Bug#320721: capi4hylafax: c2faxrecv segfaults when an incoming faxtransmission enters
Package: capi4hylafax
Version: 1:01.02.03-10
Severity: grave
Justification: renders package unusable
c2faxrecv segfaults when a fax transmission comes in. I use a AVM B1
PCI V4.0-Card. Here are the interesting error messages:
luggage:/var/log# dmesg|grep B1
b1pci: PCI BIOS reports AVM-B1 V4 at i/o 0x9400, irq 12, mem 0xf3005000
b1pci: AVM B1 PCI V4 at i/o 0x9400, irq 12, mem 0xf3005000, revision 4 (dma)
b1pciv4-9400: card 1 "B1" ready.
b1pciv4-9400: B1-card (3.10-02) now active
luggage:/var/log# grep segfault messages
Jul 31 19:34:00 localhost kernel: c2faxsend[5635]: segfault at 0000005463800000 rip 0000002a95edbf3c rsp 00000000407fe518 error 4
Jul 31 19:36:59 localhost kernel: c2faxsend[10597]: segfault at 0000005463800000 rip 0000002a95edbf3c rsp 00000000407fe518 error 4
Jul 31 20:31:43 localhost kernel: c2faxsend[26137]: segfault at 0000005463800000 rip 0000002a95edbf3c rsp 00000000407fe518 error 4
Jul 31 20:36:27 localhost kernel: c2faxsend[26197]: segfault at 0000005462e00000 rip 0000002a95edbf3c rsp 00000000407fe518 error 4
Jul 31 20:44:31 localhost kernel: c2faxrecv[26032]: segfault at 0000000000000000 rip 000000000041923f rsp 00000000407fe960 error 4
Jul 31 20:49:16 localhost kernel: c2faxrecv[26366]: segfault at 0000000000000000 rip 000000000041923f rsp 00000000407fe960 error 4
Jul 31 21:07:21 localhost kernel: c2faxrecv[2424]: segfault at 0000000000000000 rip 000000000041923f rsp 00000000407fe960 error 4
Jul 31 21:24:05 localhost kernel: c2faxrecv[23087]: segfault at 0000000000000000 rip 000000000041923f rsp 00000000407fe960 error 4
Jul 31 21:31:14 localhost kernel: c2faxrecv[28141]: segfault at 0000000000000000 rip 000000000041923f rsp 00000000407fe960 error 4
luggage:/var/log# tail syslog
Jul 31 21:35:43 localhost kernel: kcapi: handle_message: applid 1 state released (LISTEN_CONF ID=001 #0x0001 LEN=0014
Jul 31 21:35:43 localhost kernel: Controller/PLCI/NCCI = 0x1
Jul 31 21:35:43 localhost kernel: Info = 0x0
Jul 31 21:35:43 localhost kernel: )
Jul 31 21:38:54 localhost kernel: capilib_new_ncci: kcapi: appl 1 ncci 0x10101 up
Jul 31 21:40:30 localhost kernel: kcapi: appl 1 ncci 0x10101 forced down
Jul 31 21:40:30 localhost kernel: capilib_free_ncci: ncci 0x10101 not found
luggage:/var/log# tail daemon.log
Jul 31 21:21:51 localhost FaxQueuer[23073]: HylaFAX (tm) Version 4.2.1
Jul 31 21:21:51 localhost FaxQueuer[23073]: Copyright (c) 1990-1996 Sam Leffler
Jul 31 21:21:51 localhost FaxQueuer[23073]: Copyright (c) 1991-1996 Silicon Graphics, Inc.
Jul 31 21:21:51 localhost HylaFAX[23075]: HylaFAX INET Protocol Server: restarted.
I recompiled capi4hylafax by myself to have non-stripped binaries
(commented out dh_strip from debian/rules) and started c2faxrecv
within a gdb. This is what came out:
This GDB was configured as "x86_64-linux"...Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) run
Starting program: /usr/bin/c2faxrecv
[Thread debugging using libthread_db enabled]
[New Thread 182908127168 (LWP 28341)]
[New Thread 1082128752 (LWP 28344)]
Jul 31 21:37:44 localhost kernel: IPv6 addrconf: prefix with wrong length 48
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1082128752 (LWP 28344)]
0x000000000041923f in CBasicFaxConversion::RecvSFF ()
(gdb)
(gdb) bt
#0 0x000000000041923f in CBasicFaxConversion::RecvSFF ()
#1 0x0000000000403832 in CFaxReceive::GetData ()
#2 0x0000000000412459 in CTransferChannel::DataB3Ind ()
#3 0x000000000040a17c in CCAPI20_Channel::DATA_B3_IND ()
#4 0x000000000040bfab in CCAPI20_MsgBase::HandleGetMessage ()
#5 0x000000000041c259 in CapiBase_WaitForSignalThread ()
#6 0x0000002a95671b55 in start_thread () from /lib/libpthread.so.0
#7 0x0000002a95f2e7f0 in clone () from /lib/libc.so.6
#8 0x0000000000000000 in ?? ()
#9 0x0000000000000000 in ?? ()
#10 0x0000000000000000 in ?? ()
#11 0x0000000000000000 in ?? ()
#12 0x0000000000000000 in ?? ()
#13 0x0000000000000000 in ?? ()
#14 0x0000000000000000 in ?? ()
#15 0x0000000000000000 in ?? ()
#16 0x0000002a9607de00 in __check_rhosts_file () from /lib/libc.so.6
#17 0x00000000407ffdc8 in ?? ()
#18 0x0000000000000006 in ?? ()
#19 0x0000002a95f679a0 in ?? () from /lib/libc.so.6
#20 0x0000000000000000 in ?? ()
#21 0x0000000000000000 in ?? ()
#22 0x0000002a96097580 in __after_morecore_hook () from /lib/libc.so.6
#23 0x0000000000000000 in ?? ()
#24 0x0000000000000000 in ?? ()
#25 0x0000000000000000 in ?? ()
#26 0x00000000407ff970 in ?? ()
#27 0x0000000000553c78 in ?? ()
#28 0x00000000407ff970 in ?? ()
#29 0x0000000000000001 in ?? ()
#30 0x0000000000000000 in ?? ()
#31 0x0000000000000000 in ?? ()
#32 0x0000000000000000 in ?? ()
#33 0x0000000000000000 in ?? ()
#34 0x0000000000000000 in ?? ()
#35 0x0000000000000000 in ?? ()
#36 0x0000000000000000 in ?? ()
#37 0x0000000000000000 in ?? ()
#38 0x0000000000000000 in ?? ()
#39 0x0000000000000000 in ?? ()
#40 0x0000000000000000 in ?? ()
#41 0x0000000000000000 in ?? ()
#42 0x0000002a9577a1d0 in stack_cache () from /lib/libpthread.so.0
#43 0x0000002a9577a1d0 in stack_cache () from /lib/libpthread.so.0
#44 0x0000000000006eb8 in ?? ()
#45 0x0000000000000000 in ?? ()
#46 0x00000000407ff830 in ?? ()
#47 0x0000000000000000 in ?? ()
#48 0x0000000000000000 in ?? ()
#49 0x0000000000000000 in ?? ()
#50 0x0000000000000000 in ?? ()
#51 0x0000000000000000 in ?? ()
#52 0x0000000000000000 in ?? ()
#53 0x0000000000000000 in ?? ()
#54 0x0000000000000000 in ?? ()
#55 0x0000000000000000 in ?? ()
#56 0x0000000000000000 in ?? ()
#57 0x0000000000000000 in ?? ()
#58 0x0000000000000000 in ?? ()
#59 0x0000000000000000 in ?? ()
#60 0x0000000000000000 in ?? ()
#61 0x0000000000000000 in ?? ()
#62 0x0000000000000000 in ?? ()
#63 0x0000000000000000 in ?? ()
#64 0x0000000000000000 in ?? ()
#65 0x0000000000000000 in ?? ()
#66 0x0000000000000000 in ?? ()
#67 0x0000000000000000 in ?? ()
#68 0x0000000000000000 in ?? ()
#69 0x0000000000000000 in ?? ()
#70 0x0000000000000000 in ?? ()
#71 0x0000000000000000 in ?? ()
#72 0x0000000000000000 in ?? ()
#73 0x0000000000000000 in ?? ()
#74 0x0000000000000000 in ?? ()
#75 0x0000000000000000 in ?? ()
#76 0x0000000000000000 in ?? ()
#77 0x0000000000000000 in ?? ()
#78 0x0000000000000000 in ?? ()
#79 0x0000000000000000 in ?? ()
#80 0x0000000000000000 in ?? ()
#81 0x0000000000000000 in ?? ()
#82 0x0000000000000000 in ?? ()
#83 0x0000000000000000 in ?? ()
#84 0x0000000000000000 in ?? ()
#85 0x0000000000000000 in ?? ()
#86 0x0000000000000000 in ?? ()
#87 0x0000000000000000 in ?? ()
#88 0x0000000000000000 in ?? ()
#89 0x0000000000000000 in ?? ()
#90 0x0000000000000000 in ?? ()
#91 0x0000000000000000 in ?? ()
#92 0x0000000000000000 in ?? ()
#93 0x0000000000000000 in ?? ()
#94 0x0000000000000000 in ?? ()
#95 0x0000000000000000 in ?? ()
#96 0x0000000000000000 in ?? ()
#97 0x0000000000000000 in ?? ()
#98 0x0000000000000000 in ?? ()
#99 0x0000000000000000 in ?? ()
#100 0x0000000000000000 in ?? ()
#101 0x0000000000000000 in ?? ()
#102 0x0000000000000000 in ?? ()
#103 0x0000000000000000 in ?? ()
#104 0x0000000000000000 in ?? ()
#105 0x0000000000000000 in ?? ()
#106 0x0000000000000000 in ?? ()
#107 0x0000000000000000 in ?? ()
#108 0x0000000000000000 in ?? ()
#109 0x0000000000000000 in ?? ()
#110 0x0000000000000000 in ?? ()
#111 0x0000000000000000 in ?? ()
#112 0x0000000000000000 in ?? ()
#113 0x00000000407ffa20 in ?? ()
#114 0x0000000000000000 in ?? ()
#115 0x0000000000000000 in ?? ()
#116 0x0000000000000000 in ?? ()
#117 0x0000000000000000 in ?? ()
#118 0x0000000000000000 in ?? ()
#119 0x0000000000000000 in ?? ()
#120 0x0000000000000000 in ?? ()
#121 0x0000000000000000 in ?? ()
#122 0x0000000000000000 in ?? ()
#123 0x0000000000000000 in ?? ()
#124 0x0000000000000000 in ?? ()
#125 0x0000000000000000 in ?? ()
#126 0x0000000000000000 in ?? ()
#127 0x0000000000000000 in ?? ()
#128 0x0000000000000000 in ?? ()
#129 0x0000000000000000 in ?? ()
#130 0x0000000000000000 in ?? ()
#131 0x0000000000000000 in ?? ()
#132 0x0000000000000000 in ?? ()
#133 0x0000000000000000 in ?? ()
#134 0x0000000000000000 in ?? ()
#135 0x0000000000000000 in ?? ()
#136 0x0000000000000000 in ?? ()
#137 0x0000000000000000 in ?? ()
#138 0x0000000000000000 in ?? ()
#139 0x0000000000000000 in ?? ()
#140 0x0000000000000000 in ?? ()
#141 0x0000000000000000 in ?? ()
#142 0x0000000000000000 in ?? ()
#143 0x0000000000000000 in ?? ()
#144 0x0000000000000000 in ?? ()
#145 0x0000000100006eb5 in ?? ()
#146 0x0000000000000000 in ?? ()
#147 0x0000033e66e6395f in ?? ()
#148 0x0000000000000000 in ?? ()
#149 0x0000000000000000 in ?? ()
#150 0x0000000000000000 in ?? ()
#151 0x0000000000000000 in ?? ()
#152 0x000000000041c190 in CapiBase_GetProfile ()
#153 0x0000000000535f30 in ?? ()
#154 0x0000000000000000 in ?? ()
#155 0x0000000000000000 in ?? ()
#156 0x0000000000000000 in ?? ()
#157 0x0000000000000000 in ?? ()
#158 0x0000000000000000 in ?? ()
#159 0x0000000000000000 in ?? ()
#160 0x0000000000000000 in ?? ()
#161 0x0000000000000000 in ?? ()
#162 0x0000000040000000 in ?? ()
#163 0x0000000000800000 in ?? ()
#164 0x0000000000001000 in ?? ()
#165 0x0000000000000000 in ?? ()
#166 0x0000000000000000 in ?? ()
#167 0x0000000000000000 in ?? ()
#168 0x0000000000000000 in ?? ()
#169 0x0000000000000000 in ?? ()
#170 0x0000000000000000 in ?? ()
#171 0x0000000000000000 in ?? ()
#172 0x0000000000000000 in ?? ()
#173 0x0000000000000000 in ?? ()
#174 0x0000000000000000 in ?? ()
#175 0x0000000000000000 in ?? ()
#176 0x0000000000000000 in ?? ()
#177 0x0000000000000000 in ?? ()
#178 0x0000000000000000 in ?? ()
#179 0x0000000000000000 in ?? ()
#180 0x0000000000000000 in ?? ()
#181 0x0000000000000000 in ?? ()
#182 0x0000000000000000 in ?? ()
#183 0x0000000000000000 in ?? ()
#184 0x0000000000000000 in ?? ()
#185 0x0000000000000000 in ?? ()
#186 0x0000000000000000 in ?? ()
#187 0x0000000000000000 in ?? ()
#188 0x0000000000000000 in ?? ()
#189 0x0000000000000000 in ?? ()
#190 0x0000000000000000 in ?? ()
#191 0x0000000000000000 in ?? ()
#192 0x0000000000000000 in ?? ()
#193 0x0000000000000000 in ?? ()
#194 0x0000000000000000 in ?? ()
#195 0x0000000000000000 in ?? ()
#196 0x0000000000000000 in ?? ()
#197 0x0000000000000000 in ?? ()
#198 0x0000000000000000 in ?? ()
#199 0x0000000000000000 in ?? ()
#200 0x0000000000000000 in ?? ()
#201 0x0000000000000000 in ?? ()
#202 0x0000000000000000 in ?? ()
#203 0x0000000000000000 in ?? ()
#204 0x0000000000000000 in ?? ()
#205 0x0000000000000000 in ?? ()
#206 0x0000000000000000 in ?? ()
#207 0x0000000000000000 in ?? ()
#208 0x0000000000000000 in ?? ()
#209 0x0000000000000000 in ?? ()
#210 0x0000000000000000 in ?? ()
#211 0x0000000000000000 in ?? ()
#212 0x0000000000000000 in ?? ()
#213 0x0000000000000000 in ?? ()
#214 0x0000000000000000 in ?? ()
#215 0x0000000000000000 in ?? ()
#216 0x0000000000000000 in ?? ()
#217 0x0000000000000000 in ?? ()
#218 0x0000000000000000 in ?? ()
#219 0x0000000000000000 in ?? ()
#220 0x0000000000000000 in ?? ()
#221 0x0000000000000000 in ?? ()
#222 0x0000000000000000 in ?? ()
#223 0x0000000000000000 in ?? ()
#224 0x0000000000000000 in ?? ()
#225 0x0000000000000000 in ?? ()
#226 0x0000000000000000 in ?? ()
#227 0x0000000000000000 in ?? ()
#228 0x0000000000000000 in ?? ()
#229 0x0000000000000000 in ?? ()
#230 0x0000000000000000 in ?? ()
#231 0x0000000000000000 in ?? ()
#232 0x0000000000000000 in ?? ()
#233 0x0000000000000000 in ?? ()
#234 0x0000000000000000 in ?? ()
#235 0x0000000000000000 in ?? ()
Cannot access memory at address 0x40800000
(gdb) quit
-- System Information:
Debian Release: 3.1
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.8-11-amd64-k8
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages capi4hylafax depends on:
ii isdnactivecards 1:3.6.2005-01-03-5 Support utilities for active ISDN
ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an
ii libcapi20-2 1:3.6.2005-01-03-5 libraries for CAPI support
ii libgcc1 1:3.4.3-13 GCC support library
ii libstdc++5 1:3.3.5-13 The GNU Standard C++ Library v3
ii libtiff4 3.7.2-3 Tag Image File Format (TIFF) libra
ii zlib1g 1:1.2.2-4 compression library - runtime
-- no debconf information
Reply to: