rpmbuild: double free or corruption (fasttop)

[Panu Matilainen]

On 04/24/2013 12:40 PM, Simone Caronni wrote:
> Hello,
>
> I don't know if I'm doing something wrong regarding a package which
> includes file capabilities support or if I've hit a bug.
>
> I've added libcap-devel as BuildRequires (probably it's already part of a
> base system) and replaced the %attr tags in the file section (to remove
> setuid) with a %caps directive.
>
> The rpm builds and links fine as long as I don't use the %caps directive in
> the file section. If I enable it, I got error "-6" when rpmbuild tries to
> packs the rpm file after building:
>
> DEBUG: + exit 0
> DEBUG: *** glibc detected *** rpmbuild: double free or corruption
> (fasttop): 0x0000000000c07f80 ***
> DEBUG: ======= Backtrace: =========
> DEBUG: /lib64/libc.so.6(+0x7ca8e)[0x7fe4b181fa8e]
> DEBUG: /lib64/librpmio.so.3(rfree+0x9)[0x7fe4b3c44ee9]
> DEBUG: /lib64/librpmbuild.so.3(+0x890e)[0x7fe4b42e490e]
> DEBUG: /lib64/librpmbuild.so.3(+0xaf3c)[0x7fe4b42e6f3c]
> DEBUG: /lib64/librpmbuild.so.3(+0xc91c)[0x7fe4b42e891c]
> DEBUG: /lib64/librpmbuild.so.3(+0x78c1)[0x7fe4b42e38c1]
> DEBUG: rpmbuild[0x402b8a]
> DEBUG: rpmbuild[0x402e0f]
> DEBUG: rpmbuild[0x401fe3]
> DEBUG: /lib64/libc.so.6(__libc_start_main+0xf5)[0x7fe4b17c4a05]
> DEBUG: rpmbuild[0x40221d]
> DEBUG: ======= Memory map: ========
> DEBUG: 00400000-00405000 r-xp 00000000 fd:01
> 1465924                            /usr/bin/rpmbuild
> DEBUG: 00604000-00605000 r--p 00004000 fd:01
> 1465924                            /usr/bin/rpmbuild
> DEBUG: 00605000-00606000 rw-p 00005000 fd:01
> 1465924                            /usr/bin/rpmbuild
> DEBUG: 00b95000-00fdd000 rw-p 00000000 00:00
> 0                                  [heap]
> DEBUG: 7fe4a995d000-7fe4a9972000 r-xp 00000000 fd:01
> 1467761                    /usr/lib64/libgcc_s-4.7.2-20121109.so.1
> DEBUG: 7fe4a9972000-7fe4a9b71000 ---p 00015000 fd:01
> 1467761                    /usr/lib64/libgcc_s-4.7.2-20121109.so.1
> DEBUG: 7fe4a9b71000-7fe4a9b72000 r--p 00014000 fd:01
> 1467761                    /usr/lib64/libgcc_s-4.7.2-20121109.so.1
> DEBUG: 7fe4a9b72000-7fe4a9b73000 rw-p 00015000 fd:01
> 1467761                    /usr/lib64/libgcc_s-4.7.2-20121109.so.1
> DEBUG: 7fe4a9b73000-7fe4a9bd9000 r-xp 00000000 fd:01
> 1469829                    /usr/lib64/libfreebl3.so
> DEBUG: 7fe4a9bd9000-7fe4a9dd9000 ---p 00066000 fd:01
> 1469829                    /usr/lib64/libfreebl3.so
> DEBUG: 7fe4a9dd9000-7fe4a9dda000 r--p 00066000 fd:01
> 1469829                    /usr/lib64/libfreebl3.so
> DEBUG: 7fe4a9dda000-7fe4a9ddb000 rw-p 00067000 fd:01
> 1469829                    /usr/lib64/libfreebl3.so
> DEBUG: 7fe4a9ddb000-7fe4a9ddf000 rw-p 00000000 00:00 0
> DEBUG: 7fe4a9ddf000-7fe4a9e85000 r-xp 00000000 fd:01
> 1470287                    /usr/lib64/libsqlite3.so.0.8.6
> DEBUG: 7fe4a9e85000-7fe4aa084000 ---p 000a6000 fd:01
> 1470287                    /usr/lib64/libsqlite3.so.0.8.6
> DEBUG: 7fe4aa084000-7fe4aa086000 r--p 000a5000 fd:01
> 1470287                    /usr/lib64/libsqlite3.so.0.8.6
> DEBUG: 7fe4aa086000-7fe4aa088000 rw-p 000a7000 fd:01
> 1470287                    /usr/lib64/libsqlite3.so.0.8.6
> DEBUG: 7fe4aa088000-7fe4aa089000 rw-p 00000000 00:00 0
> DEBUG: 7fe4aa089000-7fe4aa0c7000 r-xp 00000000 fd:01
> 1469407                    /usr/lib64/libsoftokn3.so
> DEBUG: 7fe4aa0c7000-7fe4aa2c7000 ---p 0003e000 fd:01
> 1469407                    /usr/lib64/libsoftokn3.so
> DEBUG: 7fe4aa2c7000-7fe4aa2c8000 r--p 0003e000 fd:01
> 1469407                    /usr/lib64/libsoftokn3.so
> DEBUG: 7fe4aa2c8000-7fe4aa2c9000 rw-p 0003f000 fd:01
> 1469407                    /usr/lib64/libsoftokn3.so
> DEBUG: 7fe4aa2c9000-7fe4aa2d5000 r-xp 00000000 fd:01
> 1467786                    /usr/lib64/libnss_files-2.16.so
> DEBUG: 7fe4aa2d5000-7fe4aa4d4000 ---p 0000c000 fd:01
> 1467786                    /usr/lib64/libnss_files-2.16.so
> DEBUG: 7fe4aa4d4000-7fe4aa4d5000 r--p 0000b000 fd:01
> 1467786                    /usr/lib64/libnss_files-2.16.so
> DEBUG: 7fe4aa4d5000-7fe4aa4d6000 rw-p 0000c000 fd:01
> 1467786                    /usr/lib64/libnss_files-2.16.so
> DEBUG: 7fe4aa4d6000-7fe4b08c6000 r--p 00000000 fd:01
> 1466334                    /usr/lib/locale/locale-archive
> DEBUG: 7fe4b08c6000-7fe4b08ff000 r-xp 00000000 fd:01
> 1470258                    /usr/lib64/libnspr4.so
> DEBUG: 7fe4b08ff000-7fe4b0aff000 ---p 00039000 fd:01
> 1470258                    /usr/lib64/libnspr4.so
> DEBUG: 7fe4b0aff000-7fe4b0b00000 r--p 00039000 fd:01
> 1470258                    /usr/lib64/libnspr4.so
> DEBUG: 7fe4b0b00000-7fe4b0b02000 rw-p 0003a000 fd:01
> 1470258                    /usr/lib64/libnspr4.so
> DEBUG: 7fe4b0b02000-7fe4b0b04000 rw-p 00000000 00:00 0
> DEBUG: 7fe4b0b04000-7fe4b0b07000 r-xp 00000000 fd:01
> 1469808                    /usr/lib64/libplds4.so
> DEBUG: 7fe4b0b07000-7fe4b0d06000 ---p 00003000 fd:01
> 1469808                    /usr/lib64/libplds4.so
> DEBUG: 7fe4b0d06000-7fe4b0d07000 r--p 00002000 fd:01
> 1469808                    /usr/lib64/libplds4.so
> DEBUG: 7fe4b0d07000-7fe4b0d08000 rw-p 00003000 fd:01
> 1469808                    /usr/lib64/libplds4.so
> DEBUG: 7fe4b0d08000-7fe4b0d0c000 r-xp 00000000 fd:01
> 1470139                    /usr/lib64/libplc4.so
> DEBUG: 7fe4b0d0c000-7fe4b0f0b000 ---p 00004000 fd:01
> 1470139                    /usr/lib64/libplc4.so
> DEBUG: 7fe4b0f0b000-7fe4b0f0c000 r--p 00003000 fd:01
> 1470139                    /usr/lib64/libplc4.so
> DEBUG: 7fe4b0f0c000-7fe4b0f0d000 rw-p 00004000 fd:01
> 1470139                    /usr/lib64/libplc4.so
> DEBUG: 7fe4b0f0d000-7fe4b0f31000 r-xp 00000000 fd:01
> 1467752                    /usr/lib64/libnssutil3.so
> DEBUG: 7fe4b0f31000-7fe4b1131000 ---p 00024000 fd:01
> 1467752                    /usr/lib64/libnssutil3.so
> DEBUG: 7fe4b1131000-7fe4b1137000 r--p 00024000 fd:01
> 1467752                    /usr/lib64/libnssutil3.so
> DEBUG: 7fe4b1137000-7fe4b1138000 rw-p 0002a000 fd:01
> 1467752                    /usr/lib64/libnssutil3.so
> DEBUG: 7fe4b1138000-7fe4b113f000 r-xp 00000000 fd:01
> 1470193                    /usr/lib64/librt-2.16.so
> DEBUG: 7fe4b113f000-7fe4b133e000 ---p 00007000 fd:01
> 1470193                    /usr/lib64/librt-2.16.so
> DEBUG: 7fe4b133e000-7fe4b133f000 r--p 00006000 fd:01
> 1470193                    /usr/lib64/librt-2.16.so
> DEBUG: 7fe4b133f000-7fe4b1340000 rw-p 00007000 fd:01
> 1470193                    /usr/lib64/librt-2.16.so
> DEBUG: 7fe4b1340000-7fe4b1344000 r-xp 00000000 fd:01
> 1467751                    /usr/lib64/libattr.so.1.1.0
> DEBUG: 7fe4b1344000-7fe4b1543000 ---p 00004000 fd:01
> 1467751                    /usr/lib64/libattr.so.1.1.0
> DEBUG: 7fe4b1543000-7fe4b1544000 r--p 00003000 fd:01
> 1467751                    /usr/lib64/libattr.so.1.1.0
> DEBUG: 7fe4b1544000-7fe4b1545000 rw-p 00004000 fd:01
> 1467751                    /usr/lib64/libattr.so.1.1.0
> DEBUG: 7fe4b1545000-7fe4b15a1000 r-xp 00000000 fd:01
> 1469779                    /usr/lib64/libpcre.so.1.0.1
> DEBUG: 7fe4b15a1000-7fe4b17a1000 ---p 0005c000 fd:01
> 1469779                    /usr/lib64/libpcre.so.1.0.1
> DEBUG: 7fe4b17a1000-7fe4b17a2000 r--p 0005c000 fd:01
> 1469779                    /usr/lib64/libpcre.so.1.0.1
> DEBUG: 7fe4b17a2000-7fe4b17a3000 rw-p 0005d000 fd:01
> 1469779                    /usr/lib64/libpcre.so.1.0.1
> DEBUG: 7fe4b17a3000-7fe4b1950000 r-xp 00000000 fd:01
> 1467807                    /usr/lib64/libc-2.16.so
> DEBUG: 7fe4b1950000-7fe4b1b50000 ---p 001ad000 fd:01
> 1467807                    /usr/lib64/libc-2.16.so
> DEBUG: 7fe4b1b50000-7fe4b1b54000 r--p 001ad000 fd:01
> 1467807                    /usr/lib64/libc-2.16.so
> DEBUG: 7fe4b1b54000-7fe4b1b56000 rw-p 001b1000 fd:01
> 1467807                    /usr/lib64/libc-2.16.so
> DEBUG: 7fe4b1b56000-7fe4b1b5b000 rw-p 00000000 00:00 0
> DEBUG: 7fe4b1b5b000-7fe4b1b71000 r-xp 00000000 fd:01
> 1469836                    /usr/lib64/libpthread-2.16.so
> DEBUG: 7fe4b1b71000-7fe4b1d71000 ---p 00016000 fd:01
> 1469836                    /usr/lib64/libpthread-2.16.so
> DEBUG: 7fe4b1d71000-7fe4b1d72000 r--p 00016000 fd:01
> 1469836                    /usr
> DEBUG: Child return code was: -6
> INFO: EXCEPTION: Command failed. See logs for output.
>
> Full log and spec file available here:
>
> http://slaanesh.fedorapeople.org/cdrtools.spec
> http://slaanesh.fedorapeople.org/build.log
>
> So far I've tested this only on Fedora 18.
>
> Any hints?

A segfault is always a bug. This would seem to be the same as 
https://bugzilla.redhat.com/show_bug.cgi?id=877512 but I had assumed 
this was only present in the pre-release versions of rpm 4.11.

	- Panu -