[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: rekall doesn't work properly on debian
At risk of being shot at at sunrise, I had rekall working without any problems in Gentoo a few days back. Does the following help you at all? 

I don't think it is going to help - all the required dependencies are seemed to
be fully met, but nontheless the problem still exists.
Maybe gdb backtraces could be helpful. 

I included the backtrace at the end of the message - maybe you can make some
sense of it.
Since I'm interested in getting this working in Debian (as well as working out how apt-get actually works ;) can you post the url you found the packages at and I'll have a play myself. 

You can get the packages from here: http://www.edgar.org.uk/debian/packages/

It seems that I will have to compile rekall with static linking using other
distribution, and then try to use it on Debian. Right now I am in process of
doing that on Slackware - maybe it is going to succeed then.


And here is gdb's backtrace. As you can see, there is something that looks
like an internal loop - I snipped around 130000 lines out from the backtrace,
leaving only the beginning and the end - the rest are calls to
KBPartWidget::showMaximized


 #0  0x419fcdb9 in _mcleanup () from /lib/libc.so.6
#1  0x419fd8bf in mcount () from /lib/libc.so.6
#2 0x40052d24 in QGuardedPtr<KBSDIMainWindow>::operator KBSDIMainWindow* (this=0x8168280) at qguardedptr.h:117 #3 0x400ad444 in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:350 #4 0x400ad47c in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:355 
......
......
#130214 0x400ad47c in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:355 #130215 0x400ad47c in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:355 #130216 0x400ad47c in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:355 #130217 0x400ad47c in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:355 #130218 0x400ad47c in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:355 #130219 0x400ad47c in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:355 #130220 0x400ad47c in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:355 #130221 0x400ad47c in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:355 #130222 0x400ad47c in KBPartWidget::showMaximized (this=0x8168208) at kb_partwidget.cpp:355 
#130223 0x412d8c0c in QWorkspace::activateWindow () from /usr/lib/libqt-mt.so.3
#130224 0x412dc664 in QWorkspace::eventFilter () from /usr/lib/libqt-mt.so.3
#130225 0x41104e5e in QObject::activate_filters () from /usr/lib/libqt-mt.so.3
#130226 0x41104d8c in QObject::event () from /usr/lib/libqt-mt.so.3
#130227 0x4113d60f in QWidget::event () from /usr/lib/libqt-mt.so.3
#130228 0x412e174f in QWorkspaceChild::event () from /usr/lib/libqt-mt.so.3
#130229 0x410aabcf in QApplication::internalNotify () from /usr/lib/libqt-mt.so.3
#130230 0x410aa1ce in QApplication::notify () from /usr/lib/libqt-mt.so.3
#130231 0x40c38f13 in KApplication::notify () from /usr/lib/libkdecore.so.4
#130232 0x4113c907 in QWidget::hide () from /usr/lib/libqt-mt.so.3
#130233 0x4113d08b in QWidget::close () from /usr/lib/libqt-mt.so.3
#130234 0x412e2e60 in QWorkspaceChild::childEvent () from /usr/lib/libqt-mt.so.3
#130235 0x41104d69 in QObject::event () from /usr/lib/libqt-mt.so.3
#130236 0x4113d60f in QWidget::event () from /usr/lib/libqt-mt.so.3
#130237 0x412e174f in QWorkspaceChild::event () from /usr/lib/libqt-mt.so.3
#130238 0x410aabcf in QApplication::internalNotify () from /usr/lib/libqt-mt.so.3
#130239 0x410aa1ce in QApplication::notify () from /usr/lib/libqt-mt.so.3
#130240 0x40c38f13 in KApplication::notify () from /usr/lib/libkdecore.so.4
#130241 0x41105731 in QObject::removeChild () from /usr/lib/libqt-mt.so.3
#130242 0x411043ca in QObject::~QObject () from /usr/lib/libqt-mt.so.3
#130243 0x41137bc1 in QWidget::~QWidget () from /usr/lib/libqt-mt.so.3
#130244 0x400ad242 in ~KBPartWidget (this=0x81d14d8) at kb_partwidget.cpp:262
#130245 0x4055e20a in KParts::Part::~Part () from /usr/lib/libkparts.so.2
#130246 0x4055eaed in KParts::ReadOnlyPart::~ReadOnlyPart () from /usr/lib/libkparts.so.2 #130247 0x4055f6af in KParts::ReadWritePart::~ReadWritePart () from /usr/lib/libkparts.so.2 #130248 0x400abc1b in ~TKPart (this=0x81d4210, __vtt_parm=0x4219718c) at kb_part.cpp:73 #130249 0x400aab9f in ~KBasePart (this=0x81d4210, __vtt_parm=0x42197188) at kb_part.cpp:133 #130250 0x400a9531 in ~KBViewer (this=0x81d4210, __vtt_parm=0x42197184) at kb_viewer.cpp:77 
#130251 0x4217673b in ~KBTableViewer (this=0x81d4210) at kb_tableviewer.cpp:174
#130252 0x400aeb0e in ~KBObjBase (this=0x81d0178) at kb_objbase.cpp:70
#130253 0x4217bad5 in ~KBTableBase (this=0x81d0178) at kb_tablebase.cpp:72
#130254 0x400af2e5 in KBObjBase::closeObject (this=0x81d0178) at kb_objbase.cpp:181
#130255 0x400ab54f in KBasePart::slotClose (this=0x81d4210) at kb_part.cpp:294
#130256 0x400ad694 in KBPartWidget::closeEvent (this=0x81d14d8) at kb_partwidget.cpp:412 
#130257 0x4113d822 in QWidget::event () from /usr/lib/libqt-mt.so.3
#130258 0x410aabcf in QApplication::internalNotify () from /usr/lib/libqt-mt.so.3
#130259 0x410aa1ce in QApplication::notify () from /usr/lib/libqt-mt.so.3
#130260 0x40c38f13 in KApplication::notify () from /usr/lib/libkdecore.so.4
#130261 0x4113d0c5 in QWidget::close () from /usr/lib/libqt-mt.so.3
#130262 0x412ddf6a in QWorkspace::closeActiveWindow () from /usr/lib/libqt-mt.so.3
#130263 0x414721d4 in QWorkspace::qt_invoke () from /usr/lib/libqt-mt.so.3
#130264 0x4110752c in QObject::activate_signal () from /usr/lib/libqt-mt.so.3
#130265 0x4144508a in QSignal::signal () from /usr/lib/libqt-mt.so.3
#130266 0x411216ed in QSignal::activate () from /usr/lib/libqt-mt.so.3
#130267 0x410a48be in QAccelPrivate::activate () from /usr/lib/libqt-mt.so.3
#130268 0x410a332c in QAccelManager::dispatchAccelEvent () from /usr/lib/libqt-mt.so.3 
#130269 0x410a242e in qt_dispatchAccelEvent () from /usr/lib/libqt-mt.so.3
#130270 0x410aa1e5 in QApplication::notify () from /usr/lib/libqt-mt.so.3
#130271 0x40c38f13 in KApplication::notify () from /usr/lib/libkdecore.so.4
#130272 0x410a29a8 in QAccelManager::tryAccelEvent () from /usr/lib/libqt-mt.so.3
#130273 0x410a239e in qt_tryAccelEvent () from /usr/lib/libqt-mt.so.3
#130274 0x41041b41 in QETWidget::translateKeyEvent () from /usr/lib/libqt-mt.so.3
#130275 0x4103d392 in QApplication::x11ProcessEvent () from /usr/lib/libqt-mt.so.3
#130276 0x410541a4 in QEventLoop::processEvents () from /usr/lib/libqt-mt.so.3
#130277 0x410bcf28 in QEventLoop::enterLoop () from /usr/lib/libqt-mt.so.3
#130278 0x410bcdd8 in QEventLoop::exec () from /usr/lib/libqt-mt.so.3
#130279 0x410aae21 in QApplication::exec () from /usr/lib/libqt-mt.so.3
#130280 0x4004b6eb in rekall (argc=1, argv=0xbffff9f4, authGbl=0) at kb_main.cpp:599
#130281 0x4004b74b in rekallMain (argc=1, argv=0xbffff9f4, authGbl=0) at kb_main.cpp:612 
#130282 0x08048983 in main (argc=1, argv=0xbffff9f4) at rekall.cpp:29

Program received signal SIGSEGV, Segmentation fault.
0x419fcdb9 in _mcleanup () from /lib/libc.so.6
Reply to: