr/lib/libfuse.so.2(fuse_fs_destroy+0x3a)[0xb7f38f5a]
/usr/lib/libfuse.so.2[0xb7f38fc0]
/usr/lib/libfuse.so.2[0xb7f40f10]
/usr/lib/libfuse.so.2(fuse_session_destroy+0x29)[0xb7f430a9]
/usr/lib/libfuse.so.2(fuse_destroy+0x197)[0xb7f37be7]
/usr/lib/libfuse.so.2[0xb7f43479]
/usr/lib/libfuse.so.2[0xb7f439a6]
[0x804b7d5]
[0x804a305]
/lib/i686/cmov/libpthread.so.0[0xb7eb64c0]
/lib/i686/cmov/libc.so.6(clone+0x5e)[0xb7dc36de]
======= Memory map: ========
08048000-0804d000 r-xp 00000000 fe:00 9002756    /usr/bin/afpfsd
0804d000-0804e000 rw-p 00004000 fe:00 9002756    /usr/bin/afpfsd
0804e000-0804f000 rw-p 0804e000 00:00 0
093f1000-098aa000 rw-p 093f1000 00:00 0          [heap]
60200000-60221000 rw-p 60200000 00:00 0
60221000-60300000 ---p 60221000 00:00 0
603d3000-603d4000 ---p 603d3000 00:00 0
603d4000-60bd4000 rw-p 603d4000 00:00 0
60bd4000-60bd5000 ---p 60bd4000 00:00 0
60bd5000-613d5000 rw-p 60bd5000 00:00 0
613d5000-613d6000 ---p 613d5000 00:00 0
613d6000-61bd6000 rw-p 613d6000 00:00 0
61bd6000-61bd7000 ---p 61bd6000 00:00 0
61bd7000-623d7000 rw-p 61bd7000 00:00 0
623d7000-623d8000 ---p 623d7000 00:00 0
623d8000-62bd8000 rw-p 623d8000 00:00 0
62bd8000-62bd9000 ---p 62bd8000 00:00 0
62bd9000-633d9000 rw-p 62bd9000 00:00 0
633d9000-633da000 ---p 633d9000 00:00 0
633da000-63bda000 rw-p 633da000 00:00 0
63bda000-63bdb000 ---p 63bda000 00:00 0
63bdb000-643db000 rw-p 63bdb000 00:00 0
643db000-643dc000 ---p 643db000 00:00 0
643dc000-64bdc000 rw-p 643dc000 00:00 0
64bdc000-64bdd000 ---p 64bdc000 00:00 0
64bdd000-653dd000 rw-p 64bdd000 00:00 0
653dd000-653de000 ---p 653dd000 00:00 0
653de000-65bde000 rw-p 653de000 00:00 0
65bde000-65bdf000 ---p 65bde000 00:00 0
65bdf000-663df000 rw-p 65bdf000 00:00 0
663df000-663e0000 ---p 663df000 00:00 0
663e0000-66be0000 rw-p 663e0000 00:00 0
66be0000-66be1000 ---p 66be0000 00:00 0
66be1000-673e1000 rw-p 66be1000 00:00 0
673e1000-673e2000 ---p 673e1000 00:00 0
673e2000-67be2000 rw-p 673e2000 00:00 0
67be2000-67be3000 ---p 67be2000 00:00 0
67be3000-683e3000 rw-p 67be3000 00:00 0
683e3000-683e4000 ---p 683e3000 00:00 0
683e4000-68be4000 rw-p 683e4000 00:00 0
68be4000-68be5000 ---p 68be4000 00:00 0
68be5000-693e5000 rw-p 68be5000 00:00 0
693e5000-693e6000 ---p 693e5000 00:00 0
693e6000-69be6000 rw-p 693e6000 00:00 0
69be6000-69be7000 ---p 69be6000 00:00 0
69be7000-6a3e7000 rw-p 69be7000 00:00 0
6a3e7000-6a3e8000 ---p 6a3e7000 00:00 0
6a3e8000-6abe8000 rw-p 6a3e8000 00:00 0
6abe8000-6abe9000 ---p 6abe8000 00:00 0
6abe9000-6b3e9000 rw-p 6abe9000 00:00 0
6b3e9000-6b3ea000 ---p 6b3e9000 00:00 0
6b3ea000-6bbea000 rw-p 6b3ea000 00:00 0
6bbea000-6bbeb000 ---p 6bbea000 00:00 0
6bbeb000-6c3eb000 rw-p 6bbeb000 00:00 0
6c3eb000-6c3ec000 ---p 6c3eb000 00:00 0
6c3ec000-6cbec000 rw-p 6c3ec000 00:00 0
6cbec000-6cbed000 ---p 6cbec000 00:00 0
6cbed000-6d3ed000 rw-p 6cbed000 00:00 0
6d3ed000-6d3ee000 ---p 6d3ed000 00:00 0
6d3ee000-6dbee000 rw-p 6d3ee000 00:00 0
6dbee000-6dbef000 ---p 6dbee000 00:00 0
6dbef000-6e3ef000 rw-p 6dbef000 00:00 0
6e3ef000-6e3f0000 ---p 6e3ef000 00:00 0
6e3f0000-6ebf0000 rw-p 6e3f0000 00:00 0
6ebf0000-6ebf1000 ---p 6ebf0000 00:00 0
6ebf1000-6f3f1000 rw-p 6ebf1000 00:00 0
6f3f1000-6f3f2000 ---p 6f3f1000 00:00 0
6f3f2000-6fbf2000 rw-p 6f3f2000 00:00 0
6fbf2000-6fbf3000 ---p 6fbf2000 00:00 0
6fbf3000-703f3000 rw-p 6fbf3000 00:00 0
703f3000-703f4000 ---p 703f3000 00:00 0
703f4000-70bf4000 rw-p 703f4000 00:00 0
70bf4000-70bf5000 ---p 70bf4000 00:00 0
70bf5000-713f5000 rw-p 70bf5000 00:00 0
713f5000-713f6000 ---p 713f5000 00:00 0
713f6000-71bf6000 rw-p 713f6000 00:00 0
71bf6000-71bf7000 ---p 71bf6000 00:00 0
71bf7000-723f7000 rw-p 71bf7000 00:00 0

