[Bug-gnubg] Fwd: Bug#396445: gnubg: segfault adding match to postgres database

[Russ Allbery]

One more bug forwarded from Debian.  I'm afraid that this segfault is deep
enough in Python code that I don't really know what to look for.  This
segfault occurs on AMD64.  Apparently the x86 package segfaults in other
places.

Here's the original report:

| Package: gnubg
| Version: 0.14.3+20060923-2
| Severity: normal
| 
| When I attempt to add a match to the relational database, using the
| postgresql backend, gnubg segfaults. I've created the database and the
| tables (using /usr/share/gnubg/gnubg.game.sql) and configured
| ~/.gnubg/database appropriately, as far as I know: "relational test"
| succeeds.
| 
| (For what it's worth, the result is the same when I build it from the
| savannah CVS source. I can report it upstream if you believe that is
| more appropriate.)
| 
| 
| GNU gdb 6.4.90-debian
| Copyright (C) 2006 Free Software Foundation, Inc.
| GDB is free software, covered by the GNU General Public License, and you
| are
| welcome to change it and/or distribute copies of it under certain
| conditions.
| Type "show copying" to see the conditions.
| There is absolutely no warranty for GDB.  Type "show warranty" for
| details.
| This GDB was configured as "x86_64-linux-gnu".
| (gdb) file /usr/games/gnubg
| Reading symbols from /usr/games/gnubg...(no debugging symbols
| found)...done.
| Using host libthread_db library "/lib/libthread_db.so.1".
| (gdb) set args -qt gnubg-chris_7p_2006-10-29.sgf
| (gdb) run
| Starting program: /usr/games/gnubg -qt gnubg-chris_7p_2006-10-29.sgf
| (no debugging symbols found)
| (no debugging symbols found)
| (no debugging symbols found)
| (no debugging symbols found)
| (no debugging symbols found)
| (no debugging symbols found)
| (no debugging symbols found)
| [Thread debugging using libthread_db enabled]
| [New Thread 47705901226816 (LWP 19171)]
| GNU Backgammon 0.14.3-develCopyright 1999, 2000, 2001, 2002, 2003, 2004
| by Gary Wong.GNU Backgammon is free software, covered by the GNU General
| Public License
| version 2, and you are welcome to change it and/or distribute copies of
| it
| under certain conditions.  Type "show copying" to see the conditions.
| There is absolutely no warranty for GNU Backgammon.  Type "show
| warranty" for
| details.
|  GNU Backgammon  Position ID: AAAAvgMAAAAAAA
|                  Match ID   : UgrgAIAAIAAA
|  +13-14-15-16-17-18------19-20-21-22-23-24-+     O: gnubg
|  |                  |   |                  | OOO 8 points
|  |                  |   |                  | OOO
|  |                  |   |                  | OOO
|  |                  |   |                  | OOO
|  |                  |   |                  | OOO
| v|                  |BAR|                  |     7 point match
|  |                  |   |                X | X
|  |                  |   |                X | X
|  |                  |   |             X  X | X
|  |                  |   |             X  X | XX
|  |                  |   |             X  X | XX  4 points
|  +12-11-10--9--8--7-------6--5--4--3--2--1-+     X: chris (Cube: 4)
| 
| (Game over) relational test
| Database test is successful!
| (Game over) relational add match
| 
| Program received signal SIGSEGV, Segmentation fault.
| [Switching to Thread 47705901226816 (LWP 19171)]
| 0x00002b6362122570 in strlen () from /lib/libc.so.6
| 
| 
| 
| -- System Information:
| Debian Release: testing/unstable
|   APT prefers unstable
|   APT policy: (990, 'unstable'), (500, 'testing'), (1, 'experimental')
| Architecture: amd64 (x86_64)
| Shell:  /bin/sh linked to /bin/bash
| Kernel: Linux 2.6.18-1-amd64
| Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
| 
| Versions of packages gnubg depends on:
| ii  debconf [debconf-2.0]  1.5.6           Debian configuration management sy
| ii  gnubg-data             0.14.3+20060923 Data files for GNU Backgammon
| ii  libartsc0              1.5.5-1         aRts sound system C support librar
| ii  libaudio2              1.8-2           The Network Audio System (NAS). (s
| ii  libc6                  2.3.6.ds1-7     GNU C Library: Shared libraries
| ii  libcairo2              1.2.4-4         The Cairo 2D vector graphics libra
| ii  libesd-alsa0 [libesd0] 0.2.36-3        Enlightened Sound Daemon (ALSA) - 
| ii  libfreetype6           2.2.1-5         FreeType 2 font engine, shared lib
| ii  libgl1-mesa-glx [libgl 6.5.1-0.2       A free implementation of the OpenG
| ii  libglib2.0-0           2.12.4-1        The GLib library of C routines
| ii  libglu1-mesa [libglu1] 6.5.1-0.2       The OpenGL utility library (GLU)
| ii  libgmp3c2              2:4.2.1+dfsg-4  Multiprecision arithmetic library
| ii  libgtk2.0-0            2.8.20-3        The GTK+ graphical user interface 
| ii  libgtkglext1           1.0.6-2.1+b1    OpenGL Extension to GTK (shared li
| ii  libpango1.0-0          1.14.7-1        Layout and rendering of internatio
| ii  libpng12-0             1.2.8rel-7      PNG library - runtime
| ii  libreadline5           5.1-9           GNU readline and history libraries
| ii  libxml2                2.6.27.dfsg-1   GNOME XML library
| ii  python2.4              2.4.4-1         An interactive high-level object-o
| ii  ttf-bitstream-vera     1.10-7          The Bitstream Vera family of free 
| 
| gnubg recommends no packages.
| 
| -- debconf information:
| * gnubg/build-bearoffs: true

