Obtained the stack trace locally due to problems with the current CUPS package. For this stack trace the current snapshot of the Debian BZR repository (with the fix of the problem) was built locally and then with a rapid firing of queue addition and removal operations (~60) the crash was triggered again and the offer of Apport to report it accepted. Then I have followed all instructions on the screen until it refused to submit the report to Launchpad as it is from a local package build.
Now I have unpacked /var/crash/_usr_sbin_cupsd.0.crash with apport-unpack (into ~/test/) and got following stack trace:
----------
till@till:~$ gdb -c ~/test/CoreDump /usr/sbin/cupsd
GNU gdb (Ubuntu/Linaro 7.3-0ubuntu2) 7.3-2011.08
Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://bugs.launchpad.net/gdb-linaro/>...
Reading symbols from /usr/sbin/cupsd...Reading symbols from /usr/lib/debug/usr/sbin/cupsd...done.
done.
[New LWP 7444]
warning: Can't read pathname for load map: Input/output error.
[Thread debugging using libthread_db enabled]
Core was generated by `/usr/sbin/cupsd -F'.
Program terminated with signal 11, Segmentation fault.
#0 0x00007f38b12297f8 in _cups_strcasecmp (
s=0x7f38b686b824 "Hewlett-Packard HP Color LaserJet CM3530 MFP @ till",
t=0x1 <Address 0x1 out of bounds>) at string.c:613
613 while (*s != '\0' && *t != '\0')
(gdb) bt full
#0 0x00007f38b12297f8 in _cups_strcasecmp (
s=0x7f38b686b824 "Hewlett-Packard HP Color LaserJet CM3530 MFP @ till",
t=0x1 <Address 0x1 out of bounds>) at string.c:613
No locals.
#1 0x00007f38b120148d in cups_array_find (a=0x7f38b68683e0, e=0x7f38b690a530,
prev=<optimized out>, rdiff=0x7fff2e59482c) at array.c:1265
left = 0
right = 38
current = 19
diff = <optimized out>
#2 0x00007f38b120218d in cupsArrayRemove (a=0x7f38b68683e0, e=<optimized out>)
at array.c:900
i = <optimized out>
current = <optimized out>
diff = <optimized out>
#3 0x00007f38b2c3272d in dnssdDeregisterPrinter (p=0x7f38b690a530)
at dirsvc.c:2681
No locals.
#4 0x00007f38b2c514af in cupsdDeletePrinter (p=0x7f38b690a530,
update=<optimized out>) at printers.c:901
i = <optimized out>
---Type <return> to continue, or q <return> to quit---
changed = 0
#5 0x00007f38b2c1b491 in delete_printer (con=0x7f38b6929dc0,
uri=<optimized out>) at ipp.c:7068
status = <optimized out>
printer = 0x7f38b690a530
filename = "/var/cache/cups/0017.data\000\377\377\377\377\377\377@IY.\377\177\000\000\000P׳8\177\000\000O\000\000\000\000\000\000\000 P\237\256\070\177\000\000\060\367\346\262\070\177\000\000\001\000\000\000\000\000\000\000\236ޛ\260\070\177\000\000\200OY.\377\177\000\000`IY.\377\177\000\000\360\326׳8\177\000\000PJY.\377\177\000\000\001\000\000\000\000\000\000\000\330JY.\377\177\000\000\377\003\000\000\000\000\000\000UBƲ8\177\000\000\360\326׳8\177\000\000\220\355\243\260\070\177\000\000\001\200\255\373\377\177\000\000\360\326׳8\177\000\000\360\326׳8\177\000\000\360\326׳8\177\000\000\360\326׳8\177\000\000A\327׳8\177\000\000\357\332׳8\177\000\000\360\326׳8\177\000\000\357\332׳8\177", '\000' <repeats 46 times>, "\004", '\000' <repeats 15 times>, "0", '\000' <repeats 11 times>"\200"...
