Chromium - grsec: Invalid alignment/Bus error

[Miroslav]

Hi,
chromium browser occasionally display "Oops, Something went wrong while displaying this web page". In such a case it is necessary to close browser, sometimes it has to be killed.

http://www.hardwareheaven.com/2014/08/z ... -review/2/ caused this issue last time.

Code: Select all

Oct 11 23:34:28 blue kernel: [17117.308509] grsec: Invalid alignment/Bus error occurred at 000003368081d000 in /usr/lib64/chromium-browser/chrome[CompositorRaste:22205] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/lib64/chromium-browser/chrome[chrome:22008] uid/euid:1000/1000 gid/egid:1000/1000
Oct 11 23:34:28 blue kernel: [17117.308517] grsec: bruteforce prevention initiated for the next 30 minutes or until service restarted, stalling each fork 30 seconds.  Please investigate the crash report for /usr/lib64/chromium-browser/chrome[CompositorRaste:22205] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/lib64/chromium-browser/chrome[chrome:22008] uid/euid:1000/1000 gid/egid:1000/1000



Chromium Version 38.0.2125.101 (290379) (64-bit)

Code: Select all

blue miro # paxctl-ng -v /usr/lib64/chromium-browser/chrome
/usr/lib64/chromium-browser/chrome:
        open(O_RDWR) failed: cannot change PT_PAX flags
        PT_PAX    : -em--
        XATTR_PAX : -em--


System uname: Linux-3.15.10-hardened-r1-x86_64-Intel-R-_Core-TM-2_Duo_CPU_E8400_@_3.00GHz-with-gentoo-2.2
Portage 2.2.8-r2 (hardened/linux/amd64, gcc-4.8.3, glibc-2.19-r1, 3.15.10-hardened-r1 x86_64)

Grsecurity kernel config

Code: Select all

# Grsecurity
#
CONFIG_PAX_KERNEXEC_PLUGIN=y
CONFIG_PAX_PER_CPU_PGD=y
CONFIG_TASK_SIZE_MAX_SHIFT=42
CONFIG_PAX_USERCOPY_SLABS=y
CONFIG_GRKERNSEC=y
CONFIG_GRKERNSEC_CONFIG_AUTO=y
# CONFIG_GRKERNSEC_CONFIG_CUSTOM is not set
# CONFIG_GRKERNSEC_CONFIG_SERVER is not set
CONFIG_GRKERNSEC_CONFIG_DESKTOP=y
# CONFIG_GRKERNSEC_CONFIG_VIRT_NONE is not set
# CONFIG_GRKERNSEC_CONFIG_VIRT_GUEST is not set
CONFIG_GRKERNSEC_CONFIG_VIRT_HOST=y
# CONFIG_GRKERNSEC_CONFIG_VIRT_EPT is not set
CONFIG_GRKERNSEC_CONFIG_VIRT_SOFT=y
# CONFIG_GRKERNSEC_CONFIG_VIRT_XEN is not set
# CONFIG_GRKERNSEC_CONFIG_VIRT_VMWARE is not set
CONFIG_GRKERNSEC_CONFIG_VIRT_KVM=y
# CONFIG_GRKERNSEC_CONFIG_VIRT_VIRTUALBOX is not set
CONFIG_GRKERNSEC_CONFIG_PRIORITY_PERF=y
# CONFIG_GRKERNSEC_CONFIG_PRIORITY_SECURITY is not set

#
# Default Special Groups
#
CONFIG_GRKERNSEC_PROC_GID=10

#
# Customize Configuration
#

#
# PaX
#
CONFIG_PAX=y

#
# PaX Control
#
CONFIG_PAX_SOFTMODE=y
# CONFIG_PAX_PT_PAX_FLAGS is not set
CONFIG_PAX_XATTR_PAX_FLAGS=y
CONFIG_PAX_NO_ACL_FLAGS=y
# CONFIG_PAX_HAVE_ACL_FLAGS is not set
# CONFIG_PAX_HOOK_ACL_FLAGS is not set

#
# Non-executable pages
#
CONFIG_PAX_NOEXEC=y
CONFIG_PAX_PAGEEXEC=y
CONFIG_PAX_EMUTRAMP=y
CONFIG_PAX_MPROTECT=y
CONFIG_PAX_MPROTECT_COMPAT=y
# CONFIG_PAX_ELFRELOCS is not set
CONFIG_PAX_KERNEXEC=y
CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_BTS=y
# CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_OR is not set
CONFIG_PAX_KERNEXEC_PLUGIN_METHOD="bts"

#
# Address Space Layout Randomization
#
CONFIG_PAX_ASLR=y
CONFIG_PAX_RANDKSTACK=y
CONFIG_PAX_RANDUSTACK=y
CONFIG_PAX_RANDMMAP=y

#
# Miscellaneous hardening features
#
# CONFIG_PAX_MEMORY_SANITIZE is not set
# CONFIG_PAX_MEMORY_STACKLEAK is not set
# CONFIG_PAX_MEMORY_STRUCTLEAK is not set
# CONFIG_PAX_MEMORY_UDEREF is not set
CONFIG_PAX_REFCOUNT=y
CONFIG_PAX_CONSTIFY_PLUGIN=y
CONFIG_PAX_USERCOPY=y
# CONFIG_PAX_USERCOPY_DEBUG is not set
CONFIG_PAX_SIZE_OVERFLOW=y
CONFIG_PAX_LATENT_ENTROPY=y

#
# Memory Protections
#
CONFIG_GRKERNSEC_KMEM=y
# CONFIG_GRKERNSEC_IO is not set
CONFIG_GRKERNSEC_JIT_HARDEN=y
CONFIG_GRKERNSEC_PERF_HARDEN=y
CONFIG_GRKERNSEC_RAND_THREADSTACK=y
CONFIG_GRKERNSEC_PROC_MEMMAP=y
CONFIG_GRKERNSEC_KSTACKOVERFLOW=y
CONFIG_GRKERNSEC_BRUTE=y
CONFIG_GRKERNSEC_MODHARDEN=y
CONFIG_GRKERNSEC_HIDESYM=y
CONFIG_GRKERNSEC_RANDSTRUCT=y
CONFIG_GRKERNSEC_RANDSTRUCT_PERFORMANCE=y
CONFIG_GRKERNSEC_KERN_LOCKOUT=y

#
# Role Based Access Control Options
#
CONFIG_GRKERNSEC_NO_RBAC=y
# CONFIG_GRKERNSEC_ACL_HIDEKERN is not set
CONFIG_GRKERNSEC_ACL_MAXTRIES=3
CONFIG_GRKERNSEC_ACL_TIMEOUT=30

#
# Filesystem Protections
#
CONFIG_GRKERNSEC_PROC=y
# CONFIG_GRKERNSEC_PROC_USER is not set
CONFIG_GRKERNSEC_PROC_USERGROUP=y
CONFIG_GRKERNSEC_PROC_ADD=y
CONFIG_GRKERNSEC_LINK=y
# CONFIG_GRKERNSEC_SYMLINKOWN is not set
CONFIG_GRKERNSEC_FIFO=y
# CONFIG_GRKERNSEC_SYSFS_RESTRICT is not set
# CONFIG_GRKERNSEC_ROFS is not set
CONFIG_GRKERNSEC_DEVICE_SIDECHANNEL=y
CONFIG_GRKERNSEC_CHROOT=y
CONFIG_GRKERNSEC_CHROOT_MOUNT=y
CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
CONFIG_GRKERNSEC_CHROOT_PIVOT=y
CONFIG_GRKERNSEC_CHROOT_CHDIR=y
CONFIG_GRKERNSEC_CHROOT_CHMOD=y
CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
CONFIG_GRKERNSEC_CHROOT_MKNOD=y
CONFIG_GRKERNSEC_CHROOT_SHMAT=y
CONFIG_GRKERNSEC_CHROOT_UNIX=y
CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
CONFIG_GRKERNSEC_CHROOT_NICE=y
CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
CONFIG_GRKERNSEC_CHROOT_CAPS=y
CONFIG_GRKERNSEC_CHROOT_INITRD=y

#
# Kernel Auditing
#
# CONFIG_GRKERNSEC_AUDIT_GROUP is not set
# CONFIG_GRKERNSEC_EXECLOG is not set
CONFIG_GRKERNSEC_RESLOG=y
# CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
# CONFIG_GRKERNSEC_AUDIT_PTRACE is not set
# CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
# CONFIG_GRKERNSEC_AUDIT_MOUNT is not set
CONFIG_GRKERNSEC_SIGNAL=y
# CONFIG_GRKERNSEC_FORKFAIL is not set
CONFIG_GRKERNSEC_TIME=y
CONFIG_GRKERNSEC_PROC_IPADDR=y
CONFIG_GRKERNSEC_RWXMAP_LOG=y

#
# Executable Protections
#
CONFIG_GRKERNSEC_DMESG=y
CONFIG_GRKERNSEC_HARDEN_PTRACE=y
CONFIG_GRKERNSEC_PTRACE_READEXEC=y
CONFIG_GRKERNSEC_SETXID=y
CONFIG_GRKERNSEC_HARDEN_IPC=y
# CONFIG_GRKERNSEC_TPE is not set

#
# Network Protections
#
CONFIG_GRKERNSEC_RANDNET=y
CONFIG_GRKERNSEC_BLACKHOLE=y
CONFIG_GRKERNSEC_NO_SIMULT_CONNECT=y
# CONFIG_GRKERNSEC_SOCKET is not set

#
# Physical Protections
#
CONFIG_GRKERNSEC_DENYUSB=y
# CONFIG_GRKERNSEC_DENYUSB_FORCE is not set

#
# Sysctl Support
#
CONFIG_GRKERNSEC_SYSCTL=y
CONFIG_GRKERNSEC_SYSCTL_ON=y

#
# Logging Options
#
CONFIG_GRKERNSEC_FLOODTIME=10
CONFIG_GRKERNSEC_FLOODBURST=6
# CONFIG_KEYS is not set
# CONFIG_SECURITY_DMESG_RESTRICT is not set
# CONFIG_SECURITY is not set
# CONFIG_SECURITYFS is not set
# CONFIG_INTEL_TXT is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_DEFAULT_SECURITY=""
CONFIG_CRYPTO=y


Regards
Miroslav

[PaX Team]

since this seems be reproducible, you could try to enable coredumps and generate one for chromium then we can take a look at the code that triggered the sigbus.

[Miroslav]

Hi,
I ran chromium from terminal

Code: Select all

chromium-browser --allow-sandbox-debugging http://www.hardwareheaven.com/2014/08/zotac-gtx-750-zone-edition-review/2/


Browser didn't crash, so I trigger core-dump by sending SIGABRT to relevant process according to https://code.google.com/p/chromium/wiki ... Core_files. Raw core dump file size is 377MB, 8MB if compressed by tar.xz. How can I attach this file?

Regards
Miroslav

[PaX Team]

no need to send it to me as i wouldn't have all the needed debug info anyway. instead load the coredump into gdb and issue a few commands to see what happened:
1. thread apply all bt
2. info regs
3. x/8i $pc
4. x/8a $sp

now what will be a problem is if your coredump state doesn't actually reflect the state of the process when the sigbus was sent to it, so you should really try to reproduce the case where the sigbus happens and do the above analysis on such a coredump.

[Miroslav]

Hi,
I ran

Code: Select all

chromium-browser --no-sandbox --renderer-cmd-prefix='konsole -title renderer -e gdb -ex run --args'


as recommended on https://code.google.com/p/chromium/wiki/LinuxDebugging. Browser starts normally, three gdb debug sessions also start. After typing URL http://www.hardwareheaven.com/2014/08/z ... -review/2/ the fourth debug session start.

Code: Select all

GNU gdb (Gentoo 7.8 vanilla) 7.8
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-pc-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://bugs.gentoo.org/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/lib64/chromium-browser/chrome...(no debugging symbols found)...done.
Starting program: /usr/lib64/chromium-browser/chrome --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=en-US --force-fieldtrials=Prerender/PrerenderNoUse/PrerenderFromOmnibox/OmniboxPrerenderEnabled/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --ppapi-flash-path=/usr/lib64/chromium-browser/PepperFlash/libpepflashplayer.so --ppapi-flash-version=15.0.0.152 --enable-delegated-renderer --enable-impl-side-painting --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel=5023.4.1761784585
warning: Cannot call inferior functions, Linux kernel PaX protection forbids return to non-executable pages!
warning: Could not load shared library symbols for linux-vdso.so.1.
Do you need "set solib-search-path" or "set sysroot"?
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
[5247:5247:1013/002004:ERROR:renderer_main.cc(204)] Running without renderer sandbox
[New Thread 0x3195298e700 (LWP 5251)]
[New Thread 0x31950c73700 (LWP 5252)]
[New Thread 0x31951831700 (LWP 5253)]
[New Thread 0x3192de19700 (LWP 5254)]
[New Thread 0x3192cfb3700 (LWP 5255)]
[New Thread 0x3192c714700 (LWP 5260)]
Fontconfig warning: "/etc/fonts/conf.d/50-user.conf", line 14: reading configurations from ~/.fonts.conf is deprecated.

Program received signal SIGBUS, Bus error.
[Switching to Thread 0x3192cfb3700 (LWP 5255)]
0x000000306f999287 in ?? ()
(gdb)


Core dump file was created, see bellow

Code: Select all

miro@blue ~ $ gdb
GNU gdb (Gentoo 7.8 vanilla) 7.8
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-pc-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://bugs.gentoo.org/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word".
(gdb) file /usr/lib64/chromium-browser/chrome
Reading symbols from /usr/lib64/chromium-browser/chrome...(no debugging symbols found)...done.
(gdb) core-file /home/miro/core
[New LWP 5043]
[New LWP 5030]
[New LWP 5045]
[New LWP 5161]
[New LWP 5032]
[New LWP 5031]
[New LWP 5373]
[New LWP 5053]
[New LWP 5160]
[New LWP 5033]
[New LWP 5051]
[New LWP 5049]
[New LWP 5102]
[New LWP 5034]
[New LWP 5035]
[New LWP 5025]
[New LWP 5036]
[New LWP 5037]
[New LWP 5041]
[New LWP 5038]
[New LWP 5039]
[New LWP 5055]
[New LWP 5040]
[New LWP 5056]
[New LWP 5086]
[New LWP 5052]
[New LWP 5048]
[New LWP 5060]
[New LWP 5196]
[New LWP 5054]
[New LWP 5046]
[New LWP 5029]
[New LWP 5044]
[New LWP 5042]
[New LWP 5023]
warning: Could not load shared library symbols for linux-vdso.so.1.
Do you need "set solib-search-path" or "set sysroot"?
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/lib64/chromium-browser/chrome --extra-plugin-dir=/usr/lib64/nsbrowser/plug'.
Program terminated with signal SIGBUS, Bus error.
#0  0x000003222f5b62d5 in ?? () from /lib64/libz.so.1
(gdb) thread apply all bt

Thread 35 (Thread 0x32231962900 (LWP 5023)):
#0  0x00000322288843dd in poll () from /lib64/libc.so.6
#1  0x0000032230e4a535 in ?? () from /usr/lib64/libglib-2.0.so.0
#2  0x0000032230e4a6b1 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#3  0x0000005a3b0277b7 in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3ac6fef1 in ?? ()
#6  0x0000005a3ccf154b in ?? ()
#7  0x0000005a3ccf3d74 in ?? ()
#8  0x0000005a3cceced9 in ?? ()
#9  0x0000005a3af913a7 in ?? ()
#10 0x0000005a3af8f849 in ?? ()
#11 0x0000005a3a97dc9b in ChromeMain ()
#12 0x00000322287b91bb in __libc_start_main () from /lib64/libc.so.6
#13 0x0000005a3a97db19 in _start ()

