sanjaykcse
10/08/2020, 8:55 AMosquery '.
Program terminated with signal SIGSEGV, Segmentation fault.
warning: Unexpected size of section
.reg-xstate/4862' in core file.
#0 0x00007f43fac971db in ?? ()
[Current thread is 1 (LWP 4862)]
(gdb) bt
#0 0x00007f43fac971db in ?? ()
#1 0x0e24f4832af29500 in ?? ()
#2 0x0e24f4832af29500 in ?? ()
#3 0x00007f43fd415a80 in ?? ()
#4 0x00007f43fd408318 in ?? ()
#5 0x00007f43fd43aa48 in ?? ()
#6 0x00007fff53d99700 in ?? ()
#7 0x00007fff53d997a0 in ?? ()
#8 0x00007f43fb44425a in ?? ()
#9 0x00007f4300000000 in ?? ()
#10 0x00007fff53d99730 in ?? ()
#11 0xffffffffffffffff in ?? ()
#12 0x00007f43fba1ff4d in ?? ()
#13 0x0000000000000000 in ?? ()
(gdb) info r
rax 0xe24f4832af29500 1019208259891008768
rbx 0x7f43fd415a80 139929988455040
rcx 0x7f43f92c2b98 139929919957912
rdx 0x7f43fa28a7b7 139929936504759
rsi 0x0 0
rdi 0x7fff53d995a0 140734600156576
rbp 0x7fff53d99c90 0x7fff53d99c90
rsp 0x7fff53d99540 0x7fff53d99540
r8 0x7fff53d99560 140734600156512
r9 0x7f43f905dda0 139929917447584
r10 0x4e585f3531314758 5645366814972135256
r11 0x7f43f9097f40 139929917685568
r12 0x0 0
r13 0x7f43fd43aa48 139929988606536
r14 0x7f43fa28a7b7 139929936504759
r15 0x7fff53d995a0 140734600156576
rip 0x7f43fac971db 0x7f43fac971db
eflags 0x10246 [ PF ZF IF RF ]
cs 0x33 51
ss 0x2b 43
ds 0x0 0
es 0x0 0
fs 0x0 0
gs 0x0 0
(gdb) x/i 0x7f43fac971db
=> 0x7f43fac971db: Cannot access memory at address 0x7f43fac971db
(gdb) x/i 0x7fff53d99540
0x7fff53d99540: add %dl,-0xb7cd50e(%rbp)
(gdb) x/i $rsp
0x7fff53d99540: add %dl,-0xb7cd50e(%rbp)
(gdb) x/10x $rsp
0x7fff53d99540: 0x2af29500 0x0e24f483 0x2af29500 0x0e24f483
0x7fff53d99550: 0xfd415a80 0x00007f43 0xfd408318 0x00007f43
0x7fff53d99560: 0xfd43aa48 0x00007f43
(gdb) x/10i $pc
=> 0x7f43fac971db: Cannot access memory at address 0x7f43fac971db
(gdb) x/10x $bsp
Value can't be converted to integer.
(gdb) x/10x $rbp
0x7fff53d99c90: 0xfd43aa10 0x00007f43 0xfd43aa10 0x00007f43
0x7fff53d99ca0: 0x00000001 0x00000000 0x6261740a 0x0000656c
0x7fff53d99cb0: 0x00000000 0x00000000seph
sanjaykcse
10/08/2020, 4:47 PMseph
theopolis
--verbose
? what logs were printed?sanjaykcse
10/12/2020, 1:28 PMosquery '.
Program terminated with signal SIGSEGV, Segmentation fault.
warning: Unexpected size of section
.reg-xstate/10711' in core file.
#0 std: 1:basic_string<char, std: 1:char_traits<char>, std: 1:allocator<char> >::__is_long (this=0x98)
at /opt/osquery-toolchain/usr/bin/../include/c++/v1/string:1426
1426 /opt/osquery-toolchain/usr/bin/../include/c++/v1/string: No such file or directory.
[Current thread is 1 (LWP 10711)]
(gdb) bt
#0 std: 1:basic_string<char, std: 1:char_traits<char>, std: 1:allocator<char> >::__is_long (this=0x98)
at /opt/osquery-toolchain/usr/bin/../include/c++/v1/string:1426
#1 std: 1:basic_string<char, std: 1:char_traits<char>, std: 1:allocator<char> >::size (this=0x98)
at /opt/osquery-toolchain/usr/bin/../include/c++/v1/string:953
#2 std: 1:operator+<char, std: 1:char_traits<char>, std: 1:allocator<char> > (__lhs=..., __rhs=95 '_')
at /opt/osquery-toolchain/usr/bin/../include/c++/v1/string:4097
#3 0x00007f81304bbd90 in std: 1:messages<wchar_t>& std: 1:(anonymous namespace):make<std 1:messages<wchar_t>, unsigned int>(unsigned int)::buf ()
#4 0xe527c8e13c6f9600 in ?? ()
#5 0x00007fff87502998 in ?? ()
#6 0x00007fff87502a28 in ?? ()
#7 0x0000000000000000 in ?? ()
(gdb) info reg
rax 0xe527c8e13c6f9600 -1934356645225196032
rbx 0x7fff87502998 140735463565720
rcx 0x0 0
rdx 0x5f 95
rsi 0x98 152
rdi 0x7fff87502998 140735463565720
rbp 0x98 0x98
rsp 0x7fff87502960 0x7fff87502960
r8 0x7fff87502c08 140735463566344
r9 0x7f812d6ccda0 140192789613984
r10 0x6974696e69207265 7598814394211922533
r11 0x7f812d706f40 140192789851968
r12 0x7f81319f6530 140192860038448
r13 0x0 0
r14 0x5f 95
r15 0x0 0
rip 0x7f812f31452d 0x7f812f31452d <std: 1:operator+<char, std: 1:char_traits<char>, std: 1:allocator<char> >(std: 1:basic_string<char, std: 1:char_traits<char>, std: 1:allocator<char> > const&, char)+47>
eflags 0x10246 [ PF ZF IF RF ]
cs 0x33 51
ss 0x2b 43
ds 0x0 0
es 0x0 0
fs 0x0 0
gs 0x0 0theopolis
sanjaykcse
10/20/2020, 12:10 PM