View Issue Details

IDProjectCategoryView StatusLast Update
0016290CentOS-7tcshpublic2019-07-24 13:17
Reporterthomasy 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
PlatformOSOS Version7
Product Version 
Target VersionFixed in Version 
Summary0016290: [abrt] tcsh: free(): tcsh killed by SIGSEGV
DescriptionDescription of problem:


Version-Release number of selected component:
tcsh-6.18.01-15.el7

Truncated backtrace:
Thread no. 1 (8 frames)
 #0 free at /lib64/libc.so.6
 #1 sfree at tc.alloc.c:587
 #2 printprompt at tc.prompt.c:154
 #3 Inputl at ed.inputl.c:342
 #4 bgetc at sh.lex.c:1667
 #5 readc at sh.lex.c:1428
 #7 lex at sh.lex.c:162
 #8 process at sh.c:2145
Additional Informationreporter: libreport-2.1.11.1
backtrace_rating: 4
cmdline: -csh
crash_function: free
executable: /usr/bin/tcsh
global_pid: 22832
kernel: 3.10.0-957.21.3.el7.x86_64
pkg_fingerprint: 24C6 A8A7 F4A8 0EB5
pkg_vendor: CentOS
runlevel: N 5
type: CCpp
uid: 0
TagsNo tags attached.
abrt_hash21b351a3bde12c7de9404586ad181f9c3906b65c
URLhttps://retrace.fedoraproject.org/faf/reports/bthash/6c9feefd3725282030de37cefe74bf9c472561a7

Activities

thomasy

thomasy

2019-07-24 13:17

reporter  

backtrace (9,003 bytes)
[New LWP 22832]
warning: File "/var/cache/abrt-di/usr/lib/debug/lib64/libc-2.17.so.debug" has a different build-id, file skipped
warning: the debug information found in "/var/cache/abrt-di/usr/lib/debug//lib64/libc-2.17.so.debug" does not match "/lib64/libc.so.6" (CRC mismatch).

Core was generated by `-csh'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007f71990a671c in free () from /lib64/libc.so.6

Thread 1 (LWP 22832):
#0  0x00007f71990a671c in free () from /lib64/libc.so.6
No symbol table info available.
#1  0x000000000043e41d in sfree (p=<optimized out>) at tc.alloc.c:587
No locals.
#2  0x00000000004445a9 in printprompt (promptno=promptno@entry=1, str=str@entry=0x0) at tc.prompt.c:154
        ocp = 0xdb4830 L"%R? "
        ostr = 0x0
        lclock = 1563473633
        cp = <optimized out>
#3  0x000000000043a1cb in Inputl () at ed.inputl.c:342
        retval = <optimized out>
        cmdnum = <optimized out>
        tch = 0 '\000'
        ch = 10 L'\n'
        num = 15
        expnum = <optimized out>
        crct = 0x0
        autol = 0xdbd870
        matchbeep = 0x0
        imode = <optimized out>
        SaveChar = <optimized out>
        CorrChar = <optimized out>
        matchval = <optimized out>
        nr_history_exp = <optimized out>
        fn = <optimized out>
        curlen = 0
        newlen = <optimized out>
        idx = <optimized out>
        autoexpand = <optimized out>
#4  0x0000000000419ccd in bgetc () at sh.lex.c:1667
        c = <optimized out>
        off = <optimized out>
        buf = <optimized out>
        numleft = <optimized out>
        roomleft = <optimized out>
        ch = <optimized out>
#5  readc (wanteof=wanteof@entry=0) at sh.lex.c:1428
        c = <optimized out>
        sincereal = 0
#6  0x000000000041c238 in readc (wanteof=0) at sh.lex.c:1354
        c = <optimized out>
        sincereal = 0
#7  lex (hp=hp@entry=0x673d10 <paraml>) at sh.lex.c:162
        wdp = <optimized out>
        c = <optimized out>
        parsehtime = 0
#8  0x00000000004059d7 in process (catch=1) at sh.c:2145
        t = <optimized out>
        hadhist = <optimized out>
        old_pintr_disabled = 1
        osetexit = {j = {{__jmpbuf = {18, 6235816606964194180, 0, 0, 14369680, 0, 6235816606891842436, -6236965909076698236}, __mask_was_saved = 1, __saved_mask = {__val = {0 <repeats 16 times>}}}}}
        didexitset = 1
#9  0x00000000004049a4 in main (argc=<optimized out>, argv=0x7ffde51316c8) at sh.c:1411
        batch = <optimized out>
        nexececho = 0
        nofile = <optimized out>
        nverbose = 0
        rdirs = 0
        quitit = <optimized out>
        cp = <optimized out>
        cp2 = <optimized out>
        tcp = <optimized out>
        ttyn = <optimized out>
        f = <optimized out>
        reenter = <optimized out>
        tempv = <optimized out>
        osetintr = 1
        oparintr = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0, 0, 140125879039840, 60, 1, 1, 14369680, 0, 140125875626796, 1, 60, 14369680, 4449010, 14354768, 4478727, 481036337153}}, sa_flags = 0, sa_restorer = 0x0}
From                To                  Syms Read   Shared Object Library
0x00007f7199631e40  0x00007f719963dbb8  Yes         /lib64/libtinfo.so.5
0x00007f71993eedb0  0x00007f71993f3c6c  Yes         /lib64/libcrypt.so.1
0x00007f7199040930  0x00007f719918fd2f  Yes (*)     /lib64/libc.so.6
0x00007f7198e1eb40  0x00007f7198e1f1bb  Yes         /lib64/libfreebl3.so
0x00007f719984fad0  0x00007f719986af80  Yes         /lib64/ld-linux-x86-64.so.2
0x00007f7198c1ad90  0x00007f7198c1b88e  Yes         /lib64/libdl.so.2
0x00007f71924df130  0x00007f71924e6481  Yes         /lib64/libnss_files.so.2
(*): Shared library is missing debugging information.
$1 = 0x0
No symbol "__glib_assert_msg" in current context.
rax            0x0	0
rbx            0xe02ef0	14692080
rcx            0x0	0
rdx            0x1	1
rsi            0x0	0
rdi            0x2f0000002a	201863462954
rbp            0x1	0x1
rsp            0x7ffde5131018	0x7ffde5131018
r8             0x110	272
r9             0x0	0
r10            0x11	17
r11            0xa3d70a3d70a3d70b	-6640827866535438581
r12            0x0	0
r13            0x5d30b6e1	1563473633
r14            0x0	0
r15            0x3	3
rip            0x7f71990a671c	0x7f71990a671c <free+28>
eflags         0x10202	[ IF RF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0
st0            *value not available*
st1            *value not available*
st2            *value not available*
st3            *value not available*
st4            *value not available*
st5            *value not available*
st6            *value not available*
st7            *value not available*
fctrl          *value not available*
fstat          *value not available*
ftag           *value not available*
fiseg          *value not available*
fioff          *value not available*
foseg          *value not available*
fooff          *value not available*
fop            *value not available*
xmm0           *value not available*
xmm1           *value not available*
xmm2           *value not available*
xmm3           *value not available*
xmm4           *value not available*
xmm5           *value not available*
xmm6           *value not available*
xmm7           *value not available*
xmm8           *value not available*
xmm9           *value not available*
xmm10          *value not available*
xmm11          *value not available*
xmm12          *value not available*
xmm13          *value not available*
xmm14          *value not available*
xmm15          *value not available*
mxcsr          *value not available*
Dump of assembler code for function free:
   0x00007f71990a6700 <+0>:	mov    0x3407d9(%rip),%rax        # 0x7f71993e6ee0
   0x00007f71990a6707 <+7>:	mov    (%rax),%rax
   0x00007f71990a670a <+10>:	test   %rax,%rax
   0x00007f71990a670d <+13>:	jne    0x7f71990a67d2 <free+210>
   0x00007f71990a6713 <+19>:	test   %rdi,%rdi
   0x00007f71990a6716 <+22>:	je     0x7f71990a67d0 <free+208>
=> 0x00007f71990a671c <+28>:	mov    -0x8(%rdi),%rax
   0x00007f71990a6720 <+32>:	lea    -0x10(%rdi),%rcx
   0x00007f71990a6724 <+36>:	test   $0x2,%al
   0x00007f71990a6726 <+38>:	jne    0x7f71990a6750 <free+80>
   0x00007f71990a6728 <+40>:	test   $0x4,%al
   0x00007f71990a672a <+42>:	lea    0x34102f(%rip),%rdi        # 0x7f71993e7760 <main_arena>
   0x00007f71990a6731 <+49>:	je     0x7f71990a673f <free+63>
   0x00007f71990a6733 <+51>:	mov    %rcx,%rax
   0x00007f71990a6736 <+54>:	and    $0xfffffffffc000000,%rax
   0x00007f71990a673c <+60>:	mov    (%rax),%rdi
   0x00007f71990a673f <+63>:	xor    %edx,%edx
   0x00007f71990a6741 <+65>:	mov    %rcx,%rsi
   0x00007f71990a6744 <+68>:	jmpq   0x7f71990a20f0 <_int_free>
   0x00007f71990a6749 <+73>:	nopl   0x0(%rax)
   0x00007f71990a6750 <+80>:	mov    0x340a7e(%rip),%edx        # 0x7f71993e71d4 <mp_+52>
   0x00007f71990a6756 <+86>:	test   %edx,%edx
   0x00007f71990a6758 <+88>:	jne    0x7f71990a6788 <free+136>
   0x00007f71990a675a <+90>:	cmp    0x340a4f(%rip),%rax        # 0x7f71993e71b0 <mp_+16>
   0x00007f71990a6761 <+97>:	jbe    0x7f71990a6788 <free+136>
   0x00007f71990a6763 <+99>:	cmp    $0x2000000,%rax
   0x00007f71990a6769 <+105>:	ja     0x7f71990a6788 <free+136>
   0x00007f71990a676b <+107>:	and    $0xfffffffffffffff8,%rax
   0x00007f71990a676f <+111>:	lea    (%rax,%rax,1),%rdx
   0x00007f71990a6773 <+115>:	mov    %rax,0x340a36(%rip)        # 0x7f71993e71b0 <mp_+16>
   0x00007f71990a677a <+122>:	mov    %rdx,0x340a1f(%rip)        # 0x7f71993e71a0 <mp_>
   0x00007f71990a6781 <+129>:	nop
   0x00007f71990a6782 <+130>:	jmp    0x7f71990a678c <free+140>
   0x00007f71990a6784 <+132>:	nopl   0x0(%rax)
   0x00007f71990a6788 <+136>:	and    $0xfffffffffffffff8,%rax
   0x00007f71990a678c <+140>:	mov    -0x10(%rdi),%rdx
   0x00007f71990a6790 <+144>:	mov    %rcx,%rdi
   0x00007f71990a6793 <+147>:	lea    (%rax,%rdx,1),%rsi
   0x00007f71990a6797 <+151>:	mov    0x3406aa(%rip),%rax        # 0x7f71993e6e48
   0x00007f71990a679e <+158>:	sub    %rdx,%rdi
   0x00007f71990a67a1 <+161>:	mov    %rsi,%rdx
   0x00007f71990a67a4 <+164>:	mov    0x18(%rax),%rax
   0x00007f71990a67a8 <+168>:	or     %rdi,%rdx
   0x00007f71990a67ab <+171>:	sub    $0x1,%rax
   0x00007f71990a67af <+175>:	test   %rax,%rdx
   0x00007f71990a67b2 <+178>:	jne    0x7f71990a67d8 <free+216>
   0x00007f71990a67b4 <+180>:	subl   $0x1,0x340a0d(%rip)        # 0x7f71993e71c8 <mp_+40>
   0x00007f71990a67bb <+187>:	sub    %rsi,0x340a16(%rip)        # 0x7f71993e71d8 <mp_+56>
   0x00007f71990a67c2 <+194>:	jmpq   0x7f7199119570 <munmap>
   0x00007f71990a67c7 <+199>:	nopw   0x0(%rax,%rax,1)
   0x00007f71990a67d0 <+208>:	repz retq 
   0x00007f71990a67d2 <+210>:	mov    (%rsp),%rsi
   0x00007f71990a67d6 <+214>:	jmpq   *%rax
   0x00007f71990a67d8 <+216>:	mov    %rcx,%rdi
   0x00007f71990a67db <+219>:	jmpq   0x7f71990413ea <munmap_chunk.part.1>
End of assembler dump.
backtrace (9,003 bytes)
cgroup (243 bytes)
11:cpuset:/
10:memory:/user.slice
9:blkio:/user.slice
8:cpuacct,cpu:/user.slice
7:net_prio,net_cls:/
6:hugetlb:/
5:pids:/user.slice
4:freezer:/
3:devices:/user.slice
2:perf_event:/
1:name=systemd:/user.slice/user-1002.slice/session-8288.scope
cgroup (243 bytes)
core_backtrace (2,079 bytes)
{   "signal": 11
,   "executable": "/usr/bin/tcsh"
,   "stacktrace":
      [ {   "crash_thread": true
        ,   "frames":
              [ {   "address": 140125875627804
                ,   "build_id": "426a04647352308628f2091a30d347edeeded787"
                ,   "build_id_offset": 546588
                ,   "function_name": "__libc_free"
                ,   "file_name": "/usr/lib64/libc-2.17.so"
                }
              , {   "address": 4474281
                ,   "build_id": "fbf93acbcd8c8e9f109ce6fe750fb4953bb48b1c"
                ,   "build_id_offset": 279977
                ,   "function_name": "printprompt"
                ,   "file_name": "/usr/bin/tcsh"
                }
              , {   "address": 4432331
                ,   "build_id": "fbf93acbcd8c8e9f109ce6fe750fb4953bb48b1c"
                ,   "build_id_offset": 238027
                ,   "function_name": "Inputl"
                ,   "file_name": "/usr/bin/tcsh"
                }
              , {   "address": 4299981
                ,   "build_id": "fbf93acbcd8c8e9f109ce6fe750fb4953bb48b1c"
                ,   "build_id_offset": 105677
                ,   "function_name": "readc.part.2"
                ,   "file_name": "/usr/bin/tcsh"
                }
              , {   "address": 4309560
                ,   "build_id": "fbf93acbcd8c8e9f109ce6fe750fb4953bb48b1c"
                ,   "build_id_offset": 115256
                ,   "function_name": "lex"
                ,   "file_name": "/usr/bin/tcsh"
                }
              , {   "address": 4217303
                ,   "build_id": "fbf93acbcd8c8e9f109ce6fe750fb4953bb48b1c"
                ,   "build_id_offset": 22999
                ,   "function_name": "process"
                ,   "file_name": "/usr/bin/tcsh"
                }
              , {   "address": 4213156
                ,   "build_id": "fbf93acbcd8c8e9f109ce6fe750fb4953bb48b1c"
                ,   "build_id_offset": 18852
                ,   "function_name": "main"
                ,   "file_name": "/usr/bin/tcsh"
                } ]
        } ]
}
core_backtrace (2,079 bytes)
thomasy

