From owner-freebsd-current@FreeBSD.ORG Mon Aug 17 22:33:31 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 85A9410656A8 for ; Mon, 17 Aug 2009 22:33:31 +0000 (UTC) (envelope-from bruce@cran.org.uk) Received: from muon.cran.org.uk (muon.cran.org.uk [66.246.138.153]) by mx1.freebsd.org (Postfix) with ESMTP id 5ED358FC64 for ; Mon, 17 Aug 2009 22:33:31 +0000 (UTC) Received: from tau.draftnet (87-194-158-129.bethere.co.uk [87.194.158.129]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by muon.cran.org.uk (Postfix) with ESMTPSA id 3E91D851A; Mon, 17 Aug 2009 22:33:30 +0000 (UTC) Date: Mon, 17 Aug 2009 23:33:31 +0100 From: Bruce Cran To: Bruce Cran Message-ID: <20090817233331.2adbf2a8@tau.draftnet> In-Reply-To: <20090815142043.2b18dae0@tau.draftnet> References: <665DE2F7-0899-40B7-9129-2082F2188D3E@exscape.org> <94F61AF3-E0D2-4BCD-8C74-07C3C0752A47@exscape.org> <20090814093916.11c89255@gluon.draftnet> <9CBAB74F-45CD-4B20-835C-A77C9D01B5D1@exscape.org> <20090815142043.2b18dae0@tau.draftnet> X-Mailer: Claws Mail 3.7.2 (GTK+ 2.16.5; amd64-portbld-freebsd8.0) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: FreeBSD current , Thomas Backman Subject: Re: ps -axl during textdumps occasionally segfaults with a HUGE ps.core X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Aug 2009 22:33:31 -0000 On Sat, 15 Aug 2009 14:20:43 +0100 Bruce Cran wrote: > I managed to get a full backtrace and can at least see what's causing > the crash: it seems it's stepping past the nlist array and calls > vsnprintf with a bad argument. kvm_nlist returns -1 to report that the > symbol table couldn't be read, but the code assumes it has returned a > positive number to indicate that there's an invalid entry, so it > starts searching for that entry where n_type is 0. I've submitted a bug report for this - it's http://www.freebsd.org/cgi/query-pr.cgi?pr=137890 -- Bruce Cran