Bug#787473: systemd: Segfault while adding a new job

[Tino]

Another crash. This time while doing an apt upgrade. I seems not related
to adding new jobs or the hashmap iteration. I have no idea where this
signal is coming from. There is nothing but the usual watchdog messages
in the log before the SEGV.
-------------- next part --------------
Jun 30 12:02:08 Storage-Blue systemd[1]: systemd-journald.service: Got notification message from PID 217 (WATCHDOG=1...)
Jun 30 12:02:08 Storage-Blue systemd[1]: systemd-journald.service: got WATCHDOG=1
Jun 30 12:02:21 Storage-Blue systemd[1]: Got message type=signal sender=org.freedesktop.DBus destination=n/a object=/org/freedesktop/DBus interface=org.freedesktop.DBus member=NameOwnerChanged cookie=35 reply_cookie=0 error=n/a
Jun 30 12:02:21 Storage-Blue systemd[1]: Got message type=method_call sender=:1.14 destination=org.freedesktop.systemd1 object=/org/freedesktop/systemd1 interface=org.freedesktop.systemd1.Manager member=ListUnitsFiltered cookie=2 reply_cookie=0 error=n/a
Jun 30 12:02:22 Storage-Blue systemd[1]: Caught <SEGV>, dumped core as pid 27232.
Jun 30 12:02:22 Storage-Blue systemd[1]: Freezing execution.



$ ls -la /core
-rw------- 1 root root 1814528 Jun 30 12:02 /core


~$ sudo gdb /lib/systemd/systemd /core
GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1
[...]
[New LWP 27232]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabi/libthread_db.so.1".
Core was generated by `/sbin/init'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0xb6e2d198 in raise (sig=11) at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:37
37      ../nptl/sysdeps/unix/sysv/linux/pt-raise.c: No such file or directory.
(gdb) bt
#0  0xb6e2d198 in raise (sig=11) at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:37
#1  0xb6e8c8f0 in crash.lto_priv.245 (sig=11) at ../src/core/main.c:158
#2  <signal handler called>
#3  service_active_state.lto_priv.381 (u=0xb881ae78) at ../src/core/service.c:1969
#4  0xb6f411a8 in list_units_filtered (bus=0xb6f98f84 <job_type_table.lto_priv>, bus at entry=0xb88552b8, message=message at entry=0xb8851bc0, userdata=userdata at entry=0xb87b7c08, error=error at entry=0xbeb02354, states=0x0) at ../src/core/dbus-manager.c:780
#5  0xb6f414a4 in method_list_units_filtered.lto_priv.761 (bus=0xb88552b8, message=0xb8851bc0, userdata=0xb87b7c08, error=0xbeb02354) at ../src/core/dbus-manager.c:815
#6  0xb6f04aec in method_callbacks_run (found_object=0xbeb0243c, require_fallback=false, c=0xb882cda0, m=0xb8851bc0, bus=0xb88552b8) at ../src/libsystemd/sd-bus/bus-objects.c:408
#7  object_find_and_run.lto_priv.263 (bus=bus at entry=0xb88552b8, m=m at entry=0xb8851bc0, p=0xb885d2c0 "as", require_fallback=require_fallback at entry=false, found_object=found_object at entry=0xbeb0243c) at ../src/libsystemd/sd-bus/bus-objects.c:1268
#8  0xb6ebf2d4 in bus_process_object (m=0xb8851bc0, bus=0xb88552b8) at ../src/libsystemd/sd-bus/bus-objects.c:1382
#9  process_message (m=0xb8851bc0, bus=0xb88552b8) at ../src/libsystemd/sd-bus/sd-bus.c:2394
#10 process_running (hint_priority=false, priority=0, ret=0x0, bus=0xb88552b8) at ../src/libsystemd/sd-bus/sd-bus.c:2436
#11 bus_process_internal.constprop.176 (bus=0xb88552b8, ret=0x0, priority=0, hint_priority=false) at ../src/libsystemd/sd-bus/sd-bus.c:2619
#12 0xb6eae640 in sd_bus_process (ret=0x0, bus=<optimized out>) at ../src/libsystemd/sd-bus/sd-bus.c:2638
#13 io_callback (s=<optimized out>, fd=<optimized out>, revents=<optimized out>, userdata=<optimized out>) at ../src/libsystemd/sd-bus/sd-bus.c:2897
#14 0xb6e9ad10 in source_dispatch (s=0xb8854ce0) at ../src/libsystemd/sd-event/sd-event.c:2016
#15 0xb6ea0400 in sd_event_run (e=0xb87b7f50, timeout=<optimized out>) at ../src/libsystemd/sd-event/sd-event.c:2314
#16 0xb6e89394 in manager_loop (m=0xb87b7c08) at ../src/core/manager.c:2009
#17 main (argc=1, argv=0xbeb02e84) at ../src/core/main.c:1743
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20150630/11f89186/attachment-0002.sig>