bluetoothd crashed with SIGSEGV in rawmemchr() from _IO_str_init_static_internal from _IO_vsscanf from __sscanf from get_supported_device [plugins/sixaxis.c]

Bug #1514166 reported by Anders Kaseorg
24
This bug affects 3 people
Affects Status Importance Assigned to Milestone
bluez (Ubuntu)
Fix Released
High
Unassigned

Bug Description

bluetoothd crashed with SIGSEGV in rawmemchr()

https://errors.ubuntu.com/problem/f0eca11dfcb228bd89caa34e5f9b5529151c0c88

ProblemType: Crash
DistroRelease: Ubuntu 16.04
Package: bluez 5.35-0ubuntu2
ProcVersionSignature: Ubuntu 4.2.0-17.21-generic 4.2.3
Uname: Linux 4.2.0-16-generic x86_64
NonfreeKernelModules: openafs
ApportVersion: 2.19.2-0ubuntu4
Architecture: amd64
Date: Sat Nov 7 17:15:18 2015
ExecutablePath: /usr/lib/bluetooth/bluetoothd
InstallationDate: Installed on 2015-06-02 (158 days ago)
InstallationMedia: Ubuntu-GNOME 15.04 "Vivid Vervet" - Release amd64 (20150422)
InterestingModules: rfcomm bnep btusb bluetooth
MachineType: LENOVO 20349
ProcCmdline: /usr/lib/bluetooth/bluetoothd
ProcEnviron:
 LANG=en_US.UTF-8
 PATH=(custom, no user)
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-4.2.0-17-generic.efi.signed root=/dev/mapper/btree-ubuntu ro rootflags=subvol=@ noprompt quiet splash vt.handoff=7
SegvAnalysis:
 Segfault happened at: 0x7fef0124a51f <rawmemchr+31>: movdqu (%rdi),%xmm0
 PC (0x7fef0124a51f) ok
 source "(%rdi)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%xmm0" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: bluez
StacktraceTop:
 rawmemchr () at ../sysdeps/x86_64/rawmemchr.S:37
 _IO_str_init_static_internal (sf=sf@entry=0x7fffafd6df50, ptr=ptr@entry=0x0, size=size@entry=0, pstart=pstart@entry=0x0) at strops.c:44
 _IO_vsscanf (string=0x0, format=0x7fef0062eacc "%hx:%hx:%hx", args=args@entry=0x7fffafd6e078) at iovsscanf.c:43
 __sscanf (s=<optimized out>, format=<optimized out>) at sscanf.c:32
 ?? () from /usr/lib/x86_64-linux-gnu/bluetooth/plugins/sixaxis.so
Title: bluetoothd crashed with SIGSEGV in rawmemchr()
UdevLog: Error: [Errno 2] No such file or directory: '/var/log/udev'
UpgradeStatus: Upgraded to xenial on 2015-10-28 (11 days ago)
UserGroups:

dmi.bios.date: 07/22/2015
dmi.bios.vendor: LENOVO
dmi.bios.version: 9ECN40WW(V3.00)
dmi.board.asset.tag: 31900058Std
dmi.board.name: Lenovo Y50-70 Touch
dmi.board.vendor: LENOVO
dmi.board.version: 31900058Std
dmi.chassis.asset.tag: 31900058Std
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Lenovo Y50-70 Touch
dmi.modalias: dmi:bvnLENOVO:bvr9ECN40WW(V3.00):bd07/22/2015:svnLENOVO:pn20349:pvrLenovoY50-70Touch:rvnLENOVO:rnLenovoY50-70Touch:rvr31900058Std:cvnLENOVO:ct10:cvrLenovoY50-70Touch:
dmi.product.name: 20349
dmi.product.version: Lenovo Y50-70 Touch
dmi.sys.vendor: LENOVO
hciconfig:
 hci0: Type: BR/EDR Bus: USB
  BD Address: 28:B2:BD:0B:11:97 ACL MTU: 1021:5 SCO MTU: 96:5
  UP RUNNING
  RX bytes:691 acl:0 sco:0 events:47 errors:0
  TX bytes:2182 acl:0 sco:0 commands:47 errors:0

Revision history for this message
Anders Kaseorg (andersk) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 rawmemchr () at ../sysdeps/x86_64/rawmemchr.S:37
 _IO_str_init_static_internal (sf=sf@entry=0x7fffafd6df50, ptr=ptr@entry=0x0, size=size@entry=0, pstart=pstart@entry=0x0) at strops.c:44
 _IO_vsscanf (string=0x0, format=0x7fef0062eacc "%hx:%hx:%hx", args=args@entry=0x7fffafd6e078) at iovsscanf.c:43
 __sscanf (s=<optimized out>, format=format@entry=0x7fef0062eacc "%hx:%hx:%hx") at sscanf.c:32
 get_supported_device (bus=0x7fffafd6e18a, udevice=0x5565b18cbf10) at plugins/sixaxis.c:470

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : StacktraceSource.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in bluez (Ubuntu):
importance: Undecided → Medium
tags: removed: need-amd64-retrace
information type: Private → Public
Changed in bluez (Ubuntu):
importance: Medium → High
status: New → Confirmed
description: updated
tags: added: yakkety zesty
summary: - bluetoothd crashed with SIGSEGV in rawmemchr()
+ bluetoothd crashed with SIGSEGV in rawmemchr() from
+ _IO_str_init_static_internal from _IO_vsscanf from __sscanf from
+ get_supported_device [plugins/sixaxis.c]
Revision history for this message
Daniel van Vugt (vanvugt) wrote :

This crash has stopped happening after 17.04.

Changed in bluez (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.