[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#961345: cups: daemon crashes with invalid free()



Bernhard Übelacker wrote on 25/08/2020 09:34:
> 
> Adding the line above would just appear in 'journalctl -e -u cups.service'.
> Otherwise one could add the option '--log-file=/tmp/valgrind' to redirect
> and separate the additional output of valgrind.
> 
> I have also not yet run valgrind that way, but I would expect either the crash
> happen the same way, therefore process would end and maybe automatically restarted.
> 
> It might also just print something and continue or the issue does not happen
> at all when running under valgrind, I cannot be sure.

OK, thanks. I have cups running under valgrind. Running a test print from a Windows 10 box triggers the error and Valgrind gives this output:

Aug 25 09:49:17 samba-prn-01 systemd[1]: Started CUPS Scheduler.
Aug 25 09:49:17 samba-prn-01 valgrind[28088]: ==28088== Memcheck, a memory error detector
Aug 25 09:49:17 samba-prn-01 valgrind[28088]: ==28088== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
Aug 25 09:49:17 samba-prn-01 valgrind[28088]: ==28088== Using Valgrind-3.14.0 and LibVEX; rerun with -h for copyright info
Aug 25 09:49:17 samba-prn-01 valgrind[28088]: ==28088== Command: /usr/sbin/cupsd -l
Aug 25 09:49:17 samba-prn-01 valgrind[28088]: ==28088==
Aug 25 09:49:17 samba-prn-01 valgrind[28088]: --28088-- WARNING: Serious error when reading debug info
Aug 25 09:49:17 samba-prn-01 valgrind[28088]: --28088-- When reading debug info from /usr/sbin/cupsd:
Aug 25 09:49:17 samba-prn-01 valgrind[28088]: --28088--    debuginfo section duplicates a section in the main ELF file
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088== Invalid free() / delete / delete[] / realloc()
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    at 0x48369AB: free (vg_replace_malloc.c:530)
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    by 0x4A2443D: ipp_free_values (ipp.c:6324)
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    by 0x4A243A7: ippDelete (ipp.c:1755)
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    by 0x4A243A7: ippDelete (ipp.c:1729)
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    by 0x11CCE3: ??? (in /usr/sbin/cupsd)
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==  Address 0x65f1e94 is 4 bytes inside a block of size 23 alloc'd
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    at 0x4837B65: calloc (vg_replace_malloc.c:752)
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    by 0x4A34DD0: _cupsStrAlloc (string.c:107)
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    by 0x4A234F5: ippAddString (ipp.c:957)
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    by 0x13076D: ??? (in /usr/sbin/cupsd)
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    by 0x5AC5261: ???
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==    by 0x5F44D23F: ???
Aug 25 09:56:32 samba-prn-01 valgrind[28088]: ==28088==

Does that give any further insight?

Ronny
-- 
Ronny Adsetts
Technical Director
Amazing Internet Ltd, London
t: +44 20 8977 8943
w: www.amazinginternet.com

Registered office: 85 Waldegrave Park, Twickenham, TW1 4TJ
Registered in England. Company No. 4042957


Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: