opx-pas-service killed due to segfault in pas_fuse_handle

[redrattus]

Hi, I got the below segfault error which kills opx-pas-service that seems critical. And I have investigated the core dump and report the result. I think it comes from the mismatch between the number of media file names defined in filename_enum_map_t and the number of FUSE_MEDIA_FILETYPE_* defined media_filetype_t which has one more file type, FUSE_MEDIA_FILETYPE_DELL_QUALIFIED . Therefore, for loop accesses out of bound filename_map. Plz see

opx-pas/src/fuse/pas_fuse_parser.c

Line 1137 in a5d7ca6

for(i = 0; i < max_file_count; i++) {

Further, I remove this file type and test, so far it works.

Thx~

segfault meesage
Nov 6 08:36:26 OPX kernel: [ 9516.502233] pas_fuse_handle[590]: segfault at 0 ip 00007f818e78c53e sp 00007f817f2b7f18 error 4 in libc-2.24.so[7f818e6fd000+195000]

core dump:

(gdb) bt

0 __strcmp_sse2_unaligned () at ../sysdeps/x86_64/multiarch/strcmp-sse2-unaligned.S:32

1 0x000055cb1ae310bf in fuse_get_filetype (count=5, tokens=0x7f47dc0008c0,
node=0x7f47e97b50f0) at src/fuse/pas_fuse_parser.c:633

2 dn_pas_fuse_realtime_parser (node=node@entry=0x7f47e97b50f0,
path=path@entry=0x7f47e97b5280 "/system_board/1/media/1/(null)")
at src/fuse/pas_fuse_parser.c:1014

3 0x000055cb1ae3143e in send_to_fuse_filler (
temp_path=temp_path@entry=0x7f47e97b5280 "/system_board/1/media/1/(null)",
subdir_root=subdir_root@entry=0x7f47e97b5200 "/system_board/1/media/1/",
filler=filler@entry=0x7f47fa11cbe0, buf=buf@entry=0x7f47dc000a80)
at src/fuse/pas_fuse_parser.c:1091

4 0x000055cb1ae31621 in dn_pas_fuse_get_subdir_list (node=node@entry=0x7f47e97b53e0,
buf=buf@entry=0x7f47dc000a80, filler=filler@entry=0x7f47fa11cbe0)
at src/fuse/pas_fuse_parser.c:1148

5 0x000055cb1ae15c49 in dn_pas_fuse_device_readdir (
path=0x7f47dc022110 "/system_board/1/media/1", buf=0x7f47dc000a80,
filler=0x7f47fa11cbe0, offset=, file_info=)
at src/fuse/pas_fuse_main.c:102

6 0x00007f47fa122172 in fuse_fs_readdir () from /lib/x86_64-linux-gnu/libfuse.so.2

7 0x00007f47fa1222fc in ?? () from /lib/x86_64-linux-gnu/libfuse.so.2

8 0x00007f47fa128fa6 in ?? () from /lib/x86_64-linux-gnu/libfuse.so.2

9 0x00007f47fa12a5a1 in ?? () from /lib/x86_64-linux-gnu/libfuse.so.2

10 0x00007f47fa12694c in fuse_session_loop () from /lib/x86_64-linux-gnu/libfuse.so.2

11 0x00007f47fa11ec08 in fuse_loop () from /lib/x86_64-linux-gnu/libfuse.so.2
---Type to continue, or q to quit---

12 0x00007f47fa12f347 in ?? () from /lib/x86_64-linux-gnu/libfuse.so.2

13 0x000055cb1ae15d5e in dn_pas_fuse_handler_thread (argument=)
at src/fuse/pas_fuse_main.c:338

14 0x00007f47f9240494 in start_thread (arg=0x7f47e97b6700) at pthread_create.c:333

15 0x00007f47f84e1acf in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:97