Ubuntu
cups package

cupsd crashed with SIGSEGV in __strnlen_avx2_rtm()

Bug #1965112 reported by Matthias Klose on 2022-03-16

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	cups (Ubuntu)	Fix Released	Medium	Unassigned

Bug Description

trying to print with jammy 20220316, to a network printer

ProblemType: Crash
DistroRelease: Ubuntu 22.04
Package: cups-daemon 2.4.1op1-1ubuntu2
ProcVersionSignature: Ubuntu 5.15.0-22.22-generic 5.15.19
Uname: Linux 5.15.0-22-generic x86_64
ApportVersion: 2.20.11-0ubuntu79
Architecture: amd64
CasperMD5CheckResult: pass
Date: Wed Mar 16 11:00:00 2022
ExecutablePath: /usr/sbin/cupsd
InstallationDate: Installed on 2022-02-28 (15 days ago)
InstallationMedia: Ubuntu 22.04 LTS "Jammy Jellyfish" - Alpha amd64 (20220226)
Lpstat: Error: command ['lpstat', '-v'] failed with exit code 1: lpstat: No destinations added.
MachineType: LENOVO 20Y5CTO1WW
Papersize: a4
ProcAttrCurrent: /usr/sbin/cupsd (enforce)
ProcCmdline: BOOT_IMAGE=/boot/vmlinuz-5.15.0-22-generic root=UUID=229d75cc-2aa3-4f8f-b5bd-d310f6218a3f ro quiet splash vt.handoff=7
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.15.0-22-generic root=UUID=229d75cc-2aa3-4f8f-b5bd-d310f6218a3f ro quiet splash vt.handoff=7
RebootRequiredPkgs: Error: path contained symlinks.
SegvAnalysis:
Segfault happened at: 0x7fdde6d9698c <__strcmp_evex+44>: vpcmpeqb (%rsi),%ymm17,%k1{%k2}
PC (0x7fdde6d9698c) ok
source "(%rsi)" (0x00000000) not located in a known VMA region (needed readable region)!
destination "%ymm17" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: cups
StacktraceTop:
__strcmp_evex () at ../sysdeps/x86_64/multiarch/strcmp-evex.S:139
?? ()
?? ()
?? ()
__libc_start_call_main (main=main@entry=0x55ea813993a0, argc=argc@entry=2, argv=argv@entry=0x7fffb71a6eb8) at ../sysdeps/nptl/libc_start_call_main.h:58
Title: cupsd crashed with SIGSEGV in __strcmp_evex()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: N/A
dmi.bios.date: 10/14/2021
dmi.bios.release: 1.11
dmi.bios.vendor: LENOVO
dmi.bios.version: N40ET29W (1.11 )
dmi.board.asset.tag: Not Available
dmi.board.name: 20Y5CTO1WW
dmi.board.vendor: LENOVO
dmi.board.version: SDK0T08861 WIN
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: None
dmi.ec.firmware.release: 1.11
dmi.modalias: dmi:bvnLENOVO:bvrN40ET29W(1.11):bd10/14/2021:br1.11:efr1.11:svnLENOVO:pn20Y5CTO1WW:pvrThinkPadX1ExtremeGen4i:rvnLENOVO:rn20Y5CTO1WW:rvrSDK0T08861WIN:cvnLENOVO:ct10:cvrNone:skuLENOVO_MT_20Y5_BU_Think_FM_ThinkPadX1ExtremeGen4i:
dmi.product.family: ThinkPad X1 Extreme Gen 4i
dmi.product.name: 20Y5CTO1WW
dmi.product.sku: LENOVO_MT_20Y5_BU_Think_FM_ThinkPad X1 Extreme Gen 4i
dmi.product.version: ThinkPad X1 Extreme Gen 4i
dmi.sys.vendor: LENOVO
separator:

Tags:

Revision history for this message

Matthias Klose (doko) wrote on 2022-03-16:

CurrentDmesg.txt Edit (138.9 KiB, text/plain; charset="utf-8")
Dependencies.txt Edit (5.5 KiB, text/plain; charset="utf-8")
Disassembly.txt Edit (952 bytes, text/plain; charset="utf-8")
JournalErrors.txt Edit (118.8 KiB, text/plain; charset="utf-8")
KernLog.txt Edit (2.4 KiB, text/plain; charset="utf-8")
Locale.txt Edit (309 bytes, text/plain; charset="utf-8")
Lspci.txt Edit (61.9 KiB, text/plain; charset="utf-8")
Lspci-vt.txt Edit (1.6 KiB, text/plain; charset="utf-8")
Lsusb.txt Edit (577 bytes, text/plain; charset="utf-8")
Lsusb-t.txt Edit (886 bytes, text/plain; charset="utf-8")
Lsusb-v.txt Edit (72.2 KiB, text/plain; charset="utf-8")
PrintingPackages.txt Edit (1.1 KiB, text/plain; charset="utf-8")
ProcCpuinfo.txt Edit (28.2 KiB, text/plain; charset="utf-8")
ProcCpuinfoMinimal.txt Edit (1.8 KiB, text/plain; charset="utf-8")
ProcEnviron.txt Edit (252 bytes, text/plain; charset="utf-8")
ProcInterrupts.txt Edit (17.4 KiB, text/plain; charset="utf-8")
ProcMaps.txt Edit (38.4 KiB, text/plain; charset="utf-8")
ProcModules.txt Edit (11.1 KiB, text/plain; charset="utf-8")
ProcStatus.txt Edit (1.4 KiB, text/plain; charset="utf-8")
Registers.txt Edit (1.3 KiB, text/plain; charset="utf-8")
Stacktrace.txt Edit (1.1 KiB, text/plain; charset="utf-8")
ThreadStacktrace.txt Edit (1.2 KiB, text/plain; charset="utf-8")
UdevDb.txt Edit (310.6 KiB, text/plain; charset="utf-8")
acpidump.txt Edit (1.7 MiB, text/plain; charset="utf-8")

tags:

added: rls-jj-incoming

Revision history for this message

Apport retracing service (apport) wrote on 2022-03-16:

StacktraceTop:
__strcmp_evex () at ../sysdeps/x86_64/multiarch/strcmp-evex.S:139
create_local_printer (con=0x55ea82141090) at /build/cups-y1LIcO/cups-2.4.1op1/scheduler/ipp.c:5539
cupsdProcessIPPRequest (con=0x55ea82141090) at /build/cups-y1LIcO/cups-2.4.1op1/scheduler/ipp.c:604
cupsdReadClient (con=0x55ea82141090) at /build/cups-y1LIcO/cups-2.4.1op1/scheduler/client.c:1814
cupsdDoSelect (timeout=<optimized out>) at /build/cups-y1LIcO/cups-2.4.1op1/scheduler/select.c:480

tags:

removed: need-amd64-retrace

Till Kamppeter (till-kamppeter) on 2022-03-16

information type:

Private → Public

Revision history for this message

Till Kamppeter (till-kamppeter) wrote on 2022-03-16:

Could you run the following commands:

driverless

driverless --std-ipp-uris

lpstat -v

and post the output here.

On which print queue are you printing?

Are you running cups-browsed?

Then switch CUPS into debug mode:

cupsctl --debug-logging

Print a job as you did when the crash happened. When it fails again, take the /var/log/cups/error_log file and attach it to this bug report. DO NOT compress or package it.

Could you also tell me how you printed the job? Which application? GTK print dialog? Any other print dialog?

Changed in cups (Ubuntu):
status:	New → Incomplete

Revision history for this message

Till Kamppeter (till-kamppeter) wrote on 2022-03-16:

Can you also attach your /etc/cups/cupsd.conf file?

And please also post the output of the command

cupsctl

Revision history for this message

Matthias Klose (doko) wrote on 2022-03-16:

error_log Edit (306.1 KiB, text/plain)

doko@xe1:~$ driverless
ipp://HP%20LaserJet%20500%20colorMFP%20M570dw%20(6C84AD)._ipp._tcp.local/
doko@xe1:~$ driverless --std-ipp-uris
ipp://NPI6C84AD.local:631/ipp/printer
doko@xe1:~$ lpstat -v
lpstat: No destinations added.

