Arch Linux

Description:

Upon installing osquery on a fresh install, osqueryi dumps core.

Additional info:
* 4.1.2-1
* updated from pacman 13 January 2020
* default configs

Steps to reproduce:

# Initial install

sudo pacman -Syu
sudo pacman -S osquery
osqueryi

# Run through gdb
gdb osqueryi
Reading symbols from osqueryi...
(No debugging symbols found in osqueryi)
gdb-peda$ run
Starting program: /usr/bin/osqueryi
/usr/lib/../share/gcc-9.2.0/python/libstdcxx/v6/xmethods.py:731: SyntaxWarning: list indices must be integers or slices, not str; perhaps you missed a comma?
refcounts = ['_M_refcount']['_M_pi']
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/libthread_db.so.1".

Program received signal SIGILL, Illegal instruction.
[----------------------------------registers-----------------------------------]
RAX: 0x7ffff7e6ae10 --> 0x0
RBX: 0x0
RCX: 0x0
RDX: 0x1
RSI: 0x0
RDI: 0x0
RBP: 0x7fffffffcdd0 --> 0x7fffffffce60 --> 0x7fffffffceb0 --> 0x7fffffffcf40 --> 0x7fffffffd020 --> 0x7fffffffe400 (--> ...)
RSP: 0x7fffffffcd70 --> 0x555555f41630 ("kDisableCompressionOption")
RIP: 0x7ffff7953e45 (<_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+149>: shlx r15d,edx,r15d)
R8 : 0x7fffffffcd80 --> 0x0
R9 : 0x0
R10: 0x0
R11: 0x7ffff51a7a40 --> 0x555555f4acd0 --> 0x0
R12: 0x555555f3d940 --> 0x7ffff7e6af48 --> 0x0
R13: 0x0
R14: 0x800000
R15: 0x4
EFLAGS: 0x10246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow)
[-------------------------------------code-------------------------------------]
0x7ffff7953e30 <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+128>: mov rax,QWORD PTR [rip+0x52c469] # 0x7ffff7e802a0
0x7ffff7953e37 <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+135>: mov edx,0x1
0x7ffff7953e3c <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+140>: mov QWORD PTR [r12+0x60],0x0
=> 0x7ffff7953e45 <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+149>: shlx r15d,edx,r15d
0x7ffff7953e4a <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+154>: mov DWORD PTR [r12+0x68],r15d
0x7ffff7953e4f <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+159>: movsxd r15,r15d
0x7ffff7953e52 <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+162>: add rax,0x10
0x7ffff7953e56 <_ZN7rocksdb8LRUCacheC2EmibdSt10shared_ptrINS_15MemoryAllocatorEEb+166>: mov rdi,r15
[------------------------------------stack-------------------------------------]
0000| 0x7fffffffcd70 --> 0x555555f41630 ("kDisableCompressionOption")
0008| 0x7fffffffcd78 --> 0x0
0016| 0x7fffffffcd80 --> 0x0
0024| 0x7fffffffcd88 --> 0x0
0032| 0x7fffffffcd90 --> 0x7fff00000004
0040| 0x7fffffffcd98 --> 0xdb221c4efba79d00
0048| 0x7fffffffcda0 --> 0x28 ('(')
0056| 0x7fffffffcda8 --> 0x555555f3d940 --> 0x7ffff7e6af48 --> 0x0
[------------------------------------------------------------------------------]
Legend: code, data, rodata, value
Stopped reason: SIGILL
0x00007ffff7953e45 in rocksdb::LRUCache::LRUCache(unsigned long, int, bool, double, std::shared_ptr<rocksdb::MemoryAllocator>, bool) () from /usr/lib/librocksdb.so.6