[Freeciv-Dev] (PR#13995) pubserver crash in server_remove_player

["Jason Short" <jdorje@xxxxxxxxxxxxxxxxxxxxx>]

<URL: http://bugs.freeciv.org/Ticket/Display.html?id=13995 >



-------- Original Message --------
From: - Fri Sep 16 11:07:26 2005
X-Account-Key: account1
X-UIDL: GmailId1065dc90205ce9a3
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Gmail-Received: ea49b3f17bb2d2d5836fcea9ca181024bcf980cb
Delivered-To: jdorje@xxxxxxxxx
Received: by 10.70.56.8 with SMTP id e8cs89333wxa;        Fri, 16 Sep 
2005 00:14:46 -0700 (PDT)
Received: by 10.36.224.6 with SMTP id w6mr26213nzg;        Fri, 16 Sep 
2005 00:14:46 -0700 (PDT)
Return-Path: <freeciv-dev-bounce@xxxxxxxxxxx>
Received: from mail.sourceforge.net (lists.sourceforge.net 
[66.35.250.206])        by mx.gmail.com with ESMTP id 
19si1332190nzp.2005.09.16.00.14.45;        Fri, 16 Sep 2005 00:14:46 
-0700 (PDT)
Received-SPF: neutral (gmail.com: 66.35.250.206 is neither permitted nor 
denied by best guess record for domain of freeciv-dev-bounce@xxxxxxxxxxx)
Received: from glockenspiel.complete.org ([69.10.152.57])       by 
mail.sourceforge.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.44)     id 
1EGAQl-00051U-Vt        for jdorje@xxxxxxxxxxxxxxxxxxxxx; Fri, 16 Sep 2005 
00:14:45 -0700
Received: from localhost ([127.0.0.1] helo=glockenspiel)        by 
glockenspiel.complete.org with esmtp    (Exim 4.50)     id 1EGAOl-0007SO-Op; 
Fri, 16 Sep 2005 02:12:40 -0500
Received: with ECARTIS (v1.0.0; list freeciv-dev); Fri, 16 Sep 2005 
02:12:31 -0500 (CDT)
Received: from pubserver.freeciv.org ([207.158.49.131]) by 
glockenspiel.complete.org with esmtps   (with 
TLS-1.0:DHE_RSA_3DES_EDE_CBC_SHA:24)    (No TLS peer certificate)       (Exim 
4.50)   id 1EGAOc-0007SI-7W     for freeciv-dev@xxxxxxxxxxx; Fri, 16 Sep 2005 
02:12:31 -0500
Received: from pubserver.freeciv.org (localhost.localdomain 
[127.0.0.1])    by pubserver.freeciv.org (8.12.8/8.12.8) with ESMTP id 
j8G7C42R003529  for <freeciv-dev@xxxxxxxxxxx>; Fri, 16 Sep 2005 00:12:05 
-0700
Received: (from freeciv@localhost)      by pubserver.freeciv.org 
(8.12.8/8.12.8/Submit) id j8G7C35T003500        for freeciv-dev@xxxxxxxxxxx; 
Fri, 16 Sep 2005 00:12:03 -0700
Date: Fri, 16 Sep 2005 00:12:02 -0700
From: freeciv@xxxxxxxxxxxxxxxxxxxxx
To: freeciv-dev@xxxxxxxxxxx
Subject: [Freeciv-Dev] civserver crashed: 
http://pubserver.freeciv.org/games/483200
Message-ID: <20050916001202.A3498@xxxxxxxxxxxxxxxxxxxxx>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="7JfCtLOvnd9MIVvH"
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
X-Spam-Status: No (score 0.2): AWL=0.001, NO_REAL_NAME=0.178
X-Virus-Scanned: by Exiscan on glockenspiel.complete.org at Fri, 16 Sep 
2005 02:12:31 -0500
X-archive-position: 2091
X-ecartis-version: Ecartis v1.0.0
Sender: freeciv-dev-bounce@xxxxxxxxxxx
Errors-to: freeciv-dev-bounce@xxxxxxxxxxx
X-original-sender: freeciv@xxxxxxxxxxxxxxxxxxxxx
Precedence: bulk
List-help: <mailto:ecartis@xxxxxxxxxxx?Subject=help>
List-unsubscribe: 
<mailto:freeciv-dev-request@xxxxxxxxxxx?Subject=unsubscribe>
List-software: Ecartis version 1.0.0
List-Id: <freeciv-dev.freeciv.org>
X-List-ID: <freeciv-dev.freeciv.org>
List-subscribe: <mailto:freeciv-dev-request@xxxxxxxxxxx?Subject=subscribe>
List-owner: <mailto:freeciv-dev-admins@xxxxxxxxxxx>
List-post: <mailto:freeciv-dev@xxxxxxxxxxx>
X-list: freeciv-dev
X-Spam-Status: No (score 0.2): AWL=0.001, NO_REAL_NAME=0.178
X-Virus-Scanned: by Exiscan on glockenspiel.complete.org at Fri, 16 Sep 
2005 02:12:40 -0500
X-Spam-Score: 0.3 (/)
X-Spam-Report: Spam Filtering performed by sourceforge.net.     See 
http://spamassassin.org/tag/ for more details.  Report problems to 
http://sf.net/tracker/?func=add&group_id=1&atid=200001  0.2 NO_REAL_NAME 
           From: does not include a real name   0.0 
SF_CHICKENPOX_PARATHESES_OPEN BODY: Text interparsed with (     0.0 
SF_CHICKENPOX_PERIOD   BODY: Text interparsed with .    0.0 
SF_CHICKENPOX_SLASH    BODY: Text interparsed with /    0.0 
SF_CHICKENPOX_MINUS    BODY: Text interparsed with -    0.0 
SF_CHICKENPOX_UNDERSCORE BODY: Text interparsed with _  0.0 
SF_CHICKENPOX_EQUAL    BODY: Text interparsed with =    0.0 
SF_CHICKENPOX_PLUS     BODY: Text interparsed with +    0.0 
SF_CHICKENPOX_BACKSLASH BODY: Text interparsed with \   0.0 
SF_CHICKENPOX_AT       BODY: Text interparsed with @    0.0 
SF_CHICKENPOX_APOSTROPHE BODY: Text interparsed with '



# examining core.14115 in /games/483200/. ...
# using $FREECIV_PATH 
:/home/freeciv/.freeciv/code/installed/cvs/S2_0/2005-09-16_16.00+mintimeout+original_gamelog/share/freeciv
# running: (echo bt full; echo quit; exec yes '') | gdb  
/home/freeciv/.freeciv/code/installed/cvs/S2_0/2005-09-16_16.00+mintimeout+original_gamelog/share/freeciv/../../bin/civserver
 core.14115
GNU gdb Red Hat Linux (5.2-2)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...
Core was generated by 
`/home/freeciv/.freeciv/code/installed/cvs/S2_0/2005-09-16_16.00+mintimeout+orig'.
Program terminated with signal 6, Aborted.
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/lib/gconv/ISO8859-1.so...done.
Loaded symbols for /usr/lib/gconv/ISO8859-1.so
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /lib/libnss_nisplus.so.2...done.
Loaded symbols for /lib/libnss_nisplus.so.2
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libnss_dns.so.2...done.
Loaded symbols for /lib/libnss_dns.so.2
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
#0  0x400760a1 in kill () from /lib/libc.so.6
(gdb) #0  0x400760a1 in kill () from /lib/libc.so.6
No symbol table info available.
#1  0x40075e99 in raise () from /lib/libc.so.6
No symbol table info available.
#2  0x40077364 in abort () from /lib/libc.so.6
No symbol table info available.
#3  0x4007015d in __assert_fail () from /lib/libc.so.6
No symbol table info available.
#4  0x0804be1a in real_die () at shared.c:675
        format = 0x811e200 "player had a connection attached that didn't belong 
to it!"
#5  0x08072145 in server_remove_player (pplayer=0x8205adc) at plrhand.c:1776
        pplayer = (struct player *) 0x8205adc
        myiter = (struct genlist_link *) 0x82bcf18
#6  0x08051187 in remove_player (caller=0x8178dc0, arg=0xbfffd130 "vir", 
    check=false) at stdinhand.c:974
        caller = (struct connection *) 0x8178dc0
        arg = 0xbfffccd0 "virtualQ"
        match_result = M_PRE_ONLY
        pplayer = (struct player *) 0x8205adc
        name = "virtualQ\0ÿÿÿl\021\021\b\bÍÿ¿õ\2231\b\003\0\0\0\004\0\0"
#7  0x08055837 in handle_stdin_input (caller=0x8178dc0, 
    str=0x83193f0 "/rem vir", check=false) at stdinhand.c:3424
        str = 0x2 <Address 0x2 out of bounds>
        command = "rem\0\0Ç+\b", '\0' <repeats 12 times>, "\030Ç+\b", '\0' 
<repeats 12 times>, "ê\f\0\0\r \0\0, 
\0\0\n\0\0\0\0\0\0\0\002\0\0\0æ\003\0\0ÿÿÿÿÿÿÿÿMg\001", '\0' <repeats 17 
times>, "jõ\v@\f\003\027@ Üÿ¿ÈÓÿ¿²\0\f@àÓÿ¿ Üÿ¿iÜÿ¿jõ\v@\f\003\027@ 
Öÿ¿èÓÿ¿²\0\f@\0Ôÿ¿ Öÿ¿\037Üÿ¿\0\0\0\0\0Ôÿ¿ Öÿ¿øÔÿ¿\f\003\027@\0Ôÿ¿ 
Öÿ¿øÔÿ¿ù¯\v@\0Ôÿ¿ÃÀ\021\bTÕÿ¿ Öÿ¿\001\200­"...
        arg = "vir\0°b1\b\005\0\0\0 Òÿ¿\0\0\0\0 Òÿ¿\210Ñÿ¿\226%\f@ 
Òÿ¿\026î\020\b\0\0\0\0\210Ñÿ¿°\2021\bXM\0\0 ß\026@\f\003\027@¨b1\b ß\026@\230Ñÿ¿H%\f@h\017/\bX\0\0\0 ß\026@\226%\f@\0\0\0\0\030\017/\b¸Ñÿ¿\001\0\0\0P+,\bH\0\0\0 ß\026@\f\003\027@\030+,\b ß\026@ØÑÿ¿H%\f@\224Óÿ¿\0
 \0\0\0\0\0\0 Òÿ¿\020\r/\b 
+,\bøÑÿ¿ÇM\020\b\0\0\0\0@Ôÿ¿r\0\0\0\0\0\0\0p\224\027\b\030\r/\b"...
        allargs = "vir\0vamos saber, que ele vai se-reconectar?", '\0' <repeats 
41 times>, "àÖ\026@", '\0' <repeats 52 times>, 
"4\r/0a6\031\b\003\0\0\0øÏÿ¿A¹\004\bi\0\0\0\0\0\0\0\003\0\0\0\0\006\0\0PÐÿ¿¨\224\027\b\bÐÿ¿\003Ð\004\bPÐÿ¿\0\006\0\0\035\237\021\b<Ðÿ¿PÐÿ¿¨\224\027\b(Ðÿ¿TÐ\004\bPÐÿ¿\0\006\0\0\035\237\021\b<Ðÿ¿PÐÿ¿¨\224\027\b\210Üÿ¿)J\006\bp\224\027\b\0\0\0\0PÐÿ¿¨\224\027\b\0"...
        full_command = "rem vir", '\0' <repeats 13 times>, " 
Ç+\b\0\0\0\0\0\0\0\0àÝ\t@ê\f\0\0\r \0\0, 
\0\0\n\0\0\0\0\0\0\0\002\0\0\0á\003\0\0ÿÿÿÿÿÿÿÿ", '\0' <repeats 40 times>, " 
\0\0\0ä\037", '\0' <repeats 72 times>, "s \0\0\0\0ÿÿÿÿùÿÿÿ", '\0' <repeats 18 
times>, "s \0\0\0\0ÿÿÿÿüÿÿÿ", '\0' <repeats 36 times>, 
"Ð\2331\b,Õÿ¿\002\0\0\0\001\0\0\0¨Óÿ¿\0\0\0\0\0\0\0\0ÄÀ\021\bøÎÿ¿LÕÿ¿\002\0\0\0\002\0\0\0ÈÓÿ¿\0\0\0\0\016"...
        cptr_s = 0x83193f5 "vir"
        cptr_d = 0x2 <Address 0x2 out of bounds>
        i = 2
        cmd = CMD_REMOVE
#8  0x0806a65b in handle_chat_msg_req (pconn=0x8178dc0, 
    message=0x83193f0 "/rem vir") at handchat.c:175
        sender_name = 
"`\200\027\b`\200\027\b\210Üÿ¿ôs\b\b\220\v,\b\220\v,\bXÜÿ¿\226 \t\bpÜÿ¿\002\0\0\0hÜÿ¿\226 \t\b\200Üÿ¿\002\0\0\0¨ìÿ¿\200Üÿ¿\003\0\0\0 Üÿ¿¸ì"
        chat = "<nmmoura> bora\0s /cut virtualQ para vamos saber, que ele vai 
se-reconectar?\0\0\0\0\0÷\230%2GòhD\207\220H!æ\005\027«9\027©\004«Q\t\226ã.\022øe¾fÉ\206$k\226e(V8\217ãI4\217Æä\220°þÃ\206\004F\202Y#\\(Ä\204\227P¢Ò\\\np|\032Ã\024\225ë\0e\205pË\03PØ\205®;iº\233A¥ZA!\225\201\nOÉ·ª\221gýàRZ`\n!\223«0×ÿ¿°×ÿ¿"...
        cp = 0x83193f8 ""
#9  0x0804ecb1 in handle_packet_input (pconn=0x8178dc0, packet=0x83193f0, 
    type=19) at srv_main.c:965
        packet = (void *) 0x8316840
        type = 19
        pplayer = (struct player *) 0x8178dc0
#10 0x08086b22 in sniff_packets () at sernet.c:635
        command_ok = 135761344
        packet = (void *) 0x83193f0
        type = PACKET_CHAT_MSG_REQ
        result = true
        i = 61
        max_desc = 135761344
        readfs = {__fds_bits = {128, 0 <repeats 31 times>}}
        writefs = {__fds_bits = {0 <repeats 32 times>}}
        exceptfs = {__fds_bits = {0 <repeats 32 times>}}
        tv = {tv_sec = 0, tv_usec = 520000}
        year = 0
#11 0x0804fb61 in srv_loop () at srv_main.c:1715
        i = 137455680
        start_nations = 6
#12 0x0804fa8d in srv_main () at srv_main.c:1673
No locals.
#13 0x0804a5f0 in main (argc=14, argv=0xbffff2d4) at civserver.c:200
        argc = 14
        argv = (char **) 0xbffff2d4
        inx = 14
        showhelp = false
        showvers = false
        option = 0x0
#14 0x400651c4 in __libc_start_main () from /lib/libc.so.6
No symbol table info available.
(gdb) [... 0 lines skipped ...]