Thread 34 (Thread 0x32213540700 (LWP 5042)):
#0  0x000003222888f563 in epoll_wait () from /lib64/libc.so.6
#1  0x0000032230bca543 in ?? () from /usr/lib64/libevent-2.0.so.5
#2  0x0000032230bb1231 in event_base_loop () from /usr/lib64/libevent-2.0.so.5
#3  0x0000005a3afb1bd8 in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3ccf74a7 in ?? ()
#7  0x0000005a3ccf76eb in ?? ()
#8  0x0000005a3b0184f5 in ?? ()
#9  0x0000005a3b014200 in ?? ()
#10 0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#11 0x000003222888ee0d in clone () from /lib64/libc.so.6

---Type <return> to continue, or q <return> to quit---
Thread 33 (Thread 0x322124d8700 (LWP 5044)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b00f601 in ?? ()
#3  0x0000005a3afee419 in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 32 (Thread 0x3221f5c1700 (LWP 5029)):
#0  0x00000322288843dd in poll () from /lib64/libc.so.6
#1  0x0000032230e4a535 in ?? () from /usr/lib64/libglib-2.0.so.0
#2  0x0000032230e4a6b1 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#3  0x0000032230e4a731 in ?? () from /usr/lib64/libglib-2.0.so.0
#4  0x0000032230e793eb in ?? () from /usr/lib64/libglib-2.0.so.0
#5  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#6  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 31 (Thread 0x32210c17700 (LWP 5046)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b016f88 in ?? ()
#3  0x0000005a3b017761 in ?? ()
#4  0x0000005a3b018133 in ?? ()
#5  0x0000005a3b014200 in ?? ()
#6  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#7  0x000003222888ee0d in clone () from /lib64/libc.so.6

---Type <return> to continue, or q <return> to quit---
Thread 30 (Thread 0x3220d2f6700 (LWP 5054)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b01b009 in ?? ()
#3  0x0000005a3b014200 in ?? ()
#4  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#5  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 29 (Thread 0x32210c3a700 (LWP 5196)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b01baa5 in ?? ()
#3  0x0000005a3b01bcb7 in ?? ()
#4  0x0000005a3b014200 in ?? ()
#5  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#6  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 28 (Thread 0x3220a997700 (LWP 5060)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b00f561 in ?? ()
#2  0x0000005a3b00f638 in ?? ()
#3  0x0000005a3afee3dd in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 27 (Thread 0x32210073700 (LWP 5048)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
---Type <return> to continue, or q <return> to quit---
#1  0x0000005a3b00f561 in ?? ()
#2  0x0000005a3b00f638 in ?? ()
#3  0x0000005a3afee3dd in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 26 (Thread 0x3220e69a700 (LWP 5052)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b00f561 in ?? ()
#2  0x0000005a3b00f638 in ?? ()
#3  0x0000005a3afee3dd in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 25 (Thread 0x3220a076700 (LWP 5086)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b00f561 in ?? ()
#2  0x0000005a3b00f638 in ?? ()
#3  0x0000005a3afee3dd in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
---Type <return> to continue, or q <return> to quit---
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 24 (Thread 0x3220bd06700 (LWP 5056)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b00f601 in ?? ()
#3  0x0000005a3afee419 in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 23 (Thread 0x322146bf700 (LWP 5040)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b00f561 in ?? ()
#2  0x0000005a3b00f638 in ?? ()
#3  0x0000005a3afee3dd in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3ccf7367 in ?? ()
#7  0x0000005a3ccf76cb in ?? ()
#8  0x0000005a3b0184f5 in ?? ()
#9  0x0000005a3b014200 in ?? ()
#10 0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#11 0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 22 (Thread 0x3220cad8700 (LWP 5055)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
---Type <return> to continue, or q <return> to quit---
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b016f88 in ?? ()
#3  0x0000005a3b017761 in ?? ()
#4  0x0000005a3b018133 in ?? ()
#5  0x0000005a3b014200 in ?? ()
#6  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#7  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 21 (Thread 0x32214ed5700 (LWP 5039)):
#0  0x000003222888f563 in epoll_wait () from /lib64/libc.so.6
#1  0x0000032230bca543 in ?? () from /usr/lib64/libevent-2.0.so.5
#2  0x0000032230bb1231 in event_base_loop () from /usr/lib64/libevent-2.0.so.5
#3  0x0000005a3afb1bd8 in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3ccf72c7 in ?? ()
#7  0x0000005a3ccf76bb in ?? ()
#8  0x0000005a3b0184f5 in ?? ()
#9  0x0000005a3b014200 in ?? ()
#10 0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#11 0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 20 (Thread 0x32215731700 (LWP 5038)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b00f601 in ?? ()
#3  0x0000005a3afee419 in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3ccf7227 in ?? ()
#7  0x0000005a3ccf76ab in ?? ()
---Type <return> to continue, or q <return> to quit---
#8  0x0000005a3b0184f5 in ?? ()
#9  0x0000005a3b014200 in ?? ()
#10 0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#11 0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 19 (Thread 0x32213e08700 (LWP 5041)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b00f561 in ?? ()
#2  0x0000005a3b00f638 in ?? ()
#3  0x0000005a3afee3dd in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3ccf7407 in ?? ()
#7  0x0000005a3ccf76db in ?? ()
#8  0x0000005a3b0184f5 in ?? ()
#9  0x0000005a3b014200 in ?? ()
#10 0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#11 0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 18 (Thread 0x32215f43700 (LWP 5037)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b016f88 in ?? ()
#3  0x0000005a3b017761 in ?? ()
#4  0x0000005a3b018133 in ?? ()
#5  0x0000005a3b014200 in ?? ()
#6  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#7  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 17 (Thread 0x32216dac700 (LWP 5036)):
#0  0x000003222ac23e2d in read () from /lib64/libpthread.so.0
---Type <return> to continue, or q <return> to quit---
#1  0x0000005a3ac10458 in ?? ()
#2  0x0000005a3b014200 in ?? ()
#3  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#4  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 16 (Thread 0x3222040c700 (LWP 5025)):
#0  0x00000322288843dd in poll () from /lib64/libc.so.6
#1  0x0000005a3cdf460a in ?? ()
#2  0x0000005a3b017fb5 in ?? ()
#3  0x0000005a3b018133 in ?? ()
#4  0x0000005a3b014200 in ?? ()
#5  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#6  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 15 (Thread 0x3221b69b700 (LWP 5035)):
#0  0x00000322288843dd in poll () from /lib64/libc.so.6
#1  0x000003221cfb7db4 in ?? () from /usr/lib64/libpulse.so.0
#2  0x000003221cfa75ce in pa_mainloop_poll () from /usr/lib64/libpulse.so.0
#3  0x000003221cfa7ce1 in pa_mainloop_iterate () from /usr/lib64/libpulse.so.0
#4  0x000003221cfa7dc0 in pa_mainloop_run () from /usr/lib64/libpulse.so.0
#5  0x000003221cfb7d2a in ?? () from /usr/lib64/libpulse.so.0
#6  0x000003221cd5984c in ?? () from /usr/lib64/pulseaudio/libpulsecommon-5.0.so
#7  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#8  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 14 (Thread 0x3221d9d2700 (LWP 5034)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b00f561 in ?? ()
#2  0x0000005a3b00f638 in ?? ()
#3  0x0000005a3afee3dd in ?? ()
#4  0x0000005a3b001054 in ?? ()
---Type <return> to continue, or q <return> to quit---
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 13 (Thread 0x32208ed5700 (LWP 5102)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b0170b9 in ?? ()
#2  0x0000005a3b017761 in ?? ()
#3  0x0000005a3b018133 in ?? ()
#4  0x0000005a3b014200 in ?? ()
#5  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#6  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 12 (Thread 0x3220f7b4700 (LWP 5049)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b00f561 in ?? ()
#2  0x0000005a3b00f638 in ?? ()
#3  0x0000005a3afee3dd in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 11 (Thread 0x3220ef8c700 (LWP 5051)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b00f561 in ?? ()
#2  0x0000005a3b00f638 in ?? ()
---Type <return> to continue, or q <return> to quit---
#3  0x0000005a3afee3dd in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 10 (Thread 0x3221da63700 (LWP 5033)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b01baa5 in ?? ()
#3  0x0000005a3b01bcb7 in ?? ()
#4  0x0000005a3b014200 in ?? ()
#5  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#6  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 9 (Thread 0x3220582b700 (LWP 5160)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b0170b9 in ?? ()
#2  0x0000005a3b017761 in ?? ()
#3  0x0000005a3b018133 in ?? ()
#4  0x0000005a3b014200 in ?? ()
#5  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#6  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 8 (Thread 0x3220dcb1700 (LWP 5053)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b7f5838 in ?? ()
#2  0x0000005a3b7e876b in ?? ()
#3  0x0000005a3b7e89eb in ?? ()
---Type <return> to continue, or q <return> to quit---
#4  0x0000005a3b7eaf5e in ?? ()
#5  0x0000005a3e63c828 in ?? ()
#6  0x0000005a3e63cdfe in ?? ()
#7  0x0000005a3e63cf2b in ?? ()
#8  0x0000005a3b001054 in ?? ()
#9  0x0000005a3afe946c in ?? ()
#10 0x0000005a3b0184f5 in ?? ()
#11 0x0000005a3b014200 in ?? ()
#12 0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#13 0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 7 (Thread 0x32202d28700 (LWP 5373)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b00f561 in ?? ()
#2  0x0000005a3b00f638 in ?? ()
#3  0x0000005a3afee3dd in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 6 (Thread 0x3221e2e6700 (LWP 5031)):
#0  0x0000032228886e53 in select () from /lib64/libc.so.6
#1  0x0000005a3afd620f in ?? ()
#2  0x0000005a3b02eabe in ?? ()
#3  0x0000005a3afea628 in ?? ()
#4  0x0000005a3afea9d1 in ?? ()
#5  0x0000005a3afede8d in ?? ()
#6  0x0000005a3afee399 in ?? ()
---Type <return> to continue, or q <return> to quit---
#7  0x0000005a3b001054 in ?? ()
#8  0x0000005a3afe946c in ?? ()
#9  0x0000005a3b0184f5 in ?? ()
#10 0x0000005a3b014200 in ?? ()
#11 0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#12 0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 5 (Thread 0x3221da3c700 (LWP 5032)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b01baa5 in ?? ()
#3  0x0000005a3b01bcb7 in ?? ()
#4  0x0000005a3b014200 in ?? ()
#5  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#6  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 4 (Thread 0x32204f6b700 (LWP 5161)):
#0  0x000003222ac2096c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b0170b9 in ?? ()
#2  0x0000005a3b017761 in ?? ()
#3  0x0000005a3b018133 in ?? ()
#4  0x0000005a3b014200 in ?? ()
#5  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#6  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 3 (Thread 0x3221143c700 (LWP 5045)):
#0  0x000003222ac20d3e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x0000005a3b034a74 in ?? ()
#2  0x0000005a3b00f601 in ?? ()
#3  0x0000005a3afee419 in ?? ()
#4  0x0000005a3b001054 in ?? ()
---Type <return> to continue, or q <return> to quit---
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 2 (Thread 0x3221eb26700 (LWP 5030)):
#0  0x000003222888f563 in epoll_wait () from /lib64/libc.so.6
#1  0x0000032230bca543 in ?? () from /usr/lib64/libevent-2.0.so.5
#2  0x0000032230bb1231 in event_base_loop () from /usr/lib64/libevent-2.0.so.5
#3  0x0000005a3afb1b39 in ?? ()
#4  0x0000005a3b001054 in ?? ()
#5  0x0000005a3afe946c in ?? ()
#6  0x0000005a3b0184f5 in ?? ()
#7  0x0000005a3b014200 in ?? ()
#8  0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#9  0x000003222888ee0d in clone () from /lib64/libc.so.6

Thread 1 (Thread 0x32212d3d700 (LWP 5043)):
#0  0x000003222f5b62d5 in ?? () from /lib64/libz.so.1
#1  0x000003222f5b8493 in inflate () from /lib64/libz.so.1
#2  0x0000005a3b1d65b3 in ?? ()
#3  0x0000005a3b1d66b9 in ?? ()
#4  0x0000005a3b1d54f7 in ?? ()
#5  0x0000005a3b18df63 in ?? ()
#6  0x0000005a3b18e1d8 in ?? ()
#7  0x0000005a3b25c2c5 in ?? ()
#8  0x0000005a3b0ed32a in ?? ()
#9  0x0000005a3b0ed379 in ?? ()
#10 0x0000005a3b0f2e9a in ?? ()
#11 0x0000005a3b277646 in ?? ()
---Type <return> to continue, or q <return> to quit---
#12 0x0000005a3b27959c in ?? ()
#13 0x0000005a3b02eabe in ?? ()
#14 0x0000005a3afea628 in ?? ()
#15 0x0000005a3afea9d1 in ?? ()
#16 0x0000005a3afede8d in ?? ()
#17 0x0000005a3afb1ad1 in ?? ()
#18 0x0000005a3b001054 in ?? ()
#19 0x0000005a3afe946c in ?? ()
#20 0x0000005a3ccf7547 in ?? ()
#21 0x0000005a3ccf768b in ?? ()
#22 0x0000005a3b0184f5 in ?? ()
#23 0x0000005a3b014200 in ?? ()
#24 0x000003222ac1c30d in start_thread () from /lib64/libpthread.so.0
#25 0x000003222888ee0d in clone () from /lib64/libc.so.6
(gdb)
(gdb) info registers
rax            0x4ea5   20133
rbx            0x3220929604e    3444717477966
rcx            0x7      7
rdx            0xf      15
rsi            0x1      1
rdi            0x9      9
rbp            0x32212d3c090    0x32212d3c090
rsp            0x32212d3bff0    0x32212d3bff0
r8             0x322014c7fff    3444585562111
r9             0x32209427550    3444719121744
r10            0x32209427000    3444719120384
r11            0x7      7
r12            0x0      0
r13            0x0      0
r14            0x3220b42fa10    3444752710160
r15            0x32209427da0    3444719123872
rip            0x3222f5b62d5    0x3222f5b62d5
eflags         0x10246  [ PF ZF IF RF ]
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0
(gdb) x/8i $pc
=> 0x3222f5b62d5:       mov    %dil,0x1(%r8)
   0x3222f5b62d9:       add    $0x1,%r8
   0x3222f5b62dd:       cmp    -0x50(%rbp),%r8
   0x3222f5b62e1:       jae    0x3222f5b62ed
   0x3222f5b62e3:       cmp    -0x48(%rbp),%rbx
   0x3222f5b62e7:       jb     0x3222f5b6257
   0x3222f5b62ed:       mov    %r14,%rdi
   0x3222f5b62f0:       jmpq   0x3222f5b6492
(gdb) x/8a $sp
0x32212d3bff0:  0x3f0000003f    0x52ffffffff
0x32212d3c000:  0x0     0x100000000
0x32212d3c010:  0x0     0xffffffffffffffff
0x32212d3c020:  0x0     0x322014c7fff
(gdb)


Kernel log:

Code: Select all

Oct 13 00:20:03 blue kernel: [ 1411.252074] PAX: execution attempt in: <anonymous mapping>, 338b97e6000-338b99e0000 338b97e6000
Oct 13 00:20:03 blue kernel: [ 1411.252077] PAX: terminating task: /usr/bin/gdb(gdb):5250, uid/euid: 1000/1000, PC: 00000338b97e6000, SP: 000003d0e651e870
Oct 13 00:20:03 blue kernel: [ 1411.252079] PAX: bytes at PC: cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Oct 13 00:20:03 blue kernel: [ 1411.252085] PAX: bytes at SP-8: 00000338b97e6000 000003d00000147f b797733867bb4600 0000000000000000 000000288c5dd000 000000288bfb3ac0 000000000000147f 0000002890085f80 000000288fe45fe0 000003d0e651e930 000000288be22b96
Oct 13 00:20:03 blue kernel: [ 1411.252095] grsec: bruteforce prevention initiated for the next 30 minutes or until service restarted, stalling each fork 30 seconds.  Please investigate the crash report for /usr/bin/gdb[gdb:5250] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/gdb[gdb:5244] uid/euid:1000/1000 gid/egid:1000/1000
Oct 13 00:20:06 blue kernel: [ 1413.645869] grsec: Invalid alignment/Bus error occurred at 0000031927ca5000 in /usr/lib64/chromium-browser/chrome[CompositorRaste:5255] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/gdb[gdb:5244] uid/euid:1000/1000 gid/egid:1000/1000
Oct 13 00:20:06 blue kernel: [ 1413.906600] grsec: Invalid alignment/Bus error occurred at 00000322014c8000 in /usr/lib64/chromium-browser/chrome[Chrome_IOThread:5043] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:3167] uid/euid:1000/1000 gid/egid:1000/1000


Regards
Miroslav

[PaX Team]

this looks like a buffer overflow in zlib and you get a sigbus when the write reaches the end of some mapping (or at least a mapping that can't handle the page fault). you should recompile your system with debug info (FEATURES=splitdebug) to get better backtraces.

[Miroslav]

Hi,
please see backtrace.

Code: Select all

miro@blue ~ $ gdb
GNU gdb (Gentoo 7.8 vanilla) 7.8
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-pc-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://bugs.gentoo.org/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word".
(gdb) file /usr/lib64/chromium-browser/chrome
Reading symbols from /usr/lib64/chromium-browser/chrome...Reading symbols from /usr/lib64/debug//usr/lib64/chromium-browser/chrome.debug...done.
done.
(gdb) core-file /home/miro/core
[New LWP 4010]
[New LWP 4003]
[New LWP 4008]
[New LWP 4020]
[New LWP 4023]
[New LWP 4030]
[New LWP 4058]
[New LWP 4018]
[New LWP 3996]
[New LWP 3999]
[New LWP 4012]
[New LWP 4001]
[New LWP 4037]
[New LWP 4019]
[New LWP 3997]
[New LWP 4016]
[New LWP 3998]
[New LWP 4000]
[New LWP 3992]
[New LWP 4159]
[New LWP 4011]
[New LWP 4303]
[New LWP 4006]
[New LWP 4021]
[New LWP 4022]
[New LWP 4015]
[New LWP 4002]
[New LWP 4129]
[New LWP 4133]
[New LWP 4007]
[New LWP 4130]
[New LWP 4013]
[New LWP 4005]
[New LWP 4004]
[New LWP 4009]
[New LWP 3990]
warning: Could not load shared library symbols for linux-vdso.so.1.
Do you need "set solib-search-path" or "set sysroot"?
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/lib64/chromium-browser/chrome --extra-plugin-dir=/usr/lib64/nsbrowser/plug'.
Program terminated with signal SIGBUS, Bus error.
#0  inflate_fast (strm=strm@entry=0x32b0e996770, start=start@entry=32768) at inffast.c:137
137     inffast.c: No such file or directory.
(gdb) thread apply all bt

Thread 36 (Thread 0x32b38838900 (LWP 3990)):
#0  0x0000032b2f75c3dd in poll () at ../sysdeps/unix/syscall-template.S:81
#1  0x0000032b37d204e5 in g_main_context_poll (priority=2147483647, n_fds=4, fds=0x32b27945840, timeout=27,
    context=0x32b386dea80) at /var/tmp/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/glib/gmain.c:4028
#2  g_main_context_iterate (context=context@entry=0x32b386dea80, block=block@entry=1, dispatch=dispatch@entry=1,
    self=<optimized out>) at /var/tmp/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/glib/gmain.c:3729
#3  0x0000032b37d20661 in g_main_context_iteration (context=0x32b386dea80, may_block=1)
    at /var/tmp/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/glib/gmain.c:3795
#4  0x00000012c41009c7 in base::MessagePumpGlib::Run(base::MessagePump::Delegate*) ()
#5  0x00000012c40da264 in base::RunLoop::Run() ()
#6  0x00000012c3d49101 in ChromeBrowserMainParts::MainMessageLoopRun(int*) ()
#7  0x00000012c5dca75b in content::BrowserMainLoop::RunMainMessageLoopParts() ()
#8  0x00000012c5dccf84 in content::BrowserMainRunnerImpl::Run() ()
#9  0x00000012c5dc60e9 in content::BrowserMain(content::MainFunctionParams const&) ()
#10 0x00000012c406a5b7 in content::ContentMainRunnerImpl::Run() ()
#11 0x00000012c4068a59 in content::ContentMain(content::ContentMainParams const&) ()
#12 0x00000012c3a56eab in ChromeMain ()
#13 0x0000032b2f6911bb in __libc_start_main (main=0x12c3a56850 <main>, argc=6, argv=0x3d87eaddf98, init=<optimized out>,
    fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x3d87eaddf88) at libc-start.c:292
#14 0x00000012c3a56d29 in _start ()

Thread 35 (Thread 0x32b1a338700 (LWP 4009)):
#0  0x0000032b2f767563 in epoll_wait () at ../sysdeps/unix/syscall-template.S:81
#1  0x0000032b37aa0543 in epoll_dispatch (base=0x32b27662280, tv=<optimized out>)
    at /var/tmp/portage/dev-libs/libevent-2.0.21-r1/work/libevent-2.0.21-stable/epoll.c:407
#2  0x0000032b37a87231 in event_base_loop (base=0x32b27662280, flags=1)
    at /var/tmp/portage/dev-libs/libevent-2.0.21-r1/work/libevent-2.0.21-stable/event.c:1607
#3  0x00000012c408ade8 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c5dd06b7 in content::BrowserThreadImpl::CacheThreadRun(base::MessageLoop*) ()
#7  0x00000012c5dd08fb in content::BrowserThreadImpl::Run(base::MessageLoop*) ()
#8  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#9  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#10 0x0000032b31af330d in start_thread (arg=0x32b1a338700) at pthread_create.c:309
#11 0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 34 (Thread 0x32b1cd5f700 (LWP 4004)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
#1  0x00000012c410dc84 in base::ConditionVariable::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40f0198 in base::SequencedWorkerPool::Inner::ThreadLoop(base::SequencedWorkerPool::Worker*) ()
#3  0x00000012c40f0971 in base::SequencedWorkerPool::Worker::Run() ()
#4  0x00000012c40f1343 in base::SimpleThread::ThreadMain() ()
#5  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#6  0x0000032b31af330d in start_thread (arg=0x32b1cd5f700) at pthread_create.c:309
#7  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 33 (Thread 0x32b1c4a5700 (LWP 4005)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
#1  0x00000012c410dc84 in base::ConditionVariable::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8811 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#3  0x00000012c40c7629 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c5dd0437 in content::BrowserThreadImpl::DBThreadRun(base::MessageLoop*) ()
#7  0x00000012c5dd08bb in content::BrowserThreadImpl::Run(base::MessageLoop*) ()
#8  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#9  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#10 0x0000032b31af330d in start_thread (arg=0x32b1c4a5700) at pthread_create.c:309
#11 0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 32 (Thread 0x32b17af9700 (LWP 4013)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
#1  0x00000012c410dc84 in base::ConditionVariable::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40f0198 in base::SequencedWorkerPool::Inner::ThreadLoop(base::SequencedWorkerPool::Worker*) ()
#3  0x00000012c40f0971 in base::SequencedWorkerPool::Worker::Run() ()
#4  0x00000012c40f1343 in base::SimpleThread::ThreadMain() ()
#5  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#6  0x0000032b31af330d in start_thread (arg=0x32b17af9700) at pthread_create.c:309
#7  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 31 (Thread 0x32b0c676700 (LWP 4130)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40f02c9 in base::SequencedWorkerPool::Inner::ThreadLoop(base::SequencedWorkerPool::Worker*) ()
#2  0x00000012c40f0971 in base::SequencedWorkerPool::Worker::Run() ()
#3  0x00000012c40f1343 in base::SimpleThread::ThreadMain() ()
#4  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#5  0x0000032b31af330d in start_thread (arg=0x32b0c676700) at pthread_create.c:309
#6  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 30 (Thread 0x32b1b417700 (LWP 4007)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40e8771 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8848 in base::WaitableEvent::Wait() ()
#3  0x00000012c40c75ed in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c5dd0577 in content::BrowserThreadImpl::FileUserBlockingThreadRun(base::MessageLoop*) ()
#7  0x00000012c5dd08db in content::BrowserThreadImpl::Run(base::MessageLoop*) ()
#8  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#9  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#10 0x0000032b31af330d in start_thread (arg=0x32b1b417700) at pthread_create.c:309
#11 0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 29 (Thread 0x32b0b97d700 (LWP 4133)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40f02c9 in base::SequencedWorkerPool::Inner::ThreadLoop(base::SequencedWorkerPool::Worker*) ()
#2  0x00000012c40f0971 in base::SequencedWorkerPool::Worker::Run() ()
#3  0x00000012c40f1343 in base::SimpleThread::ThreadMain() ()
#4  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#5  0x0000032b31af330d in start_thread (arg=0x32b0b97d700) at pthread_create.c:309
#6  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 28 (Thread 0x32b0cf29700 (LWP 4129)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40f02c9 in base::SequencedWorkerPool::Inner::ThreadLoop(base::SequencedWorkerPool::Worker*) ()
#2  0x00000012c40f0971 in base::SequencedWorkerPool::Worker::Run() ()
#3  0x00000012c40f1343 in base::SimpleThread::ThreadMain() ()
#4  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#5  0x0000032b31af330d in start_thread (arg=0x32b0cf29700) at pthread_create.c:309
#6  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 27 (Thread 0x32b223c9700 (LWP 4002)):
#0  0x0000032b2f75c3dd in poll () at ../sysdeps/unix/syscall-template.S:81
#1  0x0000032b23ccddb4 in poll (__timeout=-1, __nfds=2, __fds=0x32b2769ea20) at /usr/include/bits/poll2.h:46
#2  poll_func (ufds=0x32b2769ea20, nfds=2, timeout=-1, userdata=0x32b27685e70)
    at /var/tmp/portage/media-sound/pulseaudio-5.0-r2/work/pulseaudio-5.0/src/pulse/thread-mainloop.c:71
#3  0x0000032b23cbd5ce in pa_mainloop_poll (m=m@entry=0x32b2767c700)
    at /var/tmp/portage/media-sound/pulseaudio-5.0-r2/work/pulseaudio-5.0/src/pulse/mainloop.c:851
#4  0x0000032b23cbdce1 in pa_mainloop_iterate (m=m@entry=0x32b2767c700, block=block@entry=1, retval=retval@entry=0x0)
    at /var/tmp/portage/media-sound/pulseaudio-5.0-r2/work/pulseaudio-5.0/src/pulse/mainloop.c:933
#5  0x0000032b23cbddc0 in pa_mainloop_run (m=0x32b2767c700, retval=retval@entry=0x0)
    at /var/tmp/portage/media-sound/pulseaudio-5.0-r2/work/pulseaudio-5.0/src/pulse/mainloop.c:951
#6  0x0000032b23ccdd2a in thread (userdata=0x32b27617d00)
    at /var/tmp/portage/media-sound/pulseaudio-5.0-r2/work/pulseaudio-5.0/src/pulse/thread-mainloop.c:90
#7  0x0000032b23a6f84c in internal_thread_func (userdata=0x32b27685de0)
    at /var/tmp/portage/media-sound/pulseaudio-5.0-r2/work/pulseaudio-5.0/src/pulsecore/thread-posix.c:83
#8  0x0000032b31af330d in start_thread (arg=0x32b223c9700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 26 (Thread 0x32b16f7d700 (LWP 4015)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40e8771 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8848 in base::WaitableEvent::Wait() ()
#3  0x00000012c40c75ed in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b16f7d700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 25 (Thread 0x32b13a68700 (LWP 4022)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
#1  0x00000012c410dc84 in base::ConditionVariable::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40f0198 in base::SequencedWorkerPool::Inner::ThreadLoop(base::SequencedWorkerPool::Worker*) ()
#3  0x00000012c40f0971 in base::SequencedWorkerPool::Worker::Run() ()
#4  0x00000012c40f1343 in base::SimpleThread::ThreadMain() ()
#5  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#6  0x0000032b31af330d in start_thread (arg=0x32b13a68700) at pthread_create.c:309
#7  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 24 (Thread 0x32b143bd700 (LWP 4021)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
#1  0x00000012c410dc84 in base::ConditionVariable::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40f4219 in base::Watchdog::ThreadDelegate::ThreadMain() ()
#3  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#4  0x0000032b31af330d in start_thread (arg=0x32b143bd700) at pthread_create.c:309
#5  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 23 (Thread 0x32b1bc46700 (LWP 4006)):
#0  0x0000032b2f767563 in epoll_wait () at ../sysdeps/unix/syscall-template.S:81
#1  0x0000032b37aa0543 in epoll_dispatch (base=0x32b27662500, tv=<optimized out>)
    at /var/tmp/portage/dev-libs/libevent-2.0.21-r1/work/libevent-2.0.21-stable/epoll.c:407
#2  0x0000032b37a87231 in event_base_loop (base=0x32b27662500, flags=1)
    at /var/tmp/portage/dev-libs/libevent-2.0.21-r1/work/libevent-2.0.21-stable/event.c:1607
#3  0x00000012c408ade8 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c5dd04d7 in content::BrowserThreadImpl::FileThreadRun(base::MessageLoop*) ()
#7  0x00000012c5dd08cb in content::BrowserThreadImpl::Run(base::MessageLoop*) ()
#8  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#9  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#10 0x0000032b31af330d in start_thread (arg=0x32b1bc46700) at pthread_create.c:309
#11 0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 22 (Thread 0x32b08a1c700 (LWP 4303)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40e8771 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8848 in base::WaitableEvent::Wait() ()
#3  0x00000012c40c75ed in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b08a1c700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 21 (Thread 0x32b192f7700 (LWP 4011)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
#1  0x00000012c410dc84 in base::ConditionVariable::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8811 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#3  0x00000012c40c7629 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b192f7700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 20 (Thread 0x32b0acfb700 (LWP 4159)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c5d64860 in leveldb_env::ChromiumEnv::BGThread() ()
#2  0x00000012c5d64a8c in leveldb_env::ChromiumEnv::BGThreadWrapper(void*) ()
#3  0x00000012c5d61ef2 in leveldb_env::Thread::ThreadMain() ()
#4  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#5  0x0000032b31af330d in start_thread (arg=0x32b0acfb700) at pthread_create.c:309
#6  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 19 (Thread 0x32b2731e700 (LWP 3992)):
#0  0x0000032b2f75c3dd in poll () at ../sysdeps/unix/syscall-template.S:81
#1  0x00000012c5ecd81a in content::SandboxIPCHandler::Run() ()
#2  0x00000012c40f11c5 in base::DelegateSimpleThread::Run() ()
#3  0x00000012c40f1343 in base::SimpleThread::ThreadMain() ()
#4  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#5  0x0000032b31af330d in start_thread (arg=0x32b2731e700) at pthread_create.c:309
#6  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 18 (Thread 0x32b24808700 (LWP 4000)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
#1  0x00000012c410dc84 in base::ConditionVariable::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40f4cb5 in base::PosixDynamicThreadPool::WaitForTask() ()
#3  0x00000012c40f4ec7 in base::(anonymous namespace)::WorkerThread::ThreadMain() ()
#4  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#5  0x0000032b31af330d in start_thread (arg=0x32b24808700) at pthread_create.c:309
#6  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 17 (Thread 0x32b25191700 (LWP 3998)):
#0  0x0000032b2f75ee53 in select () at ../sysdeps/unix/syscall-template.S:81
#1  0x00000012c40af41f in base::(anonymous namespace)::InotifyReaderCallback(base::(anonymous namespace)::InotifyReader*, int, int) ()
#2  0x00000012c4107cce in base::debug::TaskAnnotator::RunTask(char const*, char const*, base::PendingTask const&) ()
#3  0x00000012c40c3838 in base::MessageLoop::RunTask(base::PendingTask const&) ()
#4  0x00000012c40c3be1 in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask const&) ()
#5  0x00000012c40c709d in base::MessageLoop::DoWork() ()
#6  0x00000012c40c75a9 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#7  0x00000012c40da264 in base::RunLoop::Run() ()
#8  0x00000012c40c267c in base::MessageLoop::Run() ()
#9  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#10 0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#11 0x0000032b31af330d in start_thread (arg=0x32b25191700) at pthread_create.c:309