$ ps aux | grep cups-browsed
root 94786 0.0 0.0 172744 11908 ? Ssl 11:00 0:00 /usr/sbin/cups-browsed
doko 110175 0.0 0.0 9560 2428 pts/4 S+ 17:21 0:00 grep --color=auto cups-browsed

Trying to print a png image with eog

Revision history for this message

Matthias Klose (doko) wrote on 2022-03-16:

cupsd.conf Edit (4.6 KiB, text/plain)

$ cupsctl
_debug_logging=1
_remote_admin=0
_remote_any=0
_share_printers=0
_user_cancel_any=0
BrowseLocalProtocols=dnssd
DefaultAuthType=Basic
ErrorPolicy=retry-job
IdleExitTimeout=60
JobPrivateAccess=default
JobPrivateValues=default
MaxLogSize=0
PageLogFormat=
SubscriptionPrivateAccess=default
SubscriptionPrivateValues=default
WebInterface=Yes

Changed in cups (Ubuntu):
status:	Incomplete → New

Till Kamppeter (till-kamppeter) on 2022-03-16

Changed in cups (Ubuntu):
status:	New → In Progress

Revision history for this message

Till Kamppeter (till-kamppeter) wrote on 2022-03-16:

Thanks for all the info, it is as I expected, your cupsd.conf has "Browsing No" because you do not use printer sharing. Then the DNS-SD host name is not set in the daemon's internal variable DNSSDHostName and this variable I compared with the host name of the URI of the potential new queue to see whether I have to change it to "localhost" for the case that the printer is a local service (IPP-over-USB, Printer Application, ...). This caused the crash. Now I have added a fallback to the internal variable ServerName if DNSSDHostName is NULL.

I could reproduce the bug by doing the command

cupsctl --no-share-printers

(I had printer sharing on for my OpenPrinting work) and re-trying to access an IPP printer through GTK's print dialog which caused the crash then for me.

I have the fix now ready and with it the crash goes away.

I will update the Pull Request on CUPS upstream (https://github.com/OpenPrinting/cups/pull/353) and also the patch on the Ubuntu package.

Thanks for the bug report.

Revision history for this message

Till Kamppeter (till-kamppeter) wrote on 2022-03-16:

I have uploaded cups 2.4.1op1-1ubuntu3 with the updated patch now, and also updated the upstream pull request:

https://github.com/OpenPrinting/cups/pull/353

Please test as soon as the update arrives.

Changed in cups (Ubuntu):
status:	In Progress → Fix Committed

Revision history for this message

Apport retracing service (apport) wrote on 2022-03-17:

StacktraceTop:
__strnlen_avx2_rtm () at ../sysdeps/x86_64/multiarch/strlen-avx2.S:256
create_local_printer (con=0x55ea82141090) at /build/cups-y1LIcO/cups-2.4.1op1/scheduler/ipp.c:5539
cupsdProcessIPPRequest (con=0x55ea82141090) at /build/cups-y1LIcO/cups-2.4.1op1/scheduler/ipp.c:604
cupsdReadClient (con=0x55ea82141090) at /build/cups-y1LIcO/cups-2.4.1op1/scheduler/client.c:1814
cupsdDoSelect (timeout=<optimized out>) at /build/cups-y1LIcO/cups-2.4.1op1/scheduler/select.c:480

Revision history for this message

Apport retracing service (apport) wrote on 2022-03-17: Stacktrace.txt

#10

Stacktrace.txt Edit (6.0 KiB, text/plain)

Revision history for this message

Apport retracing service (apport) wrote on 2022-03-17: StacktraceSource.txt

#11

StacktraceSource.txt Edit (1.9 KiB, text/plain)

Revision history for this message

Apport retracing service (apport) wrote on 2022-03-17: ThreadStacktrace.txt

#12

ThreadStacktrace.txt Edit (6.0 KiB, text/plain)

Changed in cups (Ubuntu):
importance:	Undecided → Medium
summary:	- cupsd crashed with SIGSEGV in __strcmp_evex() + cupsd crashed with SIGSEGV in __strnlen_avx2_rtm()

Revision history for this message

Launchpad Janitor (janitor) wrote on 2022-03-17:

#13

This bug was fixed in the package cups - 2.4.1op1-1ubuntu3

---------------
cups (2.4.1op1-1ubuntu3) jammy; urgency=low

  * Fixed crasher in the patch for temporary queues for local services
    in the previous release. Updated the patch and the upstream pull
    request (LP: #1965112, Upstream pull request #353).

-- Till Kamppeter <email address hidden> Wed, 16 Mar 2022 18:24:08 +0100

Changed in cups (Ubuntu):
status:	Fix Committed → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntucups package

cupsd crashed with SIGSEGV in __strnlen_avx2_rtm()

Bug Description

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
cups package