Ticket #1226 (closed defect: fixed)

Opened 15 months ago

Last modified 14 months ago

*** glibc detected *** realloc(): invalid pointer: 0x08142af0 ***

Reported by: Olaf van der Spek Owned by: jan
Priority: normal Milestone: 1.5.0
Component: core Version: 1.4.15
Severity: normal Keywords:
Cc: Blocked By:
Need User Feedback: Blocking:

Description (last modified by jwmcglynn) (diff) 

accept(4, 0xbfa64928, [112])            = -1 EAGAIN (Resource temporarily unavailable)
time(NULL)                              = 1181288756
poll([{fd=4, events=POLLIN}, {fd=5, events=POLLIN}, {fd=15, events=POLLIN}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=9, events=POLLIN}, {fd=14, events=POLLIN, revents=POLLIN}, {fd=-1}, {fd=12, events=POLLIN}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=7, events=POLLIN}, {fd=-1}, {fd=11, events=POLLIN}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}], 30, 1000) = 1
ioctl(14, FIONREAD, [814])              = 0
read(14, "GET /forums/index.php?showforum="..., 1471) = 814
open("/dev/tty", O_RDWR|O_NONBLOCK|O_NOCTTY) = -1 ENXIO (No such device or address)
writev(2, [{"*** glibc detected *** ", 23}, {"realloc(): invalid pointer", 26}, {": 0x", 4}, {"08142af0", 8}, {" ***\n", 5}], 5) = 66
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(21522, 21522, SIGABRT)           = 0
--- SIGABRT (Aborted) @ 0 (0) ---
Process 21522 detached

Attachments

Change History

Changed 15 months ago by Olaf van der Spek

Hmm, that doesn't look right at all. I think you've got some EOL issues in this tracker. :)

Changed 15 months ago by jwmcglynn

  • description modified (diff)

Changed 15 months ago by Olaf van der Spek

And another one: 

accept(4, 0xbff2a118, [112])            = -1 EAGAIN (Resource temporarily unavailable)
time(NULL)                              = 1181312532
poll([{fd=4, events=POLLIN}, {fd=5, events=POLLIN}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, ...], 77, 1000) = 1
ioctl(11, FIONREAD, [847])              = 0
read(11, "GET /forums/index.php?act=post&d"..., 1535) = 847
open("/dev/tty", O_RDWR|O_NONBLOCK|O_NOCTTY) = -1 ENXIO (No such device or address)
writev(2, [{"*** glibc detected *** ", 23}, {"realloc(): invalid size", 23}, {": 0x", 4}, {"081975d8", 8}, {" ***\n", 5}], 5) = 63
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(22179, 22179, SIGABRT)           = 0
--- SIGABRT (Aborted) @ 0 (0) ---
Process 22179 detached

Changed 15 months ago by Olaf van der Spek

*** glibc detected *** malloc(): memory corruption (fast): 0x081d3cf8 ***

I don't understand this HTTP request either. What are the multiple Location headers doing in a request? It looks like an invalid request. 

accept(4, {sa_family=AF_INET, sin_port=htons(4733), sin_addr=inet_addr("217.78.176.98")}, [16]) = 7
fcntl64(7, F_SETFD, FD_CLOEXEC)         = 0
fcntl64(7, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
ioctl(7, FIONREAD, [790])               = 0
read(7, "GET /forums/index.php?act=post&do=new_post&f=33 HTTP/1.0\r\nAccept: */*\r\nUser-Agent: Opera/9.0 (Windows NT 5.1; U; en)\r\nReferer: http://strike-team.net/forums/index.php?act=post&do=new_post&f=33\r\nHost: strike-team.net\r\nCookie: session_id=*; domain=.strike-team.net; httponly\r\n session_id=*; httponly\r\nLocation: http://strike-team.net/forums/index.php?s=; httponly\r\n ipb_stronghold=*; httponly\r\n member_id=*; httponly\r\n pass_hash=*; httponly\r\n coppa=0; httponly\r\nLocation: http://strike-team.net/forums/index.php?&&CODE=; topicsread=deleted; pass_hash=*; httponly\r\n modtids=%2C; forum_read=*\r\n\r\n", 2175) = 790
mremap(0x7db40, 136831552, 136835072, MREMAP_MAYMOVE) = -1 EINVAL (Invalid argument)
munmap(0x7db40, 136831552)              = -1 EINVAL (Invalid argument)
stat64("/srv/strike-team.net/htdocs/forums/index.php", {st_mode=S_IFREG|0755, st_size=21097, ...}) = 0
open("/srv/strike-team.net/htdocs/forums/index.php", O_RDONLY|O_LARGEFILE) = 9
close(9)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 9
fcntl64(9, F_SETFD, FD_CLOEXEC)         = 0
fcntl64(9, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
connect(9, {sa_family=AF_FILE, path="/tmp/php.socket-1"}, 19) = 0
open("/dev/tty", O_RDWR|O_NONBLOCK|O_NOCTTY) = -1 ENXIO (No such device or address)
writev(2, [{"*** glibc detected *** ", 23}, {"malloc(): memory corruption (fast)", 34}, {": 0x", 4}, {"081d3cf8", 8}, {" ***\n", 5}], 5) = 74
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(16360, 16360, SIGABRT)           = 0
--- SIGABRT (Aborted) @ 0 (0) ---
Process 16360 detached

GET /forums/index.php?act=post&do=new_post&f=33 HTTP/1.0
Accept: */*
User-Agent: Opera/9.0 (Windows NT 5.1; U; en)
Referer: http://strike-team.net/forums/index.php?act=post&do=new_post&f=33
Host: strike-team.net
Cookie: session_id=*; domain=.strike-team.net; httponly
 session_id=*; httponly
Location: http://strike-team.net/forums/index.php?s=; httponly
 ipb_stronghold=*; httponly
 member_id=*; httponly
 pass_hash=*; httponly
 coppa=0; httponly
Location: http://strike-team.net/forums/index.php?&&CODE=; topicsread=deleted; pass_hash=0f312c7d0803938fa8a7c54cd57b5ad0; httponly
 modtids=%2C; forum_read=*

Changed 15 months ago by jan

  • status changed from new to closed
  • resolution set to fixed

duplicate of #1232 fixed in [1869]

Add/Change #1226 (*** glibc detected *** realloc(): invalid pointer: 0x08142af0 ***)

Author



Change Properties
<Author field>
Action
as closed
Next status will be 'reopened'
 
Note: See TracTickets for help on using tickets.