#6 0x00007f38b2c3ce2f in cupsdProcessIPPRequest (con=0x7f38b6929dc0)
at ipp.c:644
group = <optimized out>
attr = <optimized out>
charset = <optimized out>
---Type <return> to continue, or q <return> to quit---
language = <optimized out>
uri = 0x7f38b6963920
username = <optimized out>
sub_id = 0
#7 0x00007f38b2c27c1e in cupsdReadClient (con=0x7f38b6929dc0) at client.c:2260
line = '\000' <repeats 13216 times>"\360, \215Y.\377\177\000\000\340\215Y.\377\177\000\000h\217Y.\377\177\000\000\255\342}\262\070\177\000\000\004\000\000\000\000\000\000\000\320\017\231\260\070\177\000\000\000\000\000\000\000\000\000\000\002", '\000' <repeats 87 times>, " ", '\000' <repeats 99 times>, "\001\000\000\000\000\000\000\000\377\377\377\377\377\377\377\377\377\377\377\377", '\000' <repeats 16 times>"\260, \342}\262\070\177\000\000\261\342}\262\070\177\000\000\270\214Y.\377\177\000\000\000\000\000\000\000\000\000\000\315\067\231\260\070\177\000\000\257\342}\262\070\177", '\000' <repeats 1050 times>, "(\000\000\000\060\000\000\000@\220Y.\377\177\000\000\200\217Y.\377\177", '\000' <repeats 178 times>"\360, \215Y.\377\177\000\000\200\220Y.\377\177\000\000\340\216Y.\377\177\000\000\001\000\000\000\000\000\000\000h\217Y.\377\177\000\000\376\000\000\000\000\000\000\000\255\342}\262\070\177\000\000\200"...
operation = "HTTP/1.1\000ψ\266\070\177\000\000\060\301س8\177\000\000\215\024 \261\070\177\000\000<jֳ8\177\000\000\\$Z.\377\177\000\000\001\000\000\000\000\000\000\000\060\301س8\177\000"
version = "\000!\227\266\070\177\000\000\377\377\377\377\000\000\000\000---Type <return> to continue, or q <return> to quit---
Y?{N", '\000' <repeats 12 times>"\260, \366\346\262\070\177\000\000\251\034 \261\070\177\000\000\377\377\377\377\000\000\000\000\000o~&\000\000\000"
locale = "\a\000\000\000\070\177\000\000T\360\346\262\070\177\000\000 \372\346\262\070\177\000\000w?{N\000\000\000\000Y?{N", '\000' <repeats 12 times>"\260, \366\346\262\070\177\000\000хò8\177\000"
ptr = <optimized out>
major = 0
minor = 0
status = <optimized out>
ipp_state = <optimized out>
bytes = <optimized out>
filename = <optimized out>
buf = "\323CƲ8\177\000\000\370\027Z.\377\177\000\000\300\211\250\226nC\335b\315\067\231\260\070\177\000\000\250CƲ8\177", '\000' <repeats 11 times>"\375, \000\000\000\000\000\000\205\026\000\000\000\000\000\000\001\000\000\000\000\000\000\000\244\201", '\000' <repeats 22 times>, ";\004\000\000\000\000\000\000\000\020\000\000\000\000\000\000\000oise, ID, USA\000\000ipp://192.168.178.39:631/printers/S600\000serJet-1020", '\000' <repeats 14 times>"\300, қ\260\070\177\000\000\240\235\227\266\070\177\000\000\377\377\377\377\377\377\377\377\005\000\000\000\000\000\000\000\240\235\227\266\070\177\000\000\226h׳8\177\000\000\300\060ΰ8\177\000\000\220h׳8\177\000\000\220l׳8\177"...
