Community Packages

Please read this before reporting a bug:
http://wiki.archlinux.org/index.php/Reporting_Bug_Guidelines

Do NOT report bugs when a package is just outdated, or it is in Unsupported. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#65137 - osqueryi and osqueryd 4.1.2-1 dumps core

Attached to Project: Community Packages
Opened by Al S (jepi0s) - Tuesday, 14 January 2020, 03:49 GMT
Last edited by Doug Newgard (Scimmia) - Tuesday, 14 January 2020, 05:46 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To No-one
Architecture x86_64
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

Upon installing osquery on a fresh install, osqueryi dumps core.

Additional info:
* 4.1.2-1
* updated from pacman 13 January 2020
* default configs

Steps to reproduce:

# Initial install

sudo pacman -Syu
sudo pacman -S osquery
osqueryi

# Run through gdb
gdb osqueryi
Reading symbols from osqueryi...
(No debugging symbols found in osqueryi)
gdb-peda$ run
Starting program: /usr/bin/osqueryi
/usr/lib/../share/gcc-9.2.0/python/libstdcxx/v6/xmethods.py:731: SyntaxWarning: list indices must be integers or slices, not str; perhaps you missed a comma?
refcounts = ['_M_refcount']['_M_pi']
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/libthread_db.so.1".

Program received signal SIGILL, Illegal instruction.
[----------------------------------registers-----------------------------------]
RAX: 0x7ffff7e6ae10 --> 0x0
RBX: 0x0
RCX: 0x0
RDX: 0x1
RSI: 0x0
RDI: 0x0
RBP: 0x7fffffffcdd0 --> 0x7fffffffce60 --> 0x7fffffffceb0 --> 0x7fffffffcf40 --> 0x7fffffffd020 --> 0x7fffffffe400 (--> ...)
RSP: 0x7fffffffcd70 --> 0x555555f41630 ("kDisableCompressionOption")
RIP: 0x7ffff7953e45 (<_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+149>: shlx r15d,edx,r15d)
R8 : 0x7fffffffcd80 --> 0x0
R9 : 0x0
R10: 0x0
R11: 0x7ffff51a7a40 --> 0x555555f4acd0 --> 0x0
R12: 0x555555f3d940 --> 0x7ffff7e6af48 --> 0x0
R13: 0x0
R14: 0x800000
R15: 0x4
EFLAGS: 0x10246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow)
[-------------------------------------code-------------------------------------]
0x7ffff7953e30 <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+128>: mov rax,QWORD PTR [rip+0x52c469] # 0x7ffff7e802a0
0x7ffff7953e37 <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+135>: mov edx,0x1
0x7ffff7953e3c <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+140>: mov QWORD PTR [r12+0x60],0x0
=> 0x7ffff7953e45 <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+149>: shlx r15d,edx,r15d
0x7ffff7953e4a <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+154>: mov DWORD PTR [r12+0x68],r15d
0x7ffff7953e4f <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+159>: movsxd r15,r15d
0x7ffff7953e52 <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+162>: add rax,0x10
0x7ffff7953e56 <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+166>: mov rdi,r15
[------------------------------------stack-------------------------------------]
0000| 0x7fffffffcd70 --> 0x555555f41630 ("kDisableCompressionOption")
0008| 0x7fffffffcd78 --> 0x0
0016| 0x7fffffffcd80 --> 0x0
0024| 0x7fffffffcd88 --> 0x0
0032| 0x7fffffffcd90 --> 0x7fff00000004
0040| 0x7fffffffcd98 --> 0xdb221c4efba79d00
0048| 0x7fffffffcda0 --> 0x28 ('(')
0056| 0x7fffffffcda8 --> 0x555555f3d940 --> 0x7ffff7e6af48 --> 0x0
[------------------------------------------------------------------------------]
Legend: code, data, rodata, value
Stopped reason: SIGILL
0x00007ffff7953e45 in rocksdb::LRUCache::LRUCache(unsigned long, int, bool, double, std::shared_ptr<rocksdb::MemoryAllocator>, bool) () from /usr/lib/librocksdb.so.6
This task depends upon

Closed by  Doug Newgard (Scimmia)
Tuesday, 14 January 2020, 05:46 GMT
Reason for closing:  Duplicate
Additional comments about closing:   FS#65093 

Loading...