ModemManager crashes
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ModemManager |
Fix Released
|
Medium
|
|||
modemmanager (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
I've been attempting to use my built-in mobile broadband device for the entire afternoon with no success...but it worked before!! It must be some update that caused it.
Here is my device line from lsusb:
Bus 003 Device 003: ID 0bdb:1926 Ericsson Business Mobile Networks BV
NetworkManager applet won't show a mobile broadband option in the menu, and I guess it's because ModemManager crashes so quickly...
Here's what happens when I run ModemManager:
root@tpx1c /h/jiehan# ModemManager
ModemManager[1296]: <info> ModemManager (version 0.7.991) starting...
ModemManager[1296]: <warn> Couldn't find support for device at '/sys/devices/
ModemManager[1296]: <warn> Couldn't find support for device at '/sys/devices/
ModemManager[1296]: [/dev/cdc-wdm2] Couldn't query maximum message size: IOCTL_WDM_
ModemManager[1296]: [/dev/cdc-wdm2] Read max control message size from descriptors file: 512
ModemManager[1296]: [/dev/cdc-wdm0] Couldn't query maximum message size: IOCTL_WDM_
ModemManager[1296]: [/dev/cdc-wdm0] Read max control message size from descriptors file: 512
ModemManager[1296]: [/dev/cdc-wdm1] Couldn't query maximum message size: IOCTL_WDM_
ModemManager[1296]: [/dev/cdc-wdm1] Read max control message size from descriptors file: 512
ModemManager[1296]: <info> Creating modem with plugin 'Ericsson MBM' and '7' ports
ModemManager[1296]: <warn> Could not grab port (usbmisc/cdc-wdm1): 'Cannot add port 'usbmisc/cdc-wdm1', unsupported'
ModemManager[1296]: <warn> Could not grab port (usbmisc/cdc-wdm0): 'Cannot add port 'usbmisc/cdc-wdm0', unsupported'
ModemManager[1296]: <warn> Could not grab port (tty/ttyACM1): 'Cannot add port 'tty/ttyACM1', unhandled serial type'
ModemManager[1296]: <warn> Could not grab port (tty/ttyACM0): 'Cannot add port 'tty/ttyACM0', unhandled serial type'
ModemManager[1296]: <info> Modem for device at '/sys/devices/
ModemManager[1296]: [/dev/cdc-wdm2] Couldn't query maximum message size: IOCTL_WDM_
ModemManager[1296]: [/dev/cdc-wdm2] Read max control message size from descriptors file: 512
*** Error in `ModemManager': malloc(): memory corruption (fast): 0x0000000000973dc0 ***
The output with --debug flag is attached.
Any advice or ideas are appreciated. Thanks!
Changed in modemmanager: | |
importance: | Unknown → Medium |
status: | Unknown → Fix Released |
Program received signal SIGSEGV, Segmentation fault. with_iconv () from /usr/lib/ libglib- 2.0.so. 0 libglib- 2.0.so. 0 read_string_ array entry=0x63ba40, array_size= <optimized out>, offset_ array_start= relative_ offset_ array_start@ entry=28) at subscriber_ ready_status_ response_ parse message@ entry=0x63ba40, ready_state@ entry=0x7ffffff fe734, id=subscriber_ id@entry= 0x7fffffffe748, icc_id= sim_icc_ id@entry= 0x7fffffffe750, ready_info@ entry=0x7ffffff fe738, numbers_ count=telephone _numbers_ count@entry= 0x7fffffffe73c, numbers= telephone_ numbers@ entry=0x7ffffff fe758, error@entry= 0x7fffffffe740) at mbim-basic- connect. c:1211 r_ready_ status_ ready basic-connect. c:342 async_result_ complete () from libgio- 2.0.so. 0 libgio- 2.0.so. 0 context_ dispatch () from libglib- 2.0.so. 0 libglib- 2.0.so. 0 libglib- 2.0.so. 0 e9e8) at mbimcli.c:336
0x00007ffff6d7dc68 in __gconv () from /usr/lib/libc.so.6
(gdb) bt
#0 0x00007ffff6d7dc68 in __gconv () from /usr/lib/libc.so.6
#1 0x00007ffff6d7d209 in iconv () from /usr/lib/libc.so.6
#2 0x00007ffff7134255 in g_convert_
#3 0x00007ffff7134498 in g_convert () from /usr/lib/
#4 0x00007ffff7bc541a in _mbim_message_
(self=self@
relative_
mbim-message.c:233
#5 0x00007ffff7bccc8c in
mbim_message_
(message=
ready_state=
subscriber_
sim_
ready_info=
telephone_
telephone_
error=
#6 0x0000000000403e94 in query_subscribe
(device=0x640840, res=<optimized out>) at mbimcli-
#7 0x00007ffff78caac7 in g_simple_
/usr/lib/
#8 0x00007ffff78cab29 in ?? () from /usr/lib/
#9 0x00007ffff714fe46 in g_main_
/usr/lib/
#10 0x00007ffff7150198 in ?? () from /usr/lib/
#11 0x00007ffff715059a in g_main_loop_run () from /usr/lib/
#12 0x0000000000402c46 in main (argc=1, argv=0x7fffffff
The culprit seems to be this response:
03:00:00: 80:B4:00: 00:00:02: 00:00:00: 01:00:00: 00:00:00: 00:00:A2: 89:CC:33: BC:BB:8B: 4F:B6:B0: 13:3E:C2: AA:E6:DF: 02:00:00: 00:00:00: 00:00:84: 00:00:00: 01:00:00: 00:3C:00: 00:00:1E: 00:00:00: 5C:00:00: 00:28:00: 00:00:00: 00:00:00: 01:00:00: 00:24:00: 00:00:16: 00:00:00: 31:00:38: 00:31:00: 33:00:39: 00:39:00: 32:00:33: 00:35:00: 38:00:35: 00:00:00: 33:00:31: 00:30:00: 34:00:31: 00:30:00: 34:00:36: 00:39:00: 31:00:31: 00:30:00: 37:00:36: 00:31:00: 00:00:38: 00:39:00: 30:00:31: 00:34:00: 31:00:30: 00:34:00: 32:00:35: 00:34:00: 36:00:39: 00:31:00: 31:00:30: 00:37:00: 36:00:31: 00:32:00