thomasy

2019-07-24 13:17

reporter  

dso_list (792 bytes)
/usr/lib64/ld-2.17.so glibc-2.17-260.el7_6.6.x86_64 (CentOS) 1562850602
/usr/lib64/libtinfo.so.5.9 ncurses-libs-5.9-14.20130511.el7_4.x86_64 (CentOS) 1515090740
/usr/lib64/libc-2.17.so glibc-2.17-260.el7_6.6.x86_64 (CentOS) 1562850602
/usr/lib/locale/locale-archive glibc-common-2.17-260.el7_6.6.x86_64 (CentOS) 1562850598
/usr/lib64/gconv/gconv-modules.cache glibc-2.17-260.el7_6.6.x86_64 (CentOS) 1562850602
/usr/bin/tcsh tcsh-6.18.01-15.el7.x86_64 (CentOS) 1515089284
/usr/lib64/libdl-2.17.so glibc-2.17-260.el7_6.6.x86_64 (CentOS) 1562850602
/usr/lib64/libfreebl3.so nss-softokn-freebl-3.36.0-5.el7_5.x86_64 (CentOS) 1530350322
/usr/lib64/libnss_files-2.17.so glibc-2.17-260.el7_6.6.x86_64 (CentOS) 1562850602
/usr/lib64/libcrypt-2.17.so glibc-2.17-260.el7_6.6.x86_64 (CentOS) 1562850602
dso_list (792 bytes)
environ (1,766 bytes)
MAIL=/var/spool/mail/thomas
TERM=xterm
DISPLAY=localhost:10.0
HOSTNAME=eda4
LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=01;05;37;41:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=01;36:*.au=01;36:*.flac=01;36:*.mid=01;36:*.midi=01;36:*.mka=01;36:*.mp3=01;36:*.mpc=01;36:*.ogg=01;36:*.ra=01;36:*.wav=01;36:*.axa=01;36:*.oga=01;36:*.spx=01;36:*.xspf=01;36:
LANG=en_US.UTF-8
QTDIR=/usr/lib64/qt-3.3
PATH=/sbin:/bin:/usr/sbin:/usr/bin
LOGNAME=root
USER=root
USERNAME=root
HOME=/root
SHELL=/bin/tcsh
SUDO_COMMAND=/bin/su
SUDO_USER=thomas
SUDO_UID=1002
SUDO_GID=10
XDG_SESSION_ID=8288
XAUTHORITY=/root/.xauth9aKdWD
environ (1,766 bytes)
exploitable (82 bytes)
Likely crash reason: Jump to an invalid address
Exploitable rating (0-9 scale): 6
exploitable (82 bytes)
thomasy

