[Pidgin] #12681: crash after open ~/.config/enchant : invalid pointer

[Pidgin]

#12681: crash after open ~/.config/enchant : invalid pointer
--------------------+-------------------------------------------------------
 Reporter:  ovan    |        Owner:  rekkanoryo  
     Type:  defect  |       Status:  new         
Milestone:          |    Component:  unclassified
  Version:  2.7.3   |   Resolution:              
 Keywords:          |  
--------------------+-------------------------------------------------------

Old description:

> sorry I can't have debug result, bug don't "call" with this ...
> strace result at this time:
>
> open("/root/.config/enchant", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC)
> = 33
> getdents(33, /* 4 entries */, 32768)    = 112
> getdents(33, *** glibc detected *** strace: munmap_chunk(): invalid
> pointer: 0x0000000000657460 ***
> ======= Backtrace: =========
> /lib64/libc.so.6(+0x76ce6)[0x7fcaedc07ce6]
> strace[0x40b700]
> strace[0x4061a5]
> strace[0x40442e]
> strace[0x405434]
> /lib64/libc.so.6(__libc_start_main+0xfd)[0x7fcaedbafb6d]
> strace[0x402cf9]
> ======= Memory map: ========
> 00400000-0042c000 r-xp 00000000 08:07 272381
> /usr/bin/strace
> 0062b000-00648000 rw-p 0002b000 08:07 272381
> /usr/bin/strace
> 00648000-00678000 rw-p 00000000 00:00 0
> [heap]
> 7fcaed97b000-7fcaed991000 r-xp 00000000 08:07 3411654
> /usr/lib64/libgcc_s.so.1
> 7fcaed991000-7fcaedb90000 ---p 00016000 08:07 3411654
> /usr/lib64/libgcc_s.so.1
> 7fcaedb90000-7fcaedb91000 rw-p 00015000 08:07 3411654
> /usr/lib64/libgcc_s.so.1
> 7fcaedb91000-7fcaedcfc000 r-xp 00000000 08:05 546137
> /lib64/libc-2.11.1.so
> 7fcaedcfc000-7fcaedefc000 ---p 0016b000 08:05 546137
> /lib64/libc-2.11.1.so
> 7fcaedefc000-7fcaedf00000 r--p 0016b000 08:05 546137
> /lib64/libc-2.11.1.so
> 7fcaedf00000-7fcaedf01000 rw-p 0016f000 08:05 546137
> /lib64/libc-2.11.1.so
> 7fcaedf01000-7fcaedf06000 rw-p 00000000 00:00 0
> 7fcaedf06000-7fcaedf26000 r-xp 00000000 08:05 546161
> /lib64/ld-2.11.1.so
> 7fcaee0f9000-7fcaee0fc000 rw-p 00000000 00:00 0
> 7fcaee124000-7fcaee125000 rw-p 00000000 00:00 0
> 7fcaee125000-7fcaee126000 r--p 0001f000 08:05 546161
> /lib64/ld-2.11.1.so
> 7fcaee126000-7fcaee127000 rw-p 00020000 08:05 546161
> /lib64/ld-2.11.1.so
> 7fcaee127000-7fcaee128000 rw-p 00000000 00:00 0
> 7fffe6ce5000-7fffe6cfa000 rw-p 00000000 00:00 0
> [stack]
> 7fffe6d89000-7fffe6d8a000 r-xp 00000000 00:00 0
> [vdso]
> ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0
> [vsyscall]
> /* 0 entries */, 32768Aborted

New description:

 sorry I can't have debug result, bug don't "call" with this ...
 strace result at this time:

 {{{
 open("/root/.config/enchant", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) =
 33
 getdents(33, /* 4 entries */, 32768)    = 112
 getdents(33, *** glibc detected *** strace: munmap_chunk(): invalid
 pointer: 0x0000000000657460 ***
 ======= Backtrace: =========
 /lib64/libc.so.6(+0x76ce6)[0x7fcaedc07ce6]
 strace[0x40b700]
 strace[0x4061a5]
 strace[0x40442e]
 strace[0x405434]
 /lib64/libc.so.6(__libc_start_main+0xfd)[0x7fcaedbafb6d]
 strace[0x402cf9]
 ======= Memory map: ========
 00400000-0042c000 r-xp 00000000 08:07 272381
 /usr/bin/strace
 0062b000-00648000 rw-p 0002b000 08:07 272381
 /usr/bin/strace
 00648000-00678000 rw-p 00000000 00:00 0
 [heap]
 7fcaed97b000-7fcaed991000 r-xp 00000000 08:07 3411654
 /usr/lib64/libgcc_s.so.1
 7fcaed991000-7fcaedb90000 ---p 00016000 08:07 3411654
 /usr/lib64/libgcc_s.so.1
 7fcaedb90000-7fcaedb91000 rw-p 00015000 08:07 3411654
 /usr/lib64/libgcc_s.so.1
 7fcaedb91000-7fcaedcfc000 r-xp 00000000 08:05 546137
 /lib64/libc-2.11.1.so
 7fcaedcfc000-7fcaedefc000 ---p 0016b000 08:05 546137
 /lib64/libc-2.11.1.so
 7fcaedefc000-7fcaedf00000 r--p 0016b000 08:05 546137
 /lib64/libc-2.11.1.so
 7fcaedf00000-7fcaedf01000 rw-p 0016f000 08:05 546137
 /lib64/libc-2.11.1.so
 7fcaedf01000-7fcaedf06000 rw-p 00000000 00:00 0
 7fcaedf06000-7fcaedf26000 r-xp 00000000 08:05 546161
 /lib64/ld-2.11.1.so
 7fcaee0f9000-7fcaee0fc000 rw-p 00000000 00:00 0
 7fcaee124000-7fcaee125000 rw-p 00000000 00:00 0
 7fcaee125000-7fcaee126000 r--p 0001f000 08:05 546161
 /lib64/ld-2.11.1.so
 7fcaee126000-7fcaee127000 rw-p 00020000 08:05 546161
 /lib64/ld-2.11.1.so
 7fcaee127000-7fcaee128000 rw-p 00000000 00:00 0
 7fffe6ce5000-7fffe6cfa000 rw-p 00000000 00:00 0
 [stack]
 7fffe6d89000-7fffe6d8a000 r-xp 00000000 00:00 0
 [vdso]
 ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0
 [vsyscall]
 /* 0 entries */, 32768Aborted
 }}}

--

Comment(by datallah):

 It isn't clear what the specific problem is here.

 At any rate, your backtrace doesn't contain anything related to pidgin -
 that system call isn't done by pidgin directly (enchant presumably does
 that).

-- 
Ticket URL: <http://developer.pidgin.im/ticket/12681#comment:1>
Pidgin <http://pidgin.im>
Pidgin