Bug#605357: grub-common: grub-probe segfault in grub_disk_adjust_range

[Julien Danjou]

found 605357 1.99~20101126-1
thanks
(I add the tag since I got the bug in both versions)

Here it the backtrace for 1.98+20100804-8:

#0  0x0000000000407ff7 in grub_disk_adjust_range (disk=0x0, sector=0x7fffffffded0, 
    offset=0x7fffffffdec8, size=4096) at ../../kern/disk.c:364
        part = 0x1010
#1  0x000000000040814b in grub_disk_read (disk=0x0, sector=0, offset=0, size=4096, 
    buf=0x697530) at ../../kern/disk.c:397
        tmp_buf = 0x0
        real_offset = 0
#2  0x00000000004330db in grub_raid5_recover (array=0x671060, disknr=0, buf=0x687430 "", 
    sector=0, size=4096) at ../../disk/raid5_recover.c:48
        err = 64
        buf2 = 0x697530 ""
        i = 1
#3  0x00000000004325c6 in grub_raid_read (disk=0x67aa60, sector=0, size=8, 
    buf=0x687430 "") at ../../disk/raid.c:400
        read_size = 8
        next_level = 0
        read_sector = 0
        e = 0
        b = 0
        p = 7
        n = 1
        disknr = 0
        array = 0x671060
        err = GRUB_ERR_READ_ERROR
#4  0x00000000004082cb in grub_disk_read (disk=0x67aa60, sector=0, offset=0, size=512, 
    buf=0x7fffffffe1c0) at ../../kern/disk.c:443
        data = 0x0
        start_sector = 0
        len = 512
        pos = 0
        tmp_buf = 0x687430 ""
        real_offset = 0
#5  0x00000000004348fd in grub_lvm_scan_device (name=0x67a570 "md0")
    at ../../disk/lvm.c:284
        err = GRUB_ERR_NONE
        disk = 0x67aa60
        da_offset = 140737488348192
        da_size = 4202992
        mda_offset = 140737488348960
        mda_size = 0
        buf = "\000\000\000\004\000\000\000\004\000\000\000\004", '\000' <repeats 23 times>, "\004\000\000\000\004\000\000\000\004\000\000\377\177", '\000' <repeats 19 times>, "\004\000\000\000\004\000\000\000\004", '\000' <repeats 23 times>, "\004\000\000\000\004\000\000\000\004\000\000\363\177", '\000' <repeats 19 times>, "\004\000\000\000\004\000\000\000\004", '\000' <repeats 23 times>, "\004\000\000\000\004\000\000\000\004", '\000' <repeats 23 times>, "\004\000\000\000\004\000\000\000\004\000\000\363\177", '\000' <repeats 19 times>, "\004\000\000\000\004GkC", '\000' <repeats 17 times>, "#\n\000\000\360\342\377\377\377\177\000\000\247\fC", '\000' <repeats 13 times>, "BkC", '\000' <repeats 16 times>, "\004\b\000\000\000"...
        vg_id = "<\344\377\377\377\177\000\000`\252g\000\000\000\000\000\000\000\000\004\000\000\000\004\000\000\000\004\000\000\376\177\000\000\000\000\000\000"
        pv_id = "\020\344\377\377\377\177\000\000\017\363B", '\000' <repeats 13 times>"\377, \000\000\000\000\000\000\000\320\341\377\377\377\177"
        metadatabuf = 0x0
        p = 0x0
        q = 0x7ffff7bb8e40 ""
        vgname = 0x7fffffffe450 "p\344\377\377\377\177"
        lh = 0x7fffffffe1c0
        pvh = 0x7fffffffe720
        dlocn = 0x0
        mdah = 0x0
        rlocn = 0x7ffff78d284c
        i = 0
        j = 4223798
        vgname_len = 0
        vg = 0xffffe430ba490040
        pv = 0x67aa40
#6  0x0000000000407505 in iterate_disk (disk_name=0x67a570 "md0")
    at ../../kern/device.c:96
        dev = 0x0
        hook = 0x434880 <grub_lvm_scan_device>
        ents = 0x41007fff00e3ff49
#7  0x0000000000431b4a in grub_raid_iterate (hook=0x7fffffffe570) at ../../disk/raid.c:84
        array = 0x671060
#8  0x0000000000407bd4 in grub_disk_dev_iterate (hook=0x7fffffffe570)
    at ../../kern/disk.c:212
        p = 0x643180
#9  0x000000000040768e in grub_device_iterate (hook=0x434880 <grub_lvm_scan_device>)
    at ../../kern/device.c:168
        ents = 0x6431d0
#10 0x0000000000435712 in grub_mod_init (mod=0x0) at ../../disk/lvm.c:679
No locals.
#11 0x00000000004356fa in grub_lvm_init () at ../../disk/lvm.c:677
No locals.
#12 0x0000000000435807 in grub_init_all () at grub_probe_init.c:59
No locals.
#13 0x0000000000402eb0 in main (argc=3, argv=0x7fffffffe728)
    at ../../util/grub-probe.c:443
        dev_map = 0x0
        argument = 0x7fffffffe965 "/"

-- 
Julien Danjou
// ᐰ <julien at danjou.info>   http://julien.danjou.info
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-grub-devel/attachments/20101129/9cbbccc9/attachment.pgp>