[Freeciv-Dev] (PR#13817) pubserver crash with "/l" on chatline

["Jason Short" <jdorje@xxxxxxxxxxxxxxxxxxxxx>]

<URL: http://bugs.freeciv.org/Ticket/Display.html?id=13817 >

 From IRC:

<x_X> any admins here?
<x_X> of server
<x_X> 5563 went down, i'm not sure of the reason, might been abuse.
<x_X> 5563 up again, but it crashed down, hard..
<x_X> had some issues with host virtualQ.aquariumenvironments.com, if 
something ties up.. I suggest you look at the logs, he did overthrow me 
as a player somehow, and shortly after the game crashed...

-------- Original Message --------
From: - Mon Aug 29 23:02:51 2005
X-Account-Key: account1
X-UIDL: GmailId10604edd1c1e8dd7
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Gmail-Received: 676bea7308d45b443ff53ad6417f0163d173d4e7
Delivered-To: jdorje@xxxxxxxxx
Received: by 10.70.56.8 with SMTP id e8cs2267wxa;        Mon, 29 Aug 
2005 18:08:45 -0700 (PDT)
Received: by 10.38.161.36 with SMTP id j36mr44306rne;        Mon, 29 Aug 
2005 18:08:45 -0700 (PDT)
Return-Path: <freeciv-dev-bounce@xxxxxxxxxxx>
Received: from freeciv.freeciv.org (www.freeciv.org [207.158.49.130]) 
      by mx.gmail.com with ESMTP id c3si5944149rne.2005.08.29.18.08.45; 
        Mon, 29 Aug 2005 18:08:45 -0700 (PDT)
Received-SPF: pass (gmail.com: best guess record for domain of 
freeciv-dev-bounce@xxxxxxxxxxx designates 207.158.49.130 as permitted 
sender)
Received: from glockenspiel.complete.org (glockenspiel.complete.org 
[69.10.152.57]) by freeciv.freeciv.org (8.12.10/8.12.10) with ESMTP id 
j7U18gxB023989; Mon, 29 Aug 2005 18:08:42 -0700
Received: from localhost ([127.0.0.1] helo=glockenspiel)        by 
glockenspiel.complete.org with esmtp    (Exim 4.50)     id 1E9uau-000233-58; 
Mon, 29 Aug 2005 20:07:27 -0500
Received: with ECARTIS (v1.0.0; list freeciv-dev); Mon, 29 Aug 2005 
20:07:11 -0500 (CDT)
Received: from pubserver.freeciv.org ([207.158.49.131]) by 
glockenspiel.complete.org with esmtps   (with 
TLS-1.0:DHE_RSA_3DES_EDE_CBC_SHA:24)    (No TLS peer certificate)       (Exim 
4.50)   id 1E9uaN-00022n-GD     for freeciv-dev@xxxxxxxxxxx; Mon, 29 Aug 2005 
20:07:09 -0500
Received: from pubserver.freeciv.org (localhost.localdomain 
[127.0.0.1])    by pubserver.freeciv.org (8.12.8/8.12.8) with ESMTP id 
j7U16T2R003020  for <freeciv-dev@xxxxxxxxxxx>; Mon, 29 Aug 2005 18:06:29 
-0700
Received: (from freeciv@localhost)      by pubserver.freeciv.org 
(8.12.8/8.12.8/Submit) id j7U16T0O003018        for freeciv-dev@xxxxxxxxxxx; 
Mon, 29 Aug 2005 18:06:29 -0700
Date: Mon, 29 Aug 2005 18:06:28 -0700
From: freeciv@xxxxxxxxxxxxxxxxxxxxx
To: freeciv-dev@xxxxxxxxxxx
Subject: [Freeciv-Dev] civserver crashed: 
http://pubserver.freeciv.org/games/474736
Message-ID: <20050829180628.A3016@xxxxxxxxxxxxxxxxxxxxx>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="wac7ysb48OaltWcw"
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
X-Spam-Status: No (score 0.2): AWL=0.002, NO_REAL_NAME=0.178
X-Virus-Scanned: by Exiscan on glockenspiel.complete.org at Mon, 29 Aug 
2005 20:07:09 -0500
X-archive-position: 1716
X-ecartis-version: Ecartis v1.0.0
Sender: freeciv-dev-bounce@xxxxxxxxxxx
Errors-to: freeciv-dev-bounce@xxxxxxxxxxx
X-original-sender: freeciv@xxxxxxxxxxxxxxxxxxxxx
Precedence: bulk
List-help: <mailto:ecartis@xxxxxxxxxxx?Subject=help>
List-unsubscribe: 
<mailto:freeciv-dev-request@xxxxxxxxxxx?Subject=unsubscribe>
List-software: Ecartis version 1.0.0
List-Id: <freeciv-dev.freeciv.org>
X-List-ID: <freeciv-dev.freeciv.org>
List-subscribe: <mailto:freeciv-dev-request@xxxxxxxxxxx?Subject=subscribe>
List-owner: <mailto:freeciv-dev-admins@xxxxxxxxxxx>
List-post: <mailto:freeciv-dev@xxxxxxxxxxx>
X-list: freeciv-dev
X-Spam-Status: No (score 0.2): AWL=0.001, NO_REAL_NAME=0.178
X-Virus-Scanned: by Exiscan on glockenspiel.complete.org at Mon, 29 Aug 
2005 20:07:27 -0500



# examining core.25208 in /games/474736/. ...
# using $FREECIV_PATH 
:/home/freeciv/.freeciv/code/installed/cvs/S2_0/2005-08-29_16.00+mintimeout+original_gamelog/share/freeciv
# running: (echo bt full; echo quit; exec yes '') | gdb  
/home/freeciv/.freeciv/code/installed/cvs/S2_0/2005-08-29_16.00+mintimeout+original_gamelog/share/freeciv/../../bin/civserver
 core.25208
GNU gdb Red Hat Linux (5.2-2)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...
Core was generated by 
`/home/freeciv/.freeciv/code/installed/cvs/S2_0/2005-08-29_16.00+mintimeout+orig'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/lib/gconv/ISO8859-1.so...done.
Loaded symbols for /usr/lib/gconv/ISO8859-1.so
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /lib/libnss_nisplus.so.2...done.
Loaded symbols for /lib/libnss_nisplus.so.2
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libnss_dns.so.2...done.
Loaded symbols for /lib/libnss_dns.so.2
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
#0  0x08056924 in show_players (caller=0x8178dc0) at stdinhand.c:4044
4044            my_snprintf(buf, sizeof(buf),
(gdb) #0  0x08056924 in show_players (caller=0x8178dc0) at stdinhand.c:4044
        myiter = (struct genlist_link *) 0x0
        pconn = (struct connection *) 0x817a880
        pplayer = (struct player *) 0x821574c
        PI_p_itr = 5
        buf = "BadBoyBruce (user Unassigned, Human, Dead, nation Romans) 1 
connection:\0ize=42kb\0\0\026@ ß\026@Ø\001\0\0\0\0\0\0\a\0\0\0\v\032Q\t¸Ðÿ¿\t\031\n\b\v\032Q\t\0Ñÿ¿\004\0\0\0\a\0\0\0\034\0\0\0ýö\022\b!\001\0\0\020\233\027\bm\0\0\0\0\0\0\0 ß\026@\f\003\027@ ß\026@ ß\026@\035\0\0\0\0\0\0\0\025\0\0\0\0\0\0\0\020\0\0\0jõ\v@\f\003\027@@ú\025\b"...
        buf2 = "user Unassigned, Human, Dead, nation Romans\0on 
Danes\0uguese\0\0\0\0\0å\0\0\0~9^\t\230Îÿ¿\t\031\n\b~9^\tðÎÿ¿\a\0\0\0å\0\0\0\a\0\0\0@Ïÿ¿XÎÿ¿`\224\027\b\016\0\0\0\0\0\0\0hÎÿ¿+7\t\bpm`\t¨?²\b\a\030\0\0\0\0\0\0\005\022\0\0\0\0\0\0èÎÿ¿XZ,\b¨?²\b\023\001\0\0\230Îÿ¿Å7\t\bXZ,\b¨?²\b\230Îÿ¿ª\237\t\bÐÎÿ¿\002\0\0\0"...
#1  0x080565bd in show_list (caller=0x8178dc0, arg=0xbfffd630 "")
    at stdinhand.c:3959
        caller = (struct connection *) 0x8178dc0
        arg = 0xbfffd630 ""
        match_result = M_PRE_EXACT
        ind = 0
#2  0x08055926 in handle_stdin_input (caller=0x8178dc0, str=0x94f0d38 "/l", 
    check=false) at stdinhand.c:3444
        str = 0xffffffff <Address 0xffffffff out of bounds>
        command = 
"l\0ke\0ßÿ¿\002\0\0\0\002\0\0\0\230Ýÿ¿\0\0\0\0-\0\0\0ÿÿÿÿ\0\0\0\0ê\f\0\0\r 
\0\0, \0\0\n\0\0\0\0\0\0\0\002\0\0\0îp\001\0ÿÿÿÿÿÿÿÿ[K\001", '\0' <repeats 17 
times>, "jõ\v@\f\003\027@ áÿ¿ÈØÿ¿²\0\f@àØÿ¿ áÿ¿iáÿ¿jõ\v@\f\003\027@ 
Ûÿ¿èØÿ¿²\0\f@\0Ùÿ¿ Ûÿ¿\037áÿ¿\0\0\0\0\0Ùÿ¿ Ûÿ¿øÙÿ¿\f\003\027@\0Ùÿ¿ 
Ûÿ¿øÙÿ¿ù¯\v@\0Ùÿ¿CÀ\021\bTÚÿ¿ Ûÿ"...
        arg = 
"\0un\0Hßÿ¿\002\0\0\0\001\0\0\0\230Ûÿ¿\0\0\0\0{\0\0\0ÿÿÿÿ\212ú\020\bVí\020\b\0\0\0\0\0\0\0\0XÀµ\b`\025\001\0 ß\026@\f\003\027@øª´\b ß\026@\230Öÿ¿H%\f@°E5\bX\0\0\0 ß\026@\226%\f@\0\0\0\0`E5\b¸Öÿ¿\0\0\0\0ø\206Ü\b\020\0\0\0 ß\026@\f\003\027@\037\0\0\0ب\027\bèÖÿ¿\ní\v@XE\023\bب\027\b\0\0\0\0\0\0\0\00oÜ\bð\206Ü\b\0\0\0\0\f\003\027@\0\0\0\0yÏ\021\b¸Ýÿ¿\232±\t@ÐÝÿ¿yÏ\021\b"...
        allargs = "\0un\0\0\0\0\0\0\0\0\0\203¼\t\b{\0\0\0 
õ\025\bxÔÿ¿\ní\v@ÜX\021\b 
õ\025\b\0\0\0\0\0\0\0\0\027\0\0\0\021\0\0\0\0\0\0\0\f\003\027@\0\0\0\0\212ú\020\bHÛÿ¿\232±\t@`Ûÿ¿\212ú\020\b\0\0\0\0\211ú\020\b\002\0\0\0ü¿
 
