Project

General

Profile

Bug #1226

*** glibc detected *** realloc(): invalid pointer: 0x08142af0 ***

Added by admin over 12 years ago. Updated about 12 years ago.

Status:
Fixed
Priority:
Normal
Assignee:
-
Category:
core
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Missing in 1.5.x:

Description


accept(4, 0xbfa64928, [112])            = -1 EAGAIN (Resource temporarily unavailable)
time(NULL)                              = 1181288756
poll([{fd=4, events=POLLIN}, {fd=5, events=POLLIN}, {fd=15, events=POLLIN}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=9, events=POLLIN}, {fd=14, events=POLLIN, revents=POLLIN}, {fd=-1}, {fd=12, events=POLLIN}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=7, events=POLLIN}, {fd=-1}, {fd=11, events=POLLIN}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}], 30, 1000) = 1
ioctl(14, FIONREAD, [814])              = 0
read(14, "GET /forums/index.php?showforum="..., 1471) = 814
open("/dev/tty", O_RDWR|O_NONBLOCK|O_NOCTTY) = -1 ENXIO (No such device or address)
writev(2, [{"*** glibc detected *** ", 23}, {"realloc(): invalid pointer", 26}, {": 0x", 4}, {"08142af0", 8}, {" ***\n", 5}], 5) = 66
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(21522, 21522, SIGABRT)           = 0
--- SIGABRT (Aborted) @ 0 (0) ---
Process 21522 detached

History

#1

Updated by admin over 12 years ago

Hmm, that doesn't look right at all. I think you've got some EOL issues in this tracker. :)

#2

Updated by admin over 12 years ago

And another one:


accept(4, 0xbff2a118, [112])            = -1 EAGAIN (Resource temporarily unavailable)
time(NULL)                              = 1181312532
poll([{fd=4, events=POLLIN}, {fd=5, events=POLLIN}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, {fd=-1}, ...], 77, 1000) = 1
ioctl(11, FIONREAD, [847])              = 0
read(11, "GET /forums/index.php?act=post&d"..., 1535) = 847
open("/dev/tty", O_RDWR|O_NONBLOCK|O_NOCTTY) = -1 ENXIO (No such device or address)
writev(2, [{"*** glibc detected *** ", 23}, {"realloc(): invalid size", 23}, {": 0x", 4}, {"081975d8", 8}, {" ***\n", 5}], 5) = 63
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(22179, 22179, SIGABRT)           = 0
--- SIGABRT (Aborted) @ 0 (0) ---
Process 22179 detached
#3

Updated by admin over 12 years ago

  • glibc detected * malloc(): memory corruption (fast): 0x081d3cf8 *

I don't understand this HTTP request either. What are the multiple Location headers doing in a request? It looks like an invalid request.


accept(4, {sa_family=AF_INET, sin_port=htons(4733), sin_addr=inet_addr("217.78.176.98")}, [16]) = 7
fcntl64(7, F_SETFD, FD_CLOEXEC)         = 0
fcntl64(7, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
ioctl(7, FIONREAD, [790])               = 0
read(7, "GET /forums/index.php?act=post&do=new_post&f=33 HTTP/1.0\r\nAccept: */*\r\nUser-Agent: Opera/9.0 (Windows NT 5.1; U; en)\r\nReferer: http://strike-team.net/forums/index.php?act=post&do=new_post&f=33\r\nHost: strike-team.net\r\nCookie: session_id=*; domain=.strike-team.net; httponly\r\n session_id=*; httponly\r\nLocation: http://strike-team.net/forums/index.php?s=; httponly\r\n ipb_stronghold=*; httponly\r\n member_id=*; httponly\r\n pass_hash=*; httponly\r\n coppa=0; httponly\r\nLocation: http://strike-team.net/forums/index.php?&&CODE=; topicsread=deleted; pass_hash=*; httponly\r\n modtids=%2C; forum_read=*\r\n\r\n", 2175) = 790
mremap(0x7db40, 136831552, 136835072, MREMAP_MAYMOVE) = -1 EINVAL (Invalid argument)
munmap(0x7db40, 136831552)              = -1 EINVAL (Invalid argument)
stat64("/srv/strike-team.net/htdocs/forums/index.php", {st_mode=S_IFREG|0755, st_size=21097, ...}) = 0
open("/srv/strike-team.net/htdocs/forums/index.php", O_RDONLY|O_LARGEFILE) = 9
close(9)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 9
fcntl64(9, F_SETFD, FD_CLOEXEC)         = 0
fcntl64(9, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
connect(9, {sa_family=AF_FILE, path="/tmp/php.socket-1"}, 19) = 0
open("/dev/tty", O_RDWR|O_NONBLOCK|O_NOCTTY) = -1 ENXIO (No such device or address)
writev(2, [{"*** glibc detected *** ", 23}, {"malloc(): memory corruption (fast)", 34}, {": 0x", 4}, {"081d3cf8", 8}, {" ***\n", 5}], 5) = 74
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(16360, 16360, SIGABRT)           = 0
--- SIGABRT (Aborted) @ 0 (0) ---
Process 16360 detached

GET /forums/index.php?act=post&do=new_post&f=33 HTTP/1.0
Accept: */*
User-Agent: Opera/9.0 (Windows NT 5.1; U; en)
Referer: http://strike-team.net/forums/index.php?act=post&do=new_post&f=33
Host: strike-team.net
Cookie: session_id=*; domain=.strike-team.net; httponly
 session_id=*; httponly
Location: http://strike-team.net/forums/index.php?s=; httponly
 ipb_stronghold=*; httponly
 member_id=*; httponly
 pass_hash=*; httponly
 coppa=0; httponly
Location: http://strike-team.net/forums/index.php?&&CODE=; topicsread=deleted; pass_hash=0f312c7d0803938fa8a7c54cd57b5ad0; httponly
 modtids=%2C; forum_read=*
#4

Updated by jan over 12 years ago

  • Status changed from New to Fixed
  • Resolution set to fixed

duplicate of #1232 fixed in r1869

Also available in: Atom