[systemd-bugs] [Bug 89427] New: systemctl assert failure: *** Error in `systemctl': double free or corruption (fasttop): 0x00007fa04bf00910 ***

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Wed Mar 4 08:56:55 PST 2015


https://bugs.freedesktop.org/show_bug.cgi?id=89427

            Bug ID: 89427
           Summary: systemctl assert failure: *** Error in `systemctl':
                    double free or corruption (fasttop):
                    0x00007fa04bf00910 ***
           Product: systemd
           Version: unspecified
          Hardware: Other
                OS: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: general
          Assignee: systemd-bugs at lists.freedesktop.org
          Reporter: caravena at gmail.com
        QA Contact: systemd-bugs at lists.freedesktop.org

Open bug in launchpad.net
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1426588



Package: systemd 219-4ubuntu1



"root at file-control:~# systemctl disable vmware-USBArbitrator
Synchronizing state for vmware-USBArbitrator.service with sysvinit using
update-rc.d...
Executing /usr/sbin/update-rc.d vmware-USBArbitrator defaults
insserv: Service localfs has to be enabled to start service
vmware-USBArbitrator
insserv: exiting now!
update-rc.d: error: insserv rejected the script header
*** Error in `systemctl': double free or corruption (fasttop):
0x00007f4ad5bff910 ***
Aborted (core dumped)"



Backtrace:
#0  0x00007fa0498d9e37 in __GI_raise (sig=sig at entry=6) at
../nptl/sysdeps/unix/sysv/linux/raise.c:56
        resultvar = 0
        pid = 27161
        selftid = 27161
#1  0x00007fa0498db528 in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x7ffdd4fcac60, sa_sigaction
= 0x7ffdd4fcac60}, sa_mask = {__val = {25, 2, 32, 0, 140326405660588,
207000974387, 356482285568, 377957122134, 140326409213792, 4112, 0,
140326445517520, 140326445517328, 140326445517520, 140326405815688,
140728176781600}}, sa_flags = 4096, sa_restorer = 0xffff80022b0356b1}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00007fa04991b7a4 in __libc_message (do_abort=do_abort at entry=1,
fmt=fmt at entry=0x7fa049a247a0 "*** Error in `%s': %s: 0x%s ***\n") at
../sysdeps/posix/libc_fatal.c:175
        ap = {{gp_offset = 40, fp_offset = 32672, overflow_arg_area =
0x7ffdd4fcab60, reg_save_area = 0x7ffdd4fcaaf0}}
        fd = 4
        on_2 = <optimized out>
        list = <optimized out>
        nlist = <optimized out>
        cp = <optimized out>
        written = <optimized out>
#3  0x00007fa049922db6 in malloc_printerr (ptr=<optimized out>,
str=0x7fa049a24968 "double free or corruption (fasttop)", action=1) at
malloc.c:4996
        buf = "00007fa04bf00910"
        cp = <optimized out>
#4  _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at
malloc.c:3840
        size = <optimized out>
        fb = <optimized out>
        nextchunk = <optimized out>
        nextsize = <optimized out>
        nextinuse = <optimized out>
        prevsize = <optimized out>
        bck = <optimized out>
        fwd = <optimized out>
        errstr = <optimized out>
        locked = <optimized out>
#5  0x00007fa04a0c1730 in freep () at ../src/shared/util.h:673
No locals.
#6  enable_sysv_units.lto_priv.393 (verb=0x6a19 <error: Cannot access memory at
address 0x6a19>, args=0x7fa04bf00980) at ../src/systemctl/systemctl.c:5141
        p = 0x7fa04bf00be0 "/etc/init.d/vmware-USBArbitrator"
        status = {si_signo = 17, si_errno = 0, si_code = 1, _sifields = {_pad =
{27162, 0, 1, 0 <repeats 25 times>}, _kill = {si_pid = 27162, si_uid = 0},
_timer = {si_tid = 27162, si_overrun = 0, si_sigval = {sival_int = 1, sival_ptr
= 0x1}}, _rt = {si_pid = 27162, si_uid = 0, si_sigval = {sival_int = 1,
sival_ptr = 0x1}}, _sigchld = {si_pid = 27162, si_uid = 0, si_status = 1,
si_utime = 0, si_stime = 0}, _sigfault = {si_addr = 0x6a1a, si_addr_lsb = 1},
_sigpoll = {si_band = 27162, si_fd = 1}, _sigsys = {_call_addr = 0x6a1a,
_syscall = 1, _arch = 0}}}
        l = 0x7fa04bf00910 ""
        argv = {0x7fa04a118cf6 "/usr/sbin/update-rc.d", 0x7fa04bf00bec
"vmware-USBArbitrator", 0x7fa04a118d18 "defaults", 0x0, 0x0, 0x0}
        f = 4294967274
        paths = {unit_path = 0x7fa04bf00c60, sysvinit_path = 0x7fa04bf00c40,
sysvrcnd_path = 0x7fa04bf00ab0}
        __func__ = "enable_sysv_units"
#7  0x00007fa04a0c194d in enable_unit.lto_priv.358 (bus=0x7fa04bf00020,
args=0x7ffdd4fcb0e0) at ../src/systemctl/systemctl.c:5305
        names = 0x7fa04bf00980
        changes = 0x0
        n_changes = 0
        carries_install_info = -1
        __PRETTY_FUNCTION__ = "enable_unit"
        __func__ = "enable_unit"
#8  0x00007fa04a0ba16a in systemctl_main (bus_error=<optimized out>,
argv=<optimized out>, argc=<optimized out>, bus=<optimized out>) at
../src/systemctl/systemctl.c:7265
        left = 2
        verbs = {{verb = 0x7fa04a119a34 "list-units", argc_cmp = MORE, argc =
0, dispatch = 0x7fa04a0d6ad0 <list_units.lto_priv.337>, bus = (unknown: 0)},
{verb = 0x7fa04a119a3f "list-unit-files", argc_cmp = MORE, argc = 1, dispatch =
0x7fa04a0d8550 <list_unit_files.lto_priv.338>, bus = NOBUS}, {verb =
0x7fa04a119a4f "list-sockets", argc_cmp = MORE, argc = 1, dispatch =
0x7fa04a0d7560 <list_sockets.lto_priv.339>, bus = (unknown: 0)}, {verb =
0x7fa04a119a5c "list-timers", argc_cmp = MORE, argc = 1, dispatch =
0x7fa04a0d7f10 <list_timers.lto_priv.340>, bus = (unknown: 0)}, {verb =
0x7fa04a119a68 "list-jobs", argc_cmp = MORE, argc = 1, dispatch =
0x7fa04a0bb1e0 <list_jobs.lto_priv.341>, bus = (unknown: 0)}, {verb =
0x7fa04a119a72 "list-machines", argc_cmp = MORE, argc = 1, dispatch =
0x7fa04a0bc030 <list_machines.lto_priv.342>, bus = (unknown: 0)}, {verb =
0x7fa04a118b5d "clear-jobs", argc_cmp = EQUAL, argc = 1, dispatch =
0x7fa04a0bf130 <daemon_reload.lto_priv.343>, bus = (unknown: 0)}, {verb =
0x7fa04a118b68 "cancel", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0baf10
<cancel_job.lto_priv.344>, bus = (unknown: 0)}, {verb = 0x7fa04a117e6e "start",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>,
bus = (unknown: 0)}, {verb = 0x7fa04a117e46 "stop", argc_cmp = MORE, argc = 2,
dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb
= 0x7fa04a117e42 "condstop", argc_cmp = MORE, argc = 2, dispatch =
0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb =
0x7fa04a117ec6 "reload", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940
<start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e6c
"restart", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940
<start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e92
"try-restart", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940
<start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e62
"reload-or-restart", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940
<start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e88
"reload-or-try-restart", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940
<start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117ec0
"force-reload", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940
<start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117eb5
"condreload", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940
<start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e56
"condrestart", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940
<start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117c86
"isolate", argc_cmp = EQUAL, argc = 2, dispatch = 0x7fa04a0bd940
<start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a119a80 "kill",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c39c0 <kill_unit.lto_priv.346>,
