#18212: odhcp6c is crashing on ar71xx / r43027
------------------------+------------------------
Reporter: bittorf@… | Owner: developers
Type: defect | Status: reopened
Priority: normal | Milestone:
Component: packages | Version: Trunk
Resolution: | Keywords:
------------------------+------------------------
Comment (by bittorf@…):
another one with r43738
{{{
bastian@server1:~/openwrt$ scripts/remote-gdb
r43738.ar71xx.odhcp6c.7512.11.1418958427.core staging_dir/target-
mips_34kc_uClibc-0.9.33.2/root-ar71xx/usr/sbin/odhcp6c
Using target mips_34kc (uClibc-0.9.33.2)
GNU gdb (Linaro GDB) 7.6-2013.05
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "--host=x86_64-linux-gnu --target=mips-openwrt-
linux-uclibc".
For bug reporting instructions, please see:
<http://bugs.launchpad.net/gdb-linaro/>...
Reading symbols from /home/bastian/openwrt/staging_dir/target-
mips_34kc_uClibc-0.9.33.2/root-ar71xx/usr/sbin/odhcp6c...done.
[New LWP 7512]
Core was generated by `odhcp6c -s /lib/netifd/dhcpv6.script -P0 -t120
eth0.2'.
Program terminated with signal 11, Segmentation fault.
#0 malloc (bytes=<optimized out>) at libc/stdlib/malloc-
standard/malloc.c:957
957 if (size == nb) {
(gdb) bt full
#0 malloc (bytes=<optimized out>) at libc/stdlib/malloc-
standard/malloc.c:957
__infunc_pthread_cleanup_buffer = {__routine = 0x771484ac
<pthread_mutex_unlock>, __arg = 0x77160280 <__malloc_lock>, __canceltype =
4340336, __prev = 0x7fb9f447}
av = 0x77164fec <__malloc_state>
nb = 16
idx = 2
bin = <optimized out>
fb = <optimized out>
victim = 0x5da420
size = 0
victim_index = <optimized out>
remainder = <optimized out>
remainder_size = <optimized out>
block = <optimized out>
bit = <optimized out>
map = <optimized out>
fwd = <optimized out>
bck = 0x0
retval = <optimized out>
#1 0x7713f794 in realloc (oldmem=0x0, bytes=8) at libc/stdlib/malloc-
standard/realloc.c:51
nb = <optimized out>
oldp = <optimized out>
oldsize = <optimized out>
newp = <optimized out>
newsize = <optimized out>
newmem = <optimized out>
next = <optimized out>
remainder = <optimized out>
remainder_size = <optimized out>
bck = <optimized out>
fwd = <optimized out>
copysize = <optimized out>
ncopies = <optimized out>
s = <optimized out>
d = <optimized out>
retval = <optimized out>
#2 0x0040125e in ipv6_to_env (name=name@entry=0x406110 "SERVER",
addr=addr@entry=0x0, cnt=<optimized out>) at
/home/bastian/openwrt/build_dir/target-
mips_34kc_uClibc-0.9.33.2/odhcp6c-2014-12-10/src/script.c:86
buf_len = 6
buf = <optimized out>
#3 0x004052d6 in script_call (status=status@entry=0x405a6c "stopped") at
/home/bastian/openwrt/build_dir/target-
mips_34kc_uClibc-0.9.33.2/odhcp6c-2014-12-10/src/script.c:369
buf = <optimized out>
dns_len = 0
search_len = 0
custom_len = 0
sntp_ip_len = 0
ntp_ip_len = 0
ntp_dns_len = 0
sip_ip_len = 0
sip_fqdn_len = 0
aftr_name_len = 0
cer_len = 0
addr_len = 0
s46_mapt_len = 0
s46_mape_len = 0
s46_lw_len = 0
passthru_len = 0
addr = 0x0
dns = 0x0
search = 0x0
custom = 0x0
sntp = 0x0
ntp = 0x0
ntp_dns = 0x0
sip = 0x0
sip_fqdn = 0x0
aftr_name = 0x0
cer = 0x0
s46_mapt = 0x0
s46_mape = 0x0
s46_lw = 0x0
passthru = 0x0
prefix_len = 0
address_len = 0
ra_pref_len = 0
ra_route_len = 0
ra_dns_len = 0
prefix = 0x0
address = 0x0
ra_pref = 0x0
ra_route = 0x0
ra_dns = 0x0
#4 0x00401ea8 in main (argc=<optimized out>, argv=<optimized out>) at
/home/bastian/openwrt/build_dir/target-
mips_34kc_uClibc-0.9.33.2/odhcp6c-2014-12-10/src/odhcp6c.c:416
pidfile = 0x0
script = 0x7f94bf3c "/lib/netifd/dhcpv6.script"
l = <optimized out>
buf = "w\026j\300w\026|\300\000\000\000\000\000\000\000\000w\032
\024\000@\021\034\000@\n\325\177\224\255\260\000B:p\177\271\364G\000\000\017\367wy\347Xw\032\220\000w\030\305\000w\030\244Hw\030\251(\000\000\000\000\000\000\000\000\177\224\277\061w\026\003\260\000\000\004\205w\020'\211\000\000\004V\000\000\001\377\000\000\017\367wy\347X\177\224\256\000w\030\303\350w\020'\211",
'\000' <repeats 17 times>, "A"
optpos = 0x7efcf8fe <Address 0x7efcf8fe out of bounds>
opttype = 48945
optlen = 32660
ia_na_mode = IA_MODE_TRY
ia_pd_mode = IA_MODE_TRY
ia_pd_iaid_index = <optimized out>
ifid = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>,
__u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}
sol_timeout = 120
verbosity = 0
help = <optimized out>
daemonize = false
logopt = 1
c = <optimized out>
client_options = <optimized out>
ifname = 0x7f94bf60 "eth0.2"
(gdb)
}}}
--
Ticket URL: <https://dev.openwrt.org/ticket/18212#comment:6>
OpenWrt <http://openwrt.org>
Opensource Wireless Router Technology
_______________________________________________
openwrt-tickets mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-tickets