Bug 200621
| Summary: | getxattr() with zero value makes strace call free on invalid pointer. | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | James Antill <james.antill> | ||||
| Component: | strace | Assignee: | Roland McGrath <roland> | ||||
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Brian Brock <bbrock> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | 5 | CC: | ldv | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | 4.5.15-1 | Doc Type: | Bug Fix | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2007-01-17 03:07:09 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | |||||||
| Bug Blocks: | 201088 | ||||||
| Attachments: |
|
||||||
Created attachment 135384 [details]
strace-4.5.14-alt-print_xattr_val.patch
Proposed fix for the memory corruption bug.
Fixed upstream. these bugs are fixed upstream in the coming 4.5.15 release 4.5.15 in rawhide and in updates for fc5 and fc6 fixes this. |
Description: getxattr()/lgetxattr() and presumably fgetxattr() make strace call free() on an invalid pointer when they return 0 byte values. Eg. % attr -s mime_type -V '' foo Attribute "mime_type" set to a 0 byte value for foo: % attr -g mime_type foo Attribute "mime_type" had a 0 byte value for foo: % strace attr -g mime_type foo [...] lgetxattr("j/src/and-httpd", "user.mime_type"*** glibc detected *** strace: free(): invalid pointer: 0x082fa530 *** How reproducible: Always