Bug 357781

Summary:	unhandled amd64-linux syscall: 317
Product:	[Developer tools] valgrind	Reporter:	Unknown <null>
Component:	memcheck	Assignee:	Julian Seward <jseward>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	tom
Priority:	NOR
Version First Reported In:	3.10.0
Target Milestone:	---
Platform:	Arch Linux
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Unknown 2016-01-10 08:55:23 UTC

Arch Linux: valgrind 3.11.0-1, firefox 43.0.4-1

$ valgrind firefox
==1533== Memcheck, a memory error detector
==1533== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==1533== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==1533== Command: firefox
==1533== 
--1533-- WARNING: unhandled amd64-linux syscall: 317
--1533-- You may be able to write your own handler.
--1533-- Read the file README_MISSING_SYSCALL_OR_IOCTL.
--1533-- Nevertheless we consider this a bug.  Please report
--1533-- it at http://valgrind.org/support/bug_reports.html.


Reproducible: Always

Steps to Reproduce:
1. valgrind firefox
2. valgrind --leak-check=full --show-leak-kinds=all firefox
3.

Actual Results:  
$ valgrind --leak-check=full --show-leak-kinds=all firefox
==1533== Memcheck, a memory error detector
==1533== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==1533== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==1533== Command: firefox
==1533== 
--1533-- WARNING: unhandled amd64-linux syscall: 317
--1533-- You may be able to write your own handler.
--1533-- Read the file README_MISSING_SYSCALL_OR_IOCTL.
--1533-- Nevertheless we consider this a bug.  Please report
--1533-- it at http://valgrind.org/support/bug_reports.html.
==1533== Invalid read of size 8
==1533==    at 0x120BE7: free (in /usr/lib/firefox/firefox)
==1533==    by 0x138E60D6: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3831C: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F38A: _dl_init (in /usr/lib/ld-2.22.so)
==1533==    by 0x401382F: dl_open_worker (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F123: _dl_catch_error (in /usr/lib/ld-2.22.so)
==1533==    by 0x4012FD0: _dl_open (in /usr/lib/ld-2.22.so)
==1533==    by 0x5051FC8: ??? (in /usr/lib/libdl-2.22.so)
==1533==  Address 0x6100000 is in a rwx anonymous segment
==1533== 
==1533== Invalid read of size 4
==1533==    at 0x120BEA: free (in /usr/lib/firefox/firefox)
==1533==    by 0x138E60D6: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3831C: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F38A: _dl_init (in /usr/lib/ld-2.22.so)
==1533==    by 0x401382F: dl_open_worker (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F123: _dl_catch_error (in /usr/lib/ld-2.22.so)
==1533==    by 0x4012FD0: _dl_open (in /usr/lib/ld-2.22.so)
==1533==    by 0x5051FC8: ??? (in /usr/lib/libdl-2.22.so)
==1533==  Address 0x3fffe0 is not stack'd, malloc'd or (recently) free'd
==1533== 
==1533== 
==1533== Process terminating with default action of signal 11 (SIGSEGV): dumping core
==1533==  Access not within mapped region at address 0x3FFFE0
==1533==    at 0x120BEA: free (in /usr/lib/firefox/firefox)
==1533==    by 0x138E60D6: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3831C: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F38A: _dl_init (in /usr/lib/ld-2.22.so)
==1533==    by 0x401382F: dl_open_worker (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F123: _dl_catch_error (in /usr/lib/ld-2.22.so)
==1533==    by 0x4012FD0: _dl_open (in /usr/lib/ld-2.22.so)
==1533==    by 0x5051FC8: ??? (in /usr/lib/libdl-2.22.so)
==1533==  If you believe this happened as a result of a stack
==1533==  overflow in your program's main thread (unlikely but
==1533==  possible), you can try to increase the size of the
==1533==  main thread stack using the --main-stacksize= flag.
==1533==  The main thread stack size used in this run was 8388608.
==1533== 
==1533== HEAP SUMMARY:
==1533==     in use at exit: 2,511 bytes in 75 blocks
==1533==   total heap usage: 75 allocs, 0 frees, 2,511 bytes allocated
==1533== 
==1533== 31 bytes in 1 blocks are still reachable in loss record 1 of 10
==1533==    at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1533==    by 0x5374858: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_mutate(unsigned long, unsigned long, char const*, unsigned long) (basic_string.tcc:321)
==1533==    by 0x5375057: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_replace_aux(unsigned long, unsigned long, unsigned long, char) (basic_string.tcc:414)
==1533==    by 0x138E82DC: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F391CD: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x138E3DC7: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3AE1D: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F38303: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533== 
==1533== 31 bytes in 1 blocks are still reachable in loss record 2 of 10
==1533==    at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1533==    by 0x5374858: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_mutate(unsigned long, unsigned long, char const*, unsigned long) (basic_string.tcc:321)
==1533==    by 0x5375057: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_replace_aux(unsigned long, unsigned long, unsigned long, char) (basic_string.tcc:414)
==1533==    by 0x138E82DC: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F39231: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x138E3DC7: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3AE1D: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F38303: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533== 
==1533== 32 bytes in 2 blocks are still reachable in loss record 3 of 10
==1533==    at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1533==    by 0x124CC0: ??? (in /usr/lib/firefox/firefox)
==1533==    by 0x124B20: ??? (in /usr/lib/firefox/firefox)
==1533==    by 0x119B8B: ??? (in /usr/lib/firefox/firefox)
==1533==    by 0x115FDD: ??? (in /usr/lib/firefox/firefox)
==1533==    by 0x5B0B60F: (below main) (in /usr/lib/libc-2.22.so)
==1533== 
==1533== 33 bytes in 1 blocks are still reachable in loss record 4 of 10
==1533==    at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1533==    by 0x5374858: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_mutate(unsigned long, unsigned long, char const*, unsigned long) (basic_string.tcc:321)
==1533==    by 0x5375057: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_replace_aux(unsigned long, unsigned long, unsigned long, char) (basic_string.tcc:414)
==1533==    by 0x138E82DC: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x138E3C94: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3AE1D: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F38303: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F38A: _dl_init (in /usr/lib/ld-2.22.so)
==1533== 
==1533== 33 bytes in 1 blocks are still reachable in loss record 5 of 10
==1533==    at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1533==    by 0x130335B8: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x138E60A2: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3831C: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F38A: _dl_init (in /usr/lib/ld-2.22.so)
==1533==    by 0x401382F: dl_open_worker (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F123: _dl_catch_error (in /usr/lib/ld-2.22.so)
==1533==    by 0x4012FD0: _dl_open (in /usr/lib/ld-2.22.so)
==1533== 
==1533== 33 bytes in 1 blocks are still reachable in loss record 6 of 10
==1533==    at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1533==    by 0x130335B8: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F39498: std::pair<std::_Rb_tree_iterator<std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, std::pair<void const*, int> > >, bool> std::_Rb_tree<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, std::pair<void const*, int> >, std::_Select1st<std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, std::pair<void const*, int> > >, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, std::pair<void const*, int> > > >::_M_insert_unique<std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, std::pair<void const*, int> > const&>(std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, std::pair<void const*, int> > const&) (in /usr/lib/firefox/libxul.so)
==1533==    by 0x138E60BD: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3831C: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F38A: _dl_init (in /usr/lib/ld-2.22.so)
==1533==    by 0x401382F: dl_open_worker (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F123: _dl_catch_error (in /usr/lib/ld-2.22.so)
==1533== 
==1533== 62 bytes in 2 blocks are still reachable in loss record 7 of 10
==1533==    at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1533==    by 0x5374858: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_mutate(unsigned long, unsigned long, char const*, unsigned long) (basic_string.tcc:321)
==1533==    by 0x5375057: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_replace_aux(unsigned long, unsigned long, unsigned long, char) (basic_string.tcc:414)
==1533==    by 0x138E82DC: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x1302C4D9: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x138E4C18: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3AE1D: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F38303: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533== 
==1533== 310 bytes in 10 blocks are still reachable in loss record 8 of 10
==1533==    at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1533==    by 0x5374858: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_mutate(unsigned long, unsigned long, char const*, unsigned long) (basic_string.tcc:321)
==1533==    by 0x5375057: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_replace_aux(unsigned long, unsigned long, unsigned long, char) (basic_string.tcc:414)
==1533==    by 0x138E82DC: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x138E3FD5: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3AE1D: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F38303: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F38A: _dl_init (in /usr/lib/ld-2.22.so)
==1533== 
==1533== 683 bytes in 22 blocks are still reachable in loss record 9 of 10
==1533==    at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1533==    by 0x5374858: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_mutate(unsigned long, unsigned long, char const*, unsigned long) (basic_string.tcc:321)
==1533==    by 0x5375057: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_replace_aux(unsigned long, unsigned long, unsigned long, char) (basic_string.tcc:414)
==1533==    by 0x138E82DC: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x138E4392: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3AE1D: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F38303: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F38A: _dl_init (in /usr/lib/ld-2.22.so)
==1533== 
==1533== 1,263 bytes in 34 blocks are still reachable in loss record 10 of 10
==1533==    at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==1533==    by 0x5374858: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_mutate(unsigned long, unsigned long, char const*, unsigned long) (basic_string.tcc:321)
==1533==    by 0x5375057: std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_replace_aux(unsigned long, unsigned long, unsigned long, char) (basic_string.tcc:414)
==1533==    by 0x138E82DC: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x138E4311: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F3AE1D: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F38303: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37EBE: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x13F37B4B: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x134CB230: ??? (in /usr/lib/firefox/libxul.so)
==1533==    by 0x400F279: call_init.part.0 (in /usr/lib/ld-2.22.so)
==1533==    by 0x400F38A: _dl_init (in /usr/lib/ld-2.22.so)
==1533== 
==1533== LEAK SUMMARY:
==1533==    definitely lost: 0 bytes in 0 blocks
==1533==    indirectly lost: 0 bytes in 0 blocks
==1533==      possibly lost: 0 bytes in 0 blocks
==1533==    still reachable: 2,511 bytes in 75 blocks
==1533==         suppressed: 0 bytes in 0 blocks
==1533== 
==1533== For counts of detected and suppressed errors, rerun with: -v
==1533== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 0 from 0)
Segmentation fault (core dumped)
$ 
$ coredumpctl 
TIME                            PID   UID   GID SIG PRESENT EXE
Sun 2016-01-10 09:47:43 CET    1533  1000  1000  11 * /usr/lib/valgrind/memcheck
$


Expected Results:  
no core dump

Comment 1 Tom Hughes 2016-01-10 09:03:09 UTC


*** This bug has been marked as a duplicate of bug 345414 ***