[Bug 220381] net/torsocks: sometimes crashes on 12.0-CURRENT

Fri Jun 30 12:18:32 UTC 2017

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220381

            Bug ID: 220381
           Summary: net/torsocks: sometimes crashes on 12.0-CURRENT
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Keywords: crash, needs-qa
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs at FreeBSD.org
          Reporter: jbeich at FreeBSD.org
                CC: kib at FreeBSD.org, nobutaka at FreeBSD.org, yuri at rawbw.com
             Flags: maintainer-feedback?(yuri at rawbw.com)

After base r320472 net/torsocks started to crash when torifying www/w3m-img but
not other apps.

$ pkg install gdb torsocks w3m-img ca_root_nss
$ env -i LD_PRELOAD=/usr/local/lib/torsocks/libtorsocks.so \
  /usr/local/bin/gdb /usr/local/bin/w3m https://freebsd.org
[...]
Program received signal SIGSEGV, Segmentation fault.
__pthread_cleanup_push_imp (routine=0x80208ff30 <__stdio_cancel_cleanup>,
arg=0x0,
    info=0x7fffffffd7b0) at /usr/src/lib/libthr/thread/thr_clean.c:60
60              newbuf->prev = curthread->cleanup;
(gdb) bt f
#0  __pthread_cleanup_push_imp (routine=0x80208ff30 <__stdio_cancel_cleanup>,
arg=0x0,
    info=0x7fffffffd7b0) at /usr/src/lib/libthr/thread/thr_clean.c:60
        curthread = 0x0
#1  0x000000080207275e in fgets (buf=0x7fffffffd850 "i\a", n=1024,
fp=0x8022f2020)
    at /usr/src/lib/libc/stdio/fgets.c:59
        __cleanup_info__ = {pthread_cleanup_pad = {140737488346208,
34393882416, 0,
            18446735337746071552, 18446741944445842436, 20, 140737488345168,
1024}}
        s = 0x7fffffffd850 "i\a"
        p = <optimized out>
        len = <optimized out>
        t = <optimized out>
        ret = <optimized out>
#2  0x00000008008f8fa2 in parse_config_file (fp=0x8022f2020, config=0x800b04960
<tsocks_config>)
    at config-file.c:209
        ret = -1
        line =
"i\a\000\000\000\000\000\000X\332\377\377\377\177\000\000\000\332\377\377\377\177",
'\000' <repeats 22 times>,
"\b\000\000\000X\333\377\377\377\177\000\000T\213\362\001\b\000\000\000\276ff\000\000\000\000\000\366\337\364\016\377\177\000\000\300\346n\000\b\000\000\000\001\000\000\000\b\000\000\000\000do\000\b\000\000\000P\346\361\001\b\000\000\000\003\000\000\000\377\177\000\000\000\331\377\377\377\177\000\000\000\000\000\000\000\000\000\000\016\000\000\000\000\000\000\000\016\000\000\000\000\000\000\000X\332\377\377\377\177\000\000@\332\377\377\377\177\000\000\317\364l\000\b\000\000\000\000\360n\000\b\000\000\000\000\364n\000\b\000\000\000\000\370n\000\b\000\000\000\000"...
#3  0x00000008008f8a92 in config_file_read (
    filename=0x800900e38 "/usr/local/etc/tor/torsocks.conf", config=0x800b04960
<tsocks_config>)
    at config-file.c:567
        ret = 8
        fp = 0x8022f2020
#4  0x00000008008f267b in init_config () at torsocks.c:163
        ret = 0
        filename = 0x0
#5  0x00000008008f20f6 in tsocks_init () at torsocks.c:328
        ret = 8
#6  0x00000008008fa285 in tsocks_once (o=0x800b047c8 <init_once>,
    init_routine=0x8008f20b0 <tsocks_init>) at compat.c:94
No locals.
#7  0x00000008008f2089 in tsocks_initialize () at torsocks.c:702
No locals.
#8  0x00000008008feea2 in __do_global_ctors_aux () from
/usr/local/lib/torsocks/libtorsocks.so
No symbol table info available.
#9  0x00000008008f0c96 in _init () from /usr/local/lib/torsocks/libtorsocks.so
No symbol table info available.
#10 0x00007fffffffe210 in ?? ()
No symbol table info available.
#11 0x00000008006ce8a8 in objlist_call_init (list=<optimized out>,
lockstate=<optimized out>)
    at rtld.c:2633
        obj = <optimized out>
        elm = 0x800b04210 <__CTOR_LIST__>
        init_addr = <optimized out>
        saved_msg = <optimized out>
#12 0x00000008006cd9ec in _rtld (sp=0x7fffffffed48, exit_proc=<optimized out>,
    objp=<optimized out>) at rtld.c:759
        aux_info = {0x0, 0x0, 0x0, 0x7fffffffed70, 0x7fffffffed80,
0x7fffffffed90, 0x7fffffffeda0,
          0x7fffffffedd0, 0x7fffffffedb0, 0x7fffffffedc0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x7fffffffede0,
          0x7fffffffee00, 0x7fffffffee10, 0x7fffffffedf0, 0x7fffffffee20,
0x7fffffffee30,
          0x7fffffffee40, 0x7fffffffee50, 0x7fffffffee60}
        buf = '\000' <repeats 1023 times>
        mib = {0, 0}
        argcp = <optimized out>
        argc = 7270400
        argv0 = <optimized out>
        len = 0
        fd = <optimized out>
        phdr = <optimized out>
        rtld_argc = <optimized out>
        search_in_path = <optimized out>
        st = {st_dev = 0, st_ino = 0, st_nlink = 0, st_mode = 0, st_padding0 =
0, st_uid = 0,
          st_gid = 0, st_padding1 = 0, st_rdev = 0, st_atim = {tv_sec = 0,
tv_nsec = 0},
          st_mtim = {tv_sec = 0, tv_nsec = 0}, st_ctim = {tv_sec = 0, tv_nsec =
0}, st_birthtim = {
            tv_sec = 0, tv_nsec = 0}, st_size = 0, st_blocks = 0, st_blksize =
0, st_flags = 0,
          st_gen = 0, st_spare = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}
        dir_enable = <error reading variable dir_enable (Cannot access memory
at address 0x1)>
        library_path_rpath = <optimized out>
        phnum = <optimized out>
        kexecpath = <optimized out>
        obj = <optimized out>
        last_interposer = <optimized out>
        entry = <optimized out>
        aux = <optimized out>
        preload_tail = <optimized out>
        initlist = {stqh_first = 0x8006ed6a0, stqh_last = 0x8006ed9e0}
        lockstate = {lockstate = 2, env = {{_sjb = {0 <repeats 12 times>}}}}
#13 0x00000008006cb669 in .rtld_start () at
/usr/src/libexec/rtld-elf/amd64/rtld_start.S:39
No locals.
#14 0x0000000000000000 in ?? ()
No symbol table info available.

-- 
You are receiving this mail because:
You are the assignee for the bug.