Bug 12284

Summary:	"make" in niecza causes mono to segfault / crash / SIGSEGV
Product:	Mageia	Reporter:	Shlomi Fish <shlomif>
Component:	RPM Packages	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED WONTFIX	QA Contact:
Severity:	critical
Priority:	Normal	CC:	nic
Version:	4
Target Milestone:	---
Hardware:	x86_64
OS:	Linux
URL:	https://github.com/sorear/niecza
Whiteboard:
Source RPM:	mono-3.2.3-5.mga4.src.rpm	CVE:
Status comment:

Description Shlomi Fish 2014-01-13 13:54:09 CET

Description of problem:

Running "make" in niecza (commit 48a8de321378f4c9447831bdc691615096473f0d ) causes mono to generate a SIGSEGV. I'll quote the output below.

Version-Release number of selected component (if applicable):

x86-64 Cauldron

How reproducible:

Always.

Steps to Reproduce:
1. sudo urpmi mono-devel
2. git clone https://github.com/sorear/niecza.git
3. cd niecza
4. make

============

Output:

NIECZA_KEEP_IL=1 mono boot/run/Niecza.exe --obj-dir=run -C CORE
Stacktrace:

  at <unknown> <0xffffffff>
  at (wrapper managed-to-native) object.__icall_wrapper_mono_gc_alloc_vector (intptr,intptr,intptr) <0xffffffff>
  at (wrapper alloc) object.AllocVector (intptr,intptr) <0xffffffff>
  at System.Array.Resize<T> (T[]&,int) <0x000a2>
  at Niecza.Serialization.ObjectRegistry.RegisterThawed (Niecza.Serialization.SerUnit,object) <0x00059>
  at Niecza.Serialization.ThawBuffer.Register (object) <0x0002b>
  at Niecza.Signature.Thaw (Niecza.Serialization.ThawBuffer) <0x00033>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00257>
  at Niecza.SubInfo.Thaw (Niecza.Serialization.ThawBuffer) <0x00277>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00117>
  at Niecza.SubInfo.Thaw (Niecza.Serialization.ThawBuffer) <0x006c3>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00117>
  at Niecza.SubInfo.Thaw (Niecza.Serialization.ThawBuffer) <0x006c3>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00117>
  at Niecza.RuntimeUnit.Thaw (Niecza.Serialization.ThawBuffer) <0x00ca3>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00107>
  at Niecza.SubInfo.Thaw (Niecza.Serialization.ThawBuffer) <0x00c9f>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00117>
  at Niecza.P6opaque.Thaw (Niecza.Serialization.ThawBuffer) <0x0017f>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00287>
  at Niecza.Frame.Thaw (Niecza.Serialization.ThawBuffer) <0x000d7>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00297>
  at Niecza.P6opaque.Thaw (Niecza.Serialization.ThawBuffer) <0x0017f>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00287>
  at Niecza.P6how.Thaw (Niecza.Serialization.ThawBuffer) <0x00723>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00227>
  at Niecza.STable.Thaw (Niecza.Serialization.ThawBuffer) <0x000c7>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00127>
  at Niecza.Parameter.Thaw (Niecza.Serialization.ThawBuffer) <0x00167>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00267>
  at Niecza.Serialization.ThawBuffer.RefsA<T> () <0x00067>
  at Niecza.Signature.Thaw (Niecza.Serialization.ThawBuffer) <0x00063>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00257>
  at Niecza.SubInfo.Thaw (Niecza.Serialization.ThawBuffer) <0x00277>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00117>
  at Niecza.SubInfo.Thaw (Niecza.Serialization.ThawBuffer) <0x006c3>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00117>
  at Niecza.P6opaque.Thaw (Niecza.Serialization.ThawBuffer) <0x0017f>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00287>
  at Niecza.Frame.Thaw (Niecza.Serialization.ThawBuffer) <0x000d7>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00297>
  at Niecza.P6opaque.Thaw (Niecza.Serialization.ThawBuffer) <0x0017f>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00287>
  at Niecza.P6how.Thaw (Niecza.Serialization.ThawBuffer) <0x00723>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00227>
  at Niecza.STable.Thaw (Niecza.Serialization.ThawBuffer) <0x000c7>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00127>
  at Niecza.SubInfo.Thaw (Niecza.Serialization.ThawBuffer) <0x008bb>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00117>
  at Niecza.SubInfo.Thaw (Niecza.Serialization.ThawBuffer) <0x00d07>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00117>
  at Niecza.P6opaque.Thaw (Niecza.Serialization.ThawBuffer) <0x0017f>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00287>
  at Niecza.Frame.Thaw (Niecza.Serialization.ThawBuffer) <0x00177>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00297>
  at Niecza.RuntimeUnit.Thaw (Niecza.Serialization.ThawBuffer) <0x009cf>
  at Niecza.Serialization.ThawBuffer.ObjRef () <0x00107>
  at Niecza.Serialization.ObjectRegistry.LoadUnit (string,bool) <0x00533>
  at Niecza.Kernel.MainHandler (string,string[]) <0x00077>
  at Niecza.Main (string[]) <0x0001b>
  at (wrapper runtime-invoke) <Module>.runtime_invoke_void_object (object,intptr,intptr,intptr) <0xffffffff>

Native stacktrace:

	mono() [0x4b8647]
	mono() [0x51364b]
	mono() [0x424713]
	/lib64/libpthread.so.0(+0xf760) [0x7f029065b760]
	mono() [0x5eecf7]
	mono() [0x5eefd5]
	mono() [0x5ef635]
	mono() [0x5e3d8f]
	mono() [0x5e3f97]
	mono() [0x5e5bdf]
	mono() [0x5e6889]
	mono() [0x5ea5e8]
	mono() [0x5f8ee5]
	mono() [0x60060b]
	mono() [0x600acf]
	[0x406d0850]

Debug info from gdb:

warning: File "/usr/bin/mono-sgen-gdb.py" auto-loading has been declined by your `auto-load safe-path' set to "$debugdir:$datadir/auto-load:~/Download/unpack/net/www/mozilla/hg/.gdbinit".
To enable execution of this file add
	add-auto-load-safe-path /usr/bin/mono-sgen-gdb.py
line to your configuration file "/home/shlomif/.gdbinit".
To completely disable this security protection add
	set auto-load safe-path /
line to your configuration file "/home/shlomif/.gdbinit".
For more information about this security protection see the
"Auto-loading safe path" section in the GDB manual.  E.g., run from the shell:
	info "(gdb)Auto-loading safe path"
warning: File "/usr/bin/mono-sgen-gdb.py" auto-loading has been declined by your `auto-load safe-path' set to "$debugdir:$datadir/auto-load:~/Download/unpack/net/www/mozilla/hg/.gdbinit".
[New LWP 31215]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
0x00007f029065b302 in waitpid () from /lib64/libpthread.so.0
  Id   Target Id         Frame
  2    Thread 0x7f028da2b700 (LWP 31215) "mono" 0x00007f02902cc09b in sigsuspend () from /lib64/libc.so.6
* 1    Thread 0x7f029116a780 (LWP 31214) "mono" 0x00007f029065b302 in waitpid () from /lib64/libpthread.so.0

Thread 2 (Thread 0x7f028da2b700 (LWP 31215)):
#0  0x00007f02902cc09b in sigsuspend () from /lib64/libc.so.6
#1  0x00000000005df230 in suspend_thread.part.0 ()
#2  0x00000000005df380 in suspend_handler ()
#3  <signal handler called>
#4  0x00007f0290659d6e in sem_wait () from /lib64/libpthread.so.0
#5  0x000000000063bae7 in mono_sem_wait ()
#6  0x00000000005b4b79 in finalizer_thread ()
#7  0x0000000000596845 in start_wrapper ()
#8  0x000000000063056d in thread_start_routine ()
#9  0x00000000006402b5 in inner_start_thread ()
#10 0x00007f0290653fab in start_thread () from /lib64/libpthread.so.0
#11 0x00007f0290386d9d in clone () from /lib64/libc.so.6

Thread 1 (Thread 0x7f029116a780 (LWP 31214)):
#0  0x00007f029065b302 in waitpid () from /lib64/libpthread.so.0
#1  0x00000000004b876c in mono_handle_native_sigsegv ()
#2  0x000000000051364b in mono_arch_handle_altstack_exception ()
#3  0x0000000000424713 in mono_sigsegv_signal_handler ()
#4  <signal handler called>
#5  0x00000000005eecf7 in copy_object_no_checks ()
#6  0x00000000005eefd5 in major_copy_or_mark_object ()
#7  0x00000000005ef635 in major_scan_object ()
#8  0x00000000005e3d8f in sgen_drain_gray_stack ()
#9  0x00000000005e3f97 in job_scan_from_registered_roots ()
#10 0x00000000005e5bdf in major_copy_or_mark_from_roots ()
#11 0x00000000005e6889 in major_do_collection ()
#12 0x00000000005ea5e8 in sgen_perform_collection ()
#13 0x00000000005f8ee5 in sgen_los_alloc_large_inner ()
#14 0x000000000060060b in mono_gc_alloc_obj_nolock ()
#15 0x0000000000600acf in mono_gc_alloc_vector ()
#16 0x00000000406d0850 in ?? ()
#17 0x00000000018626f0 in ?? ()
#18 0x0000000000636206 in mono_internal_hash_table_lookup ()
#19 0x00007fff105b30d0 in ?? ()
#20 0x00007fff105b3020 in ?? ()
#21 0x0000000000004000 in ?? ()
#22 0x0000000000040020 in ?? ()
#23 0x0000000001827d90 in ?? ()
#24 0x0000000000008000 in ?? ()
#25 0x00000000406cf298 in ?? ()
#26 0x00007f028a7b3c10 in ?? ()
#27 0x00000000004bc2e8 in mono_create_delegate_trampoline ()
#28 0x00007f028d401690 in ?? ()
#29 0x00007f028d558d80 in ?? ()
#30 0x00007f028ba54473 in System_Array_Resize_T_T____int () from /usr/lib/mono/2.0/mscorlib.dll.so
#31 0x00007f028d401690 in ?? ()
#32 0x00007f028d558d80 in ?? ()
#33 0x0000000000000015 in ?? ()
#34 0x000000000000003a in ?? ()
#35 0x00007f028d40dfd8 in ?? ()
#36 0x00007f028d4016f8 in ?? ()
#37 0x000000000194a5d0 in ?? ()
#38 0x00000000406d8d8a in ?? ()
#39 0x00007f028d40f768 in ?? ()
#40 0x00007f028d4016f8 in ?? ()
#41 0x0000000000000001 in ?? ()
#42 0x00000000409b7c53 in ?? ()
#43 0x0000000000000000 in ?? ()

=================================================================
Got a SIGSEGV while executing native code. This usually indicates
a fatal error in the mono runtime or one of the native libraries
used by your application.
=================================================================

Makefile:49: recipe for target '.fetch-stamp' failed
make: *** [.fetch-stamp] Aborted


Reproducible: 

Steps to Reproduce:

Comment 1 Nic Baxter 2015-12-24 05:46:41 CET

Hi, thanks for reporting this bug.
We are sorry, but we no longer maintains this version of Mageia. Please upgrade to the latest version and reopen this bug against that version if this bug exists there.
As a result we are setting this bug to CLOSED:WONTFIX

Status: NEW => RESOLVED
CC: (none) => nic
Version: Cauldron => 4
Resolution: (none) => WONTFIX