[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ibus/CVE-2019-14822/glibc



Brian May <bam@debian.org> writes:

> Here is a better stack trace (previous version was picking up system
> version of glib):

Here is an even better version of the even better version of the stack
trace that is actually useful (disabled compile time optimisation)

(gdb) bt
#0  0x00007ffff72cbd08 in _g_log_abort (breakpoint=1) at gmessages.c:315
#1  0x00007ffff72ccbea in g_logv (log_domain=0x7ffff78125ef "GLib-GObject", log_level=G_LOG_LEVEL_CRITICAL, format=0x7ffff735b3af "%s: assertion '%s' failed", args=0x7fffffffd778) at gmessages.c:1042
#2  0x00007ffff72ccce0 in g_log (log_domain=0x7ffff78125ef "GLib-GObject", log_level=G_LOG_LEVEL_CRITICAL, format=0x7ffff735b3af "%s: assertion '%s' failed") at gmessages.c:1081
#3  0x00007ffff72ccd21 in g_return_if_fail_warning (log_domain=0x7ffff78125ef "GLib-GObject", pretty_function=0x7ffff7813ccb <__FUNCTION__.12599> "g_object_ref", 
    expression=0x7ffff7812b1b "G_IS_OBJECT (object)") at gmessages.c:1090
#4  0x00007ffff77ee588 in g_object_ref (_object=0x0) at gobject.c:3041
#5  0x00007ffff7ab4bf0 in cache_recv_address (socket=0x61c130, native=0x7fffffffe1b0, native_len=12) at gsocket.c:4038
#6  0x00007ffff7ab501d in g_socket_receive_message (socket=0x61c130, address=0x7fffffffe318, vectors=0x7fffffffe330, num_vectors=1, messages=0x0, num_messages=0x0, flags=0x0, cancellable=0x0, 
    error=0x7fffffffe320) at gsocket.c:4269
#7  0x00007ffff7aed427 in read_netlink_messages (socket=0x0, condition=G_IO_IN, user_data=0x6119e0) at gnetworkmonitornetlink.c:328
#8  0x00007ffff7aecd65 in g_network_monitor_netlink_initable_init (initable=0x6119e0, cancellable=0x0, error=0x0) at gnetworkmonitornetlink.c:141
#9  0x00007ffff7a90ae4 in g_initable_init (initable=0x6119e0, cancellable=0x0, error=0x0) at ginitable.c:112
#10 0x00007ffff7a90cd8 in g_initable_new_valist (object_type=6391376, first_property_name=0x0, var_args=0x7fffffffe4f0, cancellable=0x0, error=0x0) at ginitable.c:228
#11 0x00007ffff7a90b9a in g_initable_new (object_type=6391376, cancellable=0x0, error=0x0, first_property_name=0x0) at ginitable.c:146
#12 0x00007ffff7a941a1 in try_implementation (extension=0x6106c0, verify_func=0x0) at giomodule.c:755
#13 0x00007ffff7a943a1 in _g_io_module_get_default (extension_point=0x7ffff7b76308 "gio-network-monitor", envvar=0x7ffff7b762f0 "GIO_USE_NETWORK_MONITOR", verify_func=0x0) at giomodule.c:857
#14 0x00007ffff7a9e1b7 in g_network_monitor_get_default () at gnetworkmonitor.c:74
#15 0x0000000000401761 in test_default () at network-monitor.c:241
#16 0x00007ffff72ede8e in test_case_run (tc=0x613990) at gtestutils.c:2059
#17 0x00007ffff72ee230 in g_test_run_suite_internal (suite=0x610240, path=0x7ffff735fec0 "") at gtestutils.c:2120
#18 0x00007ffff72ee2f2 in g_test_run_suite_internal (suite=0x610220, path=0x7ffff735fec0 "") at gtestutils.c:2131
#19 0x00007ffff72ee472 in g_test_run_suite (suite=0x610220) at gtestutils.c:2184
#20 0x00007ffff72ed15f in g_test_run () at gtestutils.c:1488
#21 0x0000000000402a7f in main (argc=1, argv=0x7fffffffe9f8) at
network-monitor.c:536

Looking at gsocket.c:4038, saddr  (source address) is NULL for some
unknown reason.

This value comes from:

saddr = g_socket_address_new_from_native (native, native_len);

No idea why this appears to be failing yet.
-- 
Brian May <bam@debian.org>


Reply to: