sys-auth/polkit-123: Segfault in libmozjs-102.so.0 #206

Closed vmihalko closed 9 months ago

In GitLab by @zaufi on Aug 14, 2023, 15:07

Version 123 of polkit segfaulted somewhere in JS framework:

           PID: 5191 (polkitd)
           UID: 991 (polkitd)
           GID: 389 (polkitd)
        Signal: 11 (SEGV)
     Timestamp: Mon 2023-08-14 16:49:28 +04 (14min ago)
  Command Line: /usr/x86_64-pc-linux-gnu/lib/polkit-1/polkitd --no-debug
    Executable: /usr/x86_64-pc-linux-gnu/lib/polkit-1/polkitd
 Control Group: /system.slice/polkit.service
          Unit: polkit.service
         Slice: system.slice
       Boot ID: 788f3cde2d6343c0beeed6ea5a8fe963
    Machine ID: ae799b1f99604efb84b7b66e0e20dc6e
      Hostname: extop
       Storage: /var/lib/systemd/coredump/core.polkitd.991.788f3cde2d6343c0beeed6ea5a8fe963.5191.1692017368000000.zst (present)
  Size on Disk: 1.0M
       Message: Process 5191 (polkitd) of user 991 dumped core.

                Stack trace of thread 5191:
                #0  0x00007f590c50e197 _ZN2js3jit27AutoWritableJitCodeFallibleD4Ev (libmozjs-102.so.0 + 0x10e197)
                #1  0x00007f590ccd35d3 _ZN2js3jit10JitRuntime10initializeEP9JSContext (libmozjs-102.so.0 + 0x8d35d3)
                #2  0x00007f590c72fff2 _ZN9JSRuntime16createJitRuntimeEP9JSContext (libmozjs-102.so.0 + 0x32fff2)
                #3  0x0000560d03219ee7 polkit_backend_common_js_authority_constructed (polkitd + 0xeee7)
                #4  0x00007f590d3ada76 g_object_new_internal (libgobject-2.0.so.0 + 0x1da76)
                #5  0x00007f590d3aee1a g_object_new_internal (libgobject-2.0.so.0 + 0x1ee1a)
                #6  0x00007f590d3afc69 g_object_new (libgobject-2.0.so.0 + 0x1fc69)
                #7  0x0000560d03216ead main (polkitd + 0xbead)
                #8  0x00007f590bc2825e __libc_start_call_main (libc.so.6 + 0x2825e)
                #9  0x00007f590bc28319 __libc_start_main_impl (libc.so.6 + 0x28319)
                #10 0x0000560d03217055 _start (polkitd + 0xc055)

                Stack trace of thread 5207:
                #0  0x00007f590bc8b58e __futex_abstimed_wait_common64 (libc.so.6 + 0x8b58e)
                #1  0x00007f590bc8de81 __pthread_cond_wait_common (libc.so.6 + 0x8de81)
                #2  0x00007f590ce9ad17 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa9ad17)
                #3  0x00007f590ce9aea5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa9aea5)
                #4  0x00007f590c658b5d _ZN2js17ConditionVariable8wait_forERNS_9LockGuardINS_5MutexEEERKN7mozilla16BaseTimeDurationINS5_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0x258b5d)
                #5  0x00007f590c658c01 _ZN2js12HelperThread10ThreadMainEPNS_18InternalThreadPoolEPS0_ (libmozjs-102.so.0 + 0x258c01)
                #6  0x00007f590c657f27 _ZN2js6detail16ThreadTrampolineIRFvPNS_18InternalThreadPoolEPNS_12HelperThreadEEJRS3_S5_EE8callMainIJLm0ELm1EEEEvSt16integer_sequenceImJXspT_EEE (libmozjs-102.so.0 + 0x257f27)
                #7  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #8  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)

                Stack trace of thread 5204:
                #0  0x00007f590bd02c4d syscall (libc.so.6 + 0x102c4d)
                #1  0x00007f590d2ffc40 g_cond_wait (libglib-2.0.so.0 + 0xb3c40)
                #2  0x00007f590d272e7b g_async_queue_pop_intern_unlocked (libglib-2.0.so.0 + 0x26e7b)
                #3  0x00007f590d2d3b32 g_thread_pool_spawn_thread (libglib-2.0.so.0 + 0x87b32)
                #4  0x00007f590d2d351d g_thread_proxy (libglib-2.0.so.0 + 0x8751d)
                #5  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #6  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)