#12 0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 16 (Thread 0x32b166d5700 (LWP 4016)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40e8771 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8848 in base::WaitableEvent::Wait() ()
#3  0x00000012c40c75ed in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b166d5700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 15 (Thread 0x32b259d2700 (LWP 3997)):
#0  0x0000032b2f767563 in epoll_wait () at ../sysdeps/unix/syscall-template.S:81
#1  0x0000032b37aa0543 in epoll_dispatch (base=0x32b27662a00, tv=<optimized out>)
    at /var/tmp/portage/dev-libs/libevent-2.0.21-r1/work/libevent-2.0.21-stable/epoll.c:407
#2  0x0000032b37a87231 in event_base_loop (base=0x32b27662a00, flags=1)
    at /var/tmp/portage/dev-libs/libevent-2.0.21-r1/work/libevent-2.0.21-stable/event.c:1607
#3  0x00000012c408ad49 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b259d2700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 14 (Thread 0x32b15624700 (LWP 4019)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40e8771 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8848 in base::WaitableEvent::Wait() ()
#3  0x00000012c40c75ed in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b15624700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 13 (Thread 0x32b10dd4700 (LWP 4037)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40e8771 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8848 in base::WaitableEvent::Wait() ()
#3  0x00000012c40c75ed in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b10dd4700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 12 (Thread 0x32b246e8700 (LWP 4001)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40e8771 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8848 in base::WaitableEvent::Wait() ()
#3  0x00000012c40c75ed in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b246e8700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 11 (Thread 0x32b1830a700 (LWP 4012)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
#1  0x00000012c410dc84 in base::ConditionVariable::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8811 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#3  0x00000012c40c7629 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b1830a700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 10 (Thread 0x32b248d6700 (LWP 3999)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
#1  0x00000012c410dc84 in base::ConditionVariable::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40f4cb5 in base::PosixDynamicThreadPool::WaitForTask() ()
#3  0x00000012c40f4ec7 in base::(anonymous namespace)::WorkerThread::ThreadMain() ()
#4  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#5  0x0000032b31af330d in start_thread (arg=0x32b248d6700) at pthread_create.c:309
#6  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 9 (Thread 0x32b264d7700 (LWP 3996)):
#0  0x0000032b2f75c3dd in poll () at ../sysdeps/unix/syscall-template.S:81
#1  0x0000032b37d204e5 in g_main_context_poll (priority=2147483647, n_fds=2, fds=0x32b275cd010, timeout=-1,
    context=0x32b386de9c0) at /var/tmp/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/glib/gmain.c:4028
#2  g_main_context_iterate (context=context@entry=0x32b386de9c0, block=block@entry=1, dispatch=dispatch@entry=1,
    self=<optimized out>) at /var/tmp/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/glib/gmain.c:3729
#3  0x0000032b37d20661 in g_main_context_iteration (context=0x32b386de9c0, may_block=may_block@entry=1)
    at /var/tmp/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/glib/gmain.c:3795
#4  0x0000032b37d206e1 in glib_worker_main (data=<optimized out>)
    at /var/tmp/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/glib/gmain.c:5541
#5  0x0000032b37d4f37b in g_thread_proxy (data=0x32b275b1c50)
    at /var/tmp/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/glib/gthread.c:764
#6  0x0000032b31af330d in start_thread (arg=0x32b264d7700) at pthread_create.c:309
#7  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 8 (Thread 0x32b15e48700 (LWP 4018)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c48cea48 in mojo::system::Waiter::Wait(unsigned long, unsigned int*) ()
#2  0x00000012c48c197b in mojo::system::Core::WaitManyInternal(unsigned int const*, unsigned int const*, unsigned int, unsigned long, unsigned int*, mojo::system::HandleSignalsState*) ()
#3  0x00000012c48c1bfb in mojo::system::Core::WaitMany(mojo::system::UserPointer<unsigned int const>, mojo::system::UserPointer<unsigned int const>, unsigned int, unsigned long, mojo::system::UserPointer<unsigned int>, mojo::system::UserPointer<MojoHandleSignalsState>) ()
#4  0x00000012c48c416e in MojoWaitMany ()
#5  0x00000012c7715a38 in mojo::common::MessagePumpMojo::DoInternalWork(mojo::common::MessagePumpMojo::RunState const&, bool) ()
#6  0x00000012c771600e in mojo::common::MessagePumpMojo::DoRunLoop(mojo::common::MessagePumpMojo::RunState*, base::MessagePump::Delegate*) ()
#7  0x00000012c771613b in mojo::common::MessagePumpMojo::Run(base::MessagePump::Delegate*) ()
#8  0x00000012c40da264 in base::RunLoop::Run() ()
#9  0x00000012c40c267c in base::MessageLoop::Run() ()
#10 0x00000012c40f1705 in base::Thread::ThreadMain() ()
#11 0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#12 0x0000032b31af330d in start_thread (arg=0x32b15e48700) at pthread_create.c:309
#13 0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 7 (Thread 0x32b0f3f5700 (LWP 4058)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40f02c9 in base::SequencedWorkerPool::Inner::ThreadLoop(base::SequencedWorkerPool::Worker*) ()
#2  0x00000012c40f0971 in base::SequencedWorkerPool::Worker::Run() ()
#3  0x00000012c40f1343 in base::SimpleThread::ThreadMain() ()
#4  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#5  0x0000032b31af330d in start_thread (arg=0x32b0f3f5700) at pthread_create.c:309
#6  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 6 (Thread 0x32b116d3700 (LWP 4030)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40e8771 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8848 in base::WaitableEvent::Wait() ()
#3  0x00000012c40c75ed in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b116d3700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 5 (Thread 0x32b12bb7700 (LWP 4023)):
#0  pthread_cond_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
#1  0x00000012c410dc84 in base::ConditionVariable::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8811 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#3  0x00000012c40c7629 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b12bb7700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 4 (Thread 0x32b14d66700 (LWP 4020)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40e8771 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8848 in base::WaitableEvent::Wait() ()
#3  0x00000012c40c75ed in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#7  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#8  0x0000032b31af330d in start_thread (arg=0x32b14d66700) at pthread_create.c:309
#9  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 3 (Thread 0x32b1abdd700 (LWP 4008)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00000012c40e8771 in base::WaitableEvent::TimedWait(base::TimeDelta const&) ()
#2  0x00000012c40e8848 in base::WaitableEvent::Wait() ()
#3  0x00000012c40c75ed in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ()
#4  0x00000012c40da264 in base::RunLoop::Run() ()
#5  0x00000012c40c267c in base::MessageLoop::Run() ()
#6  0x00000012c5dd0617 in content::BrowserThreadImpl::ProcessLauncherThreadRun(base::MessageLoop*) ()
#7  0x00000012c5dd08eb in content::BrowserThreadImpl::Run(base::MessageLoop*) ()
#8  0x00000012c40f1705 in base::Thread::ThreadMain() ()
#9  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#10 0x0000032b31af330d in start_thread (arg=0x32b1abdd700) at pthread_create.c:309
#11 0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 2 (Thread 0x32b2472b700 (LWP 4003)):
#0  0x0000032b31afae2d in read () at ../sysdeps/unix/syscall-template.S:81
#1  0x00000012c3ce9668 in (anonymous namespace)::ShutdownDetector::ThreadMain() ()
#2  0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#3  0x0000032b31af330d in start_thread (arg=0x32b2472b700) at pthread_create.c:309
#4  0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Thread 1 (Thread 0x32b19b1a700 (LWP 4010)):
#0  inflate_fast (strm=strm@entry=0x32b0e996770, start=start@entry=32768) at inffast.c:137
#1  0x0000032b3648f483 in inflate (strm=0x32b0e996770, flush=0) at inflate.c:1024
#2  0x00000012c42af7c3 in net::GZipFilter::DoInflate(char*, int*) ()
#3  0x00000012c42af8c9 in net::GZipFilter::ReadFilteredData(char*, int*) ()
#4  0x00000012c42ae707 in net::Filter::ReadData(char*, int*) ()
#5  0x00000012c4267173 in net::URLRequestJob::ReadFilteredData(int*) ()
#6  0x00000012c42673e8 in net::URLRequestJob::NotifyReadComplete(int) ()
#7  0x00000012c43354d5 in net::URLRequestHttpJob::OnReadCompleted(int) ()
#8  0x00000012c41c653a in net::HttpCache::Transaction::DoCallback(int) ()
#9  0x00000012c41c6589 in net::HttpCache::Transaction::HandleResult(int) ()
#10 0x00000012c41cc0aa in net::HttpCache::Transaction::DoLoop(int) ()
#11 0x00000012c4350856 in disk_cache::InFlightBackendIO::OnOperationComplete(disk_cache::BackgroundIO*, bool) ()
#12 0x00000012c43527ac in disk_cache::InFlightIO::InvokeCallback(disk_cache::BackgroundIO*, bool) ()
#13 0x00000012c4107cce in base::debug::TaskAnnotator::RunTask(char const*, char const*, base::PendingTask const&) ()
#14 0x00000012c40c3838 in base::MessageLoop::RunTask(base::PendingTask const&) ()
#15 0x00000012c40c3be1 in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask const&) ()
#16 0x00000012c40c709d in base::MessageLoop::DoWork() ()
#17 0x00000012c408ace1 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) ()
#18 0x00000012c40da264 in base::RunLoop::Run() ()
#19 0x00000012c40c267c in base::MessageLoop::Run() ()
#20 0x00000012c5dd0757 in content::BrowserThreadImpl::IOThreadRun(base::MessageLoop*) ()
#21 0x00000012c5dd089b in content::BrowserThreadImpl::Run(base::MessageLoop*) ()
#22 0x00000012c40f1705 in base::Thread::ThreadMain() ()
#23 0x00000012c40ed410 in base::(anonymous namespace)::ThreadFunc(void*) ()
#24 0x0000032b31af330d in start_thread (arg=0x32b19b1a700) at pthread_create.c:309
#25 0x0000032b2f766e0d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
(gdb) info registers
rax            0xe85    3717
rbx            0x32b0d16004e    3483438022734
rcx            0x7      7
rdx            0xe      14
rsi            0x1      1
rdi            0x9      9
rbp            0x32b19b19090    0x32b19b19090
rsp            0x32b19b18ff0    0x32b19b18ff0
r8             0x32b0c6a8fff    3483426787327
r9             0x32b0d28d550    3483439256912
r10            0x32b0d28d000    3483439255552
r11            0x7      7
r12            0x0      0
r13            0x0      0
r14            0x32b0e996770    3483463411568
r15            0x32b0d28dd98    3483439259032
rip            0x32b3648d2c5    0x32b3648d2c5 <inflate_fast+373>
eflags         0x10246  [ PF ZF IF RF ]
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0
(gdb) x/8i $pc
=> 0x32b3648d2c5 <inflate_fast+373>:    mov    %dil,0x1(%r8)
   0x32b3648d2c9 <inflate_fast+377>:    add    $0x1,%r8
   0x32b3648d2cd <inflate_fast+381>:    cmp    -0x50(%rbp),%r8
   0x32b3648d2d1 <inflate_fast+385>:    jae    0x32b3648d2dd <inflate_fast+397>
   0x32b3648d2d3 <inflate_fast+387>:    cmp    -0x48(%rbp),%rbx
   0x32b3648d2d7 <inflate_fast+391>:    jb     0x32b3648d247 <inflate_fast+247>
   0x32b3648d2dd <inflate_fast+397>:    mov    %r14,%rdi
   0x32b3648d2e0 <inflate_fast+400>:    jmpq   0x32b3648d482 <inflate_fast+818>
(gdb) x/8a $sp
0x32b19b18ff0:  0x3f0000003f    0x52ffffffff
0x32b19b19000:  0x0     0x100000000
0x32b19b19010:  0x0     0xffffffffffffffff
0x32b19b19020:  0x0     0x32b0c6a8fff
(gdb)


Kernel log:

Code: Select all

Oct 14 10:29:28 blue kernel: [71951.572853] PAX: execution attempt in: <anonymous mapping>, 28ae52e7000-28ae54e1000 28ae52e7000
Oct 14 10:29:28 blue kernel: [71951.572857] PAX: terminating task: /usr/bin/gdb(gdb):4190, uid/euid: 1000/1000, PC: 0000028ae52e7000, SP: 0000038996ae6020
Oct 14 10:29:28 blue kernel: [71951.572859] PAX: bytes at PC: cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Oct 14 10:29:28 blue kernel: [71951.572865] PAX: bytes at SP-8: 0000028ae52e7000 000003890000105b 16a8caa26e0f6b00 0000000000000000 0000003c53ca1000 0000003c53677ac0 000000000000105b 0000003c5b12de20 0000003c556822c0 0000038996ae60e0 0000003c534e6b96
Oct 14 10:29:28 blue kernel: [71951.572877] grsec: bruteforce prevention initiated for the next 30 minutes or until service restarted, stalling each fork 30 seconds.  Please investigate the crash report for /usr/bin/gdb[gdb:4190] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/gdb[gdb:4184] uid/euid:1000/1000 gid/egid:1000/1000
Oct 14 10:29:34 blue kernel: [71956.948118] grsec: Invalid alignment/Bus error occurred at 00000397ff547000 in /usr/lib64/chromium-browser/chrome[CompositorRaste:4195] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/gdb[gdb:4184] uid/euid:1000/1000 gid/egid:1000/1000
Oct 14 10:29:34 blue kernel: [71957.153564] grsec: Invalid alignment/Bus error occurred at 0000032b0c6a9000 in /usr/lib64/chromium-browser/chrome[Chrome_IOThread:4010] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash#new[bash:3189] uid/euid:1000/1000 gid/egid:1000/1000


When I disabled flash player plugin (Pepper Flash 15.0.0.152) problem with page http://www.hardwareheaven.com/2014/08/z ... -review/2/ disappear.

Regards
Miroslav