\bhÂÄ\b A\026@\0\0\0\0(\0\0\0¸¯;\b\0\0\0\0àÝ\t@\2009\031\bèÔÿ¿\ní\v@Võ\025\b\2009\031\bE\0\0\0Æì\v@X",
 '\0' <repeats 11 times>, 
"\f\003\027@\0\0\0\0XE\023\b¸Ûÿ¿\232±\t@ÐÛÿ¿XE\023\b\0"...
        full_command = "l\0\t@ sun", '\0' <repeats 12 times>, 
"\220£¯\b\0\0\0\0\0\0\0\0àÝ\t@ê\f\0\0\r \0\0Æì\v@\n", '\0' <repeats 11 times>, 
"\f\003\027@\001\0\0\0ÛX\021\bHÙÿ¿\232±\t@`Ùÿ¿ÛX\021\b\001\0\0\0ÚX\021\b", '\0' 
<repeats 16 times>, " \0\0\0ä\037\0\0\0\0\0\0\0\0\0\0àÝ\t@", '\0' <repeats 58 
times>, "s \0\0\0\0ÿÿÿÿûÿÿÿ", '\0' <repeats 18 times>, "s \0\0\0\0ÿÿÿÿèÿÿÿ", 
'\0' <repeats 36 times>, "xÂN\b,Úÿ¿\002\0\0\0\001\0\0\0¨Øÿ"...
        cptr_s = 0x94f0d3a ""
        cptr_d = 0xffffffff <Address 0xffffffff out of bounds>
        i = -1
        cmd = CMD_LIST
#3  0x0806a653 in handle_chat_msg_req (pconn=0x8178dc0, message=0x94f0d38 "/l")
    at handchat.c:175
        sender_name = "\0\0\0\0\017\0\0\0\0\0\0\0àß\b\bì 
;\tÜ$!\bháÿ¿h[.\bÜ$!\b\0\0\0\0háÿ¿ª\237\t\b\200áÿ¿\002\0\0\0\230áÿ¿\200áÿ¿\003\0\0\0 áÿ¿¸ñ"
        chat = "<Turbo> it has take long 
enought\0\0\0\0/\0\0\09\0\0\0\f!\"\b Ûÿ¿\f!\"\b\002\0\0\0\0\0\0\0\020X\021\b0!\"\b\0\0\0\0\0\0\0\0°/\236\bÀ=\203\b¨Ûÿ¿Æ¿\t\b\0\0\0\0\001\0\0\0ü¿
 
\b°/\236\bÈ\0\0\0\0\0\0\0¸Ûÿ¿ßÚ\t\b3\0\0\0\a\0\0\0ÈÛÿ¿¨W\t\b\a\0\0\0/\0\0\0èÛÿ¿ð¹\t\bÜ$!\b/\0\0\0èÛÿ¿M¹\t\b\0\0\0\0È\0\0\0Ü$!\bH·;\b0Üÿ¿°Üÿ¿"...
        cp = 0x94f0d3a ""
#4  0x0804ecb1 in handle_packet_input (pconn=0x8178dc0, packet=0x94f0d38, 
    type=19) at srv_main.c:965
        packet = (void *) 0x821574c
        type = 19
        pplayer = (struct player *) 0x8178dc0
#5  0x08086a36 in sniff_packets () at sernet.c:635
        command_ok = 135761344
        packet = (void *) 0x94f0d38
        type = PACKET_CHAT_MSG_REQ
        result = true
        i = 61
        max_desc = 135761344
        readfs = {__fds_bits = {128, 0 <repeats 31 times>}}
        writefs = {__fds_bits = {0 <repeats 32 times>}}
        exceptfs = {__fds_bits = {0 <repeats 32 times>}}
        tv = {tv_sec = 0, tv_usec = 650000}
        year = 660
#6  0x0804f909 in main_loop () at srv_main.c:1580
        eot_timer = (struct timer *) 0x84ba020
        save_counter = 1
        is_new_turn = true
#7  0x0804fa8d in srv_main () at srv_main.c:1673
No locals.
#8  0x0804a5f0 in main (argc=14, argv=0xbffff7d4) at civserver.c:200
        argc = 14
        argv = (char **) 0xbffff7d4
        inx = 14
        showhelp = false
        showvers = false
        option = 0x0
#9  0x400651c4 in __libc_start_main () from /lib/libc.so.6
No symbol table info available.
(gdb) [... 0 lines skipped ...]