---Type <return> to continue, or q <return> to quit---
filestats = {st_dev = 0, st_ino = 0, st_nlink = 0, st_mode = 0,
st_uid = 0, st_gid = 0, __pad0 = 0, st_rdev = 0, st_size = 0, st_blksize = 0, st_blocks = 0, st_atim = {tv_sec = 0,
tv_nsec = 4294967296}, st_mtim = {tv_sec = 1,
tv_nsec = 7233114292433932112}, st_ctim = {
tv_sec = 6076561100301560173, tv_nsec = 5197154181213925200},
__unused = {13843062640890964, 6076560962891952431, 211228372816}}
type = <optimized out>
p = <optimized out>
request_id = 0
#8 0x00007f38b2c1f5ce in main (argc=<optimized out>, argv=<optimized out>)
at main.c:1020
i = 2
opt = <optimized out>
fg = <optimized out>
fds = 0
con = 0x7f38b6929dc0
job = <optimized out>
lis = <optimized out> current_time = 1316700023
activity = <optimized out>
---Type <return> to continue, or q <return> to quit--- avahi_client_time = 1316700017
browse_time = 1316700023 senddoc_time = 1316700017
expire_time = 1316700023
report_time = 1316699971
event_time = 1316700017
timeout = <optimized out>
limit = {rlim_cur = 4096, rlim_max = 4096}
action = {__sigaction_handler = { sa_handler = 0x7f38b2c3adf0 <sigterm_handler>, sa_sigaction = 0x7f38b2c3adf0 <sigterm_handler>}, sa_mask = {
__val = {81920, 0 <repeats 15 times>}}, sa_flags = 0, sa_restorer = 0} run_as_child = 1316700020
netif_time = 1316699971
tmo = <optimized out>
tmo_delay = 0
(gdb)
(gdb)
Obtained the stack trace locally due to problems with the current CUPS package. For this stack trace the current snapshot of the Debian BZR repository (with the fix of the problem) was built locally and then with a rapid firing of queue addition and removal operations (~60) the crash was triggered again and the offer of Apport to report it accepted. Then I have followed all instructions on the screen until it refused to submit the report to Launchpad as it is from a local package build.
Now I have unpacked /var/crash/ _usr_sbin_ cupsd.0. crash with apport-unpack (into ~/test/) and got following stack trace:
---------- gnu.org/ licenses/ gpl.html> bugs.launchpad. net/gdb- linaro/>... cupsd.. .Reading symbols from /usr/lib/ debug/usr/ sbin/cupsd. ..done.
till@till:~$ gdb -c ~/test/CoreDump /usr/sbin/cupsd
GNU gdb (Ubuntu/Linaro 7.3-0ubuntu2) 7.3-2011.08
Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://
Reading symbols from /usr/sbin/
done.
[New LWP 7444]
warning: Can't read pathname for load map: Input/output error. 6b824 "Hewlett-Packard HP Color LaserJet CM3530 MFP @ till", 6b824 "Hewlett-Packard HP Color LaserJet CM3530 MFP @ till", 9482c) at array.c:1265 Printer (p=0x7f38b690a530) <optimized out>) at printers.c:901 9dc0, cups/0017. data\000\ 377\377\ 377\377\ 377\377@ IY.\377\ 177\000\ 000\000P׳ 8\177\000\ 000O\000\ 000\000\ 000\000\ 000\000 P\237\256\ 070\177\ 000\000\ 060\367\ 346\262\ 070\177\ 000\000\ 001\000\ 000\000\ 000\000\ 000\000\ 236ޛ\260\ 070\177\ 000\000\ 200OY.\ 377\177\ 000\000` IY.\377\ 177\000\ 000\360\ 326׳8\177\ 000\000PJY. \377\177\ 000\000\ 001\000\ 000\000\ 000\000\ 000\000\ 330JY.\ 377\177\ 000\000\ 377\003\ 000\000\ 000\000\ 000\000UBƲ8\ 177\000\ 000\360\ 326׳8\177\ 000\000\ 220\355\ 243\260\ 070\177\ 000\000\ 001\200\ 255\373\ 377\177\ 000\000\ 360\326׳ 8\177\000\ 000\360\ 326׳8\177\ 000\000\ 360\326׳ 8\177\000\ 000\360\ 326׳8\177\ 000\000A\ 327׳8\177\ 000\000\ 357\332׳ 8\177\000\ 000\360\ 326׳8\177\ 000\000\ 357\332׳ 8\177", '\000' <repeats 46 times>, "\004", '\000' <repeats 15 times>, "0", '\000' <repeats 11 times>"\200"... Request (con=0x7f38b692 9dc0) 9dc0) at client.c:2260 377\177\ 000\000\ 340\215Y. \377\177\ 000\000h\ 217Y.\377\ 177\000\ 000\255\ 342}\262\ 070\177\ 000\000\ 004\000\ 000\000\ 000\000\ 000\000\ 320\017\ 231\260\ 070\177\ 000\000\ 000\000\ 000\000\ 000\000\ 000\000\ 002", '\000' <repeats 87 times>, " ", '\000' <repeats 99 times>, "\001\000\ 000\000\ 000\000\ 000\000\ 377\377\ 377\377\ 377\377\ 377\377\ 377\377\ 377\377" , '\000' <repeats 16 times>"\260, \342}\262\ 070\177\ 000\000\ 261\342} \262\070\ 177\000\ 000\270\ 214Y.\377\ 177\000\ 000\000\ 000\000\ 000\000\ 000\000\ 000\315\ 067\231\ 260\070\ 177\000\ 000\257\ 342}\262\ 070\177" , '\000' <repeats 1050 times>, "(\000\ 000\000\ 060\000\ 000\000@ \220Y.\ 377\177\ 000\000\ 200\217Y. \377\177" , '\000' <repeats 178 times>"\360, \215Y.\ 377\177\ 000\000\ 200\220Y. \377\177\ 000\000\ 340\216Y. \377\177\ 000\000\ 001\000\ 000\000\ 000\000\ 000\000h\ 217Y.\377\ 177\000\ 000\376\ 000\000\ 000\000\ 000\000\ 000\255\ 342}\262\ 070\177\ 000\000\ 200"... 1\000ψ\ 266\070\ 177\000\ 000\060\ 301س8\177\ 000\000\ 215\024 \261\070\ 177\000\ 000<jֳ8\ 177\000\ 000\\$Z. \377\177\ 000\000\ 001\000\ 000\000\ 000\000\ 000\000\ 060\301س8\ 177\000" 227\266\ 070\177\ 000\000\ 377\377\ 377\377\ 000\000\ 000\000- --Type <return> to continue, or q <return> to quit--- 262\070\ 177\000\ 000\251\ 034 \261\070\ 177\000\ 000\377\ 377\377\ 377\000\ 000\000\ 000\000o~ &\000\000\ 000" 000\000\ 070\177\ 000\000T\ 360\346\ 262\070\ 177\000\ 000 \372\346\ 262\070\ 177\000\ 000w?{N\ 000\000\ 000\000Y? {N", '\000' <repeats 12 times>"\260, \366\346\ 262\070\ 177\000\ 000хò8\ 177\000" 177\000\ 000\370\ 027Z.\377\ 177\000\ 000\300\ 211\250\ 226nC\335b\ 315\067\ 231\260\ 070\177\ 000\000\ 250CƲ8\ 177", '\000' <repeats 11 times>"\375, \000\000\ 000\000\ 000\000\ 205\026\ 000\000\ 000\000\ 000\000\ 001\000\ 000\000\ 000\000\ 000\000\ 244\201" , '\000' <repeats 22 times>, ";\004\ 000\000\ 000\000\ 000\000\ 000\020\ 000\000\ 000\000\ 000\000\ 000oise, ID, USA\000\ 000ipp: //192.168. 178.39: 631/printers/ S600\000serJet- 1020", '\000' <repeats 14 times>"\300, қ\260\070\ 177\000\ 000\240\ 235\227\ 266\070\ 177\000\ 000\377\ 377\377\ 377\377\ 377\377\ 377\005\ 000\000\ 000\000\ 000\000\ 000\240\ 235\227\ 266\070\ 177\000\ 000\226h׳ 8\177\000\ 000\300\ 060ΰ8\177\ 000\000\ 220h׳8\ 177\000\ 000\220l׳ 8\177". ..
st_blksize = 0, st_blocks = 0, st_atim = {tv_sec = 0, 2112}, st_ctim = { 0173, tv_nsec = 519715418121392 5200}, 2431, 211228372816}}
current_ time = 1316700023
avahi_ client_ time = 1316700017
senddoc_ time = 1316700017 handler = {
sa_ handler = 0x7f38b2c3adf0 <sigterm_handler>,
sa_ sigaction = 0x7f38b2c3adf0 <sigterm_handler>}, sa_mask = {
sa_restorer = 0}
run_as_ child = 1316700020
[Thread debugging using libthread_db enabled]
Core was generated by `/usr/sbin/cupsd -F'.
Program terminated with signal 11, Segmentation fault.
#0 0x00007f38b12297f8 in _cups_strcasecmp (
s=0x7f38b68
t=0x1 <Address 0x1 out of bounds>) at string.c:613
613 while (*s != '\0' && *t != '\0')
(gdb) bt full
#0 0x00007f38b12297f8 in _cups_strcasecmp (
s=0x7f38b68
t=0x1 <Address 0x1 out of bounds>) at string.c:613
No locals.
#1 0x00007f38b120148d in cups_array_find (a=0x7f38b68683e0, e=0x7f38b690a530,
prev=<optimized out>, rdiff=0x7fff2e5
left = 0
right = 38
current = 19
diff = <optimized out>
#2 0x00007f38b120218d in cupsArrayRemove (a=0x7f38b68683e0, e=<optimized out>)
at array.c:900
i = <optimized out>
current = <optimized out>
diff = <optimized out>
#3 0x00007f38b2c3272d in dnssdDeregister
at dirsvc.c:2681
No locals.
#4 0x00007f38b2c514af in cupsdDeletePrinter (p=0x7f38b690a530,
update=
i = <optimized out>
---Type <return> to continue, or q <return> to quit---
changed = 0
#5 0x00007f38b2c1b491 in delete_printer (con=0x7f38b692
uri=<optimized out>) at ipp.c:7068
status = <optimized out>
printer = 0x7f38b690a530
filename = "/var/cache/
#6 0x00007f38b2c3ce2f in cupsdProcessIPP
at ipp.c:644
group = <optimized out>
attr = <optimized out>
charset = <optimized out>
---Type <return> to continue, or q <return> to quit---
language = <optimized out>
uri = 0x7f38b6963920
username = <optimized out>
sub_id = 0
#7 0x00007f38b2c27c1e in cupsdReadClient (con=0x7f38b692
line = '\000' <repeats 13216 times>"\360, \215Y.\
operation = "HTTP/1.
version = "\000!\
Y?{N", '\000' <repeats 12 times>"\260, \366\346\
locale = "\a\000\
ptr = <optimized out>
major = 0
minor = 0
status = <optimized out>
ipp_state = <optimized out>
bytes = <optimized out>
filename = <optimized out>
buf = "\323CƲ8\
---Type <return> to continue, or q <return> to quit---
filestats = {st_dev = 0, st_ino = 0, st_nlink = 0, st_mode = 0,
st_uid = 0, st_gid = 0, __pad0 = 0, st_rdev = 0, st_size = 0,
tv_nsec = 4294967296}, st_mtim = {tv_sec = 1,
tv_nsec = 723311429243393
tv_sec = 607656110030156
__unused = {13843062640890964, 607656096289195
type = <optimized out>
p = <optimized out>
request_id = 0
#8 0x00007f38b2c1f5ce in main (argc=<optimized out>, argv=<optimized out>)
at main.c:1020
i = 2
opt = <optimized out>
fg = <optimized out>
fds = 0
con = 0x7f38b6929dc0
job = <optimized out>
lis = <optimized out>
activity = <optimized out>
---Type <return> to continue, or q <return> to quit---
browse_time = 1316700023
expire_time = 1316700023
report_time = 1316699971
event_time = 1316700017
timeout = <optimized out>
limit = {rlim_cur = 4096, rlim_max = 4096}
action = {__sigaction_
__val = {81920, 0 <repeats 15 times>}}, sa_flags = 0,
netif_time = 1316699971
tmo = <optimized out>
tmo_delay = 0
(gdb)
(gdb)