#18212: odhcp6c is crashing on ar71xx / r43027
------------------------+------------------------
  Reporter:  bittorf@…  |      Owner:  developers
      Type:  defect     |     Status:  reopened
  Priority:  normal     |  Milestone:
 Component:  packages   |    Version:  Trunk
Resolution:             |   Keywords:
------------------------+------------------------

Comment (by bittorf@…):

 another one with r43738

 {{{
 bastian@server1:~/openwrt$ scripts/remote-gdb
 r43738.ar71xx.odhcp6c.7512.11.1418958427.core staging_dir/target-
 mips_34kc_uClibc-0.9.33.2/root-ar71xx/usr/sbin/odhcp6c
 Using target mips_34kc (uClibc-0.9.33.2)
 GNU gdb (Linaro GDB) 7.6-2013.05
 Copyright (C) 2013 Free Software Foundation, Inc.
 License GPLv3+: GNU GPL version 3 or later
 <http://gnu.org/licenses/gpl.html>
 This is free software: you are free to change and redistribute it.
 There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
 and "show warranty" for details.
 This GDB was configured as "--host=x86_64-linux-gnu --target=mips-openwrt-
 linux-uclibc".
 For bug reporting instructions, please see:
 <http://bugs.launchpad.net/gdb-linaro/>...
 Reading symbols from /home/bastian/openwrt/staging_dir/target-
 mips_34kc_uClibc-0.9.33.2/root-ar71xx/usr/sbin/odhcp6c...done.
 [New LWP 7512]
 Core was generated by `odhcp6c -s /lib/netifd/dhcpv6.script -P0 -t120
 eth0.2'.
 Program terminated with signal 11, Segmentation fault.
 #0  malloc (bytes=<optimized out>) at libc/stdlib/malloc-
 standard/malloc.c:957
 957             if (size == nb) {
 (gdb) bt full
 #0  malloc (bytes=<optimized out>) at libc/stdlib/malloc-
 standard/malloc.c:957
         __infunc_pthread_cleanup_buffer = {__routine = 0x771484ac
 <pthread_mutex_unlock>, __arg = 0x77160280 <__malloc_lock>, __canceltype =
 4340336, __prev = 0x7fb9f447}
         av = 0x77164fec <__malloc_state>
         nb = 16
         idx = 2
         bin = <optimized out>
         fb = <optimized out>
         victim = 0x5da420
         size = 0
         victim_index = <optimized out>
         remainder = <optimized out>
         remainder_size = <optimized out>
         block = <optimized out>
         bit = <optimized out>
         map = <optimized out>
         fwd = <optimized out>
         bck = 0x0
         retval = <optimized out>
 #1  0x7713f794 in realloc (oldmem=0x0, bytes=8) at libc/stdlib/malloc-
 standard/realloc.c:51
         nb = <optimized out>
         oldp = <optimized out>
         oldsize = <optimized out>
         newp = <optimized out>
         newsize = <optimized out>
         newmem = <optimized out>
         next = <optimized out>
         remainder = <optimized out>
         remainder_size = <optimized out>
         bck = <optimized out>
         fwd = <optimized out>
         copysize = <optimized out>
         ncopies = <optimized out>
         s = <optimized out>
         d = <optimized out>
         retval = <optimized out>
 #2  0x0040125e in ipv6_to_env (name=name@entry=0x406110 "SERVER",
 addr=addr@entry=0x0, cnt=<optimized out>) at
 /home/bastian/openwrt/build_dir/target-
 mips_34kc_uClibc-0.9.33.2/odhcp6c-2014-12-10/src/script.c:86
         buf_len = 6
         buf = <optimized out>
 #3  0x004052d6 in script_call (status=status@entry=0x405a6c "stopped") at
 /home/bastian/openwrt/build_dir/target-
 mips_34kc_uClibc-0.9.33.2/odhcp6c-2014-12-10/src/script.c:369
         buf = <optimized out>
         dns_len = 0
         search_len = 0
         custom_len = 0
         sntp_ip_len = 0
         ntp_ip_len = 0
         ntp_dns_len = 0
         sip_ip_len = 0
         sip_fqdn_len = 0
         aftr_name_len = 0
         cer_len = 0
         addr_len = 0
         s46_mapt_len = 0
         s46_mape_len = 0
         s46_lw_len = 0
         passthru_len = 0
         addr = 0x0
         dns = 0x0
         search = 0x0
         custom = 0x0
         sntp = 0x0
         ntp = 0x0
         ntp_dns = 0x0
         sip = 0x0
         sip_fqdn = 0x0
         aftr_name = 0x0
         cer = 0x0
         s46_mapt = 0x0
         s46_mape = 0x0
         s46_lw = 0x0
         passthru = 0x0
         prefix_len = 0
         address_len = 0
         ra_pref_len = 0
         ra_route_len = 0
         ra_dns_len = 0
         prefix = 0x0
         address = 0x0
         ra_pref = 0x0
         ra_route = 0x0
         ra_dns = 0x0
 #4  0x00401ea8 in main (argc=<optimized out>, argv=<optimized out>) at
 /home/bastian/openwrt/build_dir/target-
 mips_34kc_uClibc-0.9.33.2/odhcp6c-2014-12-10/src/odhcp6c.c:416
         pidfile = 0x0
         script = 0x7f94bf3c "/lib/netifd/dhcpv6.script"
         l = <optimized out>
         buf = "w\026j\300w\026|\300\000\000\000\000\000\000\000\000w\032
 
\024\000@\021\034\000@\n\325\177\224\255\260\000B:p\177\271\364G\000\000\017\367wy\347Xw\032\220\000w\030\305\000w\030\244Hw\030\251(\000\000\000\000\000\000\000\000\177\224\277\061w\026\003\260\000\000\004\205w\020'\211\000\000\004V\000\000\001\377\000\000\017\367wy\347X\177\224\256\000w\030\303\350w\020'\211",
 '\000' <repeats 17 times>, "A"
         optpos = 0x7efcf8fe <Address 0x7efcf8fe out of bounds>
         opttype = 48945
         optlen = 32660
         ia_na_mode = IA_MODE_TRY
         ia_pd_mode = IA_MODE_TRY
         ia_pd_iaid_index = <optimized out>
         ifid = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>,
 __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}
         sol_timeout = 120
         verbosity = 0
         help = <optimized out>
         daemonize = false
         logopt = 1
         c = <optimized out>
         client_options = <optimized out>
         ifname = 0x7f94bf60 "eth0.2"
 (gdb)
 }}}

--
Ticket URL: <https://dev.openwrt.org/ticket/18212#comment:6>
OpenWrt <http://openwrt.org>
Opensource Wireless Router Technology
_______________________________________________
openwrt-tickets mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-tickets

Reply via email to