Bug 2759 - Segfault in in __write_nocancel () from /lib64/tls/libpthread.so.0
Summary: Segfault in in __write_nocancel () from /lib64/tls/libpthread.so.0
Status: RESOLVED INVALID
Alias: None
Product: glibc
Classification: Unclassified
Component: linuxthreads (show other bugs)
Version: 2.3.2
: P2 normal
Target Milestone: ---
Assignee: drow@false.org
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-06-13 12:41 UTC by Peter Kruty
Modified: 2014-07-04 22:09 UTC (History)
1 user (show)

See Also:
Host:
Target:
Build:
Last reconfirmed:
fweimer: security-

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Peter Kruty 2006-06-13 12:41:11 UTC 
dSpam with connection to mysql database (using libmysqlclient.so) segfaults.

While extensive spam testing process recieves segfaults. Running in gdb it
crashes with message:

  Program received signal SIGPIPE, Broken pipe.
  0x00002aaaab46cadf in __write_nocancel () from /lib64/tls/libpthread.so.0

(gdb) bt
#0  0x00002aaaab46cadf in __write_nocancel () from /lib64/tls/libpthread.so.0
#1  0x00002aaaaac3188e in vio_write () from /usr/lib64/libmysqlclient.so.15
#2  0x00002aaaaac32eb9 in net_real_write ()
   from /usr/lib64/libmysqlclient.so.15
#3  0x00002aaaaac32d2f in net_write_command ()
   from /usr/lib64/libmysqlclient.so.15
#4  0x00002aaaaac32c18 in net_write_command ()
   from /usr/lib64/libmysqlclient.so.15
#5  0x00002aaaaac2ca2f in cli_advanced_command ()
   from /usr/lib64/libmysqlclient.so.15
#6  0x00002aaaaac2f505 in mysql_send_query ()
   from /usr/lib64/libmysqlclient.so.15
#7  0x00002aaaaac2f559 in mysql_real_query ()
   from /usr/lib64/libmysqlclient.so.15
#8  0x00002aaaaac07cd9 in mysql_query () from /usr/lib64/libmysqlclient.so.15
#9  0x000000000041c25e in _ds_getall_spamrecords (CTX=0x5597d0, 
    diction=0x5b8f30) at mysql_drv.c:518
#10 0x0000000000412512 in _ds_operate (CTX=0x5597d0, 
    headers=0x5c28a0 "From root@fi.muni.cz  Thu Nov 10 02: 14:01 2005", 
    body=0x2aaaaccbe010 "\tDobry") at libdspam.c:883
#11 0x0000000000411ef3 in dspam_process (CTX=0x5597d0, 
    message=0x2aaaaca67010 "From root@fi.muni.cz  Thu Nov 10 02:14:01 2005\nRe
turn-Path: <root@fi.muni.cz>\nX-Original-To: xkruty@fi.muni.cz\nReceived: by a
nxur.fi.muni.cz (Postfix, from userid 13644)\n\tid EAD8F22B37C; Thu, 10 Nov 2"
...)
    at libdspam.c:583
#12 0x0000000000406d68 in process_message (ATX=0x5bf670, message=0x541be0, 
    username=0x5a0040 "xkruty", result_string=0x407fdbf8) at dspam.c:495
#13 0x00000000004086af in process_users (ATX=0x5bf670, message=0x560a80)
    at dspam.c:1765
#14 0x000000000040e00c in process_connection (ptr=0x548c10) at daemon.c:712
#15 0x00002aaaab467c64 in start_thread () from /lib64/tls/libpthread.so.0
#16 0x00002aaaab64f243 in thread_start () from /lib64/tls/libc.so.6
#17 0x0000000000000000 in ?? ()
(gdb)
Comment 1 drow@false.org 2006-06-13 12:57:31 UTC 
Subject: Re:  New: Segfault in in __write_nocancel () from /lib64/tls/libpthread.so.0

On Tue, Jun 13, 2006 at 12:41:11PM -0000, kruty at fi dot muni dot cz wrote:
>   Program received signal SIGPIPE, Broken pipe.
>   0x00002aaaab46cadf in __write_nocancel () from /lib64/tls/libpthread.so.0

This isn't your real bug.  Try "handle SIGPIPE nostop noprint pass" and
run it again.
Comment 2 Daniel Jacobowitz 2006-07-24 15:12:47 UTC 
Not a glibc bug.