[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#723835: cups-browsed: Segfault with multiple BrowsePoll directives



Control: tags -1 -unreproducible
Control: found -1 1.16.0-2


Quack,

I'm using two different servers and could reproduce the crash. With only
one of them on another machine it works fine.

Here is the trace:
#0  0x00007f7798fc2676 in strlen () at ../sysdeps/x86_64/strlen.S:106
#1  0x00007f7798fc23ae in __GI___strdup (s=0x1 <error: Cannot access
memory at address 0x1>) at strdup.c:41
        len = <optimized out>
        new = <optimized out>
#2  0x000055ffc458b7aa in examine_discovered_printer_record
(host=<optimized out>, ip=0x0, port=631, resource=<optimized out>,
service_name=<optimized out>, location=0x1 <error: Cannot access memory
at address 0x1>, info=0x55ffc53363e4 "Canon iR-ADV C5045F New Office",
type=0x55ffc4595ab2 "", domain=0x55ffc4595ab2 "", txt=0x0) at
utils/cups-browsed.c:5268
        uri = "ipp://s01.server.com:631/printers/Canon_C5045F_OM",
'\000' <repeats 970 times>
        queue_name = 0x55ffc533d260
"Canon_iR_ADV_C5045F_New_Office_s01_server_com"
        remote_host = 0x55ffc52be2c0 "s01.server.com"
        pdl = <optimized out>
        make_model = <optimized out>
        color = <optimized out>
        duplex = <optimized out>
        fields = {0x55ffc459516f "product", 0x55ffc4595183 "usb_MDL",
0x55ffc459518b "ty", 0x0}
        f = <optimized out>
        entry = <optimized out>
        key = 0x0
        value = 0x0
        note_value = 0x0
        cluster = <optimized out>
        member = <optimized out>
        str = <optimized out>
        p = 0x55ffc52d8950
        local_printer = <optimized out>
        backup_queue_name = 0x55ffc532c3c0
"Canon_iR_ADV_C5045F_New_Office_s01_server_com@s01.server.com"
        local_queue_name = 0x55ffc533d260
"Canon_iR_ADV_C5045F_New_Office_s01_server_com"
        local_queue_name_lower = <optimized out>
        is_cups_queue = 1
#3  0x000055ffc458f362 in found_cups_printer (remote_host=<optimized
out>, uri=<optimized out>, location=0x1 <error: Cannot access memory at
address 0x1>, info=<optimized out>) at utils/cups-browsed.c:6010
        scheme = "ipp", '\000' <repeats 28 times>
        username = '\000' <repeats 63 times>
        host = "s01.server.com", '\000' <repeats 237 times>
        resource = "/printers/Canon_C5045F_OM", '\000' <repeats 998 times>
        port = 631
        iface = <optimized out>
        local_resource = "printers/Canon_C5045F_OM", '\000' <repeats 999
times>
        service_name = "Canon iR-ADV C5045F New Office @
s01.server.com\000\375\177\000\000`\304\033\377\375\177\000\000`\304\033\377\375\177\000\000e\304\033\377\375\177\000\000\217\304\033\377\375\177\000\000`\304\033\377\375\177\000\000\217\304\033\377\375\177",
'\000' <repeats 42 times>,
"\v\000\000\000\004\000\000\000\220\303\033\377\375\177\000\000\000\000\033\377\375\177\000\000\000\000\000\000\000\000\000\000r\303\033\377\375\177\000\000\b\212\003\231w\177\000\000\377\377\377\377\377\377\377\377"...
        c = <optimized out>
        hl = 51
        printer = <optimized out>
#4  0x000055ffc458fbda in browse_poll_get_printers (conn=0x55ffc5371b70,
context=0x55ffc52d2750) at utils/cups-browsed.c:6427
        uri = 0x55ffc5326f94
"ipp://s01.server.com:631/printers/Canon_C5045F_OM"
        location = 0x1 <error: Cannot access memory at address 0x1>
        info = 0x55ffc53363e4 "Canon iR-ADV C5045F New Office"
        request = <optimized out>
        rattrs = {0x55ffc4594aef "printer-uri-supported", 0x55ffc4594b5d
"printer-info"}
        response = 0x55ffc5355670
        attr = 0x55ffc5354910
        printers = <optimized out>
        rattrs = {0x55ffc4594aef "printer-uri-supported", 0x55ffc4594b5d
"printer-info"}
        context = 0x55ffc52d2750
        conn = <optimized out>
        get_printers = <optimized out>
#5  0x000055ffc458fbda in browse_poll (data=0x55ffc52d2750,
data@entry=<error reading variable: value has been optimized out>)
    at utils/cups-browsed.c:6694
        context = 0x55ffc52d2750
        conn = <optimized out>
        get_printers = <optimized out>
#6  0x00007f77999cc523 in g_timeout_dispatch (source=0x55ffc531afd0,
callback=<optimized out>, user_data=<optimized out>)
    at ../../../../glib/gmain.c:4629
        timeout_source = 0x55ffc531afd0
        again = <optimized out>
#7  0x00007f77999cbaaa in g_main_dispatch (context=0x55ffc52d8f30) at
../../../../glib/gmain.c:3148
        dispatch = 0x7f77999cc510 <g_timeout_dispatch>
        prev_source = 0x0
        was_in_call = 0
        user_data = 0x55ffc52d2750
        callback = 0x55ffc458f800 <browse_poll>
        cb_funcs = <optimized out>
        cb_data = 0x55ffc52f6ab0
        need_destroy = <optimized out>
        source = 0x55ffc531afd0
        current = 0x55ffc5308890
        i = 0
#8  0x00007f77999cbaaa in g_main_context_dispatch
(context=context@entry=0x55ffc52d8f30) at ../../../../glib/gmain.c:3813
#9  0x00007f77999cbe60 in g_main_context_iterate
(context=0x55ffc52d8f30, block=block@entry=1, dispatch=dispatch@entry=1,
self=<optimized out>)
    at ../../../../glib/gmain.c:3886
        max_priority = 2147483647
        timeout = 43837
        some_ready = 1
        nfds = 3
        allocated_nfds = 3
        fds = <optimized out>
#10 0x00007f77999cc182 in g_main_loop_run (loop=0x55ffc530ffe0) at
../../../../glib/gmain.c:4082
        __func__ = "g_main_loop_run"
#11 0x000055ffc458213b in main (argc=1, argv=0x7ffdff1bc988) at
utils/cups-browsed.c:7987
        ret = 1
        http = <optimized out>
        i = <optimized out>
        val = <optimized out>
        p = <optimized out>
        proxy = 0x55ffc52f5460 [GDBusProxy]
        error = 0x0
        subscription_id = 824
        action =
          {__sigaction_handler = {sa_handler = 0x55ffc4585ec0
<sigusr2_handler>, sa_sigaction = 0x55ffc4585ec0 <sigusr2_handler>},
sa_mask = {__val = {2048, 0 <repeats 15 times>}}, sa_flags = 0,
sa_restorer = 0x0}

Regards.

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: