Date: Sat, 27 Jun 2026 18:32:41 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 295991] lib/libc posix_spawnp(): PATH-search child runs on an undersized rfork_thread stack and underflows into the caller's heap (heavily-linked processes; PHP proc_open) Message-ID: <bug-295991-227-u5tcKjKhXk@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-295991-227@https.bugs.freebsd.org/bugzilla/>
index | next in thread | previous in thread | raw e-mail
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295991 --- Comment #10 from Marek Zarychta <zarychtam@plan-b.pwste.edu.pl> --- Please hold on. This patch introduces problem in the jail running www/onlyoffice. A few backtraces from this jail are posted below. (lldb) target create "/ezjail/onlyoffice/usr/local/www/onlyoffice/documentserver/server/FileConverter/bin/x2t" --core "x2t.37483.core" bt Core file '/ezjail/onlyoffice/tmp/x2t.37483.core' (x86_64) was loaded. (lldb) bt * thread #1, name = 'V8 DefaultWorke', stop reason = signal SIGSEGV * frame #0: 0x00001c87c6981875 ld-elf.so.1 frame #1: 0x0000000000000408 frame #2: 0x00001c87c69818d2 ld-elf.so.1 frame #3: 0x00001c87c6984299 ld-elf.so.1 frame #4: 0x00001c87c697ae82 ld-elf.so.1 frame #5: 0x00001c87c697fd1b ld-elf.so.1 frame #6: 0x00001c87c697faf3 ld-elf.so.1 frame #7: 0x00001c87c6979146 ld-elf.so.1 frame #8: 0x00001c87c6978d05 ld-elf.so.1 frame #9: 0x00001c87c69789b6 ld-elf.so.1 frame #10: 0x00001c87c6973bad ld-elf.so.1`___lldb_unnamed_symbol_6b80 + 45 frame #11: 0x00000008342f0e99 libthr.so.3`___lldb_unnamed_symbol_10d40 + 345 (lldb) target create "/ezjail/onlyoffice/usr/local/lib/erlang27/erts-15.2.7.9/bin/beam.smp" --core "beam.smp.38994.core" Core file '/ezjail/onlyoffice/tmp/beam.smp.38994.core' (x86_64) was loaded. (lldb) bt * thread #1, name = 'erts_async_1', stop reason = signal SIGSEGV * frame #0: 0x00000b67fd895875 ld-elf.so.1 frame #1: 0x0000000000000078 frame #2: 0x00000b67fd8958d2 ld-elf.so.1 frame #3: 0x00000b67fd898299 ld-elf.so.1 frame #4: 0x00000b67fd88ee82 ld-elf.so.1 frame #5: 0x00000b67fd893d1b ld-elf.so.1 frame #6: 0x00000b67fd893af3 ld-elf.so.1 frame #7: 0x00000b67fd88d146 ld-elf.so.1 frame #8: 0x00000b67fd88cd05 ld-elf.so.1 frame #9: 0x00000b67fd88c9b6 ld-elf.so.1 frame #10: 0x00000b67fd887bad ld-elf.so.1`___lldb_unnamed_symbol_6b80 + 45 frame #11: 0x00000008262c9e99 libthr.so.3`___lldb_unnamed_symbol_10d40 + 345 (lldb) target create "/ezjail/onlyoffice/usr/local/lib/erlang27/erts-15.2.7.9/bin/beam.smp" --core "beam.smp.27430.core" Core file '/ezjail/onlyoffice/tmp/beam.smp.27430.core' (x86_64) was loaded. (lldb) bt * thread #1, name = 'erts_sched_32', stop reason = signal SIGSEGV * frame #0: 0x00000b7d3eab74d4 ld-elf.so.1 frame #1: 0x00000008876f0b80 frame #2: 0x00000b7d3eaab6a6 ld-elf.so.1 frame #3: 0x00000b7d3eaaace5 ld-elf.so.1 frame #4: 0x00000b7d3eaa77d2 ld-elf.so.1 frame #5: 0x000000089deec55b libcrypto.so.35`___lldb_unnamed_symbol_2ec520 + 59 frame #6: 0x000000089deecfa6 libcrypto.so.35`DSO_load + 374 frame #7: 0x000000089deed475 libcrypto.so.35`DSO_dsobyaddr + 133 frame #8: 0x000000089de31639 libcrypto.so.35`___lldb_unnamed_symbol_231600 + 57 frame #9: 0x0000000826c3f2f3 libthr.so.3`pthread_once + 179 frame #10: 0x000000089de24569 libcrypto.so.35`CRYPTO_THREAD_run_once + 9 frame #11: 0x000000089de311a9 libcrypto.so.35`OPENSSL_init_crypto + 377 frame #12: 0x000000089de367a0 libcrypto.so.35`___lldb_unnamed_symbol_2366e0 + 192 frame #13: 0x000000089de31b32 libcrypto.so.35`OSSL_PROVIDER_try_load_ex + 50 -- You are receiving this mail because: You are the assignee for the bug.home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-295991-227-u5tcKjKhXk>