                Stack trace of thread 5206:
                #0  0x00007f590bc8b58e __futex_abstimed_wait_common64 (libc.so.6 + 0x8b58e)
                #1  0x00007f590bc8de81 __pthread_cond_wait_common (libc.so.6 + 0x8de81)
                #2  0x00007f590ce9ad17 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa9ad17)
                #3  0x00007f590ce9aea5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa9aea5)
                #4  0x00007f590c658b5d _ZN2js17ConditionVariable8wait_forERNS_9LockGuardINS_5MutexEEERKN7mozilla16BaseTimeDurationINS5_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0x258b5d)
                #5  0x00007f590c658c01 _ZN2js12HelperThread10ThreadMainEPNS_18InternalThreadPoolEPS0_ (libmozjs-102.so.0 + 0x258c01)
                #6  0x00007f590c657f27 _ZN2js6detail16ThreadTrampolineIRFvPNS_18InternalThreadPoolEPNS_12HelperThreadEEJRS3_S5_EE8callMainIJLm0ELm1EEEEvSt16integer_sequenceImJXspT_EEE (libmozjs-102.so.0 + 0x257f27)
                #7  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #8  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)

                Stack trace of thread 5203:
                #0  0x00007f590bcf82af __GI___poll (libc.so.6 + 0xf82af)
                #1  0x00007f590d2a7bd6 g_main_context_poll (libglib-2.0.so.0 + 0x5bbd6)
                #2  0x00007f590d2a7cec g_main_context_iteration (libglib-2.0.so.0 + 0x5bcec)
                #3  0x00007f590d2a7d31 glib_worker_main (libglib-2.0.so.0 + 0x5bd31)
                #4  0x00007f590d2d351d g_thread_proxy (libglib-2.0.so.0 + 0x8751d)
                #5  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #6  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)

                Stack trace of thread 5205:
                #0  0x00007f590bcf82af __GI___poll (libc.so.6 + 0xf82af)
                #1  0x00007f590d2a7bd6 g_main_context_poll (libglib-2.0.so.0 + 0x5bbd6)
                #2  0x00007f590d2a7f0f g_main_loop_run (libglib-2.0.so.0 + 0x5bf0f)
                #3  0x00007f590d509ac6 gdbus_shared_thread_func (libgio-2.0.so.0 + 0x118ac6)
                #4  0x00007f590d2d351d g_thread_proxy (libglib-2.0.so.0 + 0x8751d)
                #5  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #6  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)

                Stack trace of thread 5208:
                #0  0x00007f590bc8b58e __futex_abstimed_wait_common64 (libc.so.6 + 0x8b58e)
                #1  0x00007f590bc8de81 __pthread_cond_wait_common (libc.so.6 + 0x8de81)
                #2  0x00007f590ce9ad17 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa9ad17)
                #3  0x00007f590ce9aea5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa9aea5)
                #4  0x00007f590c658b5d _ZN2js17ConditionVariable8wait_forERNS_9LockGuardINS_5MutexEEERKN7mozilla16BaseTimeDurationINS5_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0x258b5d)
                #5  0x00007f590c658c01 _ZN2js12HelperThread10ThreadMainEPNS_18InternalThreadPoolEPS0_ (libmozjs-102.so.0 + 0x258c01)
                #6  0x00007f590c657f27 _ZN2js6detail16ThreadTrampolineIRFvPNS_18InternalThreadPoolEPNS_12HelperThreadEEJRS3_S5_EE8callMainIJLm0ELm1EEEEvSt16integer_sequenceImJXspT_EEE (libmozjs-102.so.0 + 0x257f27)
                #7  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #8  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)

                Stack trace of thread 5212:
                #0  0x00007f590bc8b58e __futex_abstimed_wait_common64 (libc.so.6 + 0x8b58e)
                #1  0x00007f590bc8de81 __pthread_cond_wait_common (libc.so.6 + 0x8de81)
                #2  0x00007f590ce9ad17 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa9ad17)
                #3  0x00007f590ce9aea5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa9aea5)
                #4  0x00007f590c658b5d _ZN2js17ConditionVariable8wait_forERNS_9LockGuardINS_5MutexEEERKN7mozilla16BaseTimeDurationINS5_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0x258b5d)
                #5  0x00007f590c658c01 _ZN2js12HelperThread10ThreadMainEPNS_18InternalThreadPoolEPS0_ (libmozjs-102.so.0 + 0x258c01)
                #6  0x00007f590c657f27 _ZN2js6detail16ThreadTrampolineIRFvPNS_18InternalThreadPoolEPNS_12HelperThreadEEJRS3_S5_EE8callMainIJLm0ELm1EEEEvSt16integer_sequenceImJXspT_EEE (libmozjs-102.so.0 + 0x257f27)
                #7  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #8  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)

                Stack trace of thread 5210:
                #0  0x00007f590bc8b58e __futex_abstimed_wait_common64 (libc.so.6 + 0x8b58e)
                #1  0x00007f590bc8de81 __pthread_cond_wait_common (libc.so.6 + 0x8de81)
                #2  0x00007f590ce9ad17 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa9ad17)
                #3  0x00007f590ce9aea5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa9aea5)
                #4  0x00007f590c658b5d _ZN2js17ConditionVariable8wait_forERNS_9LockGuardINS_5MutexEEERKN7mozilla16BaseTimeDurationINS5_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0x258b5d)
                #5  0x00007f590c658c01 _ZN2js12HelperThread10ThreadMainEPNS_18InternalThreadPoolEPS0_ (libmozjs-102.so.0 + 0x258c01)
                #6  0x00007f590c657f27 _ZN2js6detail16ThreadTrampolineIRFvPNS_18InternalThreadPoolEPNS_12HelperThreadEEJRS3_S5_EE8callMainIJLm0ELm1EEEEvSt16integer_sequenceImJXspT_EEE (libmozjs-102.so.0 + 0x257f27)
                #7  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #8  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)

                Stack trace of thread 5211:
                #0  0x00007f590bc8b58e __futex_abstimed_wait_common64 (libc.so.6 + 0x8b58e)
                #1  0x00007f590bc8de81 __pthread_cond_wait_common (libc.so.6 + 0x8de81)
                #2  0x00007f590ce9ad17 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa9ad17)
                #3  0x00007f590ce9aea5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa9aea5)
                #4  0x00007f590c658b5d _ZN2js17ConditionVariable8wait_forERNS_9LockGuardINS_5MutexEEERKN7mozilla16BaseTimeDurationINS5_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0x258b5d)
                #5  0x00007f590c658c01 _ZN2js12HelperThread10ThreadMainEPNS_18InternalThreadPoolEPS0_ (libmozjs-102.so.0 + 0x258c01)
                #6  0x00007f590c657f27 _ZN2js6detail16ThreadTrampolineIRFvPNS_18InternalThreadPoolEPNS_12HelperThreadEEJRS3_S5_EE8callMainIJLm0ELm1EEEEvSt16integer_sequenceImJXspT_EEE (libmozjs-102.so.0 + 0x257f27)
                #7  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #8  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)

                Stack trace of thread 5213:
                #0  0x00007f590bc8b58e __futex_abstimed_wait_common64 (libc.so.6 + 0x8b58e)
                #1  0x00007f590bc8de81 __pthread_cond_wait_common (libc.so.6 + 0x8de81)
                #2  0x00007f590ce9ad17 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa9ad17)
                #3  0x00007f590ce9aea5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa9aea5)
                #4  0x00007f590c658b5d _ZN2js17ConditionVariable8wait_forERNS_9LockGuardINS_5MutexEEERKN7mozilla16BaseTimeDurationINS5_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0x258b5d)
                #5  0x00007f590c658c01 _ZN2js12HelperThread10ThreadMainEPNS_18InternalThreadPoolEPS0_ (libmozjs-102.so.0 + 0x258c01)
                #6  0x00007f590c657f27 _ZN2js6detail16ThreadTrampolineIRFvPNS_18InternalThreadPoolEPNS_12HelperThreadEEJRS3_S5_EE8callMainIJLm0ELm1EEEEvSt16integer_sequenceImJXspT_EEE (libmozjs-102.so.0 + 0x257f27)
                #7  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #8  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)

                Stack trace of thread 5209:
                #0  0x00007f590bc8b58e __futex_abstimed_wait_common64 (libc.so.6 + 0x8b58e)
                #1  0x00007f590bc8de81 __pthread_cond_wait_common (libc.so.6 + 0x8de81)
                #2  0x00007f590ce9ad17 _ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE (libmozjs-102.so.0 + 0xa9ad17)
                #3  0x00007f590ce9aea5 _ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0xa9aea5)
                #4  0x00007f590c658b5d _ZN2js17ConditionVariable8wait_forERNS_9LockGuardINS_5MutexEEERKN7mozilla16BaseTimeDurationINS5_27TimeDurationValueCalculatorEEE (libmozjs-102.so.0 + 0x258b5d)
                #5  0x00007f590c658c01 _ZN2js12HelperThread10ThreadMainEPNS_18InternalThreadPoolEPS0_ (libmozjs-102.so.0 + 0x258c01)
                #6  0x00007f590c657f27 _ZN2js6detail16ThreadTrampolineIRFvPNS_18InternalThreadPoolEPNS_12HelperThreadEEJRS3_S5_EE8callMainIJLm0ELm1EEEEvSt16integer_sequenceImJXspT_EEE (libmozjs-102.so.0 + 0x257f27)
                #7  0x00007f590bc8eb61 start_thread (libc.so.6 + 0x8eb61)
                #8  0x00007f590bd04ad4 __clone (libc.so.6 + 0x104ad4)
                ELF object binary architecture: AMD x86-64

In GitLab by @jrybar on Aug 23, 2023, 14:40

Hello,
have you applied https://gitlab.freedesktop.org/polkit/polkit/-/merge_requests/183 patch? Please contact your polkit maintainer in your distro.
Thanks.

In GitLab by @zaufi on Aug 23, 2023, 17:10

Thank you. Yes, in Exherbo now we have the patch mentioned which fixes the problem.

vmihalko / t2_polkit

sys-auth/polkit-123: Segfault in libmozjs-102.so.0 #206