Bug 785934
| Summary: | Buffer overflow in pstree | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Robin Green <greenrd> | ||||||
| Component: | psmisc | Assignee: | Jaromír Cápík <jcapik> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | medium | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 17 | CC: | anderson, andreas.bierfert, fedora, jcapik, ktmdms, mtasaka, ovasik, psimerda, pwouters, rjones | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | All | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | psmisc-22.16-1.fc16 | Doc Type: | Bug Fix | ||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2012-03-21 18:41:03 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
|
Description
Robin Green
2012-01-30 22:34:38 UTC
backtrace from gdb:
Program received signal SIGABRT, Aborted.
0x00007ffff76168d5 in __GI_raise (sig=sig@entry=6)
at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64 return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig);
(gdb) bt
#0 0x00007ffff76168d5 in __GI_raise (sig=sig@entry=6)
at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1 0x00007ffff7618088 in __GI_abort () at abort.c:91
#2 0x00007ffff7654fab in __libc_message (do_abort=do_abort@entry=2,
fmt=fmt@entry=0x7ffff7756a60 "*** %s ***: %s terminated\n")
at ../sysdeps/unix/sysv/linux/libc_fatal.c:198
#3 0x00007ffff76e8ba7 in __GI___fortify_fail (
msg=msg@entry=0x7ffff7756a06 "buffer overflow detected")
at fortify_fail.c:32
#4 0x00007ffff76e6d60 in __GI___chk_fail () at chk_fail.c:29
#5 0x0000000000402f7b in strcpy (__src=0x6107b0 "{nepomukservices}",
__dest=0x6107d0 "{nepomukservices}") at /usr/include/bits/string3.h:105
#6 new_proc (comm=0x6107b0 "{nepomukservices}", pid=554, uid=1000,
scontext=0x0) at pstree.c:267
#7 0x000000000040318b in add_proc (
comm=comm@entry=0x6107b0 "{nepomukservices}", pid=554,
ppid=ppid@entry=270, uid=1000, args=args@entry=0x0, size=size@entry=0,
isthread=1 '\001', isthread@entry=64 '@', scontext=0x0) at pstree.c:350
#8 0x0000000000401f67 in read_proc () at pstree.c:695
#9 main (argc=<optimized out>, argv=<optimized out>) at pstree.c:990
Not only x86_64 specific. Created attachment 565723 [details]
proposal patch
Apparently strcpy does not check the size of comm.
*** Bug 797271 has been marked as a duplicate of this bug. *** The attached patch seems to have already applied in the newly released 22.16. When might we see this in rawhide? Any chance of a fix for this in Rawhide and/or Fedora 17 updates-testing? Any chance that this bug gets fixed in F-17? Currently psmisc on F-17 is completely unusable. Hello guys. Sorry for the delay. I updated rawhide to 22.16 on Monday. This version fixes the issue. You can give it some positive karma if it works for you in f17 and/or f16 to speed the introduction up. Regards, Jaromir. psmisc-22.16-1.fc16 has been submitted as an update for Fedora 16. https://admin.fedoraproject.org/updates/psmisc-22.16-1.fc16 psmisc-22.16-1.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/psmisc-22.16-1.fc17 Working again now in rawhide. Thanks. Package psmisc-22.16-1.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing psmisc-22.16-1.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-3851/psmisc-22.16-1.fc17 then log in and leave karma (feedback). It crashes when run. backtrace_rating: 4 Package: psmisc-22.15-1.fc17 OS Release: Fedora release 17 (Beefy Miracle) Created attachment 571239 [details]
File: backtrace
Try the update (comment 13). psmisc-22.16-1.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report. psmisc-22.16-1.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report. *** Bug 812459 has been marked as a duplicate of this bug. *** |