[abrt] tmux: tmux killed by SIGSEGV

auton.sysnotify at gmail.com auton.sysnotify at gmail.com
Wed Jul 31 13:31:20 EDT 2024


reason:         tmux killed by SIGSEGV
cmdline:        tmux new -s mpe
executable:     /usr/bin/tmux
package:        tmux-1.8-4.el7
component:      tmux
pid:            37038
pwd:            /zfsauton2/home/wentsec
hostname:       gpu10.int.autonlab.org
count:          1
abrt_version:   2.1.11
analyzer:       CCpp
architecture:   x86_64
event_log:      
global_pid:     37038
kernel:         3.10.0-1127.18.2.el7.x86_64
last_occurrence: 1722447077
os_release:     Springdale Linux release 7.8 (Verona)
pkg_arch:       x86_64
pkg_epoch:      0
pkg_fingerprint: 16CF C333 41A4 0948
pkg_name:       tmux
pkg_release:    4.el7
pkg_vendor:     (none)
pkg_version:    1.8
runlevel:       N 3
time:           Wed 31 Jul 2024 01:31:17 PM EDT
type:           CCpp
uid:            1354
username:       wentsec
uuid:           b8174f21e8c7f99d0311b6e616418cea4004eff6

core_backtrace:
:{   "signal": 11
:,   "executable": "/usr/bin/tmux"
:,   "stacktrace":
:      [ {   "crash_thread": true
:        ,   "frames":
:              [ {   "address": 139934519606403
:                ,   "build_id": "6c1088e6f2a6be08e6ff272bc49db58123b08e70"
:                ,   "build_id_offset": 1404035
:                ,   "function_name": "__memcpy_ssse3_back"
:                ,   "file_name": "/lib64/libc.so.6"
:                }
:              , {   "address": 139934524490338
:                ,   "build_id": "fafe26a6aca753913be50c41e96e498b09df5265"
:                ,   "build_id_offset": 94818
:                ,   "function_name": "evbuffer_add"
:                ,   "file_name": "/lib64/libevent-2.0.so.5"
:                }
:              , {   "address": 139934524500800
:                ,   "build_id": "fafe26a6aca753913be50c41e96e498b09df5265"
:                ,   "build_id_offset": 105280
:                ,   "function_name": "bufferevent_write"
:                ,   "file_name": "/lib64/libevent-2.0.so.5"
:                }
:              , {   "address": 4406739
:                ,   "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
:                ,   "build_id_offset": 212435
:                ,   "function_name": "tty_puts.part.0"
:                ,   "file_name": "/usr/bin/tmux"
:                }
:              , {   "address": 4409249
:                ,   "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
:                ,   "build_id_offset": 214945
:                ,   "function_name": "tty_start_tty"
:                ,   "file_name": "/usr/bin/tmux"
:                }
:              , {   "address": 4362351
:                ,   "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
:                ,   "build_id_offset": 168047
:                ,   "function_name": "server_client_msg_dispatch"
:                ,   "file_name": "/usr/bin/tmux"
:                }
:              , {   "address": 4363165
:                ,   "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
:                ,   "build_id_offset": 168861
:                ,   "function_name": "server_client_callback"
:                ,   "file_name": "/usr/bin/tmux"
:                }
:              , {   "address": 139934524463636
:                ,   "build_id": "fafe26a6aca753913be50c41e96e498b09df5265"
:                ,   "build_id_offset": 68116
:                ,   "function_name": "event_base_loop"
:                ,   "file_name": "/lib64/libevent-2.0.so.5"
:                }
:              , {   "address": 4369994
:                ,   "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
:                ,   "build_id_offset": 175690
:                ,   "function_name": "server_loop"
:                ,   "file_name": "/usr/bin/tmux"
:                }
:              , {   "address": 4371805
:                ,   "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
:                ,   "build_id_offset": 177501
:                ,   "function_name": "server_start"
:                ,   "file_name": "/usr/bin/tmux"
:                }
:              , {   "address": 4214122
:                ,   "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
:                ,   "build_id_offset": 19818
:                ,   "function_name": "client_connect"
:                ,   "file_name": "/usr/bin/tmux"
:                }
:              , {   "address": 4214853
:                ,   "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
:                ,   "build_id_offset": 20549
:                ,   "function_name": "client_main"
:                ,   "file_name": "/usr/bin/tmux"
:                }
:              , {   "address": 4209293
:                ,   "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
:                ,   "build_id_offset": 14989
:                ,   "function_name": "main"
:                ,   "file_name": "/usr/bin/tmux"
:                } ]
:        } ]
:}
cgroup:
:11:cpuset:/
:10:blkio:/
:9:cpuacct,cpu:/
:8:hugetlb:/
:7:perf_event:/
:6:devices:/
:5:pids:/
:4:freezer:/
:3:memory:/
:2:net_prio,net_cls:/
:1:name=systemd:/user.slice/user-1354.slice/session-5769.scope
dso_list:
:/usr/lib64/ld-2.17.so glibc-2.17-307.el7.1.x86_64 (None) 1598074329
:/usr/lib64/libtinfo.so.5.9 ncurses-libs-5.9-14.20130511.el7_4.x86_64 (None) 1545333030
:/usr/lib64/libc-2.17.so glibc-2.17-307.el7.1.x86_64 (None) 1598074329
:/usr/lib64/libresolv-2.17.so glibc-2.17-307.el7.1.x86_64 (None) 1598074329
:/usr/bin/tmux tmux-1.8-4.el7.x86_64 (None) 1545353382
:/usr/lib64/libevent-2.0.so.5.1.9 libevent-2.0.21-4.el7.x86_64 (None) 1545350198
:/usr/lib64/libncurses.so.5.9 ncurses-libs-5.9-14.20130511.el7_4.x86_64 (None) 1545333030
:/usr/lib64/libdl-2.17.so glibc-2.17-307.el7.1.x86_64 (None) 1598074329
:/usr/lib64/libnss_files-2.17.so glibc-2.17-307.el7.1.x86_64 (None) 1598074329
:/usr/lib64/libutil-2.17.so glibc-2.17-307.el7.1.x86_64 (None) 1598074329
:/usr/lib64/libpthread-2.17.so glibc-2.17-307.el7.1.x86_64 (None) 1598074329
environ:
:XDG_SESSION_ID=5769
:HOSTNAME=gpu10.int.autonlab.org
:SELINUX_ROLE_REQUESTED=
:TERM=xterm-256color
:SHELL=/bin/bash
:HISTSIZE=1000
:'SSH_CLIENT=192.168.6.9 52300 22'
:CVSROOT=svnhub.int.autonlab.org:/var/CVS
:SELINUX_USE_CURRENT_RANGE=
:QTDIR=/usr/lib64/qt-3.3
:QTINC=/usr/lib64/qt-3.3/include
:SSH_TTY=/dev/pts/8
:QT_GRAPHICSSYSTEM_CHECKED=1
:USER=wentsec
:LD_LIBRARY_PATH=/usr/local/cuda/lib64:
:LS_COLORS=rs=0:di=38;5;27:ln=38;5;51:mh=44;38;5;15:pi=40;38;5;11:so=38;5;13:do=38;5;5:bd=48;5;232;38;5;11:cd=48;5;232;38;5;3:or=48;5;232;38;5;9:mi=05;48;5;232;38;5;15:su=48;5;196;38;5;15:sg=48;5;11;38;5;16:ca=48;5;196;38;5;226:tw=48;5;10;38;5;16:ow=48;5;10;38;5;21:st=48;5;21;38;5;15:ex=38;5;34:*.tar=38;5;9:*.tgz=38;5;9:*.arc=38;5;9:*.arj=38;5;9:*.taz=38;5;9:*.lha=38;5;9:*.lz4=38;5;9:*.lzh=38;5;9:*.lzma=38;5;9:*.tlz=38;5;9:*.txz=38;5;9:*.tzo=38;5;9:*.t7z=38;5;9:*.zip=38;5;9:*.z=38;5;9:*.Z=38;5;9:*.dz=38;5;9:*.gz=38;5;9:*.lrz=38;5;9:*.lz=38;5;9:*.lzo=38;5;9:*.xz=38;5;9:*.bz2=38;5;9:*.bz=38;5;9:*.tbz=38;5;9:*.tbz2=38;5;9:*.tz=38;5;9:*.deb=38;5;9:*.rpm=38;5;9:*.jar=38;5;9:*.war=38;5;9:*.ear=38;5;9:*.sar=38;5;9:*.rar=38;5;9:*.alz=38;5;9:*.ace=38;5;9:*.zoo=38;5;9:*.cpio=38;5;9:*.7z=38;5;9:*.rz=38;5;9:*.cab=38;5;9:*.jpg=38;5;13:*.jpeg=38;5;13:*.gif=38;5;13:*.bmp=38;5;13:*.pbm=38;5;13:*.pgm=38;5;13:*.ppm=38;5;13:*.tga=38;5;13:*.xbm=38;5;13:*.xpm=38;5;13:*.tif=38;5;13:*.tiff=38;5;13:*.png=38;5;13:*.svg=38;5;13:*.svgz=38;5;13:*.mng=38;5;13:*.pcx=38;5;13:*.mov=38;5;13:*.mpg=38;5;13:*.mpeg=38;5;13:*.m2v=38;5;13:*.mkv=38;5;13:*.webm=38;5;13:*.ogm=38;5;13:*.mp4=38;5;13:*.m4v=38;5;13:*.mp4v=38;5;13:*.vob=38;5;13:*.qt=38;5;13:*.nuv=38;5;13:*.wmv=38;5;13:*.asf=38;5;13:*.rm=38;5;13:*.rmvb=38;5;13:*.flc=38;5;13:*.avi=38;5;13:*.fli=38;5;13:*.flv=38;5;13:*.gl=38;5;13:*.dl=38;5;13:*.xcf=38;5;13:*.xwd=38;5;13:*.yuv=38;5;13:*.cgm=38;5;13:*.emf=38;5;13:*.axv=38;5;13:*.anx=38;5;13:*.ogv=38;5;13:*.ogx=38;5;13:*.aac=38;5;45:*.au=38;5;45:*.flac=38;5;45:*.mid=38;5;45:*.midi=38;5;45:*.mka=38;5;45:*.mp3=38;5;45:*.mpc=38;5;45:*.ogg=38;5;45:*.ra=38;5;45:*.wav=38;5;45:*.axa=38;5;45:*.oga=38;5;45:*.spx=38;5;45:*.xspf=38;5;45:
:MAIL=/var/spool/mail/wentsec
:PATH=/usr/local/cuda/bin:/usr/lib64/qt-3.3/bin:/usr/local/bin:/usr/bin:/usr/local/sbin:/usr/sbin
:MKL_NUM_THREADS=1
:PWD=/zfsauton2/home/wentsec
:NUMEXPR_NUM_THREADS=1
:SVN=svn://svnhub.int.autonlab.org/psycho/auton
:LANG=zh_TW.UTF-8
:MODULEPATH=/usr/share/Modules/modulefiles:/etc/modulefiles:/usr/local/share/Modules/modulefiles:/opt/share/Modules/modulefiles
:LOADEDMODULES=
:SELINUX_LEVEL_REQUESTED=
:HISTCONTROL=ignoredups
:SHLVL=1
:HOME=/zfsauton2/home/wentsec
:LOGNAME=wentsec
:QTLIB=/usr/lib64/qt-3.3/lib
:CVS_RSH=ssh
:'SSH_CONNECTION=192.168.6.9 52300 192.168.6.111 22'
:MODULESHOME=/usr/share/Modules
:OMP_NUM_THREADS=1
:'LESSOPEN=||/usr/bin/lesspipe.sh %s'
:XDG_RUNTIME_DIR=/run/user/1354
:'BASH_FUNC_module()=() {  eval `/usr/bin/modulecmd bash $*`\n}'
:_=/usr/bin/tmux
exploitable:
:Likely crash reason: Jump to an invalid address
:Exploitable rating (0-9 scale): 6
limits:
:Limit                     Soft Limit           Hard Limit           Units     
:Max cpu time              unlimited            unlimited            seconds   
:Max file size             unlimited            unlimited            bytes     
