This is the mail archive of the glibc-bugs@sourceware.org mailing list for the glibc project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

[Bug libc/7009] New: NSS_DNS Resolver crashes when looking up certain hostnames the first time


Description of problem:
When trying to visit http://en.wikipedia.org/wiki/[whatever]  and loading the
page in firefox or konqueror the browsers will crash with a SIGABRT


Version-Release number of selected component (if applicable):
glibc-2.8.90-14,15,16.i686

How reproducible:
100% when initially trying to load url above afterwords ok

Steps to Reproduce:
1. load up browser, type in url above, watch browser crash

Actual results:
Web browsers crash (you can only reproduce this in either, but you have to have
a cold system booted)


Expected results:
Webpage loads corrected DNS lookup ok.

Additional info:
- no nscd cache daemon is being used.
- IPv6 is enabled but no IP configured for interface

* Sorry, I don't have firefox debuginfo installed but those symbol addrs can be
found in as rawhide is frozen most updates.

Firefox crash
=============

Program received signal SIGABRT, Aborted.
[Switching to Thread 0xb2aa7b90 (LWP 6893)]
0x00130416 in __kernel_vsyscall ()
(gdb) bt f
#0  0x00130416 in __kernel_vsyscall ()
No symbol table info available.
#1  0x002a44c0 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
 resultvar = <value optimized out>
 pid = 4100084
 selftid = 6893
#2  0x002a5e88 in abort () at abort.c:88
 act = {__sigaction_handler = {sa_handler = 0x67726f03, sa_sigaction =
0x67726f03}, sa_mask = {__val = {1661166848, 50359663, 7171939, 0, 0, 0, 0,
2997509564, 
      162888408, 46331224, 0 <repeats 22 times>}}, sa_flags = 0, sa_restorer =
0}
 sigs = {__val = {32, 0 <repeats 31 times>}}
#3  0x02c31bad in gaih_getanswer_slice (answer=0xb2aa6390, anslen=<value
optimized out>, qname=0xaad70f4 "meta.wikimedia.org", patp=0xb2aa6bb0,
bufferp=0xb2aa6bac, 
    buflenp=0xb2aa6ba8, errnop=0xb2aa716c, h_errnop=0xb2aa715c, ttlp=0x0,
firstp=0xb2aa6ba4) at nss_dns/dns-host.c:1103
 buffer = 0xb2aa6c1f "calhost6.localdomain6"
 buflen = 993
 pat = (struct gaih_addrtuple **) 0xb2aa7170
 cp = <value optimized out>
 end_of_message = (const u_char *) 0xb2aa6433 "&#65533;&#65533;\201\200"
 packtmp = "\twikimedia\003org\000\003org\000org\000com\000co\002uk", '\0'
<repeats 218 times>, "&#65533;\033&#65533;\001"
 n = <value optimized out>
 haveanswer = 0
 had_error = <value optimized out>
 canon = 0xb2aa6c00 "rr.wikimedia.org"
 h_name = 0xb2aa6c11 "wikimedia.org"
 h_namelen = 14
#4  0x02c3217e in gaih_getanswer (buflen=1024, buffer=0xb2aa6c00
"rr.wikimedia.org", pat=0xb2aa7170) at nss_dns/dns-host.c:1190
No locals.
#5  _nss_dns_gethostbyname4_r (name=0xaad70f4 "meta.wikimedia.org",
pat=0xb2aa7170, buffer=0xb2aa6c00 "rr.wikimedia.org", buflen=1024,
errnop=0xb2aa716c, 
    herrnop=0xb2aa715c, ttlp=0x0) at nss_dns/dns-host.c:321
 host_buffer = {buf = 0xb2aa6390, ptr = 0xb2aa6390 "&#65533;\037\201\200"}
 ans2p = (u_char *) 0xb2aa6433 "&#65533;&#65533;\201\200"
 nans2p = 1885
 resplen2 = 92
 olderr = 0
 status = <value optimized out>
 n = 6
#6  0x00340b63 in gaih_inet (name=0xaad70f4 "meta.wikimedia.org", service=0x0,
req=0xb2aa72f8, pai=0xb2aa72b4, naddrs=0xb2aa72a4) at
../sysdeps/posix/getaddrinfo.c:714
 herrno = 1
 pat = (struct gaih_addrtuple **) 0xb2aa7170
 no_inet6_data = 0
 nip = (service_user *) 0x8f1b310
 status = NSS_STATUS_NOTFOUND
 no_more = <value optimized out>
 tmpbuflen = 1024
 tmpbuf = 0xb2aa6c00 "rr.wikimedia.org"
 no_data = 0
 inet6_status = NSS_STATUS_UNAVAIL
 tp = <value optimized out>
 st = (struct gaih_servtuple *) 0xb2aa7040
 at = (struct gaih_addrtuple *) 0xb2aa7010
 rc = 0
 got_ipv6 = false
 canon = 0x0
 port = <value optimized out>
 __PRETTY_FUNCTION__ = "gaih_inet"
#7  0x003428a7 in getaddrinfo (name=0xaad70f4 "meta.wikimedia.org",
service=0x0, hints=0xb2aa72f8, pai=0xb2aa7318) at
../sysdeps/posix/getaddrinfo.c:2154
 i = <value optimized out>
 last_i = <value optimized out>
 nresults = <value optimized out>
 p = (struct addrinfo *) 0x0
 gaih_service = {name = 0xb2aa72ac "\004", num = 5022282}
 pservice = (struct gaih_service *) 0x6
 local_hints = {ai_flags = -1297452456, ai_family = 1294396, ai_socktype =
150596436, ai_protocol = 0, ai_addrlen = 66, ai_addr = 0xb2aa72ac, 
  ai_canonname = 0x13d494 "\203&#65533;\030\205&#65533;\017D&#65533;[^_]&#65533;\211&#65533;\203{
&#65533;\017\225&#65533;\203&#65533;\001\201&#65533;\200", ai_next = 0x0}
 in6ai = (struct in6addrinfo *) 0x9f1eff0
 in6ailen = 4
 seen_ipv4 = true
 seen_ipv6 = true
 naddrs = 0
 __PRETTY_FUNCTION__ = "getaddrinfo"
 once = 2
 lock = 0
#8  0x004cc5f9 in PR_GetAddrInfoByName () from /lib/libnspr4.so
No symbol table info available.
#9  0x006e5606 in ?? () from /usr/lib/xulrunner-1.9/libxul.so
No symbol table info available.
#10 0x004da0b1 in ?? () from /lib/libnspr4.so
No symbol table info available.
#11 0x0013951f in start_thread (arg=0xb2aa7b90) at pthread_create.c:297
 __res = <value optimized out>
 __ignore1 = <value optimized out>
 __ignore2 = <value optimized out>
 pd = (struct pthread *) 0xb2aa7b90
 now = <value optimized out>
 unwind_buf = {cancel_jmp_buf = {{jmp_buf = {1351668, 0, 0, -1297451864,
32299093, 1914865456}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0,
0x0}, data = {
      prev = 0x0, cleanup = 0x0, canceltype = 0}}}
 not_first_call = <value optimized out>
 robust = <value optimized out>
#12 0x0035d02e in clone () from /lib/libc.so.6

konqueror crash
===============

Application: Konqueror (konqueror), signal SIGABRT
[Current thread is 1 (Thread 0xb808d970 (LWP 19106))]

Thread 2 (Thread 0xb36cab90 (LWP 20646)):
[KCrash Handler]
#6  0x00130416 in __kernel_vsyscall ()
#7  0x037d14c0 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#8  0x037d2e88 in abort () at abort.c:88
#9  0x05ceebad in gaih_getanswer_slice (answer=0xb36c8e4c, anslen=<value
optimized out>, qname=0x9956950 "meta.wikimedia.org", patp=0xb36c9610,
bufferp=0xb36c960c, buflenp=0xb36c9608, 
    errnop=0xb36c9c0c, h_errnop=0xb36c9bfc, ttlp=0x0, firstp=0xb36c9604) at
nss_dns/dns-host.c:1103
#10 0x05cef113 in gaih_getanswer (buflen=984, buffer=0xb36c9688 "wikimedia.org",
pat=0xb36c9a70) at nss_dns/dns-host.c:1202
#11 _nss_dns_gethostbyname4_r (name=0x9956950 "meta.wikimedia.org",
pat=0xb36c9c10, buffer=0xb36c9660 "rr.wikimedia.org", buflen=1024,
errnop=0xb36c9c0c, herrnop=0xb36c9bfc, ttlp=0x0)
    at nss_dns/dns-host.c:321
#12 0x0386db63 in gaih_inet (name=0x9956950 "meta.wikimedia.org", service=0x0,
req=0xb36ca19c, pai=0xb36c9d54, naddrs=0xb36c9d44) at
../sysdeps/posix/getaddrinfo.c:714
#13 0x0386f8a7 in getaddrinfo (name=0x9956950 "meta.wikimedia.org", service=0x0,
hints=0xb36ca19c, pai=0xb36ca1f8) at ../sysdeps/posix/getaddrinfo.c:2154
#14 0x00c75434 in QHostInfoAgent::fromName (hostName=@0xb36ca260) at
kernel/qhostinfo_unix.cpp:174
#15 0x00c6eaa5 in QHostInfo::fromName (name=@0x9c3ba18) at kernel/qhostinfo.cpp:216
#16 0x003f5010 in QtConcurrent::StoredFunctorCall1<QHostInfo, QHostInfo
(*)(QString const&), QString>::runFunctor () from /usr/local/kde4/lib/libkio.so.5
#17 0x003f529c in QtConcurrent::RunFunctionTask<QHostInfo>::run () from
/usr/local/kde4/lib/libkio.so.5
#18 0x00d87aed in QThreadPoolThread::run (this=0x987b718) at
concurrent/qthreadpool.cpp:101
#19 0x00d93f53 in QThreadPrivate::start (arg=0x987b718) at
thread/qthread_unix.cpp:185
#20 0x00f3951f in start_thread (arg=0xb36cab90) at pthread_create.c:297
#21 0x0388a03e in clone () from /lib/libc.so.6

Thread 1 (Thread 0xb808d970 (LWP 19106)):
#0  0x00130416 in __kernel_vsyscall ()
#1  0x03882391 in select () from /lib/libc.so.6
#2  0x0857c295 in ?? () from /usr/lib/libxcb.so.1
#3  0x0857dc82 in xcb_wait_for_reply () from /usr/lib/libxcb.so.1
#4  0x092f2e99 in _XReply () from /usr/lib/libX11.so.6
#5  0x092cf0d9 in XGetImage () from /usr/lib/libX11.so.6
#6  0x011fcd62 in QX11PixmapData::toImage (this=0x98ab958) at
image/qpixmap_x11.cpp:1407
#7  0x011ec6e9 in QPixmap::toImage (this=0xa648d20) at image/qpixmap.cpp:429
#8  0x012189ec in QTexturedBrushData::image (this=0x9c44610) at
painting/qbrush.cpp:159
#9  0x01215836 in QBrush::textureImage (this=0x9c44c68) at painting/qbrush.cpp:729
#10 0x012a1ac1 in QSpanData::setup (this=0x9c44d88, brush=@0x9c44c68, alpha=256)
at painting/qpaintengine_raster.cpp:5234
#11 0x012aaab6 in QRasterPaintEngine::updateState (this=0x9c44c10,
state=@0x9c44a40) at painting/qpaintengine_raster.cpp:1347
#12 0x0122cab6 in QPainterPrivate::updateStateImpl (this=0xa648d38,
newState=0x9c44a40) at painting/qpainter.cpp:878
#13 0x0122cc61 in QPainterPrivate::updateState (this=0xa648d38,
newState=0x9c44a40) at painting/qpainter.cpp:906
#14 0x012365f5 in QPainter::drawPath (this=0xbf8b1088, path=@0xbf8b1258) at
painting/qpainter.cpp:2822
#15 0x01233785 in QPainterPrivate::draw_helper (this=0xa648e30,
originalPath=@0xbf8b1258, op=QPainterPrivate::StrokeAndFillDraw) at
painting/qpainter.cpp:358
#16 0x01235c13 in QPainter::drawRects (this=0xbf8b16d0, rects=0xbf8b13a0,
rectCount=1) at painting/qpainter.cpp:2955
#17 0x011eb992 in QPainter::drawRect (this=0xbf8b16d0, rect=@0xbf8b13a0) at
../../include/QtGui/../../src/gui/painting/qpainter.h:576
#18 0x01239b5c in QPainter::drawPixmap (this=0xbf8b16d0, r=@0xbf8b14c0,
pm=@0xbf8b1538, sr=@0xbf8b14a0) at painting/qpainter.cpp:4634
#19 0x0810bd7d in QPainter::drawPixmap () from
/usr/local/kde4/lib/kde4/plugins/styles/oxygen.so
#20 0x08109b22 in OxygenHelper::renderWindowBackground () from
/usr/local/kde4/lib/kde4/plugins/styles/oxygen.so
#21 0x08119139 in OxygenStyle::eventFilter () from
/usr/local/kde4/lib/kde4/plugins/styles/oxygen.so
#22 0x00e82016 in QCoreApplicationPrivate::sendThroughObjectEventFilters
(this=0x94914d0, receiver=0x951fb40, event=0xbf8b1d80) at
kernel/qcoreapplication.cpp:694
#23 0x0111a536 in QApplicationPrivate::notify_helper (this=0x94914d0,
receiver=0x951fb40, e=0xbf8b1d80) at kernel/qapplication.cpp:3799
#24 0x0111c19f in QApplication::notify (this=0xbf8b2a38, receiver=0x951fb40,
e=0xbf8b1d80) at kernel/qapplication.cpp:3768
#25 0x0067e209 in KApplication::notify () from /usr/local/kde4/lib/libkdeui.so.5
#26 0x00e83c61 in QCoreApplication::notifyInternal (this=0xbf8b2a38,
receiver=0x951fb40, event=0xbf8b1d80) at kernel/qcoreapplication.cpp:583
#27 0x0112647f in QCoreApplication::sendSpontaneousEvent (receiver=0x951fb40,
event=0xbf8b1d80) at
../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:212
#28 0x01184604 in qt_sendSpontaneousEvent (receiver=0x951fb40, event=0xbf8b1d80)
at kernel/qapplication_x11.cpp:4588
#29 0x0117e765 in QWidgetPrivate::drawWidget (this=0x951df78, pdev=0x94de174,
rgn=@0xbf8b1ef0, offset=@0x951f8f4, flags=5, sharedPainter=0x9c38b90) at
kernel/qwidget.cpp:4636
#30 0x012ea5b8 in QWidgetBackingStore::cleanRegion (this=0x951f8e8,
rgn=@0xbf8b1fb8, widget=0x951fb40, recursiveCopyToScreen=true) at
painting/qbackingstore.cpp:1035
#31 0x012eaeac in qt_syncBackingStore (widget=0x951fb40) at
painting/qbackingstore.cpp:313
#32 0x0117712e in QWidget::event (this=0x951fb40, event=0x9c37610) at
kernel/qwidget.cpp:7447
#33 0x01500b6c in QMainWindow::event (this=0x951fb40, event=0x9c37610) at
widgets/qmainwindow.cpp:1268
#34 0x0075bd3f in KMainWindow::event () from /usr/local/kde4/lib/libkdeui.so.5
#35 0x0079d445 in KXmlGuiWindow::event () from /usr/local/kde4/lib/libkdeui.so.5
#36 0x0019b849 in KonqMainWindow::event () from
/usr/local/kde4/lib/libkdeinit4_konqueror.so
#37 0x0111a559 in QApplicationPrivate::notify_helper (this=0x94914d0,
receiver=0x951fb40, e=0x9c37610) at kernel/qapplication.cpp:3803
#38 0x0111c19f in QApplication::notify (this=0xbf8b2a38, receiver=0x951fb40,
e=0x9c37610) at kernel/qapplication.cpp:3768
#39 0x0067e209 in KApplication::notify () from /usr/local/kde4/lib/libkdeui.so.5
#40 0x00e83c61 in QCoreApplication::notifyInternal (this=0xbf8b2a38,
receiver=0x951fb40, event=0x9c37610) at kernel/qcoreapplication.cpp:583
#41 0x00e8780f in QCoreApplication::sendEvent (receiver=0x951fb40,
event=0x9c37610) at
../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:209
#42 0x00e8418f in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0,
event_type=0, data=0x9483870) at kernel/qcoreapplication.cpp:1195
#43 0x00e84357 in QCoreApplication::sendPostedEvents (receiver=0x0,
event_type=0) at kernel/qcoreapplication.cpp:1091
#44 0x00eb33de in QCoreApplication::sendPostedEvents () at
../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:214
#45 0x00eb25f0 in postEventSourceDispatch (s=0x9493b18) at
kernel/qeventdispatcher_glib.cpp:205
#46 0x02c89208 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#47 0x02c8c8b3 in ?? () from /lib/libglib-2.0.so.0
#48 0x02c8ca71 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#49 0x00eb1a0a in QEventDispatcherGlib::processEvents (this=0x94911a8, flags={i
= 4}) at kernel/qeventdispatcher_glib.cpp:319
#50 0x011bf930 in QGuiEventDispatcherGlib::processEvents (this=0x94911a8,
flags={i = 4}) at kernel/qguieventdispatcher_glib.cpp:198
#51 0x00e80c58 in QEventLoop::processEvents (this=0xbf8b2900, flags={i = 4}) at
kernel/qeventloop.cpp:143
#52 0x00e80e9f in QEventLoop::exec (this=0xbf8b2900, flags={i = 0}) at
kernel/qeventloop.cpp:190
#53 0x00e84477 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:845
#54 0x0111a272 in QApplication::exec () at kernel/qapplication.cpp:3331
#55 0x001ed613 in kdemain () from /usr/local/kde4/lib/libkdeinit4_konqueror.so
#56 0x080487c6 in main ()

See Fedora bug: https://bugzilla.redhat.com/show_bug.cgi?id=469299

-- 
           Summary: NSS_DNS Resolver crashes when looking up certain
                    hostnames the first time
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: libc
        AssignedTo: drepper at redhat dot com
        ReportedBy: shawn dot starr at rogers dot com
                CC: glibc-bugs at sources dot redhat dot com


http://sourceware.org/bugzilla/show_bug.cgi?id=7009

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]