bus = (unknown: 0)}, {verb = 0x7fa04a119a85 "is-active", argc_cmp = MORE, argc
= 2, dispatch = 0x7fa04a0c3e10 <check_unit_active.lto_priv.347>, bus =
(unknown: 0)}, {verb = 0x7fa04a119a8f "check", argc_cmp = MORE, argc = 2,
dispatch = 0x7fa04a0c3e10 <check_unit_active.lto_priv.347>, bus = (unknown:
0)}, {verb = 0x7fa04a119a95 "is-failed", argc_cmp = MORE, argc = 2, dispatch =
0x7fa04a0c3e30 <check_unit_failed.lto_priv.348>, bus = (unknown: 0)}, {verb =
0x7fa04a118cdc "show", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0c0980
<show.lto_priv.349>, bus = (unknown: 0)}, {verb = 0x7fa04a119a9f "cat",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c2cf0 <cat.lto_priv.350>, bus =
NOBUS}, {verb = 0x7fa04a127ee5 "status", argc_cmp = MORE, argc = 1, dispatch =
0x7fa04a0c0980 <show.lto_priv.349>, bus = (unknown: 0)}, {verb = 0x7fa04a1198c3
"help", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c0980
<show.lto_priv.349>, bus = (unknown: 0)}, {verb = 0x7fa04a118c70 "snapshot",
argc_cmp = LESS, argc = 2, dispatch = 0x7fa04a0c0420 <snapshot.lto_priv.351>,
bus = (unknown: 0)}, {verb = 0x7fa04a119aa3 "delete", argc_cmp = MORE, argc =
2, dispatch = 0x7fa04a0bff30 <delete_snapshot.lto_priv.352>, bus = (unknown:
0)}, {verb = 0x7fa04a119aaa "daemon-reload", argc_cmp = EQUAL, argc = 1,
dispatch = 0x7fa04a0bf130 <daemon_reload.lto_priv.343>, bus = (unknown: 0)},
{verb = 0x7fa04a118b6f "daemon-reexec", argc_cmp = EQUAL, argc = 1, dispatch =
0x7fa04a0bf130 <daemon_reload.lto_priv.343>, bus = (unknown: 0)}, {verb =
0x7fa04a119ab8 "show-environment", argc_cmp = EQUAL, argc = 1, dispatch =
0x7fa04a0bfdb0 <show_environment.lto_priv.353>, bus = (unknown: 0)}, {verb =
0x7fa04a119acb "set-environment", argc_cmp = MORE, argc = 2, dispatch =
0x7fa04a0bf4b0 <set_environment.lto_priv.354>, bus = (unknown: 0)}, {verb =
0x7fa04a119ac9 "unset-environment", argc_cmp = MORE, argc = 2, dispatch =
0x7fa04a0bf4b0 <set_environment.lto_priv.354>, bus = (unknown: 0)}, {verb =
0x7fa04a119adb "import-environment", argc_cmp = MORE, argc = 1, dispatch =
0x7fa04a0bf680 <import_environment.lto_priv.355>, bus = (unknown: 0)}, {verb =
0x7fa04a118b8a "halt", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = FORCE}, {verb = 0x7fa04a118b8f "poweroff",
argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = FORCE}, {verb = 0x7fa04a118b98 "reboot",
argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = FORCE}, {verb = 0x7fa04a118b9f "kexec",
argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119aee
"suspend", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119af6
"hibernate", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119b00
"hybrid-sleep", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119b57
"default", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119b0d
"rescue", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119b14
"emergency", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a118ba5
"exit", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0
<start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a118b7d
"reset-failed", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0c01b0
<reset_failed.lto_priv.357>, bus = (unknown: 0)}, {verb = 0x7fa04a118e18
"enable", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0
<enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a118cee "disable",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0
<enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a118d7b "is-enabled",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a109440
<unit_is_enabled.lto_priv.359>, bus = NOBUS}, {verb = 0x7fa04a118e16
"reenable", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0
<enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a125fe9 "preset",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0
<enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a119b1e "preset-all",
argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a109810
<preset_all.lto_priv.360>, bus = NOBUS}, {verb = 0x7fa04a118e48 "mask",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0
<enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a118e46 "unmask",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0
<enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a12ba91 "link",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0
<enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a119b29 "switch-root",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bf9f0
<switch_root.lto_priv.361>, bus = (unknown: 0)}, {verb = 0x7fa04a119b35
"list-dependencies", argc_cmp = LESS, argc = 2, dispatch = 0x7fa04a0bd570
<list_dependencies.lto_priv.362>, bus = (unknown: 0)}, {verb = 0x7fa04a119b47
"set-default", argc_cmp = EQUAL, argc = 2, dispatch = 0x7fa04a0bee10
<set_default.lto_priv.363>, bus = NOBUS}, {verb = 0x7fa04a119b53 "get-default",
argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0bb9c0
<get_default.lto_priv.364>, bus = NOBUS}, {verb = 0x7fa04a119b5f
"set-property", argc_cmp = MORE, argc = 3, dispatch = 0x7fa04a0c06e0
<set_property.lto_priv.365>, bus = (unknown: 0)}, {verb = 0x7fa04a119b6c
"is-system-running", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a109370
<is_system_running.lto_priv.366>, bus = (unknown: 0)}, {verb = 0x7fa04a119b7e
"add-wants", argc_cmp = MORE, argc = 3, dispatch = 0x7fa04a109f20
<add_dependency.lto_priv.367>, bus = NOBUS}, {verb = 0x7fa04a119b88
"add-requires", argc_cmp = MORE, argc = 3, dispatch = 0x7fa04a109f20
<add_dependency.lto_priv.367>, bus = NOBUS}, {verb = 0x7fa04a119b95 "edit",
argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a108a70 <edit.lto_priv.368>, bus =
NOBUS}, {verb = 0x0, argc_cmp = MORE, argc = 0, dispatch = 0x0, bus = (unknown:
0)}}
        verb = 0x7fa04a3393e0 <verbs+1568>
#9  main (argc=2, argv=0x7ffdd4fcb0d8) at ../src/systemctl/systemctl.c:7532
        bus = 0x7fa04bf00020
        r = 0
        __func__ = "main"
        __PRETTY_FUNCTION__ = "main"

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-bugs/attachments/20150304/a804c023/attachment-0001.html>


More information about the systemd-bugs mailing list