On Oct 24, Craig Small <[email protected]> wrote:

>   Are you sure it's just a lack of memory causing this problem?
> It's going to be a bit tricky to fix with just a crash message.
I have seen a similar bug being triggered on a compromised customer 
server.

strace:

...
stat("/proc/22299", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/22299/stat", O_RDONLY)      = 6
read(6, "cpu  1067991797 7372 10234352 43"..., 2048) = 860
close(6)                                = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0x1} ---

The problem is that for some reason /proc was mounted again on 
/proc/22299:

# ps
Signal 11 (SEGV) caught by ps (3.3.12).
ps:ps/display.c:66: please report this bug
Segmentation fault
[Exit 139 (SIGSEGV)]
# pstree -p | grep 22299
[Exit 1]
# grep 22299 /proc/mounts
proc /proc/22299 proc rw,relatime 0 0
proc /usr/foo/22299 proc rw,relatime 0 0
proc /proc/22299 proc rw,relatime 0 0
proc /usr/foo/22299 proc rw,relatime 0 0
proc /usr/foo/22299/22314 proc rw,relatime 0 0
proc /proc/22299/22314 proc rw,relatime 0 0
proc /usr/foo/22299/22314 proc rw,relatime 0 0
proc /proc/22299/22314 proc rw,relatime 0 0
proc /usr/foo/22299/22315 proc rw,relatime 0 0
proc /proc/22299/22315 proc rw,relatime 0 0
proc /usr/foo/22299/22315 proc rw,relatime 0 0
proc /proc/22299/22315 proc rw,relatime 0 0
proc /usr/foo/22299/22314/22315 proc rw,relatime 0 0
proc /proc/22299/22314/22315 proc rw,relatime 0 0
proc /usr/foo/22299/22314/22315 proc rw,relatime 0 0
proc /proc/22299/22314/22315 proc rw,relatime 0 0 
#

After unmounting everything below /proc/22299 ps and top would work 
again. pstree was not affected, BTW.

HTH.

-- 
ciao,
Marco

Attachment: signature.asc
Description: PGP signature

Reply via email to