:Max data size             unlimited            unlimited            bytes     
:Max stack size            8388608              unlimited            bytes     
:Max core file size        0                    unlimited            bytes     
:Max resident set          unlimited            unlimited            bytes     
:Max processes             4096                 767448               processes 
:Max open files            1024                 4096                 files     
:Max locked memory         65536                65536                bytes     
:Max address space         unlimited            unlimited            bytes     
:Max file locks            unlimited            unlimited            locks     
:Max pending signals       767448               767448               signals   
:Max msgqueue size         819200               819200               bytes     
:Max nice priority         0                    0                    
:Max realtime priority     0                    0                    
:Max realtime timeout      unlimited            unlimited            us        
machineid:
:systemd=07061310645b4fa280d6e9ac62416ca3
:sosreport_uploader-dmidecode=3c8c346bc5d377722636667cd4bc986b0c7d593e8474327c2fd553460a6b842d
maps:
:00400000-00462000 r-xp 00000000 fd:00 101901469                          /usr/bin/tmux
:00661000-00662000 r--p 00061000 fd:00 101901469                          /usr/bin/tmux
:00662000-00664000 rw-p 00062000 fd:00 101901469                          /usr/bin/tmux
:00664000-0067f000 rw-p 00000000 00:00 0 
:019e5000-01a06000 rw-p 00000000 00:00 0                                  [heap]
:01a06000-01c17000 rw-p 00000000 00:00 0                                  [heap]
:7f450adca000-7f450add6000 r-xp 00000000 fd:00 63676                      /usr/lib64/libnss_files-2.17.so
:7f450add6000-7f450afd5000 ---p 0000c000 fd:00 63676                      /usr/lib64/libnss_files-2.17.so
:7f450afd5000-7f450afd6000 r--p 0000b000 fd:00 63676                      /usr/lib64/libnss_files-2.17.so
:7f450afd6000-7f450afd7000 rw-p 0000c000 fd:00 63676                      /usr/lib64/libnss_files-2.17.so
:7f450afd7000-7f450afdd000 rw-p 00000000 00:00 0 
:7f450afdd000-7f450aff4000 r-xp 00000000 fd:00 63908                      /usr/lib64/libpthread-2.17.so
:7f450aff4000-7f450b1f3000 ---p 00017000 fd:00 63908                      /usr/lib64/libpthread-2.17.so
:7f450b1f3000-7f450b1f4000 r--p 00016000 fd:00 63908                      /usr/lib64/libpthread-2.17.so
:7f450b1f4000-7f450b1f5000 rw-p 00017000 fd:00 63908                      /usr/lib64/libpthread-2.17.so
:7f450b1f5000-7f450b1f9000 rw-p 00000000 00:00 0 
:7f450b1f9000-7f450b1fb000 r-xp 00000000 fd:00 63664                      /usr/lib64/libdl-2.17.so
:7f450b1fb000-7f450b3fb000 ---p 00002000 fd:00 63664                      /usr/lib64/libdl-2.17.so
:7f450b3fb000-7f450b3fc000 r--p 00002000 fd:00 63664                      /usr/lib64/libdl-2.17.so
:7f450b3fc000-7f450b3fd000 rw-p 00003000 fd:00 63664                      /usr/lib64/libdl-2.17.so
:7f450b3fd000-7f450b5c0000 r-xp 00000000 fd:00 63658                      /usr/lib64/libc-2.17.so
:7f450b5c0000-7f450b7c0000 ---p 001c3000 fd:00 63658                      /usr/lib64/libc-2.17.so
:7f450b7c0000-7f450b7c4000 r--p 001c3000 fd:00 63658                      /usr/lib64/libc-2.17.so
:7f450b7c4000-7f450b7c6000 rw-p 001c7000 fd:00 63658                      /usr/lib64/libc-2.17.so
:7f450b7c6000-7f450b7cb000 rw-p 00000000 00:00 0 
:7f450b7cb000-7f450b7e1000 r-xp 00000000 fd:00 63910                      /usr/lib64/libresolv-2.17.so
:7f450b7e1000-7f450b9e1000 ---p 00016000 fd:00 63910                      /usr/lib64/libresolv-2.17.so
:7f450b9e1000-7f450b9e2000 r--p 00016000 fd:00 63910                      /usr/lib64/libresolv-2.17.so
:7f450b9e2000-7f450b9e3000 rw-p 00017000 fd:00 63910                      /usr/lib64/libresolv-2.17.so
:7f450b9e3000-7f450b9e5000 rw-p 00000000 00:00 0 
:7f450b9e5000-7f450ba2b000 r-xp 00000000 fd:00 829989                     /usr/lib64/libevent-2.0.so.5.1.9
:7f450ba2b000-7f450bc2a000 ---p 00046000 fd:00 829989                     /usr/lib64/libevent-2.0.so.5.1.9
:7f450bc2a000-7f450bc2b000 r--p 00045000 fd:00 829989                     /usr/lib64/libevent-2.0.so.5.1.9
:7f450bc2b000-7f450bc2c000 rw-p 00046000 fd:00 829989                     /usr/lib64/libevent-2.0.so.5.1.9
:7f450bc2c000-7f450bc2d000 rw-p 00000000 00:00 0 
:7f450bc2d000-7f450bc52000 r-xp 00000000 fd:00 64320                      /usr/lib64/libtinfo.so.5.9
:7f450bc52000-7f450be52000 ---p 00025000 fd:00 64320                      /usr/lib64/libtinfo.so.5.9
:7f450be52000-7f450be56000 r--p 00025000 fd:00 64320                      /usr/lib64/libtinfo.so.5.9
:7f450be56000-7f450be57000 rw-p 00029000 fd:00 64320                      /usr/lib64/libtinfo.so.5.9
:7f450be57000-7f450be7d000 r-xp 00000000 fd:00 64310                      /usr/lib64/libncurses.so.5.9
:7f450be7d000-7f450c07c000 ---p 00026000 fd:00 64310                      /usr/lib64/libncurses.so.5.9
:7f450c07c000-7f450c07d000 r--p 00025000 fd:00 64310                      /usr/lib64/libncurses.so.5.9
:7f450c07d000-7f450c07e000 rw-p 00026000 fd:00 64310                      /usr/lib64/libncurses.so.5.9
:7f450c07e000-7f450c080000 r-xp 00000000 fd:00 63916                      /usr/lib64/libutil-2.17.so
:7f450c080000-7f450c27f000 ---p 00002000 fd:00 63916                      /usr/lib64/libutil-2.17.so
:7f450c27f000-7f450c280000 r--p 00001000 fd:00 63916                      /usr/lib64/libutil-2.17.so
:7f450c280000-7f450c281000 rw-p 00002000 fd:00 63916                      /usr/lib64/libutil-2.17.so
:7f450c281000-7f450c2a3000 r-xp 00000000 fd:00 63651                      /usr/lib64/ld-2.17.so
:7f450c482000-7f450c488000 rw-p 00000000 00:00 0 
:7f450c4a1000-7f450c4a2000 rw-p 00000000 00:00 0 
:7f450c4a2000-7f450c4a3000 r--p 00021000 fd:00 63651                      /usr/lib64/ld-2.17.so
:7f450c4a3000-7f450c4a4000 rw-p 00022000 fd:00 63651                      /usr/lib64/ld-2.17.so
:7f450c4a4000-7f450c4a5000 rw-p 00000000 00:00 0 