Here is the additional backtrace provided by the submitter:

| Game over) relational test
| Database test is successful!
| (Game over) relational add match
| 
| Program received signal SIGSEGV, Segmentation fault.
| [Switching to Thread 47957168375168 (LWP 25089)]
| 0x00002b9de4a2d570 in strlen () from /lib/libc.so.6
| (gdb) bt all
| #0  0x00002b9de4a2d570 in strlen () from /lib/libc.so.6
| #1  0x000000000058b2a7 in do_mkvalue ()
| #2  0x000000000058b0a1 in do_mkvalue ()
| #3  0x000000000058b660 in Py_VaBuildValue ()
| #4  0x000000000058b8fb in Py_BuildValue ()
| #5  0x00000000005078f0 in PyGameStats (sc=0xd91380, fIsMatch=0, nMatchTo=7)
|     at gnubgmodule.c:1558
| #6  0x0000000000508baa in PythonGame (plGame=0xcaa710, doAnalysis=0, 
verbose=0,
|     scMatch=0x7fffc976ee80, includeBoards=0, ms=0x7fffc976f030) at 
gnubgmodule.c:1735
| #7  0x0000000000509daa in PythonMatch (self=<value optimized out>,
|     args=<value optimized out>, keywds=<value optimized out>) at 
gnubgmodule.c:2118
| #8  0x0000000000569e1c in PyEval_EvalFrame ()
| #9  0x000000000056a828 in PyEval_EvalCodeEx ()
| #10 0x00000000005b6c83 in function_call ()
| #11 0x000000000050fec0 in PyObject_Call ()
| #12 0x0000000000515d9e in instancemethod_call ()
| #13 0x0000000000512263 in PyObject_CallMethod ()
| #14 0x00000000004b11d5 in CommandRelationalAddMatch (sz=0x7fffc97722a4 "")
|     at relational.c:444
| #15 0x000000000044128f in HandleCommand (sz=0x7fffc97722a4 "",
|     ac=<value optimized out>) at gnubg.c:2946
| #16 0x00000000004413c8 in HandleCommand (sz=0x7fffc977229f "match",
|     ac=<value optimized out>) at gnubg.c:2950
| #17 0x00000000004413c8 in HandleCommand (sz=0x7fffc977229b "add",
|     ac=<value optimized out>) at gnubg.c:2950
| #18 0x000000000044478a in main (argc=2, argv=0x7fffc9772ec8) at gnubg.c:7555

-- 
Russ Allbery (address@hidden)             <http://www.eyrie.org/~eagle/>