Trace 2:

sent 260981406 bytes  received 1062 bytes  1806107.04 bytes/sec
total size is 236048201036  speedup is 904.46
*** glibc detected *** <unknown>: double free or corruption (!prev): 0x08dedf58 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6[0xb7cfc624]
/lib/i686/cmov/libc.so.6(cfree+0x96)[0xb7cfe826]
/usr/lib/libafpclient.so.0(afp_free_server+0xaf)[0xb7efd3ef]
/usr/lib/libafpclient.so.0(afp_server_remove+0x56)[0xb7efd486]
/usr/lib/libafpclient.so.0(afp_unmount_volume+0xb7)[0xb7efd597]
/usr/lib/libfuse.so.2(fuse_fs_destroy+0x3a)[0xb7ee3f5a]
/usr/lib/libfuse.so.2[0xb7ee3fc0]
/usr/lib/libfuse.so.2[0xb7eebf10]
/usr/lib/libfuse.so.2(fuse_session_destroy+0x29)[0xb7eee0a9]
/usr/lib/libfuse.so.2(fuse_destroy+0x197)[0xb7ee2be7]
/usr/lib/libfuse.so.2[0xb7eee479]
/usr/lib/libfuse.so.2[0xb7eee9a6]
[0x804b7d5]
[0x804a305]
/lib/i686/cmov/libpthread.so.0[0xb7e614c0]
/lib/i686/cmov/libc.so.6(clone+0x5e)[0xb7d6e6de]
======= Memory map: ========
08048000-0804d000 r-xp 00000000 fe:00 9002756    /usr/bin/afpfsd
0804d000-0804e000 rw-p 00004000 fe:00 9002756    /usr/bin/afpfsd
0804e000-0804f000 rw-p 0804e000 00:00 0
08deb000-09097000 rw-p 08deb000 00:00 0          [heap]
b5300000-b5321000 rw-p b5300000 00:00 0
b5321000-b5400000 ---p b5321000 00:00 0
b5428000-b5429000 ---p b5428000 00:00 0
b5429000-b5c29000 rw-p b5429000 00:00 0
b5c29000-b5c2a000 ---p b5c29000 00:00 0
b5c2a000-b642a000 rw-p b5c2a000 00:00 0
b642a000-b642b000 ---p b642a000 00:00 0
b642b000-b6c2b000 rw-p b642b000 00:00 0
b6c3a000-b6c46000 r-xp 00000000 fe:00 259075     /lib/libgcc_s.so.1
b6c46000-b6c47000 rw-p 0000b000 fe:00 259075     /lib/libgcc_s.so.1
b6c4d000-b6c4e000 ---p b6c4d000 00:00 0
b6c4e000-b744e000 rw-p b6c4e000 00:00 0
b744e000-b7457000 r-xp 00000000 fe:00 267793     /lib/i686/cmov/libnss_nis-2.7.so
b7457000-b7459000 rw-p 00008000 fe:00 267793     /lib/i686/cmov/libnss_nis-2.7.so
b7459000-b746e000 r-xp 00000000 fe:00 267788     /lib/i686/cmov/libnsl-2.7.so
b746e000-b7470000 rw-p 00014000 fe:00 267788     /lib/i686/cmov/libnsl-2.7.so
b7470000-b7472000 rw-p b7470000 00:00 0
b7472000-b7479000 r-xp 00000000 fe:00 267789     /lib/i686/cmov/libnss_compat-2.7.so
b7479000-b747b000 rw-p 00006000 fe:00 267789     /lib/i686/cmov/libnss_compat-2.7.so
b747b000-b7485000 r-xp 00000000 fe:00 267791     /lib/i686/cmov/libnss_files-2.7.so
b7485000-b7487000 rw-p 00009000 fe:00 267791     /lib/i686/cmov/libnss_files-2.7.so