:7fff72a07000-7fff72a28000 rw-p 00000000 00:00 0                          [stack]
:7fff72b27000-7fff72b29000 r-xp 00000000 00:00 0                          [vdso]
:ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
open_fds:
:0:/dev/null
:pos:	0
:flags:	0100002
:mnt_id:	20
:1:/dev/null
:pos:	0
:flags:	0100002
:mnt_id:	20
:2:/dev/null
:pos:	0
:flags:	0100002
:mnt_id:	20
:3:anon_inode:[eventpoll]
:pos:	0
:flags:	02000002
:mnt_id:	10
:tfd:       17 events:       1d data:               11
:tfd:        8 events:       1d data:                8
:tfd:       15 events:       1d data:                f
:tfd:       13 events:       19 data:                d
:tfd:       11 events:       1d data:                b
:tfd:       14 events:       19 data:                e
:tfd:        5 events:       19 data:                5
:tfd:        7 events:       19 data:                7
:tfd:        9 events:       19 data:                9
:tfd:       10 events:       19 data:                a
:4:socket:[4313739]
:pos:	0
:flags:	02004002
:mnt_id:	7
:5:socket:[4313740]
:pos:	0
:flags:	02004002
:mnt_id:	7
os_info:
:NAME="Springdale Linux"
:VERSION="7.8 (Verona)"
:ID="rhel"
:ID_LIKE="fedora"
:VERSION_ID="7.8"
:PRETTY_NAME="Springdale Linux 7.8 (Verona)"
:ANSI_COLOR="0;32"
:CPE_NAME="cpe:/o:springdale:linux:7.8:GA"
:HOME_URL="http://springdale.princeton.edu/"
:BUG_REPORT_URL="https://springdale.math.ias.edu/"
:
:REDHAT_BUGZILLA_PRODUCT="Springdale Linux 7"
:REDHAT_BUGZILLA_PRODUCT_VERSION=7.8
:REDHAT_SUPPORT_PRODUCT="Springdale Linux"
:REDHAT_SUPPORT_PRODUCT_VERSION=7.8
proc_pid_status:
:Name:	tmux
:Umask:	0002
:State:	S (sleeping)
:Tgid:	37038
:Ngid:	0
:Pid:	37038
:PPid:	1
:TracerPid:	0
:Uid:	1354	1354	1354	1354
:Gid:	1354	1354	1354	1354
:FDSize:	64
:Groups:	1354 
:VmPeak:	   24292 kB
:VmSize:	   24288 kB
:VmLck:	       0 kB
:VmPin:	       0 kB
:VmHWM:	    3712 kB
:VmRSS:	    3712 kB
:RssAnon:	    2428 kB
:RssFile:	    1284 kB
:RssShmem:	       0 kB
:VmData:	    2468 kB
:VmStk:	     132 kB
:VmExe:	     392 kB
:VmLib:	    2764 kB
:VmPTE:	      76 kB
:VmSwap:	       0 kB
:Threads:	1
:SigQ:	0/767448
:SigPnd:	0000000000000000
:ShdPnd:	0000000000000000
:SigBlk:	0000000000000000
:SigIgn:	0000000000081802
:SigCgt:	0000000188034201
:CapInh:	0000000000000000
:CapPrm:	0000000000000000
:CapEff:	0000000000000000
:CapBnd:	0000001fffffffff
:CapAmb:	0000000000000000
:NoNewPrivs:	0
:Seccomp:	0
:Speculation_Store_Bypass:	thread vulnerable
:Cpus_allowed:	ffffffff,ffffffff,ffffffff,ffffffff,ffffffff,ffffffff,ffffffff,ffffffff
:Cpus_allowed_list:	0-255
:Mems_allowed:	00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000003
:Mems_allowed_list:	0-1
:voluntary_ctxt_switches:	23040
:nonvoluntary_ctxt_switches:	1120
var_log_messages:
:[System Logs]:
:Jul 31 13:31:17 gpu10.int.autonlab.org kernel: tmux[37038]: segfault at 5007b00 ip 00007f450b553c83 sp 00007fff72a224d8 error 6 in libc-2.17.so[7f450b3fd000+1c3000]
:Jul 31 13:31:17 gpu10.int.autonlab.org abrt-hook-ccpp[80858]: Process 37038 (tmux) of user 1354 killed by SIGSEGV - dumping core
:[User Logs]:



More information about the Autonlab-sysinfo mailing list