thomasy

2019-07-24 13:17

reporter  

limits (1,323 bytes)
Limit                     Soft Limit           Hard Limit           Units     
Max cpu time              unlimited            unlimited            seconds   
Max file size             unlimited            unlimited            bytes     
Max data size             unlimited            unlimited            bytes     
Max stack size            8388608              unlimited            bytes     
Max core file size        0                    unlimited            bytes     
Max resident set          unlimited            unlimited            bytes     
Max processes             255859               255859               processes 
Max open files            1024                 4096                 files     
Max locked memory         65536                65536                bytes     
Max address space         unlimited            unlimited            bytes     
Max file locks            unlimited            unlimited            locks     
Max pending signals       255859               255859               signals   
Max msgqueue size         819200               819200               bytes     
Max nice priority         0                    0                    
Max realtime priority     0                    0                    
Max realtime timeout      unlimited            unlimited            us        
limits (1,323 bytes)
machineid (135 bytes)
systemd=21650a79d11c4c38a2ed0053b910725e
sosreport_uploader-dmidecode=072847746645d77adb06fff0d54e5359e1ae6af46169eb1e74d78b8e4dd42a9f
machineid (135 bytes)
maps (3,816 bytes)
00400000-0045c000 r-xp 00000000 fd:00 1866969                            /usr/bin/tcsh
0065b000-0065c000 r--p 0005b000 fd:00 1866969                            /usr/bin/tcsh
0065c000-00661000 rw-p 0005c000 fd:00 1866969                            /usr/bin/tcsh
00661000-00676000 rw-p 00000000 00:00 0 
00d9d000-00e50000 rw-p 00000000 00:00 0                                  [heap]
7f71924dd000-7f71924e9000 r-xp 00000000 fd:00 33634196                   /usr/lib64/libnss_files-2.17.so
7f71924e9000-7f71926e8000 ---p 0000c000 fd:00 33634196                   /usr/lib64/libnss_files-2.17.so
7f71926e8000-7f71926e9000 r--p 0000b000 fd:00 33634196                   /usr/lib64/libnss_files-2.17.so
7f71926e9000-7f71926ea000 rw-p 0000c000 fd:00 33634196                   /usr/lib64/libnss_files-2.17.so
7f71926ea000-7f71926f0000 rw-p 00000000 00:00 0 
7f71926f0000-7f7198c1a000 r--p 00000000 fd:00 67902955                   /usr/lib/locale/locale-archive
7f7198c1a000-7f7198c1c000 r-xp 00000000 fd:00 33586651                   /usr/lib64/libdl-2.17.so
7f7198c1c000-7f7198e1c000 ---p 00002000 fd:00 33586651                   /usr/lib64/libdl-2.17.so
7f7198e1c000-7f7198e1d000 r--p 00002000 fd:00 33586651                   /usr/lib64/libdl-2.17.so
7f7198e1d000-7f7198e1e000 rw-p 00003000 fd:00 33586651                   /usr/lib64/libdl-2.17.so
7f7198e1e000-7f7198e20000 r-xp 00000000 fd:00 33586654                   /usr/lib64/libfreebl3.so
7f7198e20000-7f719901f000 ---p 00002000 fd:00 33586654                   /usr/lib64/libfreebl3.so
7f719901f000-7f7199020000 r--p 00001000 fd:00 33586654                   /usr/lib64/libfreebl3.so
7f7199020000-7f7199021000 rw-p 00002000 fd:00 33586654                   /usr/lib64/libfreebl3.so
7f7199021000-7f71991e3000 r-xp 00000000 fd:00 33586001                   /usr/lib64/libc-2.17.so
7f71991e3000-7f71993e3000 ---p 001c2000 fd:00 33586001                   /usr/lib64/libc-2.17.so
7f71993e3000-7f71993e7000 r--p 001c2000 fd:00 33586001                   /usr/lib64/libc-2.17.so
7f71993e7000-7f71993e9000 rw-p 001c6000 fd:00 33586001                   /usr/lib64/libc-2.17.so
7f71993e9000-7f71993ee000 rw-p 00000000 00:00 0 
7f71993ee000-7f71993f6000 r-xp 00000000 fd:00 33586297                   /usr/lib64/libcrypt-2.17.so
7f71993f6000-7f71995f5000 ---p 00008000 fd:00 33586297                   /usr/lib64/libcrypt-2.17.so
7f71995f5000-7f71995f6000 r--p 00007000 fd:00 33586297                   /usr/lib64/libcrypt-2.17.so
7f71995f6000-7f71995f7000 rw-p 00008000 fd:00 33586297                   /usr/lib64/libcrypt-2.17.so
7f71995f7000-7f7199625000 rw-p 00000000 00:00 0 
7f7199625000-7f719964a000 r-xp 00000000 fd:00 33586757                   /usr/lib64/libtinfo.so.5.9
7f719964a000-7f719984a000 ---p 00025000 fd:00 33586757                   /usr/lib64/libtinfo.so.5.9
7f719984a000-7f719984e000 r--p 00025000 fd:00 33586757                   /usr/lib64/libtinfo.so.5.9
7f719984e000-7f719984f000 rw-p 00029000 fd:00 33586757                   /usr/lib64/libtinfo.so.5.9
7f719984f000-7f7199871000 r-xp 00000000 fd:00 33900461                   /usr/lib64/ld-2.17.so
7f7199a4d000-7f7199a51000 rw-p 00000000 00:00 0 
7f7199a68000-7f7199a6f000 r--s 00000000 fd:00 101260144                  /usr/lib64/gconv/gconv-modules.cache
7f7199a6f000-7f7199a70000 rw-p 00000000 00:00 0 
7f7199a70000-7f7199a71000 r--p 00021000 fd:00 33900461                   /usr/lib64/ld-2.17.so
7f7199a71000-7f7199a72000 rw-p 00022000 fd:00 33900461                   /usr/lib64/ld-2.17.so
7f7199a72000-7f7199a73000 rw-p 00000000 00:00 0 
7ffde5111000-7ffde5132000 rw-p 00000000 00:00 0                          [stack]
7ffde518b000-7ffde518d000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
maps (3,816 bytes)
thomasy

