Dear Maintainer,
I tried to find out where this given backtrace points to.
I think that following would be the location
where the invalid pointer was tried to be freed.
Attached file contains some details on how it was retrieved.
Upstream removed/replaced function teardown_ag_bmap in [1],
therefore this bug might be just closed.
Kind regards,
Bernhard
Phase 5 - rebuild AG headers and trees...
*** glibc detected *** xfs_repair: munmap_chunk(): invalid pointer: 0xb092c008
***
=== Backtrace: =
/lib/i686/cmov/libc.so.6(cfree+0x1bb)[0xb7de24ab]| 0xb7de24ab |
xfs_repair[0x8061f2d]| 0x08061f2d |
: call
xfs_repair[0x806b311]| 0x0806b311 |
: call
xfs_repair[0x807cb28]| 0x0807cb28 |
: call
/lib/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb7d89450] | 0xb7d89450 |
<__libc_start_main+226>: call *0x8(%ebp)
xfs_repair[0x8049541]| 0x08049541 |
<_start+28>: call <__libc_start_main@plt>
=== Memory map:
[1]
https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/commit/repair?id=c1f7a46c4d6403e3313c13487e2f2174f92db670
Phase 5 - rebuild AG headers and trees...
*** glibc detected *** xfs_repair: munmap_chunk(): invalid pointer:
0xb092c008 ***
=== Backtrace: =
/lib/i686/cmov/libc.so.6(cfree+0x1bb)[0xb7de24ab]| 0xb7de24ab |
xfs_repair[0x8061f2d]| 0x08061f2d |
: call 0x80492c4
xfs_repair[0x806b311]| 0x0806b311 |
: call 0x8061d60
xfs_repair[0x807cb28]| 0x0807cb28 |
: call 0x806ae60
/lib/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb7d89450] | 0xb7d89450 |
<__libc_start_main+226>: call *0x8(%ebp)
xfs_repair[0x8049541]| 0x08049541 |
<_start+28>: call 0x8049254 <__libc_start_main@plt>
=== Memory map:
08048000-080ce000 r-xp 03:01 195863 /sbin/xfs_repair
080ce000-080cf000 rw-p 00085000 03:01 195863 /sbin/xfs_repair
080cf000-0aadc000 rw-p 080cf000 00:00 0 [heap]
##
deb [check-valid-until=no]
http://snapshot.debian.org/archive/debian/20091004T111800Z/ lenny main
deb-src [check-valid-until=no]
http://snapshot.debian.org/archive/debian/20091004T111800Z/ lenny main
apt-get update
apt-get install debian-archive-keyring gdb xfsprogs devscripts dpkg-dev
build-essential uuid-dev autoconf debhelper gettext libtool libreadline5-dev
gcc-4.1
wget
http://snapshot.debian.org/archive/debian/20060822T00Z/pool/main/x/xfsprogs/xfsprogs_2.8.11-1_i386.deb
dpkg -i xfsprogs_2.8.11-1_i386.deb
https://buildd.debian.org/status/fetch.php?pkg=xfsprogs=amd64=2.8.11-1=1156139624=0
# Unfortunately no log for i386
# -> was built with gcc-4.1
ln -sf gcc-4.1 /usr/bin/gcc
mkdir xfsprogs/orig -p
cdxfsprogs/orig
dget
http://snapshot.debian.org/archive/debian/20060822T00Z/pool/main/x/xfsprogs/xfsprogs_2.8.11-1.dsc
dpkg-source -x xfsprogs_2.8.11-1.dsc
cd ../..
cd xfsprogs
cp orig try1 -a
cd try1/xfsprogs-2.8.11/
dpkg-buildpackage -b
benutzer@debian:~$ objdump -D /sbin/xfs_repair > objdump.txt
debian:~/xfsprogs/try1/xfsprogs-2.8.11# file /sbin/xfs_repair
/root/xfsprogs/try1/xfsprogs-2.8.11/repair/xfs_repair
/sbin/xfs_repair: ELF 32-bit LSB
executable, Intel 80386, version 1 (SYSV), for GNU/Linux 2.4.1, dynamically
linked (uses shared libs), for GNU/Linux 2.4.1, stripped
/root/xfsprogs/try1/xfsprogs-2.8.11/repair/xfs_repair: ELF 32-bit LSB
executable, Intel 80386, version 1 (SYSV), for GNU/Linux 2.6.8, dynamically
linked (uses shared libs), for GNU/Linux 2.6.8, not stripped
debian:~/xfsprogs/try1/xfsprogs-2.8.11# gdb -q --args
/root/xfsprogs/try1/xfsprogs-2.8.11/repair/xfs_repair
(gdb) set width 0
(gdb) set pagination off
(gdb) disassemble main
debian:~# gdb -q --args /sbin/xfs_repair
(no debugging symbols found)
(gdb) set width 0
(gdb) set pagination off
(gdb) b __libc_start_main
--- original binary ---
| --- rebuild with debug info ---
|
(gdb) info target
| (gdb) info target
Symbols from "/sbin/xfs_repair".
| Symbols from "/root/xfsprogs/try1/xfsprogs-2.8.11/repair/xfs_repair".
Local exec file:
| Local exec file:
`/sbin/xfs_repair', file type elf32-i386.
| `/root/xfsprogs/try1/xfsprogs-2.8.11/repair/xfs_repair', file type
elf32-i386.
