Comment 7 for bug 1454008

Revision history for this message
Patrick Ancillotti (patricka) wrote :

Reproduce for me :

- start lxcfs (current from package)
- start container (ubuntu 14.04 download)

lxcfs dumps.

Here's the backtrace:

root@core01:~# gdb /usr/bin/lxcfs
GNU gdb (Ubuntu 7.9-1ubuntu1) 7.9
Copyright (C) 2015 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/bin/lxcfs...(no debugging symbols found)...done.
(gdb) run -f -s -o allow_other /var/lib/lxcfs
Starting program: /usr/bin/lxcfs -f -s -o allow_other /var/lib/lxcfs
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
fuse: read too many bytes
fuse: writing device: Invalid argument
*** Error in `/usr/bin/lxcfs': free(): invalid next size (normal): 0x00005555557824b0 ***

Program received signal SIGABRT, Aborted.
0x00007ffff6d5d267 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:55
55 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) backtrace
#0 0x00007ffff6d5d267 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:55
#1 0x00007ffff6d5eeca in __GI_abort () at abort.c:89
#2 0x00007ffff6da0c53 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7ffff6eb91a8 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
#3 0x00007ffff6da8c69 in malloc_printerr (ptr=<optimized out>, str=0x7ffff6eb9300 "free(): invalid next size (normal)", action=1) at malloc.c:4965
#4 _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3834
#5 0x00007ffff6dac89c in __GI___libc_free (mem=<optimized out>) at malloc.c:2950
#6 0x00007ffff753a681 in ?? () from /lib/x86_64-linux-gnu/libfuse.so.2
#7 0x00007ffff753f3de in ?? () from /lib/x86_64-linux-gnu/libfuse.so.2
#8 0x00007ffff754784e in ?? () from /lib/x86_64-linux-gnu/libfuse.so.2
#9 0x00007ffff754825b in ?? () from /lib/x86_64-linux-gnu/libfuse.so.2
#10 0x00007ffff7544a9c in fuse_session_loop () from /lib/x86_64-linux-gnu/libfuse.so.2
#11 0x00007ffff753d1d8 in fuse_loop () from /lib/x86_64-linux-gnu/libfuse.so.2
#12 0x00007ffff754c97f in ?? () from /lib/x86_64-linux-gnu/libfuse.so.2
#13 0x0000555555556468 in ?? ()
#14 0x00007ffff6d48a40 in __libc_start_main (main=0x555555556330, argc=6, argv=0x7fffffffe608, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffe5f8) at libc-start.c:289
#15 0x00005555555564a9 in ?? ()
(gdb)

If I then to do the exact same thing, but using the current build from lxcfs on github, I don't get the same dump (or any dump).