[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#961345: cups: daemon crashes with invalid free()



Bernhard Übelacker wrote on 25/08/2020 22:07:
> Am 25.08.20 um 14:40 schrieb Ronny Adsetts:
>> In which case a backport of valgrind would be dead handy. :-).
> 
> You might be able to build one yourself:
> (maybe inside a VM too, because several build dependencies get installed ...)
[...]

Thanks. I rebuilt it fine. Result look much better:

Aug 26 15:42:57 samba-prn-01 systemd[1]: Started CUPS Scheduler.
Aug 26 15:42:57 samba-prn-01 valgrind[31788]: ==31788== Memcheck, a memory error detector
Aug 26 15:42:57 samba-prn-01 valgrind[31788]: ==31788== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
Aug 26 15:42:57 samba-prn-01 valgrind[31788]: ==31788== Using Valgrind-3.16.1 and LibVEX; rerun with -h for copyright info
Aug 26 15:42:57 samba-prn-01 valgrind[31788]: ==31788== Command: /usr/sbin/cupsd -l
Aug 26 15:42:57 samba-prn-01 valgrind[31788]: ==31788==
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788== Invalid free() / delete / delete[] / realloc()
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    at 0x48369AB: free (vg_replace_malloc.c:538)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x4A2443D: ipp_free_values (ipp.c:6324)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x4A243A7: ippDelete (ipp.c:1755)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x4A243A7: ippDelete (ipp.c:1729)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x11CCE3: cupsdWriteClient (client.c:2563)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x156D36: cupsdDoSelect (select.c:485)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x1142F4: main (main.c:847)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==  Address 0x68f1e04 is 4 bytes inside a block of size 23 alloc'd
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    at 0x4837B65: calloc (vg_replace_malloc.c:760)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x4A34DD0: _cupsStrAlloc (string.c:107)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x4A234F5: ippAddString (ipp.c:957)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x13076D: copy_printer_attrs (ipp.c:4894)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x13DCCD: get_printer_attrs (ipp.c:7365)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x13DCCD: cupsdProcessIPPRequest (ipp.c:457)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x11DD24: cupsdReadClient (client.c:1812)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x156C04: cupsdDoSelect (select.c:480)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==    by 0x1142F4: main (main.c:847)
Aug 26 15:55:14 samba-prn-01 valgrind[31788]: ==31788==

Hopefully this fives you something more helpful to go on...

Thanks again for all your time and energy on this so far.

Ronny

-- 
Ronny Adsetts
Technical Director
Amazing Internet Ltd, London
t: +44 20 8977 8943
w: www.amazinginternet.com

Registered office: 85 Waldegrave Park, Twickenham, TW1 4TJ
Registered in England. Company No. 4042957


Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: