GNOME Bugzilla – Bug 783856
invalid reads in write_command_cb
Last modified: 2018-09-21 18:06:31 UTC
It can be simply reproduced by mounting a non-existing volume, but happens regularly when traversing share by Nautilus also: ==28861== Invalid read of size 8 ==28861== at 0x40F654: write_command_cb (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x5F919D7: g_simple_async_result_complete (gsimpleasyncresult.c:801) ==28861== by 0x40F325: write_all_cb (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x5FAA99F: g_task_return_now (gtask.c:1145) ==28861== by 0x5FAAABB: g_task_return (gtask.c:1203) ==28861== by 0x5FAB71D: g_task_return_int (gtask.c:1658) ==28861== by 0x5F832D2: async_ready_write_callback_wrapper (goutputstream.c:752) ==28861== by 0x5FAA99F: g_task_return_now (gtask.c:1145) ==28861== by 0x5FAA9FC: complete_in_idle_cb (gtask.c:1159) ==28861== by 0x65982C1: g_idle_dispatch (gmain.c:5500) ==28861== by 0x6595878: g_main_dispatch (gmain.c:3148) ==28861== by 0x6596748: g_main_context_dispatch (gmain.c:3813) ==28861== Address 0x86bd318 is 40 bytes inside a block of size 48 free'd ==28861== at 0x4C2FD18: free (vg_replace_malloc.c:530) ==28861== by 0x659E02E: g_free (gmem.c:189) ==28861== by 0x65B8180: g_slice_free1 (gslice.c:1136) ==28861== by 0x40E42E: free_request_data (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x6581514: g_hash_table_remove_node (ghash.c:462) ==28861== by 0x65826FF: g_hash_table_remove_internal (ghash.c:1364) ==28861== by 0x658274B: g_hash_table_remove (ghash.c:1392) ==28861== by 0x40EC86: dispatch_reply (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x40F10C: read_dsi_header_cb (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x5F919D7: g_simple_async_result_complete (gsimpleasyncresult.c:801) ==28861== by 0x40E8FD: read_all_cb (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x5F7145B: async_ready_callback_wrapper (ginputstream.c:532) ==28861== Block was alloc'd at ==28861== at 0x4C2EB6B: malloc (vg_replace_malloc.c:299) ==28861== by 0x659DEC5: g_malloc (gmem.c:94) ==28861== by 0x65B7F44: g_slice_alloc (gslice.c:1025) ==28861== by 0x65B7F84: g_slice_alloc0 (gslice.c:1051) ==28861== by 0x40FD75: g_vfs_afp_connection_send_command (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x41031A: g_vfs_afp_connection_send_command_sync (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x41552D: g_vfs_afp_volume_mount_sync (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x414358: g_vfs_afp_server_mount_volume_sync (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x40B8AA: do_mount (in /opt/gnome/libexec/gvfsd-afp) ==28861== by 0x4E5065C: run (in /opt/gnome/lib/gvfs/libgvfsdaemon.so) ==28861== by 0x4E4F243: g_vfs_job_run (in /opt/gnome/lib/gvfs/libgvfsdaemon.so) ==28861== by 0x4E46D74: job_handler_callback (in /opt/gnome/lib/gvfs/libgvfsdaemon.so)
-- GitLab Migration Automatic Message -- This bug has been migrated to GNOME's GitLab instance and has been closed from further activity. You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.gnome.org/GNOME/gvfs/issues/299.