SIGSEGV: This time _a_real_bug_ ... looks like a double free

[Thomas Glanzmann]

Not checking whether link pointed object exists
cfengine:faui05k:   (Change owner to uid 31210 if possible)
cfengine:faui05k:   (Change group to gid 30003 if possible)
cfengine:faui05k: 
/usr/local.stand/kde-1.1.2/.arch.os.i386.linux/lib/ksirc/libpframe.la wasn't at 
destination (copying)
cfengine:faui05k:   (Change owner to uid 31210 if possible)
cfengine:faui05k:   (Change group to gid 30003 if possible)
cfengine:faui05k: 
/usr/local.stand/kde-1.1.2/.arch.os.i386.linux/lib/ksirc/libpframe.a wasn't at 
destination (copying)
cfengine:faui05k:   (Change owner to uid 31210 if possible)
cfengine:faui05k:   (Change group to gid 30003 if possible)
cfengine:faui05k: 
/usr/local.stand/kde-1.1.2/.arch.os.i386.linux/lib/ksirc/libplined.so.0.0.0 
wasn't at destination (copying)
cfengine:faui05k:   (Change owner to uid 31210 if possible)
cfengine:faui05k:   (Change group to gid 30003 if possible)
cfengine:faui05k: Checking link from 
/usr/local.stand/kde-1.1.2/.arch.os.i386.linux/lib/ksirc/libplined.so.0 to 
libplined.so.0.0.0
Not checking whether link pointed object exists
cfengine:faui05k:   (Change owner to uid 31210 if possible)
cfengine:faui05k:   (Change group to gid 30003 if possible)

Program received signal SIGSEGV, Segmentation fault.
0x08172969 in chunk_free ()
(gdb) bt
#0  0x08172969 in chunk_free ()
#1  0x08172813 in free ()
#2  0x08054336 in FlushClientCache (ip=0x82c2f68) at client.c:424
#3  0x08057bca in CheckImage (source=0xbfff58dc 
"/raid/lexec/kde-1.1.2/.arch.os.i386.linux/lib/ksirc/libplined.so.0",
    destination=0xbfff48dc 
"/usr/local.stand/kde-1.1.2/.arch.os.i386.linux/lib/ksirc/libplined.so.0", 
ip=0x82c2f68) at image.c:476
#4  0x0805728a in RecursiveImage (ip=0x82c2f68, from=0xbfff79cc 
"/raid/lexec/kde-1.1.2/.arch.os.i386.linux/lib/ksirc", to=0xbfff69cc 
"/usr/local.stand/kde-1.1.2/.arch.os.i386.linux/lib/ksirc", maxrecurse=7)
    at image.c:195
#5  0x0805726d in RecursiveImage (ip=0x82c2f68, from=0xbfff9abc 
"/raid/lexec/kde-1.1.2/.arch.os.i386.linux/lib", to=0xbfff8abc 
"/usr/local.stand/kde-1.1.2/.arch.os.i386.linux/lib", maxrecurse=8) at 
image.c:191
#6  0x0805726d in RecursiveImage (ip=0x82c2f68, from=0xbfffbbac 
"/raid/lexec/kde-1.1.2/.arch.os.i386.linux", to=0xbfffabac 
"/usr/local.stand/kde-1.1.2/.arch.os.i386.linux", maxrecurse=9) at image.c:191
#7  0x0805726d in RecursiveImage (ip=0x82c2f68, from=0xbfffec94 
"/raid/lexec/kde-1.1.2", to=0xbfffdc94 "/usr/local.stand/kde-1.1.2", 
maxrecurse=10) at image.c:191
#8  0x080506c5 in MakeImages () at do.c:2372
#9  0x0804a4f4 in DoTree (passes=2, info=0x81c8536 "Main Tree") at 
cfagent.c:1146
#10 0x080483f2 in main (argc=3, argv=0xbffffda4) at cfagent.c:155


This is with a recompiled version of cfengine.

Version 2.0.1 with debian woody 'current'

statically linked ... again. This bug is reproducable but only on some machines.

Greetings,
        Thomas

I can provide further information ...

--
Thomas Glanzmann            +49 1212 5 269 38 260
Rathsbergerstrasse 28 D-91054 Erlangen / Burgberg