net-misc/tor-0.2.2.35 cored
Today I found a core file at my Gentoo Linux system, here's the back trace (unfortunately the core is is rather old, I' unsure, whether it helps you or not) :
warning: exec file is newer than core file.
[New LWP 4548]
Core was generated by `/usr/bin/tor -f /etc/tor/torrc --runasdaemon 1 --PidFile /var/run/tor/tor.pid'.
Program terminated with signal 6, Aborted.
#0 0xb771c424 in __kernel_vsyscall ()
(gdb) bt
#0 0xb771c424 in __kernel_vsyscall ()
#1 0xb736d872 in ?? ()
legacy/trac#2 (closed) 0xb749aff4 in ?? ()
legacy/trac#3 (closed) 0xb736efe0 in ?? ()
legacy/trac#4 (closed) 0x00000006 in ?? ()
legacy/trac#5 (closed) 0xbfbd0930 in ?? ()
legacy/trac#6 (closed) 0x0805c747 in exit_policy_remove_redundancies (dest=0x9ee42c4) at policies.c:778
legacy/trac#7 (closed) policies_parse_exit_policy (cfg=0x9cebdc8, dest=0x9f44e2c, rejectprivate=32,
local_address=0x2d39302d <Address 0x2d39302d out of bounds>, add_default_policy=840972338) at policies.c:856
legacy/trac#8 (closed) 0x0805cf0d in load_policy_from_option (config=, policy=0x2d39302d, assume_action=)
at /usr/include/bits/string3.h:52
legacy/trac#9 (closed) 0x080596c9 in onion_pending_add (circ=0xb6f6a008, onionskin=0x9f06260 "microdesc") at onion.c:54
legacy/trac#10 (closed) 0x080eb072 in dirserv_get_routerdesc_fingerprints (fps_out=0xc296a564,
key=0x4c38be5 <Address 0x4c38be5 out of bounds>, msg=0x841fce6f, for_unencrypted_conn=166975608,
is_extrainfo=166664504) at dirserv.c:3100
legacy/trac#11 (closed) 0x080eccce in compare_vote_rs (a=0x9f3d878, b=0x6) at dirvote.c:408
legacy/trac#12 (closed) 0x080c61a5 in increment_virtual_addr () at connection_edge.c:1302
legacy/trac#13 (closed) addressmap_get_virtual_address (type=164432864) at connection_edge.c:1349
legacy/trac#14 (closed) addressmap_register_virtual_address (type=164432864, new_address=0x9eff048 "") at connection_edge.c:1410
legacy/trac#15 (closed) 0x080c8336 in consider_plaintext_ports (conn=0x80c6414, port=55416) at connection_edge.c:1537
legacy/trac#16 (closed) 0xb7675d7d in ?? ()
legacy/trac#17 (closed) 0x09ef1938 in ?? ()
legacy/trac#18 (closed) 0xb766e2bc in ?? ()
legacy/trac#19 (closed) 0x09ef1a20 in ?? ()
legacy/trac#20 (closed) 0x0805013f in run_scheduled_events (now=-1217814540) at main.c:1048
legacy/trac#21 (closed) second_elapsed_callback (timer=0x7, arg=0xbfbd1014) at main.c:1348
legacy/trac#22 (closed) 0x08050465 in conn_write_callback (fd=7, events=4116, _conn=0x8132feb) at main.c:548
---Type to continue, or q to quit---
legacy/trac#23 (closed) 0x0804ec1b in connection_remove (conn=0x7) at main.c:215
legacy/trac#24 (closed) 0xb7359cd7 in ?? ()
legacy/trac#25 (closed) 0x00000007 in ?? ()
legacy/trac#26 (closed) 0xbfbd1014 in ?? ()
legacy/trac#27 (closed) 0x0804eb41 in fprintf (__fmt=0x812634c "%s:%d %s: Assertion %s failed; aborting.\n", __stream=)
at /usr/include/bits/stdio2.h:98
legacy/trac#28 (closed) connection_remove (conn=Cannot access memory at address 0x8
) at main.c:213