[apport] grub crashed with SIGSEGV

Bug #95034 reported by Vicente Ruiz
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
grub (Ubuntu)
Invalid
Medium
Unassigned

Bug Description

Binary package hint: grub

I installed crosshurd to prove this kernel in Feisty and following these steps [1] grub crashed. I made /hurd directory to install hurd, and crosshurd downloaded and installed the necessary files. After, I typed

vruiz@SamsungX05:~$ sudo grub

grub> find /hurd/boot/gnumach.gz
(hd0,1)

grub> root (hd0,1)

grub> kernel /hurd/boot/gnumach.gz root=device:hd1s2 -s
, <0xb7a65000:0x19b63b:0x0>, <0xb7c01640:0xe72c:0x25e28>(bad)

Error 28: Selected item cannot fit into memory

Then, I listed gnumach.gz file in other terminal:

vruiz@SamsungX05:~$ ls -l /hurd/boot/gnumach.gz
-rw-r--r-- 1 vruiz vruiz 867444 2007-03-06 13:32 /hurd/boot/gnumach.gz

grub> uppermem 867444
grub> kernel /hurd/boot/gnumach.gz root=device:hd1s2 -s
Fallo de segmentación (core dumped)

The version of grub is 0.97-20ubuntu3.

[1] http://hurd.gnufans.org/bin/view/Hurd/InstallNotes#5_Booting_GNU

ProblemType: Crash
Architecture: i386
CrashCounter: 1
Date: Fri Mar 23 11:51:58 2007
DistroRelease: Ubuntu 7.04
ExecutablePath: /usr/sbin/grub
Package: grub 0.97-20ubuntu3
PackageArchitecture: i386
ProcCmdline: grub
ProcCwd: /home/vruiz
ProcEnviron:
 SHELL=/bin/bash
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/X11R6/bin
 LANG=es_ES.UTF-8
Signal: 11
SourcePackage: grub
Stacktrace:
 #0 0x08055920 in ?? ()
 #1 0xb7a9b87c in ?? ()
 #2 0x00000000 in ?? ()
StacktraceTop:
 ?? ()
 ?? ()
 ?? ()
ThreadStacktrace:
 .
 Thread 1 (process 18276):
 #0 0x08055920 in ?? ()
 #1 0xb7a9b87c in ?? ()
 #2 0x00000000 in ?? ()
Uname: Linux SamsungX05 2.6.20-12-generic #2 SMP Sun Mar 18 03:07:14 UTC 2007 i686 GNU/Linux
UserGroups:

Revision history for this message
Vicente Ruiz (uve) wrote :
Changed in grub:
importance: Undecided → Medium
description: updated
Revision history for this message
Sebastien Bacher (seb128) wrote :
Download full text (4.9 KiB)

653 *(t = &(q->v.t)) = (struct huft *) NULL;
(gdb) thread apply all bt full

Thread 1 (process 18276):
#0 0x08055920 in huft_build (b=<value optimized out>, n=19, s=19, d=0x0, e=0x0, t=0xeca52bfc, m=0x806a7f0)
    at gunzip.c:653
        a = 2
        c = {7, 0, 2, 2, 2, 3, 1, 2, 0, 0, 0, 0, 0, 0, 0, 0, 0}
        f = <value optimized out>
        h = 0
        i = 0
        j = 7
        k = 2
        l = 7
        p = (unsigned int *) 0xb7a9b3b8
        q = (struct huft *) 0xeca52c00
        r = {e = 0 '\0', b = 0 '\0', v = {n = 0, t = 0x0}}
        u = {0x0, 0xb7aa6000, 0x7e00, 0x12, 0x0, 0x0, 0xb7a9b908, 0x804ed28, 0xa43b8, 0x0, 0x12, 0x806c7ee, 0x806a800,
  0x2000, 0xb7a9e000, 0xffffffff}
        v = {9, 10, 7, 8, 11, 12, 4, 5, 6, 0, 16, 17, 14, 15, 17, 19, 21, 22, 23, 26, 27, 0, 9, 24, 28, 29, 25, 4, 1, 2,
  106, 114, 144, 264, 265, 13, 14, 15, 17, 20, 22, 24, 25, 34, 40, 41, 46, 48, 50, 52, 54, 56, 66, 68, 69, 72, 76, 80,
  81, 84, 85, 86, 87, 88, 91, 104, 105, 108, 112, 115, 116, 120, 130, 131, 134, 136, 152, 160, 192, 200, 224, 231, 244,
  252, 263, 266, 267, 269, 26, 30, 31, 35, 36, 38, 44, 49, 51, 53, 55, 57, 58, 60, 61, 62, 63, 65, 67, 70, 73, 75, 78,
  82, 89, 90, 92, 96, 97, 98, 99, 102, 107, 110, 111, 118, 121, 122, 124, 132, 133, 140, 145, 147, 153, 156, 158, 162,
  164, 168, 172, 176, 177, 178, 180, 182, 185, 186, 187, 193, 202, 204, 212, 220, 228, 230, 233, 234, 236, 242, 246, 247,
  250, 254, 268, 270, 271, 273, 275, 285, 21, 23, 27, 29, 33, 37, 42, 71, 74, 77, 93, 94, 103, 113, 119, 123, 126, 127,
  129, 135, 138, 142, 146, 148, 150, 154, 159, 161, 170, 173, 174, 184...}
        w = <value optimized out>
        x = {0, 0, 2, 4, 6, 9, 10, 12, 3081353384, 134532127, 134662126, 3081419264, 18, 8014482, 63, 4219119104, 0}
        y = <value optimized out>
        z = <value optimized out>
#1 0x08056312 in gunzip_read (buf=0xb7a9bec0 "\177ELF\001\001\001", len=8192) at gunzip.c:966
        size = <value optimized out>
        srcaddr = <value optimized out>
        ret = 0
#2 0x0805f3cc in load_image (kernel=0xeca52c00 <Address 0xeca52c00 out of bounds>,
    arg=0xb7a38000 "/hurd/boot/gnumach.gz root=device:hd1s2 -s", suggested_type=KERNEL_TYPE_NONE, load_flags=1)
    at boot.c:69
        len = <value optimized out>
        i = <value optimized out>
        exec_type = <value optimized out>
        align_4k = <value optimized out>
        real_entry_addr = <value optimized out>
        type = <value optimized out>
        flags = <value optimized out>
        text_len = <value optimized out>
        data_len = <value optimized out>
        bss_len = <value optimized out>
---Type <return> to continue, or q <return> to quit---
        str = <value optimized out>
        str2 = <value optimized out>
        buffer = "\177ELF\001\001\001\000\000\000\000\000\000\000\000\000\002\000\003\000\001\000\000\000\000\000\020\0004\000\000\000\220�\032\000\000\000\000\0004\000 \000\003\000(\000\006\000\005\000\001\000\000\000\000\020\000\000\000\000\020\000\000\000\020\000;�\031\000;�\031\000\005\000\000\000\000\020\000\000\001\000\000\000@�\031\000@�)\000@�)\000,�\000\000TE\003\000\006\000\000\000\000\020\000\0...

Read more...

Revision history for this message
Sebastien Bacher (seb128) wrote :

(gdb) p q
$1 = (struct huft *) 0xeca52c00
(gdb) p *q
Cannot access memory at address 0xeca52c00

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thank you for your bug

Changed in grub:
status: Unconfirmed → Confirmed
description: updated
description: updated
Revision history for this message
Adam Niedling (krychek) wrote :

Feisty is not supported anymore and there is a newer version of grub. Please open a new bug if you still get a crash in a later version of Ubuntu.

Changed in grub:
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.