[sane-devel] scanimage segfaulting

Jean-Christophe SAAD DUPUY saad.dupuy at gmail.com
Thu Jan 7 22:08:39 UTC 2010


Hi. Today something weird : scanimage (scanimage (sane-backends) 1.0.21cvs;
backend version 1.0.21) is segfaulting. I putted a gdb trace in the tail.
My device is an Epson SX510W and i'm using the epson2 backend.

The only thing I know its this problem don't come from epson2 and network
package (I tested with only both of them in dll.conf and there is no problem
so i'm not affected. I think a lib update break it but which one is the
million dollar question.

If you need, i could reproduce this bug disabling backends one by one but
not before this week end.

Best regards,

Enabled backends :

net
abaton
agfafocus
apple
avision
artec
artec_eplus48u
as6e
bh
canon
canon630u
canon_dr
cardscan
coolscan
coolscan3
dell1600n_net
dmc
epjitsu
epson2
fujitsu
genesys
gt68xx
hp
hp3900
hpsj5s
hp3500
hp4200
hp5400
hp5590
hpljm1005
hs2p
ibm
leo
lexmark
ma1509
matsushita
microtek
microtek2
mustek
mustek_usb
mustek_usb2
nec
niash
pie
pint
pixma
plustek
qcam
ricoh
rts8891
s9036
sceptre
sharp
sm3600
sm3840
snapscan
sp15c
tamarack
teco1
teco2
teco3
u12
umax
umax1220u
v4l
xerox_mfp


