polkitd crashed with SIGSEGV in dbus_message_iter_append_basic()

Bug #509651 reported by eric
566
This bug affects 106 people
Affects Status Importance Assigned to Milestone
PolicyKit
Fix Released
High
policykit-1 (Ubuntu)
Fix Released
High
Unassigned
Lucid
Invalid
High
Unassigned

Bug Description

Binary package hint: policykit-1

I was trying to enter the connection window in system administration and it asked me several times to enter my password.

ProblemType: Crash
Architecture: i386
Date: Tue Jan 19 15:19:07 2010
DistroRelease: Ubuntu 10.04
ExecutablePath: /usr/lib/policykit-1/polkitd
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Alpha i386 (20100113)
Package: policykit-1 0.95-1
ProcAttrCurrent: unconfined (enforce)
ProcCmdline: /usr/lib/policykit-1/polkitd
ProcEnviron:

ProcVersionSignature: Ubuntu 2.6.32-10.14-generic
SegvAnalysis:
 Segfault happened at: 0x183790: pcmpeqb (%esi),%xmm0
 PC (0x00183790) ok
 source "(%esi)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%xmm0" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: policykit-1
StacktraceTop:
 ?? () from /lib/tls/i686/cmov/libc.so.6
 ?? () from /lib/libdbus-1.so.3
 ?? () from /lib/libdbus-1.so.3
 dbus_message_iter_append_basic () from /lib/libdbus-1.so.3
 ?? () from /usr/lib/libeggdbus-1.so.0
Tags: lucid
Title: polkitd crashed with SIGSEGV in dbus_message_iter_append_basic()
Uname: Linux 2.6.32-10-generic i686
UserGroups:

Revision history for this message
eric (obrowny06) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 __strlen_sse2 () from /lib/tls/i686/cmov/libc.so.6
 _dbus_marshal_write_basic (str=0x9355290, insert_at=54,
 _dbus_type_writer_write_basic (writer=0xbfce04d0, type=115,
 dbus_message_iter_append_basic (iter=0xbfce04c8, type=115,
 egg_dbus_append_value_to_iter (iter=<value optimized out>,

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : StacktraceSource.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in policykit-1 (Ubuntu):
importance: Undecided → Medium
tags: removed: need-i386-retrace
visibility: private → public
tags: added: bugpattern-needed
Revision history for this message
Mathilda Young (gtrsdk) wrote :

So is this bug a big one or is this one not really affecting the system?

Revision history for this message
Corey (corey-osgood) wrote :

As far as usability, I didn't notice anything different, but then again, all this system does is share a few hard drives, and occasionally I use firefox to browse the web. As far as security, I don't know, it doesn't matter to me since it's only available to the internal network, but it may to someone running it as e.g. a web server.

Revision history for this message
In , Milan Bouchet-Valat (nalimilan) wrote :
Download full text (7.1 KiB)

polkitd crashed while user was entering password to authenticate. PK version is 0.95 (Ubuntu 10.04).

Reported at https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/509651
(There are about 10 duplicate reports.)

Trace:
#0 0x00183790 in __strlen_sse2 () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#1 0x00c0fd4d in _dbus_marshal_write_basic (str=0x9355290, insert_at=54,
    type=115, value=0xbfce05dc, byte_order=108, pos_after=0xbfce04e0)
    at dbus-marshal-basic.c:775
No locals.
#2 0x00bfb9f3 in _dbus_type_writer_write_basic (writer=0xbfce04d0, type=115,
    value=0xbfce05dc) at dbus-marshal-recursive.c:1588
 retval = <value optimized out>
#3 0x00c0093e in dbus_message_iter_append_basic (iter=0xbfce04c8, type=115,
    value=0xbfce05dc) at dbus-message.c:2284
 ret = <value optimized out>
 __FUNCTION__ = "dbus_message_iter_append_basic"
#4 0x00aa05ca in egg_dbus_append_value_to_iter (iter=<value optimized out>,
    signature=0xbfce05dc "", value=0xbfce0704, error=0xbfce082c)
    at eggdbusmessage.c:2819
 val = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0,
      v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0,
      v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0,
      v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
 dict_iter = {dummy1 = 0x9355250, dummy2 = 0x4e00000, dummy3 = 222572,
  dummy4 = 154489168, dummy5 = 6, dummy6 = 154489488, dummy7 = 54,
  dummy8 = 16, dummy9 = 8, dummy10 = 4, dummy11 = 154489488, pad1 = 0,
  pad2 = 16, pad3 = 0xc1eff4}
 array_iter = {dummy1 = 0x9355250, dummy2 = 0x3e00000,
  dummy3 = 221548, dummy4 = 154489168, dummy5 = 4, dummy6 = 154489488,
  dummy7 = 16, dummy8 = 16, dummy9 = 8, dummy10 = 4, dummy11 = 154274996,
  pad1 = 4505588, pad2 = 154373600, pad3 = 0x9374018}
 hash_iter = {dummy1 = 0x9339f50, dummy2 = 0x41a3f2,
  dummy3 = 0x9338de4, dummy4 = 1, dummy5 = -1077017224, dummy6 = 0x1}
 hash_key = (gpointer) 0x93556c0
 hash_value = (gpointer) 0x0
 hash_table = <value optimized out>
 value_signature = 0x9336520 "s"
 ret = <value optimized out>
 __PRETTY_FUNCTION__ = "egg_dbus_append_value_to_iter"
#5 0x00aa00c0 in egg_dbus_append_value_to_iter (iter=<value optimized out>,
    signature=<value optimized out>, value=0xbfce07cc, error=0xbfce082c)
    at eggdbusmessage.c:3002
 val = {g_type = 154356168, data = {{v_int = 154373600,
      v_uint = 154373600, v_long = 154373600, v_ulong = 154373600,
      v_int64 = 154373600, v_uint64 = 154373600, v_float = 2.16130506e-33,
      v_double = 7.6270692384838258e-316, v_pointer = 0x9338de0}, {v_int = 0,
      v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0,
      v_float = 0, v_double = 0, v_pointer = 0x0}}}
 sig_for_elem = <value optimized out>
 struct_iter = {dummy1 = 0x9355250, dummy2 = 0x2e00000,
  dummy3 = 160364, dummy4 = 154489168, dummy5 = 8, dummy6 = 154489488,
  dummy7 = 8, dummy8 = 0, dummy9 = 0, dummy10 = 0, dummy11 = 4505588,
  pad1 = 1, pad2 = -1077016696, pad3 = 0x356c84}
 structure = (EggDBusStructure *) 0x93566c0
 n = 2
 num_elems = 3
 ret = <value optimized out>
 __PRETTY_FUNCTION__ = "egg_dbus_append_value_to_...

Read more...

Changed in policykit-1 (Ubuntu):
status: New → Triaged
importance: Medium → High
Changed in policykit:
status: Unknown → Confirmed
Revision history for this message
davidetkarine (saveurlinux) wrote :

While changing proxy settings I have to enter twice the password, once for:
the proxy setting and once more for Gconf.

Changed in policykit:
importance: Unknown → High
Changed in policykit:
importance: High → Unknown
Changed in policykit:
importance: Unknown → High
Changed in policykit:
status: Confirmed → Fix Released
tags: removed: bugpattern-needed
tags: added: bugpattern-written
Changed in policykit-1 (Ubuntu):
assignee: nobody → Canonical Desktop Team (canonical-desktop-team)
Revision history for this message
Pedro Villavicencio (pedro) wrote :

This is fixed already on 11.04 and 11.10 , marking the development task as fixed, sadly the fix was due to the port to GDbus so not sure how easy would be to fix this on Lucid without backporting the whole package... Leaving that task open though. thanks all.

Changed in policykit-1 (Ubuntu):
assignee: Canonical Desktop Team (canonical-desktop-team) → nobody
status: Triaged → Fix Released
Revision history for this message
dino99 (9d9) wrote :

Eol is very close now; time to use a newer release

Changed in policykit-1 (Ubuntu Lucid):
status: Triaged → Invalid
To post a comment you must log in.