b7487000-b7488000 ---p b7487000 00:00 0
b7488000-b7c8a000 rw-p b7488000 00:00 0
b7c8a000-b7c8d000 r-xp 00000000 fe:00 545737     /usr/lib/libgpg-error.so.0.3.0
b7c8d000-b7c8e000 rw-p 00002000 fe:00 545737     /usr/lib/libgpg-error.so.0.3.0
b7c8e000-b7de3000 r-xp 00000000 fe:00 267782     /lib/i686/cmov/libc-2.7.so
b7de3000-b7de4000 r--p 00155000 fe:00 267782     /lib/i686/cmov/libc-2.7.so
b7de4000-b7de6000 rw-p 00156000 fe:00 267782     /lib/i686/cmov/libc-2.7.so
b7de6000-b7de9000 rw-p b7de6000 00:00 0
b7de9000-b7deb000 r-xp 00000000 fe:00 267785     /lib/i686/cmov/libdl-2.7.so
b7deb000-b7ded000 rw-p 00001000 fe:00 267785     /lib/i686/cmov/libdl-2.7.so
b7ded000-b7df4000 r-xp 00000000 fe:00 267798     /lib/i686/cmov/librt-2.7.so
b7df4000-b7df6000 rw-p 00006000 fe:00 267798     /lib/i686/cmov/librt-2.7.so
b7df6000-b7df7000 rw-p b7df6000 00:00 0
b7df7000-b7e26000 r-xp 00000000 fe:00 259259     /lib/libncurses.so.5.7
b7e26000-b7e29000 rw-p 0002f000 fe:00 259259     /lib/libncurses.so.5.7
b7e29000-b7e56000 r-xp 00000000 fe:00 259211     /lib/libreadline.so.5.2
b7e56000-b7e5a000 rw-p 0002d000 fe:00 259211     /lib/libreadline.so.5.2
b7e5a000-b7e5b000 rw-p b7e5a000 00:00 0
b7e5b000-b7e70000 r-xp 00000000 fe:00 267796     /lib/i686/cmov/libpthread-2.7.so
b7e70000-b7e72000 rw-p 00014000 fe:00 267796     /lib/i686/cmov/libpthread-2.7.so
b7e72000-b7e74000 rw-p b7e72000 00:00 0
b7e74000-b7eda000 r-xp 00000000 fe:00 545744     /usr/lib/libgcrypt.so.11.4.4
b7eda000-b7edc000 rw-p 00066000 fe:00 545744     /usr/lib/libgcrypt.so.11.4.4
b7edc000-b7ef6000 r-xp 00000000 fe:00 549766     /usr/lib/libfuse.so.2.7.4
b7ef6000-b7ef7000 rw-p 0001a000 fe:00 549766     /usr/lib/libfuse.so.2.7.4
b7ef7000-b7f11000 r-xp 00000000 fe:00 7019233    /usr/lib/libafpclient.so.0.0.

Reply to:

Follow-Ups:
- Bug#559333: marked as done (glibc: rsync to an afp mounted disk failed with double free or corruption)
  - From: owner@bugs.debian.org (Debian Bug Tracking System)

Prev by Date: Bug#559328: libc6: Upgrading to new libc-bin fails with message "E: Conf Broken libc-bin"
Next by Date: Bug#559376: pwrite64 fails to support large files in 32-bit application
Previous by thread: Bug#559328: libc6: Upgrading to new libc-bin fails with message "E: Conf Broken libc-bin"
Next by thread: Bug#559333: marked as done (glibc: rsync to an afp mounted disk failed with double free or corruption)
Index(es):
- Date
- Thread