BusyBox Bug and Patch Tracking
BusyBox
  

Viewing Issue Simple Details Jump to Notes ] View Advanced ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0000623 [BusyBox] Other crash always 01-04-06 07:38 01-08-06 20:26
Reporter edmond99 View Status public  
Assigned To BusyBox
Priority normal Resolution unable to reproduce  
Status closed   Product Version 1.00
Summary 0000623: Segmentation fault with tar -xvf on unzipping files of incomplete cramfs image
Description untaring/gunzipping files from an uncomplete but
correctly mounted camfs image leads to a segmentation fault.
Additional Information This busybox is running on an arm xscale bigendian system
with glibc-2.2.5 compiled with a snapgear 3.2.0 environment.
gcc version is 3.2.1

# gunzip bluetooth.tar.gz
gunzip: bluetooth.tar: Permission denied

# ls -al
drwxr-xr-x 1 root root 52 Jan 1 01:31 bin
-rw-r--r-- 1 root root 76014 Jan 1 01:31 bluetooth.tar.gz
drwxr-xr-x 1 root root 40 Jan 1 01:31 etc
-rw-r--r-- 1 root root 186371 Jan 1 01:30 irda.tar.gz
-rw-r--r-- 1 root root 16199 Jan 1 01:00 isofs.tar.gz
drwxr-x--- 1 root root 756 Jan 1 01:00 lib
-rw-r--r-- 1 root root 45 Jan 1 01:00 libs.tar.gz
-rw-r--r-- 1 root root 696397 Jan 1 01:00 misc.tar.gz
-rw-r--r-- 1 root root 111881 Jan 1 01:00 misc.tho.tar.gz
-rw-r--r-- 1 root root 4888 Jan 1 01:00 mt-daapd.tgz
-rw-r--r-- 1 root root 280 Jan 1 01:00 samba-3.tgz
drwxr-x--- 1 root root 20 Jan 1 01:00 share
drwxr-xr-x 1 root root 16 Jan 1 01:00 usr
-rw-r--r-- 1 root root 353516 Jan 1 01:00 wireless.tar.gz

# tar -xvf bluetooth.tar.gz
Unable to handle kernel paging request at virtual address c39e5074
pgd = c12e4000
[c39e5074] *pgd=00f86021, *pmd = 00f86021, *pte = 00000000, *ppte = 00000000
Internal error: Oops: 17
CPU: 0
pc : [<c385e820>] lr : [<c3863dd8>] Not tainted
sp : c104dec8 ip : 00000000 fp : c10d1c60
r10: c1491000 r9 : 00000000 r8 : c07ec000
r7 : fffffffb r6 : fffffffb r5 : 00000005 r4 : c386c19c
r3 : c39e5074 r2 : 00000000 r1 : c386e05c r0 : c386c19c
Flags: NzCv IRQs on FIQs on Mode SVC_32 Segment user
Control: 39FF Table: 012E4000 DAC: 00000015
Process busybox (pid: 7642, stack limit = 0xc104c368)
Stack: (0xc104dec8 to 0xc104e000)
dec0: c386c19c 00001000 c39e5074 ffe7f114 c3863dd8 c0164ca8
dee0: c07ec000 c0164ca8 ffe7f114 00180eec c3863ff8 c3863c20 c0164cc0 c0164ca8
df00: 00000000 c10e8ad4 00001000 00000000 c10e8a20 c003b19c c01f9348 00000001
df20: 00000000 c003b644 c104df64 c10d1c80 00000200 bffffbb0 c10d1c60 00000000
df40: c10d1c80 c104c000 c10d1c80 00000000 c003b764 00000000 c0020e24 c001183c
df60: c104c000 00000000 00000200 bffffbb0 00000000 00000200 c10d1c60 ffffffea
df80: bffffbb0 c10d1c80 00012078 c004a87c 00000200 00000200 bffffbb0 00000003
dfa0: c001b664 c001b4a0 00000200 c001b41c 00000003 bffffbb0 00000200 00000000
dfc0: 00000200 00000200 bffffbb0 00000003 00000000 0000c128 00012078 000533d8
dfe0: 40149aa0 bffffb88 000400e0 40149aa4 60000010 00000003 632e736f 2e360000
Backtrace:
Function entered at [<c1491060>] from [<cd265590>]
Backtrace aborted due to bad frame pointer <3c63bd7c>
Code: e5943008 e2833001 e5843008 e5943000 (e4d32001)
Segmentation fault
#
Attached Files  cramfs.segfault.tgz [^] (363,673 bytes) 01-04-06 07:45

- Relationships

- Notes
(0000879)
landley
01-08-06 20:26

Okay, two things you should know.

1) Busybox can't cause the kernel to panic unless there's something wrong with your kernel. We're in userspace.

2) I just extracted your file and it worked fine for me. Didn't even have an error. Tried it with both busybox tar (no error) and gnu tar (warned me about an implausibly old timestamp, but no error).

Rob
 

- Issue History
Date Modified Username Field Change
01-04-06 07:38 edmond99 New Issue
01-04-06 07:38 edmond99 Status new => assigned
01-04-06 07:38 edmond99 Assigned To  => BusyBox
01-04-06 07:38 edmond99 Issue Monitored: edmond99
01-04-06 07:45 edmond99 File Added: cramfs.segfault.tgz
01-08-06 20:26 landley Status assigned => closed
01-08-06 20:26 landley Note Added: 0000879
01-08-06 20:26 landley Resolution open => unable to reproduce


Copyright © 2000 - 2006 Mantis Group
Powered by Mantis Bugtracker