aethercast service crash in WpaSupplicantMessage::Read
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
aethercast |
Fix Released
|
Critical
|
Thomas Voß |
Bug Description
Tested aethercast today on krillin ( rc-proposed, #200 ).
First, it's taken me a little while to figure out how to use the Miracast feature on my TV ( a LG SmartTV ). I had been using Settings:
Also, one of my neighbors has a ROKU which apparently supports WiFiDirect ( but Display ), and I think the crash may happen when my krillin first sees this device. The device shows up as DIRECT-roku-BCA62B on my Nexus5.
When I initiate a scan, the service crashes with the following backtrace:
root@ubuntu-
GNU gdb (Ubuntu 7.9-1ubuntu1) 7.9
Copyright (C) 2015 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "arm-linux-
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://
Find the GDB manual and other documentation resources online at:
<http://
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/sbin/
(gdb) r
Starting program: /usr/sbin/
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-
[II 2015-12-10 21:24:36] [miracastservic
[DD 2015-12-10 21:24:36] [wpasupplicantn
[II 2015-12-10 21:25:34] [miracastservic
[EE 2015-12-10 21:25:34] g_object_unref: assertion 'G_IS_OBJECT (object)' failed
[WW 2015-12-10 21:25:34] [wpasupplicantn
[New Thread 0xb5eff3e0 (LWP 16206)]
[New Thread 0xb681b3e0 (LWP 16203)]
Program received signal SIGSEGV, Segmentation fault.
0xb6b34b62 in std::basic_
from /usr/lib/
(gdb) bt
#0 0xb6b34b62 in std::basic_
from /usr/lib/
#1 0x0005d9f0 in WpaSupplicantMe
#2 0x00059ef2 in WpaSupplicantNe
#3 0x0005b534 in WpaSupplicantNe
#4 0x0007c54c in WpaSupplicantCo
#5 0x0005911a in WpaSupplicantNe
#6 0xb6e14e90 in g_main_
from /lib/arm-
#7 0xb6e15114 in ?? () from /lib/arm-
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
Related branches
- PS Jenkins bot: Approve (continuous-integration)
- Ubuntu Phablet Team: Pending requested
-
Diff: 321 lines (+101/-66)4 files modifiedsrc/wpa/wpasupplicantmessage.cpp (+16/-5)
src/wpa/wpasupplicantmessage.h (+68/-43)
src/wpa/wpasupplicantnetworkmanager.cpp (+7/-8)
tests/wpa/wpasupplicantmessage_test.cpp (+10/-10)
description: | updated |
Changed in aethercast: | |
assignee: | nobody → Thomas Voß (thomas-voss) |
status: | New → Triaged |
importance: | Undecided → Critical |
Changed in aethercast: | |
status: | Triaged → In Progress |
Here's an updated backtrace produced after installing the debug symbols.
It took me a few tries to reproduce, but the process is the same as originally described. Stop the default job, and run it under gdb, then enter the scan command using aethercastctl. This failed for me the first time after I installed the debug symbols, so I rebooted and tried again and was able to produce the crash.
Let me know if you need anything else.