bugGNU GRUB - Bugs: bug #47050, SAY commands cause crash in...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #47050: SAY commands cause crash in grub-syslinux2cfg and syslinux_configfile

Submitter:  nerdopolis <nerdopolis>
Submitted:  Wed 03 Feb 2016 03:44:04 AM UTC
   
 
Category:  Configuration Severity:  Major
Priority:  5 - Normal Item Group:  Software Error
Status:  Invalid Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Closed Release:  2.02~beta1
Release:  Reproducibility:  Every Time
Planned Release:  None

Thu 04 Feb 2016 03:20:44 AM UTC, comment #4: 

Hi. I have tested master instead of 2.02~beta2 (the version shipping with Debian), and confirm it is fixed in master, which I should have tested. thanks.

nerdopolis <nerdopolis>
Wed 03 Feb 2016 04:24:32 PM UTC, comment #3: 

I cannot reproduce it and line numbers in stack trace do not match current sources either. Please next time make sure problem exists in current GIT. Reopen if you can still reproduce it. Thank you.

Andrei Borzenkov <arvidjaar>
Group Member
Wed 03 Feb 2016 04:14:34 AM UTC, comment #2: 

Hi. I have recompiled grub, and tested with the minimum needed syslinux.cfg file needed to cause the crash. the case of say or SAY does not matter.

nerdopolis <nerdopolis>
Wed 03 Feb 2016 03:48:33 AM UTC, comment #1: 

Could you please recompile grub with HOST_CFLAGS=-g HOST_LDFLAGS=-g and attach stack trace again as well as isolinux.cfg that crashes grub. Thanks.

Andrei Borzenkov <arvidjaar>
Group Member
Wed 03 Feb 2016 03:44:04 AM UTC, original submission:  

Running grub-syslinux2cfg on an ISOLINUX.cfg file with SAY commands such as
SAY ___________________________________________________________________

results in a crash. This also crashes grub if the cfg file calls it in with syslinux_configfile




The stack trace
(gdb) bt full
#0  0xf7756ba0 in __kernel_vsyscall ()
No symbol table info available.
#1  0xf7525057 in __GI_raise (sig=6) at ../sysdeps/unix/sysv/linux/raise.c:55
        resultvar = <optimized out>
        resultvar = <optimized out>
        pid = -143982592
        selftid = 6349
#2  0xf7526699 in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0xf775fb18 <check_match+312>, sa_sigaction = 0xf775fb18 <check_match+312>}, sa_mask = {__val = {4149264478, 134517367, 4151704441, 225011984, 4151814896,
              4293708888, 4151704041, 225011984, 4149195160, 523, 4151704041, 4151812096, 4149200244, 1794, 255564379, 4151705829, 4148274888, 1, 1, 4149231348, 1794, 4149240948, 4151655232, 4293708948,
              4293708944, 0, 3, 4096, 4150126472, 4096, 83, 4150984704}}, sa_flags = -1258024, sa_restorer = 0xf7563118 <__libc_message+520>}
        sigs = {__val = {32, 0 <repeats 31 times>}}
#3  0xf756319e in __libc_message (do_abort=1, fmt=0xf765d444 "*** Error in `%s': %s: 0x%s *\n") at ../sysdeps/posix/libc_fatal.c:175
        ap = <optimized out>
        fd = <optimized out>
        on_2 = <optimized out>
        list = <optimized out>
        nlist = <optimized out>
        cp = <optimized out>
        written = <optimized out>
#4  0xf7568de7 in malloc_printerr (action=<optimized out>, str=0xf7659583 "free(): invalid pointer", ptr=0x955a3e0) at malloc.c:4965
        buf = "0955a3e0"
        cp = <optimized out>
#5  0xf756954d in _int_free (av=0xf76b0840 <main_arena>, p=<optimized out>, have_lock=0) at malloc.c:3834
        size = <optimized out>
        fb = <optimized out>
        nextchunk = <optimized out>
        nextsize = <optimized out>
        nextinuse = <optimized out>
        prevsize = <optimized out>
        bck = <optimized out>
        fwd = <optimized out>
        errstr = <optimized out>
        locked = <optimized out>
        _func_ = "_int_free"
#6  0x0804dfde in ?? ()
No symbol table info available.
#7  0x0804e2ea in ?? ()
No symbol table info available.
#8  0x0804a1b1 in ?? ()
No symbol table info available.
#9  0xf751172e in __libc_start_main (main=0x804a040, argc=2, argv=0xffecd074, init=0x80b0fa0, fini=0x80b1000, rtld_fini=0xf7766210 <_dl_fini>, stack_end=0xffecd06c) at libc-start.c:289

nerdopolis <nerdopolis>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #36237:  stacktrace.txt added by nerdopolis (4KiB - text/plain - The minimal syslinux cfg file needed to cause grub to crash)
file #36238:  syslinux.cfg added by nerdopolis (11B - application/octet-stream - The minimal syslinux cfg file needed to cause grub to crash)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by arvidjaar (Posted a comment)
  • -email is unavailable- added by nerdopolis (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-02-03 arvidjaar StatusNone Invalid
        Open/ClosedOpen Closed
    2016-02-03 nerdopolis Attached File- Added stacktrace.txt, #36237
        Attached File- Added syslinux.cfg, #36238

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code