thomasy

2019-07-24 13:17

reporter  

open_fds (135 bytes)
0:/dev/null
pos:	0
flags:	0100000
mnt_id:	20
1:/dev/null
pos:	0
flags:	0100000
mnt_id:	20
2:/dev/null
pos:	0
flags:	0100000
mnt_id:	20
open_fds (135 bytes)
proc_pid_status (1,209 bytes)
Name:	tcsh
Umask:	0022
State:	S (sleeping)
Tgid:	22832
Ngid:	0
Pid:	22832
PPid:	22828
TracerPid:	0
Uid:	0	0	0	0
Gid:	0	0	0	0
FDSize:	64
Groups:	0 
VmPeak:	  119776 kB
VmSize:	  119744 kB
VmLck:	       0 kB
VmPin:	       0 kB
VmHWM:	    2340 kB
VmRSS:	    2340 kB
RssAnon:	     912 kB
RssFile:	    1428 kB
RssShmem:	       0 kB
VmData:	    1060 kB
VmStk:	     132 kB
VmExe:	     368 kB
VmLib:	    2180 kB
VmPTE:	      64 kB
VmSwap:	       0 kB
Threads:	1
SigQ:	0/255859
SigPnd:	0000000000000000
ShdPnd:	0000000000000000
SigBlk:	0000000000000000
SigIgn:	0000000000384004
SigCgt:	0000000009812003
CapInh:	0000000000000000
CapPrm:	0000001fffffffff
CapEff:	0000001fffffffff
CapBnd:	0000001fffffffff
CapAmb:	0000000000000000
Seccomp:	0
Speculation_Store_Bypass:	thread vulnerable
Cpus_allowed:	ffffffff
Cpus_allowed_list:	0-31
Mems_allowed:	00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000003
Mems_allowed_list:	0-1
voluntary_ctxt_switches:	1387
nonvoluntary_ctxt_switches:	4031
proc_pid_status (1,209 bytes)
var_log_messages (898 bytes)
[System Logs]:
Jul 13 12:04:31 eda4 sudo[4116]:   thomas : TTY=pts/7 ; PWD=/home/thomas ; USER=root ; COMMAND=/bin/chsh -s /bin/tcsh thomas2
Jul 13 12:04:40 eda4 sudo[4151]:   thomas : TTY=pts/7 ; PWD=/home/thomas ; USER=root ; COMMAND=/bin/chsh -s /bin/tcsh thomas2
Jul 19 02:13:53 eda4 kernel: tcsh[22832]: segfault at 2f00000022 ip 00007f71990a671c sp 00007ffde5131018 error 4 in libc-2.17.so[7f7199021000+1c2000]
Jul 19 02:13:53 eda4 abrt-hook-ccpp[31698]: Process 22832 (tcsh) of user 0 killed by SIGSEGV - dumping core
[User Logs]:
Jul 13 12:04:31 eda4 sudo[4116]:   thomas : TTY=pts/7 ; PWD=/home/thomas ; USER=root ; COMMAND=/bin/chsh -s /bin/tcsh thomas2
Jul 13 12:04:40 eda4 sudo[4151]:   thomas : TTY=pts/7 ; PWD=/home/thomas ; USER=root ; COMMAND=/bin/chsh -s /bin/tcsh thomas2
Jul 19 02:13:53 eda4 abrt-hook-ccpp[31698]: Process 22832 (tcsh) of user 0 killed by SIGSEGV - dumping core
var_log_messages (898 bytes)

Issue History

Date Modified Username Field Change
2019-07-24 13:17 thomasy New Issue
2019-07-24 13:17 thomasy File Added: backtrace
2019-07-24 13:17 thomasy File Added: cgroup
2019-07-24 13:17 thomasy File Added: core_backtrace
2019-07-24 13:17 thomasy File Added: dso_list
2019-07-24 13:17 thomasy File Added: environ
2019-07-24 13:17 thomasy File Added: exploitable
2019-07-24 13:17 thomasy File Added: limits
2019-07-24 13:17 thomasy File Added: machineid
2019-07-24 13:17 thomasy File Added: maps
2019-07-24 13:17 thomasy File Added: open_fds
2019-07-24 13:17 thomasy File Added: proc_pid_status
2019-07-24 13:17 thomasy File Added: var_log_messages