---------------------------------------
GDB

gdb /usr/bin/scanimage

(gdb) run -L
Starting program: /usr/bin/scanimage -L
[Thread debugging using libthread_db enabled]
*** glibc detected *** /usr/bin/scanimage: double free or corruption
(fasttop): 0x08057180 ***
======= Backtrace: =========
/lib/libc.so.6(+0x6bc31)[0xb7d33c31]
/lib/libc.so.6(+0x6d488)[0xb7d35488]
/lib/libc.so.6(cfree+0x6d)[0xb7d3853d]
/usr/lib/libusb-0.1.so.4(usb_destroy_configuration+0xef)[0xb7e10cdf]
/usr/lib/libusb-0.1.so.4(usb_free_dev+0x22)[0xb7e10482]
/usr/lib/libusb-0.1.so.4(usb_find_devices+0xd1)[0xb7e108a1]
/usr/lib/libsane.so.1(sanei_usb_init+0x431)[0xb7fa1ff1]
/usr/lib/sane/libsane-sm3600.so.1(sane_sm3600_init+0x82)[0xb7b34512]
/usr/lib/libsane.so.1(+0x14584)[0xb7fad584]
/usr/lib/libsane.so.1(sane_dll_get_devices+0x97)[0xb7fad877]
/usr/lib/libsane.so.1(sane_get_devices+0x24)[0xb7f9dd94]
/usr/bin/scanimage[0x804b563]
/lib/libc.so.6(__libc_start_main+0xe6)[0xb7cdeb86]
/usr/bin/scanimage[0x80492a1]
======= Memory map: ========
08048000-08052000 r-xp 00000000 08:07 783475     /usr/bin/scanimage
08052000-08053000 rwxp 00009000 08:07 783475     /usr/bin/scanimage
08053000-0809b000 rwxp 00000000 00:00 0          [heap]
b79e3000-b79ff000 r-xp 00000000 08:07 365215     /usr/lib/libgcc_s.so.1
b79ff000-b7a00000 rwxp 0001c000 08:07 365215     /usr/lib/libgcc_s.so.1
b7a00000-b7a21000 rwxp 00000000 00:00 0
b7a21000-b7b00000 ---p 00000000 00:00 0
b7b2c000-b7b3a000 r-xp 00000000 08:07 629459
/usr/lib/sane/libsane-sm3600.so.1.0.21
b7b3a000-b7b3b000 rwxp 0000d000 08:07 629459
/usr/lib/sane/libsane-sm3600.so.1.0.21
b7b3b000-b7b3d000 rwxp 00000000 00:00 0
b7b3d000-b7b51000 r-xp 00000000 08:07 629463
/usr/lib/sane/libsane-sm3840.so.1.0.21
b7b51000-b7b52000 rwxp 00014000 08:07 629463
/usr/lib/sane/libsane-sm3840.so.1.0.21
b7b52000-b7b53000 rwxp 00000000 00:00 0
b7b53000-b7b80000 r-xp 00000000 08:07 629467
/usr/lib/sane/libsane-snapscan.so.1.0.21
b7b80000-b7b81000 rwxp 0002d000 08:07 629467
/usr/lib/sane/libsane-snapscan.so.1.0.21
b7b81000-b7b83000 rwxp 00000000 00:00 0
b7b83000-b7b91000 r-xp 00000000 08:07 629471
/usr/lib/sane/libsane-sp15c.so.1.0.21
b7b91000-b7b92000 rwxp 0000e000 08:07 629471
/usr/lib/sane/libsane-sp15c.so.1.0.21
b7b92000-b7b9e000 r-xp 00000000 08:07 629483
/usr/lib/sane/libsane-tamarack.so.1.0.21
b7b9e000-b7b9f000 rwxp 0000b000 08:07 629483
/usr/lib/sane/libsane-tamarack.so.1.0.21
b7b9f000-b7bac000 r-xp 00000000 08:07 629487
/usr/lib/sane/libsane-teco1.so.1.0.21
b7bac000-b7bad000 rwxp 0000c000 08:07 629487
/usr/lib/sane/libsane-teco1.so.1.0.21
b7bad000-b7bbc000 r-xp 00000000 08:07 629491
/usr/lib/sane/libsane-teco2.so.1.0.21
b7bbc000-b7bbd000 rwxp 0000f000 08:07 629491
/usr/lib/sane/libsane-teco2.so.1.0.21
b7bbd000-b7bd6000 r-xp 00000000 08:07 629503
/usr/lib/sane/libsane-u12.so.1.0.21
b7bd6000-b7bd7000 rwxp 00019000 08:07 629503
/usr/lib/sane/libsane-u12.so.1.0.21
b7bd7000-b7bd9000 rwxp 00000000 00:00 0
b7bd9000-b7c00000 r-xp 00000000 08:07 629507
/usr/lib/sane/libsane-umax.so.1.0.21
b7c00000-b7c01000 rwxp 00026000 08:07 629507
/usr/lib/sane/libsane-umax.so.1.0.21
b7c01000-b7c03000 rwxp 00000000 00:00 0
b7c03000-b7c16000 r-xp 00000000 08:07 629515
/usr/lib/sane/libsane-umax1220u.so.1.0.21
b7c16000-b7c17000 rwxp 00012000 08:07 629515
/usr/lib/sane/libsane-umax1220u.so.1.0.21
b7c17000-b7c1b000 rwxp 00000000 00:00 0
b7c1b000-b7c22000 r-xp 00000000 08:07 231164     /lib/librt-2.11.1.so
b7c22000-b7c23000 r-xp 00006000 08:07 231164     /lib/librt-2.11.1.so
b7c23000-b7c24000 rwxp 00007000 08:07 231164     /lib/librt-2.11.1.so
b7c24000-b7c3e000 r-xp 00000000 08:07 361064     /usr/lib/libv4lconvert.so.0
b7c3e000-b7c40000 rwxp 00019000 08:07 361064     /usr/lib/libv4lconvert.so.0
b7c40000-b7c91000 rwxp 00000000 00:00 0
b7c91000-b7ca4000 r-xp 00000000 08:07 343514     /usr/lib/libz.so.1.2.3.3
b7ca4000-b7ca5000 rwxp 00012000 08:07 343514     /usr/lib/libz.so.1.2.3.3
b7ca5000-b7cba000 r-xp 00000000 08:07 228051     /lib/libpthread-2.11.1.so
b7cba000-b7cbb000 r-xp 00014000 08:07 228051     /lib/libpthread-2.11.1.so
b7cbb000-b7cbc000 rwxp 00015000 08:07 228051     /lib/libpthread-2.11.1.so
b7cbc000-b7cbe000 rwxp 00000000 00:00 0
b7cbe000-b7cc4000 r-xp 00000000 08:07 361067     /usr/lib/libv4l2.so.0
b7cc4000-b7cc8000 rwxp 00005000 08:07 361067     /usr/lib/libv4l2.so.0
b7cc8000-b7e09000 r-xp 00000000 08:07 231271     /lib/libc-2.11.1.so
b7e09000-b7e0b000 r-xp 00141000 08:07 231271     /lib/libc-2.11.1.so
b7e0b000-b7e0c000 rwxp 00143000 08:07 231271     /lib/libc-2.11.1.so
b7e0c000-b7e0f000 rwxp 00000000 00:00 0
b7e0f000-b7e15000 r-xp 00000000 08:07 344445
/usr/lib/libusb-0.1.so.4.4.4
b7e15000-b7e17000 rwxp 00005000 08:07 344445
/usr/lib/libusb-0.1.so.4.4.4
b7e17000-b7e18000 rwxp 00000000 00:00 0
b7e18000-b7e3c000 r-xp 00000000 08:07 231150     /lib/libm-2.11.1.so
b7e3c000-b7e3d000 r-xp 00023000 08:07 231150     /lib/libm-2.11.1.so
b7e3d000-b7e3e000 rwxp 00024000 08:07 231150     /lib/libm-2.11.1.so
b7e3e000-b7e69000 r-xp 00000000 08:07 365125     /usr/lib/libexif.so.12.3.1
b7e69000-b7e75000 rwxp 0002a000 08:07 365125     /usr/lib/libexif.so.12.3.1
b7e75000-b7e7c000 r-xp 00000000 08:07 362983     /usr/lib/libltdl.so.7.2.1
b7e7c000-b7e7d000 rwxp 00006000 08:07 362983     /usr/lib/libltdl.so.7.2.1
b7e7d000-b7e84000 r-xp 00000000 08:07 358870
/usr/lib/libgphoto2_port.so.0.8.0
b7e84000-b7e85000 rwxp 00006000 08:07 358870
/usr/lib/libgphoto2_port.so.0.8.0
b7e85000-b7ea1000 r-xp 00000000 08:07 359605
/usr/lib/libgphoto2.so.2.4.0
b7ea1000-b7ea2000 rwxp 0001b000 08:07 359605
/usr/lib/libgphoto2.so.2.4.0
b7ea2000-b7f02000 rwxp 00000000 00:00 0
b7f02000-b7f35000 r-xp 00000000 08:07 360537     /usr/lib/libjpeg.so.7.0.0
b7f35000-b7f36000 rwxp 00032000 08:07 360537     /usr/lib/libjpeg.so.7.0.0
b7f36000-b7f37000 rwxp 00000000 00:00 0
b7f37000-b7f8e000 r-xp 00000000 08:07 360321     /usr/lib/libtiff.so.3.9.2
b7f8e000-b7f90000 rwxp 00057000 08:07 360321     /usr/lib/libtiff.so.3.9.2
b7f90000-b7f94000 r-xp 00000000 08:07 361066     /usr/lib/libv4l1.so.0
b7f94000-b7f95000 rwxp 00003000 08:07 361066     /usr/lib/libv4l1.so.0
b7f95000-b7f97000 r-xp 00000000 08:07 231149     /lib/libdl-2.11.1.so
b7f97000-b7f98000 r-xp 00001000 08:07 231149     /lib/libdl-2.11.1.so
b7f98000-b7f99000 rwxp 00002000 08:07 231149     /lib/libdl-2.11.1.so
b7f99000-b7fb5000 r-xp 00000000 08:07 348077     /usr/lib/libsane.so.1.0.21
b7fb5000-b7fb6000 rwxp 0001b000 08:07 348077     /usr/lib/libsane.so.1.0.21
b7fb6000-b7fb8000 rwxp 00000000 00:00 0
b7fbb000-b7fc8000 r-xp 00000000 08:07 629495
/usr/lib/sane/libsane-teco3.so.1.0.21
Program received signal SIGABRT, Aborted.
0xb7fe1424 in __kernel_vsyscall ()


Program received signal SIGABRT, Aborted.
0xb7fe1424 in __kernel_vsyscall ()


(gdb) where
#0  0xb7fe1424 in __kernel_vsyscall ()
#1  0xb7cf2571 in raise () from /lib/libc.so.6
#2  0xb7cf3d72 in abort () from /lib/libc.so.6
#3  0xb7d2dd95 in __libc_message () from /lib/libc.so.6
#4  0xb7d33c31 in malloc_printerr () from /lib/libc.so.6
#5  0xb7d35488 in _int_free () from /lib/libc.so.6
#6  0xb7d3853d in free () from /lib/libc.so.6
#7  0xb7e10cdf in usb_destroy_configuration () from /usr/lib/libusb-0.1.so.4
#8  0xb7e10482 in usb_free_dev () from /usr/lib/libusb-0.1.so.4
#9  0xb7e108a1 in usb_find_devices () from /usr/lib/libusb-0.1.so.4
#10 0xb7fa1ff1 in sanei_usb_init () at sanei_usb.c:574
#11 0xb7b34512 in sane_sm3600_init (version_code=0xbfffd40c,
authCB=0x804d480 <auth_callback>) at sm3600.c:402
#12 0xb7fad584 in init (be=0x80543e0) at dll.c:613
#13 0xb7fad877 in sane_dll_get_devices (device_list=0xbffff564,
local_only=0) at dll.c:1034
#14 0xb7f9dd94 in sane_get_devices (dl=0xbffff564, local=0) at dll-s.c:17
#15 0x0804b563 in main (argc=2, argv=0xbffff634) at scanimage.c:1771


Jean-Christophe Saad-Dupuy
06.18.51.59.48
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/sane-devel/attachments/20100107/052c1950/attachment-0001.htm>


More information about the sane-devel mailing list