[Xen-devel] xend crash for freeing invalid pointer in python

[Guillaume Rousse <Guillaume.Rousse@xxxxxxxx>]

Hello.

I'm the mandriva xen package maintainer. I'm trying to figure out a
strange crash occuring on mandriva 2008.0 (latest stable version): xm
list (actually, any xm use) crashes with the attached stacktrace in the
logs. I installed the debug symbols for python and xend, but I don't
know how to invoke gdb on a python script for getting the stacktrace myself.

Strangelly, everything is fine on 64 bits version :/

All binaries are built with the following flags:
-O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector
--param=ssp-buffer-size=4 -fexceptions -fomit-frame-pointer -march=i586
-mtune=generic -fasynchronous-unwind-table fno-strict-aliasing

The spec file is rewievable from
http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/xen/current/SPECS/

The patches are availabe from
http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/xen/current/SOURCES
-- 
Guillaume Rousse
Moyens Informatiques - INRIA Futurs
Tel: 01 69 35 69 62

Xend started at Tue Nov 13 22:20:24 2007.
RTNETLINK answers: Cannot assign requested address
Nothing to flush.
Nothing to flush.
NETLINK: Packet too small or truncated! 68!=16!=248
Xend started at Tue Nov 13 22:27:13 2007.
*** glibc detected *** python: free(): invalid pointer: 0xb54297b8 ***
======= Backtrace: =========
/lib/i686/libc.so.6[0xb7bbd4e6]
/lib/i686/libc.so.6(cfree+0x90)[0xb7bc1010]
/usr/lib/python2.5/site-packages/sgmlop.so[0xb775ba15]
/usr/lib/libpython2.5.so.1.0(PyDict_Type+0x0)[0xb7df1640]
======= Memory map: ========
08048000-08049000 r-xp 00000000 08:17 703169     /usr/bin/python
08049000-0804a000 rwxp 00000000 08:17 703169     /usr/bin/python
0804a000-0821a000 rwxp 0804a000 00:00 0          [heap]
b3b00000-b3b21000 rwxp b3b00000 00:00 0 
b3b21000-b3c00000 ---p b3b21000 00:00 0 
b3c20000-b3c21000 ---p b3c20000 00:00 0 
b3c21000-b4421000 rwxp b3c21000 00:00 0 
b4421000-b4422000 ---p b4421000 00:00 0 
b4422000-b4c22000 rwxp b4422000 00:00 0 
b4c22000-b4c23000 ---p b4c22000 00:00 0 
b4c23000-b54a5000 rwxp b4c23000 00:00 0 
b54a5000-b54a6000 ---p b54a5000 00:00 0 
b54a6000-b5ca6000 rwxp b54a6000 00:00 0 
b5ca6000-b5ca7000 ---p b5ca6000 00:00 0 
b5ca7000-b64a7000 rwxp b5ca7000 00:00 0 
b64a7000-b64a8000 ---p b64a7000 00:00 0 
b64a8000-b6ca8000 rwxp b64a8000 00:00 0 
b6ca8000-b6ca9000 ---p b6ca8000 00:00 0 
b6ca9000-b74a9000 rwxp b6ca9000 00:00 0 
b74a9000-b74b2000 r-xp 00000000 08:11 144837     /lib/libnss_files-2.6.1.so
b74b2000-b74b4000 rwxp 00008000 08:11 144837     /lib/libnss_files-2.6.1.so
b74c6000-b7507000 rwxp b74c6000 00:00 0 
b7507000-b750e000 r-xp 00000000 08:17 114799     
/usr/lib/python2.5/site-packages/OpenSSL/SSL.so
b750e000-b7512000 rwxp 00007000 08:17 114799     
/usr/lib/python2.5/site-packages/OpenSSL/SSL.so
b7512000-b751c000 r-xp 00000000 08:17 114802     
/usr/lib/python2.5/site-packages/OpenSSL/crypto.so
b751c000-b7521000 rwxp 00009000 08:17 114802     
/usr/lib/python2.5/site-packages/OpenSSL/crypto.so
b7521000-b7523000 r-xp 00000000 08:17 114803     
/usr/lib/python2.5/site-packages/OpenSSL/rand.so
b7523000-b7524000 rwxp 00001000 08:17 114803     
/usr/lib/python2.5/site-packages/OpenSSL/rand.so
b7524000-b7529000 r-xp 00000000 08:17 51984      
/usr/lib/python2.5/lib-dynload/itertools.so
b7529000-b752b000 rwxp 00005000 08:17 51984      
/usr/lib/python2.5/lib-dynload/itertools.so
b752b000-b756c000 rwxp b752b000 00:00 0 
b756c000-b756d000 r-xp 00000000 08:17 164013     
/usr/lib/python/xen/lowlevel/ptsname.so
b756d000-b756e000 rwxp 00000000 08:17 164013     
/usr/lib/python/xen/lowlevel/ptsname.so
b756e000-b75af000 rwxp b756e000 00:00 0 
b75af000-b75b2000 r-xp 00000000 08:17 50209      
/usr/lib/python2.5/lib-dynload/_locale.so
b75b2000-b75b3000 rwxp 00003000 08:17 50209      
/usr/lib/python2.5/lib-dynload/_locale.so
b75b3000-b7635000 rwxp b75b3000 00:00 0 
b7635000-b7637000 r-xp 00000000 08:17 51994      
/usr/lib/python2.5/lib-dynload/resource.so
b7637000-b7638000 rwxp 00001000 08:17 51994      
/usr/lib/python2.5/lib-dynload/resource.so
b7638000-b771b000 rwxp b7638000 00:00 0 
b771b000-b773a000 r-xp 00000000 08:17 20275      /usr/lib/libexpat.so.1.5.2
b773a000-b773c000 rwxp 0001e000 08:17 20275      /usr/lib/libexpat.so.1.5.2
b773d000-b7741000 r-xp 00000000 08:17 164015     
/usr/lib/python/xen/lowlevel/xs.so
b7741000-b7742000 rwxp 00003000 08:17 164015     
/usr/lib/python/xen/lowlevel/xs.so
b7742000-b7744000 r-xp 00000000 08:17 164012     
/usr/lib/python/xen/lowlevel/acm.so
b7744000-b7745000 rwxp 00001000 08:17 164012     
/usr/lib/python/xen/lowlevel/acm.so
b7745000-b7748000 r-xp 00000000 08:17 52000      
/usr/lib/python2.5/lib-dynload/termios.so
b7748000-b774a000 rwxp 00002000 08:17 52000      
/usr/lib/python2.5/lib-dynload/termios.so
b774a000-b774d000 r-xp 00000000 08:17 51996      
/usr/lib/python2.5/lib-dynload/select.so
b774d000-b774e000 rwxp 00002000 08:17 51996      
/usr/lib/python2.5/lib-dynload/select.so
b774e000-b7757000 r-xp 00000000 08:17 118551     
/usr/lib/python2.5/site-packages/_xmlplus/parsers/pyexpat.so
b7757000-b7759000 rwxp 00008000 08:17 118551     
/usr/lib/python2.5/site-packages/_xmlplus/parsers/pyexpat.so
b7759000-b775d000 r-xp 00000000 08:17 49320      
/usr/lib/python2.5/site-packages/sgmlop.so
b775d000-b775e000 rwxp 00003000 08:17 49320      
/usr/lib/python2.5/site-packages/sgmlop.so
b775e000-b776c000 r-xp 00000000 08:17 51977      
/usr/lib/python2.5/lib-dynload/datetime.so
b776c000-b776f000 rwxp 0000e000 08:17 51977      
/usr/lib/python2.5/lib-dynload/datetime.so
b776f000-b77b0000 rwxp b776f000 00:00 0 
b77b0000-b77b6000 r-xp 00000000 08:17 51982      
/usr/lib/python2.5/lib-dynload/_struct.so
b77b6000-b77b7000 rwxp 00005000 08:17 51982      
/usr/lib/python2.5/lib-dynload/_struct.so
b77b7000-b77c7000 r-xp 00000000 08:17 51972      
/usr/lib/python2.5/lib-dynload/cPickle.so
b77c7000-b77c8000 rwxp 0000f000 08:17 51972      
/usr/lib/python2.5/lib-dynload/cPickle.so
b77c8000-b7809000 rwxp b77c8000 00:00 0 
b7809000-b780c000 r-xp 00000000 08:17 51973      
/usr/lib/python2.5/lib-dynload/cStringIO.so
b780c000-b780d000 rwxp 00003000 08:17 51973      
/usr/lib/python2.5/lib-dynload/cStringIO.so
b780d000-b780f000 r-xp 00000000 08:17 51980      
/usr/lib/python2.5/lib-dynload/fcntl.so
b780f000-b7810000 rwxp 00002000 08:17 51980      
/usr/lib/python2.5/lib-dynload/fcntl.so
b7810000-b7812000 r-xp 00000000 08:17 51959      
/usr/lib/python2.5/lib-dynload/_random.so
b7812000-b7813000 rwxp 00002000 08:17 51959      
/usr/lib/python2.5/lib-dynload/_random.so
b7813000-b7825000 r-xp 00000000 08:11 144883     /lib/libz.so.1.2.3
b7825000-b7826000 rwxp 00011000 08:11 144883     /lib/libz.so.1.2.3
b7826000-b7841000 r-xp 00000000 08:17 17549      /usr/lib/libxenguest.so.3.0.0
b7841000-b7842000 rwxp 0001a000 08:17 17549      /usr/lib/libxenguest.so.3.0.0
b7842000-b7851000 r-xp 00000000 08:17 17530      /usr/lib/libxenctrl.so.3.0.0
b7851000-b7852000 rwxp 0000f000 08:17 17530      /usr/lib/libxenctrl.so.3.0.0
b7852000-b7868000 rwxp b7852000 00:00 0 
b7868000-b786c000 r-xp 00000000 08:17 51970      
/usr/lib/python2.5/lib-dynload/binascii.so
b786c000-b786d000 rwxp 00003000 08:17 51970      
/usr/lib/python2.5/lib-dynload/binascii.so
b786d000-b7873000 r-xp 00000000 08:17 51988      
/usr/lib/python2.5/lib-dynload/operator.so
b7873000-b7874000 rwxp 00006000 08:17 51988      
/usr/lib/python2.5/lib-dynload/operator.so
b7874000-b7878000 r-xp 00000000 08:17 50211      
/usr/lib/python2.5/lib-dynload/strop.so
b7878000-b787a000 rwxp 00004000 08:17 50211      
/usr/lib/python2.5/lib-dynload/strop.so
b787a000-b78bb000 rwxp b787a000 00:00 0 
b78bb000-b7a06000 r-xp 00000000 08:17 16620      /usr/lib/libcrypto.so.0.9.8
b7a06000-b7a1b000 rwxp 0014b000 08:17 16620      /usr/lib/libcrypto.so.0.9.8
b7a1b000-b7a1e000 rwxp b7a1b000 00:00 0 
b7a1e000-b7a5d000 r-xp 00000000 08:17 17517      /usr/lib/libssl.so.0.9.8
b7a5d000-b7a61000 rwxp 0003e000 08:17 17517      /usr/lib/libssl.so.0.9.8
b7a62000-b7a66000 r-xp 00000000 08:17 17566      /usr/lib/libxenstore.so.3.0.0
b7a66000-b7a67000 rwxp 00003000 08:17 17566      /usr/lib/libxenstore.so.3.0.0
b7a67000-b7a6a000 rwxp b7a67000 00:00 0 
b7a6a000-b7a72000 r-xp 00000000 08:17 164014     
/usr/lib/python/xen/lowlevel/xc.so
b7a72000-b7a73000 rwxp 00008000 08:17 164014     
/usr/lib/python/xen/lowlevel/xc.so
b7a73000-b7a7d000 r-xp 00000000 08:17 51960      
/usr/lib/python2.5/lib-dynload/_socket.so
b7a7d000-b7a80000 rwxp 0000a000 08:17 51960      
/usr/lib/python2.5/lib-dynload/_socket.so
b7a80000-b7a87000 r-xs 00000000 08:17 18593      
/usr/lib/gconv/gconv-modules.cache
b7a87000-b7ac6000 r-xp 00000000 08:17 637807     
/usr/share/locale/UTF-8/LC_CTYPE
b7ac6000-b7b4a000 rwxp b7ac6000 00:00 0 
b7b4a000-b7b55000 r-xp 00000000 08:11 143916     /lib/libgcc_s-4.2.2.so.1
b7b55000-b7b56000 rwxp 0000a000 08:11 143916     /lib/libgcc_s-4.2.2.so.1
b7b56000-b7c90000 r-xp 00000000 08:11 144811     /lib/i686/libc-2.6.1.so
b7c90000-b7c91000 r-xp 00139000 08:11 144811     /lib/i686/libc-2.6.1.so
b7c91000-b7c93000 rwxp 0013a000 08:11 144811     /lib/i686/libc-2.6.1.so
b7c93000-b7c96000 rwxp b7c93000 00:00 0 
b7c96000-b7cb9000 r-xp 00000000 08:11 144813     /lib/i686/libm-2.6.1.so
b7cb9000-b7cbb000 rwxp 00023000 08:11 144813     /lib/i686/libm-2.6.1.so
b7cbb000-b7cbd000 r-xp 00000000 08:11 143934     /lib/libutil-2.6.1.so
b7cbd000-b7cbf000 rwxp 00001000 08:11 143934     /lib/libutil-2.6.1.so
b7cbf000-b7cc1000 r-xp 00000000 08:11 144828     /lib/libdl-2.6.1.so
b7cc1000-b7cc3000 rwxp 00001000 08:11 144828     /lib/libdl-2.6.1.so
b7cc3000-b7cc4000 rwxp b7cc3000 00:00 0 
b7cc4000-b7cd7000 r-xp 00000000 08:11 144815     /lib/i686/libpthread-2.6.1.so
b7cd7000-b7cd9000 rwxp 00012000 08:11 144815     /lib/i686/libpthread-2.6.1.so
b7cd9000-b7cdb000 rwxp b7cd9000 00:00 0 
b7cdb000-b7de7000 r-xp 00000000 08:17 17702      /usr/lib/libpython2.5.so.1.0
b7de7000-b7e0d000 rwxp 0010c000 08:17 17702      /usr/lib/libpython2.5.so.1.0
b7e0d000-b7e13000 rwxp b7e0d000 00:00 0 
b7e13000-b7ef6000 r-xp 00000000 08:17 17505      /usr/lib/libstdc++.so.6.0.9
b7ef6000-b7ef9000 r-xp 000e2000 08:17 17505      /usr/lib/libstdc++.so.6.0.9
b7ef9000-b7efb000 rwxp 000e5000 08:17 17505      /usr/lib/libstdc++.so.6.0.9
b7efb000-b7f02000 rwxp b7efb000 00:00 0 
b7f02000-b7f04000 r-xp 00000000 08:17 51985      
/usr/lib/python2.5/lib-dynload/math.so
b7f04000-b7f05000 rwxp 00002000 08:17 51985      
/usr/lib/python2.5/lib-dynload/math.so
b7f05000-b7f09000 r-xp 00000000 08:17 51975      
/usr/lib/python2.5/lib-dynload/collections.so
b7f09000-b7f0a000 rwxp 00004000 08:17 51975      
/usr/lib/python2.5/lib-dynload/collections.so
b7f0a000-b7f0d000 r-xp 00000000 08:17 50213      
/usr/lib/python2.5/lib-dynload/time.so
b7f0d000-b7f0f000 rwxp 00002000 08:17 50213      
/usr/lib/python2.5/lib-dynload/time.so
b7f0f000-b7f12000 r-xp 00000000 08:17 51964      
/usr/lib/python2.5/lib-dynload/_ssl.so
b7f12000-b7f13000 rwxp 00003000 08:17 51964      
/usr/lib/python2.5/lib-dynload/_ssl.so
b7f13000-b7f14000 rwxp b7f13000 00:00 0 
b7f14000-b7f15000 r-xp b7f14000 00:00 0          [vdso]
b7f15000-b7f2e000 r-xp 00000000 08:11 143908     /lib/ld-2.6.1.so
b7f2e000-b7f2f000 r-xp 00018000 08:11 143908     /lib/ld-2.6.1.so
b7f2f000-b7f30000 rwxp 00019000 08:11 143908     /lib/ld-2.6.1.so
bfd6f000-bfd9e000 rw-p bfd6f000 00:00 0          [stack]

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel