Package: dpkg
Version: 1.18.13
Severity: serious
User: debian...@lists.debian.org
Usertags: piuparts
Control: affects -1 + desktop-base

Hi,

during a test with piuparts I noticed a reproducible dpkg segfault
when installing desktop-base/experimental in a sid+experimental amd64 chroot.

>From the attached log (scroll to the bottom...):

  Selecting previously unselected package desktop-base.
  (Reading database ... 
(Reading database ... 5376 files and directories currently installed.)
  Preparing to unpack .../desktop-base_9.0.0~exp1_all.deb ...
  Unpacking desktop-base (9.0.0~exp1) ...
  Processing triggers for libglib2.0-0:amd64 (2.50.2-1) ...
  No schema files found: doing nothing.
  Setting up desktop-base (9.0.0~exp1) ...
  update-alternatives: using /usr/share/desktop-base/softwaves-theme to provide 
/usr/share/desktop-base/active-theme (desktop-theme) in auto mode
  update-alternatives: using 
/usr/share/desktop-base/active-theme/wallpaper/contents/images/1920x1080.svg to 
provide /usr/share/images/desktop-base/desktop-background (desktop-background) 
in auto mode
  update-alternatives: using 
/usr/share/desktop-base/active-theme/wallpaper/gnome-background.xml to provide 
/usr/share/images/desktop-base/desktop-background.xml (desktop-background.xml) 
in auto mode
  update-alternatives: using 
/usr/share/desktop-base/active-theme/lockscreen/gnome-background.xml to provide 
/usr/share/images/desktop-base/desktop-lockscreen.xml (desktop-lockscreen.xml) 
in auto mode
  update-alternatives: using /usr/share/desktop-base/active-theme/wallpaper to 
provide /usr/share/wallpapers/DebianTheme (desktop-plasma5-wallpaper) in auto 
mode
  update-alternatives: using 
/usr/share/desktop-base/active-theme/login/background.svg to provide 
/usr/share/images/desktop-base/login-background.svg (desktop-login-background) 
in auto mode
  update-alternatives: using 
/usr/share/desktop-base/active-theme/grub/grub-4x3.png to provide 
/usr/share/images/desktop-base/desktop-grub.png (desktop-grub) in auto mode
  dpkg: error processing package desktop-base (--configure):
   subprocess installed post-installation script returned error exit status 1
  Errors were encountered while processing:
  E: Sub-process /usr/bin/dpkg received a segmentation fault.


(gdb) bt 
#0  strlen () at ../sysdeps/x86_64/strlen.S:106
#1  0x00007fa55ad14da3 in _IO_vfprintf_internal (s=0x7ffe707d3230, 
format=<optimized out>, ap=0x7ffe707d58d8) at vfprintf.c:1637
#2  0x00007fa55ad15c23 in buffered_vfprintf (s=0x7fa55b065520 
<_IO_2_1_stderr_>, format=<optimized out>, args=<optimized out>) at 
vfprintf.c:2325
#3  0x00007fa55ad12f15 in _IO_vfprintf_internal (s=s@entry=0x7fa55b065520 
<_IO_2_1_stderr_>, format=format@entry=0x55d7d0e90ad0 " %s\n", 
ap=ap@entry=0x7ffe707d58d8) at vfprintf.c:1293
#4  0x00007fa55adc2cb9 in ___fprintf_chk (fp=0x7fa55b065520 <_IO_2_1_stderr_>, 
flag=flag@entry=1, format=format@entry=0x55d7d0e90ad0 " %s\n") at 
fprintf_chk.c:35
#5  0x000055d7d0e66fba in fprintf (__fmt=0x55d7d0e90ad0 " %s\n", 
__stream=<optimized out>) at /usr/include/x86_64-linux-gnu/bits/stdio2.h:97
#6  reportbroken_retexitstatus (ret=0) at ../../src/errors.c:111
#7  0x000055d7d0e5e6c2 in main (argc=<optimized out>, argv=<optimized out>) at 
../../src/main.c:927

(gdb) bt full
#0  strlen () at ../sysdeps/x86_64/strlen.S:106
No locals.
#1  0x00007fa55ad14da3 in _IO_vfprintf_internal (s=0x7ffe707d3230, 
format=<optimized out>, ap=0x7ffe707d58d8) at vfprintf.c:1637
        len = <optimized out>
        string_malloced = 0
        step0_jumps = {0, -2199, -2392, -2299, -778, -685, 966, 644, 1362, 
1166, 1273, -1287, 547, 639, -2145, -2098, -1198, -1093, -1081, -1069, -2725, 
-577, 304, 393, 485, -3452, 63, -3541, -3541, 1073}
        space = <optimized out>
        is_short = <optimized out>
        use_outdigits = 0
        step1_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, 1166, 1273, -1287, 547, 639, 
-2145, -2098, -1198, -1093, -1081, -1069, -2725, -577, 304, 393, 485, -3452, 
63, -3541, -3541, 0}
        group = 0
        prec = -1
        step2_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1273, -1287, 547, 639, 
-2145, -2098, -1198, -1093, -1081, -1069, -2725, -577, 304, 393, 485, -3452, 
63, -3541, -3541, 0}
        string = 0x55d7d2bd99b0 <error: Cannot access memory at address 
0x55d7d2bd99b0>
        left = 0
        is_long_double = <optimized out>
        width = 0
        step3a_jumps = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, -1383, 0, 0, 0, -2145, 
-2098, -1198, -1093, -1081, 0, 0, 0, 0, 393, 0, 0, 0, 0, 0, 0}
        alt = 0
        showsign = <optimized out>
        is_long = <optimized out>
        is_char = <optimized out>
        pad = <optimized out>
        step3b_jumps = {0 <repeats 11 times>, 547, 0, 0, -2145, -2098, -1198, 
-1093, -1081, -1069, -2725, -577, 304, 393, 485, -3452, 63, 0, 0, 0}
        step4_jumps = {0 <repeats 14 times>, -2145, -2098, -1198, -1093, -1081, 
-1069, -2725, -577, 304, 393, 485, -3452, 63, 0, 0, 0}
        is_negative = <optimized out>
        number = <optimized out>
        base = <optimized out>
        the_arg = {pa_wchar = 0 L'\000', pa_int = 0, pa_long_int = 0, 
pa_long_long_int = 0, pa_u_int = 0, pa_u_long_int = 0, pa_u_long_long_int = 0, 
pa_double = 0, pa_long_double = 0, pa_string = 0x0, 
          pa_wstring = 0x0, pa_pointer = 0x0, pa_user = 0x0}
        spec = <optimized out>
        _buffer = {__routine = 0x7fa55b060900 <_IO_helper_jumps>, __arg = 
0x7fa55b061440 <_IO_file_jumps>, __canceltype = 1887252336, __prev = 
0x7fa55ad3db32 <new_do_write+98>}
        _avail = <optimized out>
        thousands_sep = 0x0
        grouping = 0xffffffffffffffff <error: Cannot access memory at address 
0xffffffffffffffff>
        done = <optimized out>
        f = 0x55d7d0e90ad2 "s\n"
        lead_str_end = 0x55d7d0e90ad1 "%s\n"
        end_of_spec = <optimized out>
        work_buffer = " U\006[\245\177\000\000 
U\006[\245\177\000\000\207\000\000\000\000\000\000\000p/}p\376\177\000\000\207\000\000\000\000\000\000\000\207\000\000\000\000\000\000\000\206
 \255\373\000\000\000\000>\357\323Z\245\177\000\000 
U\006[\245\177\000\000\207\000\000\000\000\000\000\000\207\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000@\024\006[\245\177\000\000\067]\321Z\245\177\000\000\060\016\323Z\245\177\000\000
 U\006[\245\177", '\000' <repeats 18 times>, "\004\200\255\373", '\000' 
<repeats 28 times>, "p/}p\376\177\000\000\367/}p\376\177\000\000pO}p\376\177", 
'\000' <repeats 62 times>...
        workstart = 0x0
        workend = <optimized out>
        ap_save = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 
0x7ffe707d59c0, reg_save_area = 0x7ffe707d58f0}}
        nspecs_done = <optimized out>
        save_errno = 2
        readonly_format = 0
        __PRETTY_FUNCTION__ = "_IO_vfprintf_internal"
#2  0x00007fa55ad15c23 in buffered_vfprintf (s=0x7fa55b065520 
<_IO_2_1_stderr_>, format=<optimized out>, args=<optimized out>) at 
vfprintf.c:2325
        buf = " ", '\000' <repeats 5687 times>...
        helper = {_f = {file = {_flags = -72515580, _IO_read_ptr = 0x0, 
_IO_read_end = 0x0, _IO_read_base = 0x0, _IO_write_base = 0x7ffe707d3330 " ", 
_IO_write_ptr = 0x7ffe707d3331 "", 
              _IO_write_end = 0x7ffe707d5330 " U\006[\245\177", _IO_buf_base = 
0x0, _IO_buf_end = 0x0, _IO_save_base = 0x0, _IO_backup_base = 0x0, 
_IO_save_end = 0x0, _markers = 0x0, _chain = 0x0, _fileno = 0, 
              _flags2 = 4, _old_offset = 0, _cur_column = 0, _vtable_offset = 0 
'\000', _shortbuf = "", _lock = 0x0, _offset = 0, _codecvt = 0x0, _wide_data = 
0x0, _freeres_list = 0x0, _freeres_buf = 0x0, 
              __pad5 = 0, _mode = -1, _unused2 = '\000' <repeats 19 times>}, 
vtable = 0x7fa55b060900 <_IO_helper_jumps>}, _put_stream = 0x7fa55b065520 
<_IO_2_1_stderr_>, lock = {lock = 0, cnt = 0, owner = 0x0}}
        hp = 0x7ffe707d3230
        result = <optimized out>
        to_flush = <optimized out>
#3  0x00007fa55ad12f15 in _IO_vfprintf_internal (s=s@entry=0x7fa55b065520 
<_IO_2_1_stderr_>, format=format@entry=0x55d7d0e90ad0 " %s\n", 
ap=ap@entry=0x7ffe707d58d8) at vfprintf.c:1293
        thousands_sep = 0x0
        grouping = <optimized out>
        done = <optimized out>
        f = 0x55d7d2ba4520 ""
        lead_str_end = <optimized out>
        end_of_spec = <optimized out>
        work_buffer = "\001\000\000\000\000\000\000\000\006\000\000\000\061", 
'\000' <repeats 19 times>, "[\000\000\000n", '\000' <repeats 19 times>, 
"w\000\000\000|\000\000\000\000\200\255\373\327U\000\000\000K\006[\245\177\000\000X",
 '\000' <repeats 15 times>, 
"\020\221\347\320\327U\000\000\377\377\377\377\000\000\000\000 
\031*\321\327U\000\061\224m\324Z\245\177\000\000`U}p\376\177\000\000`U}p\376\177\000\000\310\346\270\322\327U\000\000\035\035\351\320\327U\000\000
 
W}p\376\177\000\000\001\000\000\000\000\000\000\000\002\000\000\000\000\000\000\000\246)\334Z\245\177\000\000\001\200\255\373\000\000\000\000"...
        workstart = 0x0
        workend = <optimized out>
        ap_save = {{gp_offset = 0, fp_offset = 0, overflow_arg_area = 0x0, 
reg_save_area = 0x0}}
        nspecs_done = <optimized out>
        save_errno = 2
        readonly_format = 0
        __PRETTY_FUNCTION__ = "_IO_vfprintf_internal"
#4  0x00007fa55adc2cb9 in ___fprintf_chk (fp=0x7fa55b065520 <_IO_2_1_stderr_>, 
flag=flag@entry=1, format=format@entry=0x55d7d0e90ad0 " %s\n") at 
fprintf_chk.c:35
        _IO_acquire_lock_file = 0x7fa55b065520 <_IO_2_1_stderr_>
        ap = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 
0x7ffe707d59c0, reg_save_area = 0x7ffe707d58f0}}
        done = <optimized out>
#5  0x000055d7d0e66fba in fprintf (__fmt=0x55d7d0e90ad0 " %s\n", 
__stream=<optimized out>) at /usr/include/x86_64-linux-gnu/bits/stdio2.h:97
No locals.
#6  reportbroken_retexitstatus (ret=0) at ../../src/errors.c:111
No locals.
#7  0x000055d7d0e5e6c2 in main (argc=<optimized out>, argv=<optimized out>) at 
../../src/main.c:927
        ret = 0


cheers,

Andreas

Attachment: desktop-base_9.0.0~exp1.log.gz
Description: application/gzip

Reply via email to