[Bug 295991] lib/libc posix_spawnp(): PATH-search child runs on an undersized rfork_thread stack and underflows into the caller's heap (heavily-linked processes; PHP proc_open)

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295991

--- Comment #10 from Marek Zarychta <zarych...@plan-b.pwste.edu.pl> ---
Please hold on. This patch introduces problem in the jail running
www/onlyoffice. A few backtraces from this jail are posted below.

(lldb) target create
"/ezjail/onlyoffice/usr/local/www/onlyoffice/documentserver/server/FileConverter/bin/x2t"
--core "x2t.37483.core"
bt
Core file '/ezjail/onlyoffice/tmp/x2t.37483.core' (x86_64) was loaded.
(lldb) bt
* thread #1, name = 'V8 DefaultWorke', stop reason = signal SIGSEGV
  * frame #0: 0x00001c87c6981875 ld-elf.so.1
    frame #1: 0x0000000000000408
    frame #2: 0x00001c87c69818d2 ld-elf.so.1
    frame #3: 0x00001c87c6984299 ld-elf.so.1
    frame #4: 0x00001c87c697ae82 ld-elf.so.1
    frame #5: 0x00001c87c697fd1b ld-elf.so.1
    frame #6: 0x00001c87c697faf3 ld-elf.so.1
    frame #7: 0x00001c87c6979146 ld-elf.so.1
    frame #8: 0x00001c87c6978d05 ld-elf.so.1
    frame #9: 0x00001c87c69789b6 ld-elf.so.1
    frame #10: 0x00001c87c6973bad ld-elf.so.1`___lldb_unnamed_symbol_6b80 + 45
    frame #11: 0x00000008342f0e99 libthr.so.3`___lldb_unnamed_symbol_10d40 +
345


(lldb) target create
"/ezjail/onlyoffice/usr/local/lib/erlang27/erts-15.2.7.9/bin/beam.smp" --core
"beam.smp.38994.core"
Core file '/ezjail/onlyoffice/tmp/beam.smp.38994.core' (x86_64) was loaded.
(lldb) bt
* thread #1, name = 'erts_async_1', stop reason = signal SIGSEGV
  * frame #0: 0x00000b67fd895875 ld-elf.so.1
    frame #1: 0x0000000000000078
    frame #2: 0x00000b67fd8958d2 ld-elf.so.1
    frame #3: 0x00000b67fd898299 ld-elf.so.1
    frame #4: 0x00000b67fd88ee82 ld-elf.so.1
    frame #5: 0x00000b67fd893d1b ld-elf.so.1
    frame #6: 0x00000b67fd893af3 ld-elf.so.1
    frame #7: 0x00000b67fd88d146 ld-elf.so.1
    frame #8: 0x00000b67fd88cd05 ld-elf.so.1
    frame #9: 0x00000b67fd88c9b6 ld-elf.so.1
    frame #10: 0x00000b67fd887bad ld-elf.so.1`___lldb_unnamed_symbol_6b80 + 45
    frame #11: 0x00000008262c9e99 libthr.so.3`___lldb_unnamed_symbol_10d40 +
345

(lldb) target create
"/ezjail/onlyoffice/usr/local/lib/erlang27/erts-15.2.7.9/bin/beam.smp" --core
"beam.smp.27430.core"
Core file '/ezjail/onlyoffice/tmp/beam.smp.27430.core' (x86_64) was loaded.
(lldb) bt
* thread #1, name = 'erts_sched_32', stop reason = signal SIGSEGV
  * frame #0: 0x00000b7d3eab74d4 ld-elf.so.1
    frame #1: 0x00000008876f0b80
    frame #2: 0x00000b7d3eaab6a6 ld-elf.so.1
    frame #3: 0x00000b7d3eaaace5 ld-elf.so.1
    frame #4: 0x00000b7d3eaa77d2 ld-elf.so.1
    frame #5: 0x000000089deec55b libcrypto.so.35`___lldb_unnamed_symbol_2ec520
+ 59
    frame #6: 0x000000089deecfa6 libcrypto.so.35`DSO_load + 374
    frame #7: 0x000000089deed475 libcrypto.so.35`DSO_dsobyaddr + 133
    frame #8: 0x000000089de31639 libcrypto.so.35`___lldb_unnamed_symbol_231600
+ 57
    frame #9: 0x0000000826c3f2f3 libthr.so.3`pthread_once + 179
    frame #10: 0x000000089de24569 libcrypto.so.35`CRYPTO_THREAD_run_once + 9
    frame #11: 0x000000089de311a9 libcrypto.so.35`OPENSSL_init_crypto + 377
    frame #12: 0x000000089de367a0 libcrypto.so.35`___lldb_unnamed_symbol_2366e0
+ 192
    frame #13: 0x000000089de31b32 libcrypto.so.35`OSSL_PROVIDER_try_load_ex +
50

-- 
You are receiving this mail because:
You are the assignee for the bug.